Connect with us

Denver, CO

Denver lacks comprehensive approach to cybersecurity risks, city auditor says

Published

on

Denver lacks comprehensive approach to cybersecurity risks, city auditor says


Denver lacks a comprehensive program to assess potentially disastrous cybersecurity risks, City Auditor Tim O’Brien said in a new report.

The city’s current approach can best be described as “informal,” O’Brien said, particularly when it comes to oversight of independent city agencies or cultural facilities — like the Denver Art Museum and Denver Zoo — that operate on subnetworks tied into the city’s broader system.

O’Brien cataloged his office’s findings in an audit report released Thursday.

The report is the product of a review of city data, processes and planning efforts over two years — from Jan. 1, 2022, through Dec. 31, 2023.

Advertisement

The audit team found that city staff did not consistently complete quarterly mandatory cybersecurity training. The city also lacks a specific training regime for employees responsible for citywide information technology risk management.

O’Brien is urging Denver Technology Services — the city department tasked with overseeing and managing all physical and virtual technology that touches the city’s network — to overhaul its approach and create clear guidelines for how every wing of city government handles data and technology risks.

“Through awareness of cybersecurity risks and clear expectation-setting for appropriate use of technology, the city can trust its employees to do their part in protecting data and information,” O’Brien said in a statement.

The auditor’s office recommended seven steps that Technology Services should take to remedy Denver’s shortcomings.

Those include:

Advertisement
  • Developing a citywide risk assessment process
  • Developing risk management training
  • Creating information-exchange agreements that would require independent agencies and facilities to share information about high-level technology risks with the department

Sumana Nallapati, Denver’s chief information officer, accepted all seven recommendations in a response letter sent to the auditor’s office on June 7. Mayor Mike Johnston hired her in September.

Many facets of what O’Brien recommends are already underway, Nallapati wrote in her response letter.

“(Technology Services) intends to create a robust and holistic organizational risk management structure identifying roles, responsibilities, documentation, risk assumption, identification of training for necessary roles and escalation processes associated to technical risk,” Nallapati wrote in part.

Her letter acknowledged the administration’s limited power to influence independent city agencies. While Technology Services accepted the recommendation to pursue information exchange agreements, Nallapati wrote that her department plans to reach out to independent agencies to see whether they would be willing to sign memorandums of understanding — or MOUs — focused on risk assessment.

“(Technology Services) cannot commit to a completion date for any such efforts, or that a successful MOU will ever be reached,” she wrote.

The audit report cites officials with Denver County Court as specifically asserting that they have the legal authority to operate independently as the judicial branch of city government. Court officials argue that they should not be required to formally communicate potential cyber security risks to Technology Services, the report says.

Advertisement

“But this assertion of independence with limited collaboration undermines the greater good of protecting the city from costly and damaging cyberattacks…” the audit team wrote.

Denver’s approach leaves the city more vulnerable to equipment failures, service disruptions and cyberattacks, the auditor’s office found. Those risk factors could cost Denver millions of dollars per day if any of them were ever to lead to full city network failure, according to the report.

In a statement to The Denver Post, Nallapati said her department is “committed to working across the city enterprise on continuous improvement of technology risk management strategies.”

Colorado has seen its share of high-profile cyberattacks in recent years.

In 2018, a ransomware attack temporarily knocked the Colorado Department of Transportation’s back-end operations offline. It cost the state between $1 million and $1.5 million just to bring the agency’s functionality back to 80% of normal in the months that followed.

Advertisement

Earlier this year, a cyberattack hobbled the Office of the Colorado State Public Defender and delayed hundreds of court hearings. The agency acknowledged that personal data including clients’ Social Security numbers may have been compromised during that episode.

Stay up-to-date with Colorado Politics by signing up for our weekly newsletter, The Spot.



Source link

Continue Reading
Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Denver, CO

Long Live the King – The Denver Nuggets and Kentavious Caldwell-Pope come to a crossroads – DNVR Sports

Published

on

Long Live the King – The Denver Nuggets and Kentavious Caldwell-Pope come to a crossroads – DNVR Sports


“The King is dead. Long live the King!”
– first proclaimed in 1422, as Britain’s Charles VII succeeded Charles VI

I remember the moment the Denver Broncos won their first Super Bowl. Colorado’s first major championship had barely preceded the Broncos big win, but to have the state’s sport darlings finally atop the heap and igniting their fanbase was a moment frozen in time in the memory of this Broncos fan.

At least I thought it would be frozen.

It was a scant two days after the Super Bowl victory that the local sports voices started questioning the Broncos chances for the following year, and weeks before the team started all of its offseason planning. A few months later, draftees and all rookies are starting to prep for the season, and training camp is right behind. The moment that was supposed to be frozen in my memory was a great one, but it had melted away into the next year with the speed of a snowman in St. Augustine. Wham-bam-thank-you-Shanahan, and all of a sudden we were right back to what have you done for me lately?

It was eye opening, to say the least. In retrospect, I’m not sure why I expected they would cease all NFL operations the moment the right team had finally won it all, but hey… no one said reality was my strong suit. Through my protestations, the league decided to keep making money.

Advertisement

Never was the speed and brevity of a Championship offseason more painful for one Colorado sports fan than the 114 days that went between the Denver Nuggets winning it all a year and a couple weeks ago and their early October Training Camp. A heady summer flew by, and just three and a half months later. my team that finally had their ring had to go back and try to do it all over again. It hardly seemed like enough time to savor it, especially missing faces that had been so crucial just a few months prior.

