Information wrt DBMSs (Information Technology, Nevada)

Matt Chapman filed this request with the Information Technology, Nevada of Las Vegas, NV.
Multi Request Information wrt DBMSs


From: Matt Chapman

To Whom It May Concern:

Pursuant to the Nevada Public Records Act, I hereby request the following records:

For all DBMSs owned, maintained, operated, contracted with/through, or supported by the Information Technology - or similar - department(s) within your city, please provide me with the following information:

-Underlying engine (eg, postgres, mysql, mariadb, cockroachdb, Mongodb, Oracle database, sybase, MSAccess, SQL Server, VoltDB, RethinkDB, Chronos, Elasticsearch, etcd, cassandra, etc)
-Names of software that connect to each DBMS
-Names of departments that use information within the DBMS
-Schema of database (preferably, with granularity down to column names)
-Contract identifier for each database, if relevant

I understand that the information respondent to this request may require the creation of new documents - if that will be the case, then please provide me with documents that may contain the information (eg, documentation, contracts, etc). I am also happy to narrow the scope of my request if necessary.

Please also let me know if any help is needed with discovering any DBMS services. My background is in distributed systems systems administration and I can offer technical tips or advice if it would be helpful in any way.

The requested documents will be made available to the general public, and this request is not being made for commercial purposes. As I believe the information respondent to this request outweighs the costs and burden, I would like to kindly request a fee waiver.

I look forward to receiving your response to this request within 5 business days, as the statute requires.

With gratitude,
Matt Chapman,
Free Our Info, NFP

From: Information Technology, Nevada

Dear Mr. Chapman -

Please accept this notice that the City of Las Vegas must deny your request for records (please see attached) for the following reasons:

1. Under NRS 603.070 "Except as otherwise provided in NRS 239.0115<>, a governmental agency which obtains a proprietary program or the data stored in a computer must keep the program or data confidential. The governmental agency may only use the program or data for the purpose for which it was obtained, and may not release the program or data without the prior written consent of the owner."

Providing the information requested - specifically underlying DBMS engines, names of software that connect to each DBMS, and database schemas - would place the City of Las Vegas in violation of the above statute.

1. Some of the requested information pertains to applications and systems that support "critical infrastructure" as defined by the US Department of Homeland Security, and is therefore subject to the Protected Critical Infrastructure Information (PCII) Program and cannot be publicly disseminated.

1. The release of this information would jeopardize the security of various City of Las Vegas systems, applications and data. The information requested would provide a "roadmap" for any person wishing to use SQL injection (or a similar technique) to craft an attack that would be specific to the city environment in an attempt to obtain data, including Personally Identifiable Information (PII) as defined by NRS 603A, Criminal Justice Information (CJI), and Health Insurance Portability and Accountability Act (HIPAA) data.

1. This request is overly broad and not specific to "records", and instead is a request for the details of the underlying infrastructure that supports the City of Las Vegas' records and data.

Thank you.


Lester Lewis | Deputy Director
Information Technologies
495 S. Main Street
Las Vegas, Nevada 89101
P +1-702-229-1774 | C +1-702-776-1425