Simulating Municipal Cybersecurity Incidents: Recommendations from Expert Interviews

Gedris, Kira; Bowman, K. Eric; Neupane, Aatish; Hughes, Amanda; Bonsignore, Elizabeth; West, Ryan; Balzotti, Jon; Hansen, Derek L.

doi:10.24251/hicss.2021.249

Cited by 3 publications

(6 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Despite all protective measures, cybersecurity incidents occur, and preparedness is key to managing the following crisis. The authors in [24] aimed to support the development of educational simulations and related experiential learning exercises that help prepare city and public infrastructure personnel to effectively respond to cybersecurity attacks. They conducted 8 expert interviews including 12 cybersecurity experts from federal, state, and city organizations, as well as academics with relevant expertise.…”

Section: Crisis Managementmentioning

confidence: 99%

Municipal Cybersecurity—A Neglected Research Area? A Survey of Current Research

Vestad

Yang

2023

Springer Proceedings in Complexity

View full text Add to dashboard Cite

Municipalities are tasked with ensuring the cybersecurity of critical public services and functions in diverse areas such as safe water supply, healthcare, child protective services, and education with vastly different security requirements—all usually served from a common infrastructure with limited technical and organizational cybersecurity capabilities. This literature review identifies recent research on municipal and local government cybersecurity to identify current research areas, state of the art, and research methods used in research so far. We found research in the areas of smart cities, elections, human factors, operational technology, and crisis management. We also give suggestions for further research to develop better models for cybersecurity in cross-disciplinary organizations.

show abstract

Section: Crisis Managementmentioning

confidence: 99%

Municipal Cybersecurity—A Neglected Research Area? A Survey of Current Research

Vestad

Yang

2023

Springer Proceedings in Complexity

View full text Add to dashboard Cite

show abstract

“…ISMS-Organization [16], [24] 7. Risk Management [25], [8], [23], [26], [27], [24], [21] 8. Education Level of Employees [17], [28], [29], [26], [30] 9.…”

Section: Factor / Requirementmentioning

confidence: 99%

“…Risk Management [25], [8], [23], [26], [27], [24], [21] 8. Education Level of Employees [17], [28], [29], [26], [30] 9. Awareness of Employees [16], [17], [31], [32], [33] 10.…”

Section: Factor / Requirementmentioning

confidence: 99%

“…Lack of Qualified Employees [25], [31] 18. Definition of Roles / Responsibilities and Communication [37], [16], [26]…”

Section: Factor / Requirementmentioning

confidence: 99%

“…Information Exchange regarding Security Vulnerabilities [37], [19], [35], [43] and Networking [19], [36] 29. Obtaining Information on Cyber Topics (OSINT) [44], [45], [26] 30. Government Interest [4] 31.…”

Section: Definition Of Measures and Theirmentioning

confidence: 99%

See 2 more Smart Citations

Information Security Management in Small Public Sector Organizations: Requirements and Design of a Procedural Approach

Moses,

Sandkuhl

2023

J. Complex Syst. Inform. Model. Q.

View full text Add to dashboard Cite

The increasing digitalization of enterprises and public authorities has resulted in the growing importance of information technology in everyday operations. In this context, an information security management system (ISMS) has become an essential aspect for most organizations. The dependency on technology for almost every single process in an organization has put ISMS at the top of the corporate agenda of public sector organizations. For public organizations in particular, the NIS 2 Directive describes abstract requirements for the development of an ISMS. On the other hand, only a few public administrations operate an ISMS. In this context, this article analyses the requirements of the NIS-2 Directive and complements them with the obstacles and reasons for success in the introduction of ISMS in small public sector organizations (SPSO). At the same time, minimum requirements should be defined that help municipal administration set up an ISMS quickly and easily. This article summarizes the different requirements and generates a foundation for a rough procedural model, for implementing the upcoming requirements of the NIS 2 Directive in local governments. The article also presents the conceptual design of the procedural model.

show abstract