Local governments have become the new battleground for cyber attacks, according to Carl Mazzanti, president of eMazzanti Technologies. The New Jersey IT firm laid out the problem in a piece on cyber security for municipalities, with a focus on how towns can weigh risk against tight budgets.
Cities make easy targets, the company argues. Their systems are relatively simple to breach, while the data they collect is plentiful and valuable. As an example, the firm pointed to a 2017 ransomware attack on the Sacramento public transportation system.
Still, money sits at the center of the problem. Information technology often accounts for less than 0.1 percent of a municipal budget. Because funding is so thin, many cities struggle to pay the salaries that skilled IT staff expect. The people who are tasked with protecting digital assets often lack the training needed to counter growing threats.
Mazzanti’s advice starts with the tools. Municipalities should use cost-effective technology to defend against attacks. They should also train staff in information security, so that employees do not become the weak point. Finally, he recommends regular security reviews and audits carried out by an independent party.
Leadership also matters. A cyber security effort has to come from the top down, according to the firm, with a clear directive from the mayor, the chief financial officer or other city officials. Without that push, the work tends to stall.
Then there is funding. A successful program needs a budget, and public support can help a city secure it. When residents understand the risk, officials have an easier case to make for spending on protection.
