MIM6 - Security

OASC MIM6: Security Management


As cities become smarter and more technology-driven, they become a target for cyber attacks with significant consequences in terms of costs and loss of services. In order to deliver reliable digital services for citizens, cities have to continuously evaluate the cyber risks and to put in place security measures to prepare for cyber attacks.

MIM 6 focuses on addressing interoperability for secure data transfer.


  • When information is transferred, between parts of the data platform or externally, this is done securely.

  • Data processors know what requirements concerning security and interoperability to make of suppliers and systems when evaluating, procuring, developing, operating, and using solutions.


(see Notes for discussion)






International Standard ISO/IEC 27005:2018 Information technology – Security techniques – Information security risk management

NIST SP800-53r5

NIST Special Publication SP800-53, Security and Privacy Controls for Information Systems and Organizations


REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27vApril 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

Compliance and Conformance