Cybersecurity and Local Government

CYBERSECURITY AND LOCAL GOVERNMENT

LEARN TO SECURE YOUR LOCAL GOVERNMENT’S NETWORKS WITH THIS ONE-OF-A-KIND RESOURCEIn Cybersecurity and Local Government, a distinguished team of researchers delivers an insightful exploration of cybersecurity at the level of local government. The book makes a compelling argument that every local government official, elected or otherwise, must be reasonably knowledgeable about cybersecurity concepts and provide appropriate support for it within their governments. It also lays out a straightforward roadmap to achieving those objectives, from an overview of cybersecurity definitions to descriptions of the most common security challenges faced by local governments. The accomplished authors specifically address the recent surge in ransomware attacks and how they might affect local governments, along with advice as to how to avoid and respond to these threats. They also discuss the cybersecurity law, cybersecurity policies that local government should adopt, the future of cybersecurity, challenges posed by Internet of Things, and much more. Throughout, the authors provide relevant field examples, case studies of actual local governments, and examples of policies to guide readers in their own application of the concepts discussed within. Cybersecurity and Local Government also offers:

* A thorough introduction to cybersecurity generally, including definitions of key cybersecurity terms and a high-level overview of the subject for non-technologists.
* A comprehensive exploration of critical information for local elected and top appointed officials, including the typical frequencies and types of cyberattacks.
* Practical discussions of the current state of local government cybersecurity, with a review of relevant literature from 2000 to 2021.
* In-depth examinations of operational cybersecurity policies, procedures and practices, with recommended best practices.

Perfect for local elected and top appointed officials and staff as well as local citizens, Cybersecurity and Local Government will also earn a place in the libraries of those studying or working in local government with an interest in cybersecurity. DONALD F. NORRIS, PHD, is Professor Emeritus of Public Policy at the University of Maryland, Baltimore County (UMBC), USA. Before retiring from UMBC in 2017, he was Director of the Maryland Institute for Policy Analysis and Research for 27 years and Director of the UMBC School of Public Policy for 10 years.

LAURA K. MATECZUN, JD, is a PhD student at the University of Maryland, Baltimore County (UMBC), USA. Her research is focused on local government cybersecurity. Laura has received a Graduate Certificate in Cybersecurity Strategy & Policy from UMBC.

RICHARD F. FORNO, PHD, is Principal Lecturer at the University of Maryland, Baltimore County (UMBC), USA. He is Assistant Director of UMBC’s Center for Cybersecurity.

Preface ix

About the Authors xi

1 Why Local Government Cybersecurity? 1

2 What is Cybersecurity? 17

3 Cybersecurity 101 for Local Governments 27

4 What the Literature Says About Local Government Cybersecurity 47

5 Cyberattacks: Targetting Local Government 67

6 Managing Local Government Cybersecurity 85

7 Cybersecurity Policies for Local Government 113

8 People: The Root of The Problem 143

9 The NIST Cybersecurity Framework Demystified 151

10 Cybersecurity Law and Regulation for Local Government 167

11 Important Questions to Ask 187

12 The Future of Local Government Cybersecurity 201

13 Summary and Recommendations 227

Index 235