IoT devices, networks and infrastructure shall be deployed, used, maintained and disposed of in an efficient, responsible and secure manner to maximize public benefit.

SHARE THIS GUIDELINE

3.1: To support citywide coordination of IoT deployments, City agencies should maintain an inventory of IoT devices that they deploy using a standardized format. City agencies should also maintain an inventory of the public or private assets on which devices are installed and the networks used by these IoT devices including details on the network type (e.g. LTE), security protocol (e.g. WPA), location, service level agreements, and contact information for the network and system operator.

3.2: The City should accumulate and publish, via a City government website, public information on IoT systems including but not limited to examples of deployed IoT devices (e.g. air quality sensors) and the different types of public assets (e.g. light poles) on which they are deployed.

3.3: The City should make public, via a City government website, a standardized protocol, including points of contact, for requesting access to, and approving use of, City assets for IoT deployments. Where appropriate, the City will detail restrictions on particular types of public assets and/or siting restrictions (e.g. rules for landmark or historic districts).

3.4: IoT deployments shall, where possible, leverage or repurpose existing conduit and public assets, maximize energy efficiency, and adhere to sustainable device disposal procedures.

3.5: The City should leverage existing wireless and fixed networks where possible and appropriate. Networks for IoT deployments should be selected to best support the specific use case. This should include but is not limited to ensuring appropriate security protocols, bandwidth, pricing models, and service level agreements (SLAs).

3.6: All IoT devices and network equipment installed by the City, on the City’s behalf, or on City property should have clear site license agreements and established terms of service governing who is responsible for ongoing operations, maintenance, and the secure disposal of equipment. IoT devices and network equipment should be labeled clearly with the name and contact information for the responsible party.

3.7: Public assets should be instrumented in an orderly manner that minimizes clutter and allows for ease of access for replacement, repair and addition of new equipment or devices. If new conduit is being installed using public assets (e.g. to access rooftop of public buildings) or using public right-of-way (e.g. in City streets), location details must be filed with the responsible agency and use of the conduit should not be restricted to one party.

3.8: IoT systems should be designed to maximize resiliency in the event of a natural disaster (e.g. severe flooding) or other emergencies (e.g. electrical outages). Critical systems should have established emergency response plans to ensure the appropriate continuity of service.

Related Resources