2021/10/13 Council Agenda Packet

City of Everett Parking Access and Revenue Control System PARCS system follows processes and procedures that have been proven over the course of decades of deployment experience, which includes hands-on installation practices. Orbility will need to carefully, remotely, monitor the equipment that will be installed by a 3rd party, who has not been factory certified. In today's environment of COVID-19 and the unknown future of COVID-related restrictions, there will be risk in the areas of product manufacture and shipping, site access for installation, and the ability to travel for project support. Minimizing Cyber and Physical Attacks E. Describe how you prevent or minimize cyber and physical attacks to your equipment and software. To minimize cyber and physical attacks on software and equipment, Orbility uses the following: Firewall — All servers and lane devices use Windows Firewall which is configured to only allow specific ports for the Multipark applications. Antivirus — All servers and lane devices use ESET Antivirus. Azure Firewall — Orbility uses Azure Firewall to limit ports to a limited set of ports only used by Multipark applications. Site -to -Site VPN — All traffic passed from the site to the cloud is sent through an IPSec VPN tunnel. OS updates — OS updates are applied to servers and lanes monthly when released by Microsoft. Password Protection — All users must authenticate with a username and password to access the Multipark Web Application. Remote Access — All remote access to the Multipark Server is controlled and monitored through LogMeln which requires 2 factor authentication. Lock and Key — All lane devices are protected with lock and key to prevent unauthorized access. Door Open Event — When a device door is opened on a lane device, an event is recorded in the event log alerting the operator. -J orbility Page 28