This ordinance establishes the Office of Cyber Security and creates the position of Chief Information Security Officer (CISO) to oversee the protection of the city's digital infrastructure. It also mandates that each department appoint a Department Information Security Officer and outlines the leadership structure for the Committee on Information Technology.
Ordinance amending the Administrative Code to establish the Office of Cyber Security and the position of Chief Information Security Officer (CISO) who, in coordination with department technology professionals, is responsible for preventing, detecting, and remediating the damage to City infrastructure and information resources from cyber-related incidents; require departments to appoint a Department Information Security Officer; add the CISO as a permanent member of the Committee on Information Technology (COIT); name the City Administrator or designee as Chair of COIT; and provide that the City Administrator with the Mayor’s concurrence appoints the Chief Information Officer (CIO).
How it got here
The legislation to establish the Office of Cyber Security and the Chief Information Security Officer (CISO) was prompted by a directive from Mayor London Breed emphasizing the need for enhanced cybersecurity measures within the City.
Mayor Breed issued Executive Directive No. 21-02, highlighting the importance of protecting the City's technology and information and directing the Chief Information Officer and City Administrator to recommend changes to strengthen cybersecurity functions.
The Board of Supervisors assigned the proposed ordinance under the 30-day rule to establish the Office of Cyber Security and the position of CISO.
The Rules Committee amended the ordinance and recommended it as amended for further consideration.
The Board of Supervisors passed the ordinance on first reading, moving it closer to final approval.
The Board of Supervisors finally passed the ordinance, establishing the Office of Cyber Security and the CISO position.
The Mayor approved the ordinance, officially enacting the changes to the Administrative Code.
Reconstructed from attached documents & the official record
