Just recently, many major city governments and government operations have fallen victim to cyber crime. Local governments everywhere are now prioritizing cybersecurity and realizing the threat is real. ECMSI has over 20 years' experience when it comes to IT and cyber security. We are dedicated to helping all organizations stay proactive in the face of cyber crime. We know that you have more important issues to deal with than your computer network. Downtime because of computer issues is something no government can afford when they need to focus on the many services they provide to their residence. ECMSI provides total IT support and management for a fixed monthly price. We can provide all local governments the benefits on an intern IT department for the fraction of the cost.
We also encourage all local government officials to read this recent research report that surveyed local government and determined how prepared local governments are when faced with a cyber attack. It also highlights how often local governments are being breached, and the findings are quite shocking.
Within the past few weeks, two large American cities learned that their information systems were hacked. First, Atlanta revealed that it had been the victim of a ransomware attack that took many of the city’s services offline for nearly a week, forcing police to revert to taking written case notes, hampering the Atlanta’s court system and preventing residents from paying water bills online. Then, Baltimore’s 311 and 911 dispatch systems were taken offline for more than 17 hours, forcing dispatchers to log and process requests manually. Both attacks could have been prevented. And they are more evidence of the poor, if not appalling, state of local government cybersecurity in the United States.
We know this because in 2016, in partnership with the International City/County Management Association, we conducted the first-ever nationwide survey of local government cybersecurity. Among other things, the survey data showed just how poorly local governments practice cybersecurity.
Nearly half – 44 percent – of all the respondents told us they experience cyberattacks at least daily. Based on prior research, we are confident that rate is actually much higher.
The volume of attacks isn’t dropping – and in some cases it’s increasing.
But even so, many communities didn’t know how frequently they are attacked, and most didn’t count or catalog initial attacks – though more than half did track more serious incidents and breaches.
More than half weren’t able to determine who was attacking their systems.
Certainly, there are local governments that do a commendable job with cybersecurity. If previous research into government information technology systems and electronic government can be a guide, they are most likely larger, more well-funded and more well-managed governments. However, the data from our more recent survey strongly suggest that at least some, and perhaps even a large fraction of, local governments may be unable to respond to electronic intrusions.
In part this is because few local officials are aware of the need for cybersecurity. Nearly two-thirds of the respondents to the survey, who were nearly all information technology or cybersecurity officials, said that top managers understood the need. However, among other groups in local governments, awareness dropped considerably. Perhaps as a result, support for cybersecurity efforts was also not as strong as Atlanta’s and Baltimore’s experiences suggest it should be.
With most local government officials and staff unaware and unsupportive, it is not surprising that cybersecurity is so poor among American local governments. Atlanta Mayor Keisha Lance Bottoms admitted that cybersecurity was not a high priority, although “it certainly has gone to the front of the line.”
And yet, crucial barriers remain, largely to do with how much money is allocated to cybersecurity efforts.
If local officials are going to do a better job protecting their information assets, they’ll first need to know a lot more about what’s actually happening. The numbers of survey respondents who answered “Don’t know” to our questions was surprisingly high. No top local officials, whether elected or appointed, should be unaware of basic cybersecurity information, like whether their systems have been attacked or breached, or who’s attacking their systems and why.
Knowing these answers will only become more critical as computing becomes more deeply embedded in systems running “smart” cities. If computers control traffic lights, sewage plants and electrical grids, then the consequence of attacks is more severe than just loss of information or computer services.
Donald Norris, Professor Emeritus of Public Policy, University of Maryland, Baltimore County; Anupam Joshi, Oros Family Professor and Chair, Department of Computer Science & Electrical Engineering, University of Maryland, Baltimore County; Laura Mateczun, Ph.D. Student in Public Policy, University of Maryland, Baltimore County, and Tim Finin, Willard and Lillian Hackerman Chair in Engineering and Professor of Computer Science and Electrical Engineering, University of Maryland, Baltimore County
We know that you just want it to work! We also know that there are a lot of unknowns for the average business owner when it comes to IT. We want to arm you with the best questions to ask anyone coming into your environment claiming they can help you with your IT woes.
* = required field