But yet another season rolls along, and for this brief moment in Nuggets history, it’s unsure that all five pieces of the Nuggets Championship starting five will be back next year. Kentavious Caldwell-Pope has declined the player option year of his deal, and will deservedly take his two championship rings out to what sounds to be a hot market for his services. If that number climbs to a level too high for Denver to feel good about matching and still being able to compete with… well…

Nuggets GM Calvin Booth was actually pretty direct and clear on the subject, both praising KCP and lamenting the possibility, but also praising and setting forth the metrics behind last year’s sixth man Christian Braun. While all of what’s still to come here is out in the ether, Nuggets Nation is alight with opinions ranging from “all is lost” to “we’ll be fine”. But the memory of a KCP who said he wanted to be a “Nugget forever” in a postgame interview after one the last home games of last season would feel like a pretty sudden and huge vacuum in Nuggets space should he suddenly just be gone. One more piece of a memory that feels like it was just a few hundred days ago… right?

Avs fans feel that championship phantom limb, just one more year removed. Hell, even a Boston sports fan has to occasionally feel the pain of going without a championship… right? Yesterday was your ring, today is your parade, and tomorrow is right back to what have you done for me lately?

Knowing the wheel is spinning right back around, maybe you even take the moments to savor the journey when you got close, or even when you got a little bit further than the time before. One of these years, even the Rockies will hang a banner up at Coors Field, and a few months down the road, the Yankees and Dodgers will just be favorites all over again. If you’ve got a moment to savor in the mix, do it while you’ve got it. Whether KCP is back this next year or not, that clock is ticking, right alongside all the rest. The shooting guard is dead. Long live the shooting guard.

Advertisement



Source link

Continue Reading

Denver, CO

Denver Nuggets very active on day 2 of the NBA Draft

Published

on

Denver Nuggets very active on day 2 of the NBA Draft


The Nuggets did not have a pick in the 2nd round of the NBA draft on Thursday, after trading the pick to the Phoenix Suns on Wednesday so they could draft DaRon Holmes in the 1st round.

But that didn’t stop the Nuggets from making headlines.

They traded backup point guard Reggie Jackson and three future second-round picks to the Charlotte Hornets in return for cash considerations.

The move saves the Nuggets about $5.25 million dollars against the salary cap and gives them some financial freedom moving into free agency on Sunday.

Advertisement

Jackson, the Colorado native, played in every game last season averaging just over 10 points a game.

The Nuggets also signed two undrafted free agents on Thursday. Creighton’s Trey Alexander and Clemson’s PJ Hall received two-way contracts. Hall averaged 18.3 points and 6.4 rebounds per game for the Tigers last season. Alexander led Creighton with 17.6 points, 5.7 rebounds and 4.7 assists per game.

Denver Nuggets

Nuggets trade up for Dayton big man DaRon Holmes II: Get to know the pick

9:14 PM, Jun 26, 2024

Also, Nuggets guard Kentavious Caldwell-Pope made it official on Thursday. He is declining his $15.4 million player contract option for next season and will test the free agent waters. The Nuggets will make an offer to keep their starting guard, but he is expected to get numerous offers on the open market and it may be financially impossible for the Nuggets to match. General Manager Calvin Booth told us on Wednesday that the team is ready for whatever happens.

Advertisement

“We can try to bring him back, and if he doesn’t want to come back or opts to go somewhere else, that’s his prerogative,” said Booth. “But I think we’re prepared to plug and play, so to speak. I think if Christian Braun has to step into the starting lineup, I think we’ll be OK, if KCP doesn’t return.”

The Nuggets are also working on a new max contract extension for starting guard Jamal Murray. The new deal will be for 4 years and $209 million dollars. Murray is expected to sign the deal. He and Nikola Jokic are the two most important pieces of the Nuggets championship puzzle.






Source link

Continue Reading

Denver, CO

It's a bird, it's a plane — it's a rare aircraft designed specifically for bulky loads

Published

on

It's a bird, it's a plane — it's a rare aircraft designed specifically for bulky loads


DENVER (KDVR) — Denver International Airport visitors might have seen a big surprise on one of the airport’s runways Tuesday as one of the world’s largest aircrafts touched down.

There are only 26 Antonov An-124 Ruslan planes in commercial service across the globe. One of them had a job that led it from Milan, Italy, to Goose Bay, Canada, to finally Denver International Airport in the span of a day, according to FlightAware.

According to DIA, the plane’s special load was a helicopter, which fits easily inside the massive plane. The four-engine plane has a cargo compartment that’s 20% larger than the main cargo compartment of the C-5 Galaxy, which is a large military transport plane that can carry “a payload of … up to five helicopters,” according to the manufacturer.

This particular plane model was designed in the early 1980s, according to Antonov, a Ukrainian company that manufactures the planes. The An-124 Ruslan was originally designed as a Soviet heavy strategic military transport craft, capable of carrying up to 150 tons of cargo.

Advertisement

The plane type then transitioned into the commercial transportation market, which is how it’s used today. As seen in the photos, the aircraft’s noses can be raised to accommodate large, inflexible loads, such as military vehicles or helicopters, as was this case. According to the aircraft manufacturer, the plane also has a “kneeling” function to allow for easier loading.

While details on where the plane is headed are unknown, aviation geeks were quick to point out the massive bird at DIA on Tuesday.

Notably, the plane type has been used to set approximately 30 world records, according to Antonov. These include an absolute payload-to-altitude record and a world record for distance flown without refueling.

The plane’s surprise appearance at DIA was noted by many aviation experts, so keep an eye out if you’re headed to the airport for July 4 or any other trip — You never know what you might see on the runway.



Source link

Advertisement
Continue Reading

Trending