3/18/2021 11:31:20AM Sent: From: John Anderson<john.anderson@flocksafety.com To: "Mark" Cc: Bcc: Importance: Normal Subject: Re: FW:Flock Safety contract wrong for Benicia AttachmentsFlockSafetyEndtoEndDataSecurityOverview(1).pdf ： ,FlockSafetyCJlSCompliancev2.pdf,PenetrationTest- 2020-12.pdf,InternetSecurityPolicy-FlockSafety.pdf HeyMark,I'd liketosharesomeadditional informationbased onthequestionsraised by email: Matt Feury,our CTO,heads up security for Flock,plus security is ingrained in our culture and day-to-day actions.All employees, regardlessofrole,undergomandatorysecurity training,and everypieceofcodeorinfrastructurethatisavailabletoour customersundergoestechnicalreviewbothmanualandautomatedtoassesspotentialvulnerabilities. Flock takesseveral stepsto ensure thesecurityof our data andI've attached ourEnd toEnd SecurityOverview,InternetSecurity Policy,CJIS Compliance statement,and the results of our latest Penetration Test. ThePen Test was conducted by a third-party firmandtestedforcommonsecurityvulnerabilitiesincludingtheOWASPTop10SecurityRisks. We require 2FA on all internal users no matter their level of access, and additionally, we are in the process of getting SOc2 compliance. Pleasefeelfreetosharethisinformationandwe'dbemorethanhappytofieldanyadditionalquestionsthatcomeup. Thanks, John Please note my newphone number JohnAnderson TerritoryManager,NorthernCalifornia Flock Safety 408-752-5120|john.anderson@flocksafety.com 3E On Wed, Mar 10, 2021 at 10:05 AM Mark Menesini <MMenesini@ci.benicia.ca.us> wrote: John,Please take a look at the email below. Can you push this out to the appropriate members of your team to draft an answer? Looks like this question will be asked during the upcoming council meeting. On a side note we are working on generating more vocal support for the been receiving quite a bit of positive feedback from the downtown business owners regarding downtown area as well. I’m sure their will be some additional public pushback at the council meeting, but I’ve been reassured that this project has plenty of council support. Thanks again for all the help. Mark From:MichaelGreene<MGreene@ci.benicia.ca.us> Sent: Tuesday,March 09,20217:18 PM To:MarkMenesini <MMenesini@ci.benicia.ca.us> Subject:Fwd:FlockSafetycontractwrongforBenicia Maybe Flock could put together a response? Sent from my iPhone Begin forwarded message: From: Lionel Largaespada <LLargaespada@ci.benicia.ca.us> Date:March9,2021at7:01:43PMPST To: Erik Upson <EUpson@ci.benicia.ca.us>, Michael Greene <MGreene@ci.benicia.ca.us> Subject: Fwd: Flock Safety contract wrong for Benicia FYl, in case you didn’t get the same email. Sent from my iPhone Begin forwarded message: From: Date:March9,2021at4:48:00PMPST To: Steve Young <SYoung@ci.benicia.ca.us>, Tom Campbell <TCampbell@ci.benicia.ca.us>, Christina Strawbridge <LLargaespada@ci.benicia.ca.us>, Trevor Macenski <TMacenski@ci.benicia.ca.us> Subject: Flock Safety contractwrong for Benicia
Hello Mayor and Council members, My name is andIamanInformationSecurityProfessional living here in Benicia. I’m emailing you all today because of the pending contracttoimplement licenseplatereadersallaroundthecity.Just today, Hackers have breached another security camera company, VerkadaInc. https://www.bloomberg.com/news/articles/2021-03-09/hackers-expose- tesla-jails-in-breach-of-150-000-security-cams?sref=ylv224k8 At last night’s meeting I asked if Flock had a security team, they could not giveananswerif theyhadateamdedicated tosecurity.Lookingattheir Linkedln and the company website, I could find no instance that they had a dedicated team that took care of securing their product. I feel like Flock is not a mature enough company and does not solve the problems they claim tosolve.Regardless of thecivil rights issueswithputtingcameras in our community, I fear that if hackers got access to the data collected it would be detrimental to Benicia’s reputation, opening the city up to litigation. I will be bringing these concerns in a public manner to the city council meeting where you decide to approve the budget, I decided to email you some information I was able to find beforehand based on the current newstoday.Ifyouwant toknowmore about theinsecurityofsystems like these,pleasefeel freetoreachout.Ihavecontacts at theElectronic Frontier Foundation who have been doing this kind of research for years and have data toback up that these systems are personal data risks that we don’t need to be taking on. Thank you,
Public Records Exemptions Enclosed please find a copy of the response documents for your public process employed to review and produce the response documents. Reason Description Pages 1 of 1