28 May 2024 | Sk Tahsin Hossain, Tan Yigitcanlar, Kien Nguyen, Yue Xu
The paper "Local Government Cybersecurity Landscape: A Systematic Review and Conceptual Framework" by Sk Tahsin Hossain, Tan Yigitcanlar, Kien Nguyen, and Yue Xu, explores the critical challenges faced by local governments in the digital transformation era. These challenges include safeguarding resident information, maintaining data integrity, and fostering public trust while adopting advanced technologies like IoT and AI. The study highlights the lack of research on cybersecurity issues from a local government perspective and the fragmented nature of existing information. To address this gap, the authors conduct a systematic literature review to identify key components of cybersecurity in local governmental contexts and develop a conceptual framework.
The review reveals that local governments are increasingly vulnerable to cyber-attacks due to their possession of sensitive data and limited cybersecurity infrastructure. The frequency and intensity of cyber-attacks have significantly increased, with many local governments experiencing frequent and frequent attacks. The study identifies 30 types and techniques of cyber-attacks, including malware, code injection, spoofing, and social engineering. These attacks are driven by various motivations, such as financial gain, political motives, and personal vendettas.
The paper also discusses the types of attackers, including external organizations, external individuals, state actors, and malicious insiders. It identifies 16 barriers to cybersecurity, such as lack of funds, inadequate policies, and expertise, and recommends 23 solutions, including increased funding, policy development, and training. The study lists 20 cybersecurity tools and highlights the importance of assessment frameworks and standards, such as the NIST cybersecurity framework.
The authors propose a conceptual framework that integrates the CIA-AAA (Confidentiality, Integrity, Availability, Authentication, Authorization, and Accountability) concept across seven key cybersecurity domains: Internet security, web security, network security, data security, endpoint security, application security, and cloud security. This framework aims to provide a comprehensive understanding of local government cybersecurity, addressing both technical and non-technical aspects.
The findings of the study contribute to the academic and professional domains of cybersecurity, offering valuable insights to local decision-makers, practitioners, and academics. The framework can help local governments identify vulnerabilities, implement effective countermeasures, and enhance their cybersecurity posture.The paper "Local Government Cybersecurity Landscape: A Systematic Review and Conceptual Framework" by Sk Tahsin Hossain, Tan Yigitcanlar, Kien Nguyen, and Yue Xu, explores the critical challenges faced by local governments in the digital transformation era. These challenges include safeguarding resident information, maintaining data integrity, and fostering public trust while adopting advanced technologies like IoT and AI. The study highlights the lack of research on cybersecurity issues from a local government perspective and the fragmented nature of existing information. To address this gap, the authors conduct a systematic literature review to identify key components of cybersecurity in local governmental contexts and develop a conceptual framework.
The review reveals that local governments are increasingly vulnerable to cyber-attacks due to their possession of sensitive data and limited cybersecurity infrastructure. The frequency and intensity of cyber-attacks have significantly increased, with many local governments experiencing frequent and frequent attacks. The study identifies 30 types and techniques of cyber-attacks, including malware, code injection, spoofing, and social engineering. These attacks are driven by various motivations, such as financial gain, political motives, and personal vendettas.
The paper also discusses the types of attackers, including external organizations, external individuals, state actors, and malicious insiders. It identifies 16 barriers to cybersecurity, such as lack of funds, inadequate policies, and expertise, and recommends 23 solutions, including increased funding, policy development, and training. The study lists 20 cybersecurity tools and highlights the importance of assessment frameworks and standards, such as the NIST cybersecurity framework.
The authors propose a conceptual framework that integrates the CIA-AAA (Confidentiality, Integrity, Availability, Authentication, Authorization, and Accountability) concept across seven key cybersecurity domains: Internet security, web security, network security, data security, endpoint security, application security, and cloud security. This framework aims to provide a comprehensive understanding of local government cybersecurity, addressing both technical and non-technical aspects.
The findings of the study contribute to the academic and professional domains of cybersecurity, offering valuable insights to local decision-makers, practitioners, and academics. The framework can help local governments identify vulnerabilities, implement effective countermeasures, and enhance their cybersecurity posture.