CMO Technology & E-Government 5 — Questions and Answers
Question 1: A municipality plans to share resident data with a regional planning agency. Which safeguard is essential?
- Verbal agreement between agency directors
- A formal data sharing agreement specifying use limitations, security requirements, and breach notification obligations (Correct answer)
- Emailing a spreadsheet with all resident records
- Posting the data on a public FTP server for agency access
Correct answer: A formal data sharing agreement specifying use limitations, security requirements, and breach notification obligations
Formal data sharing agreements define legal obligations, permissible uses, and security standards to protect resident privacy when sharing PII.
Question 2: Which metric is most useful for evaluating the success of an e-government service portal?
- The number of server racks in the data center
- Resident adoption rate and task completion rate for online transactions (Correct answer)
- How many vendors bid on the contract
- The cost of the original software license
Correct answer: Resident adoption rate and task completion rate for online transactions
Adoption and task completion rates directly measure whether residents are successfully using digital services, indicating real-world effectiveness.
Question 3: A city council member asks why the IT department follows a formal change management process before updating production systems. What is the best explanation?
- It is required by federal law for all local governments
- Change management prevents unplanned outages by testing, approving, and scheduling system changes methodically (Correct answer)
- It gives the IT director veto power over elected officials
- It delays all changes to reduce the IT workload
Correct answer: Change management prevents unplanned outages by testing, approving, and scheduling system changes methodically
Change management processes reduce the risk of unplanned service disruptions by ensuring changes are tested and approved before affecting live systems.
Question 4: What does 'interoperability' mean in the context of municipal technology systems?
- All city employees use the same computer brand
- Different government systems can exchange and use data seamlessly with each other (Correct answer)
- The city's IT systems operate 24/7 without downtime
- Municipal software is compatible only with Windows operating systems
Correct answer: Different government systems can exchange and use data seamlessly with each other
Interoperability allows disparate systems — such as permitting, finance, and GIS — to share data, reducing redundancy and improving efficiency.
Question 5: A municipality receives a legal hold notice related to pending litigation. What must the IT department do immediately?
- Delete old emails to free up server storage
- Suspend routine data deletion and preserve all relevant electronically stored information (ESI) (Correct answer)
- Transfer all data to the plaintiff's legal team
- Restart the email server to clear the backlog
Correct answer: Suspend routine data deletion and preserve all relevant electronically stored information (ESI)
A legal hold requires suspending normal data retention schedules to preserve all potentially relevant ESI, as destruction could constitute spoliation.
Question 6: Which technology allows residents to authenticate once and access multiple city online services without logging in again?
- Multi-Factor Authentication (MFA)
- Single Sign-On (SSO) (Correct answer)
- Virtual Private Network (VPN)
- Public Key Infrastructure (PKI)
Correct answer: Single Sign-On (SSO)
SSO allows users to authenticate once and gain access to multiple integrated systems, improving resident experience and reducing password fatigue.
Question 7: A city is evaluating vendors for a new public safety software system. Which supply chain security concern should be addressed in the RFP?
- Whether the vendor's CEO has a social media account
- Requiring vendors to disclose third-party software components and provide a Software Bill of Materials (SBOM) (Correct answer)
- Mandating the vendor use a specific cloud region
- Requiring the vendor to hire local residents as developers
Correct answer: Requiring vendors to disclose third-party software components and provide a Software Bill of Materials (SBOM)
An SBOM identifies all software components and dependencies, enabling the city to assess supply chain vulnerabilities before deployment.
A municipality plans to share resident data with a regional planning agency.
Which safeguard is essential?