Many cities are already seeing the benefits of using smart city technologies in managing the pandemic, according to a survey from <\/span>ABI Research<\/a>:<\/p>\n Using drones with facial recognition technology<\/a> to track those who are infected with the virus to ensure they don\u2019t break quarantine and risk spreading the virus.<\/p>\n<\/li>\n Using technology<\/a> to communicate and enforce social distance guidelines and monitor the delivery of medical supplies.<\/p>\n<\/li>\n Real-time dashboards and data sharing using smartphone data and crowd sourcing for location tracking.<\/p>\n<\/li>\n Smart cities preceded COVID-19, of course, built on the concept of digital municipal systems that do everything from controlling traffic grids and ensuring water quality to promoting online voting. This was already a high growth market segment. Research<\/a> conducted pre-pandemic indicated that a staggering $189 billion would be spent worldwide on smart cities initiatives by the year 2023.<\/p>\n And we\u2019ve probably only scratched the surface. That same research indicated that more than half of global spending on smart cities projects is concentrated in three use cases: resilient energy infrastructure, data-driven public safety and intelligent transportation.<\/p>\n It\u2019s easy to see the potential innovation still to be tapped for systems that improve how communities work, live and play. San Francisco\u2019s smart power grid and Barcelona\u2019s digitized waste management systems are just two examples of tens of thousands of smart cities initiatives that are improving the lives of residents.<\/p>\n As big as the potential may be, however, city leaders and technology<\/a> decision-makers must keep cybersecurity top of mind.\u00a0\u00a0The more things that are connected, the greater the<\/span> opportunity for cyber-attackers to infiltrate systems, exfiltrate sensitive data and disrupt potentially critical systems in law enforcement, public health and other municipal applications.<\/p>\n Internet of Things<\/a> (IoT) devices should be of particular concern because their use in smart cities is growing exponentially. According to one study, the number of active IoT devices<\/a> in Europe alone is expected to grow to 53 million in 2025.<\/p>\n Enhanced cybersecurity readiness, resilience and responsiveness are key. Yes, the intended benefits and new capabilities of digital municipalities are incredibly exciting, but it can all come crashing down around elected officials, government department heads, local businesses<\/a>, citizens and visitors if cybersecurity is not a top, top priority.<\/p>\n Smart cities are a classic case of the vital importance of \u201csecure by design.\u201d Connected systems for first responders, environmental controls, public internet access, traffic management, green energy and more must be based on rock-solid, intuitive and automated security protocols and policies from the start.<\/p>\n Security that is \u201cbolted on\u201d after systems are in place (and maybe after data breaches have already occurred) is next to worthless. The hackers are resourceful and highly collaborative with each other. Add-on security initiatives are not going to work, and the potential consequences are stunningly frightening. (And I\u2019m sure I don\u2019t have to remind you about the newest scourge of municipal systems\u2014ransomware.)<\/p>\n One big reason why is the dramatic proliferation of endpoints at the edge of municipal networks and as gateways to the cloud<\/a>. This isn\u2019t just more notebook computers, tablets and smart phones; it\u2019s different forms of sensor-based systems and devices.<\/p>\n This expansion of the attack vector is even more problematic when you consider that IoT devices<\/a>, both for commercial and industrial applications, have innate security challenges because they often can\u2019t support the memory requirements for many cyber security protocols. Then, add in the reality that humans\u2014municipal workers, citizens, visitors and business<\/a> people piggybacking onto municipal WiFi systems\u2014are often weak links in the cyber security chain because of poor security hygiene.<\/p>\n The importance of security by design becomes even more apparent with smart homes. Take one element of smart homes: energy-saving automatic lighting and energy metering. More and more municipal-owned utilities are installing smart meters to help consumers monitor energy <\/span>costs and to help conserve on energy usage. If security is not properly designed into those systems from the start, it\u2019s easy to imagine what hackers could do if they got access to residents\u2019 home computer networks. What a treasure trove of personal and private data they can access, from banking records to health insurance numbers.<\/p>\n So, what do you do about it?<\/p>\n One big issue for local, state and national governments is, ironically enough, governance. The lack of governance on smart cities initiatives, on a wide range of issues such as data handling, privacy policies, access privileges and more, is highly problematic. No, it\u2019s worse than that; it\u2019s a potential nightmare for chief information security officers, SOC personnel, IT teams and, of course, public officials that need to ensure that there are clear rules that govern access to critical systems and data.<\/p>\n For instance, take something as seemingly modest as hiring a vendor to install smart streetlights. If government officials, and their technical teams, don\u2019t have the right governance policies in place to ensure that the vendor has designed in security so hackers don\u2019t creep into back-office systems through digital lighting systems, data exfiltration\u2014or worse\u2014can result.<\/p>\n All parts of smart cities\u2014governmental bodies, municipal leaders, local businesses<\/a>, citizens and visitors\u2014also must practice good cybersecurity hygiene<\/a>. Good authentication policies, such as frequent and regular changing of passwords, multi-factor authentication and increased adoption of biometrics, are essential. Obviously, this has to be a personal commitment by anyone accessing smart cities digital services, but it also has automated policies mandated and installed by the governments.<\/p>\n Moreover, municipalities need people looking after the smart cities programs who have cybersecurity<\/a> experience and expertise. That doesn\u2019t necessarily mean you have to hire an army of security engineers, but you do need leaders and practitioners for whom cybersecurity<\/a> is a familiar discipline. They need to be able to see the big picture and ensure that the technical and operational details are in place.<\/p>\n Finally, there are key questions that non-technical municipal leaders\u2014elected officials and governmental department heads\u2014must be ready to ask their CISO, CIO and other technical executives who have cybersecurity<\/a> oversight. These include:<\/p>\n Do we have a documented incident response plan? If so, what is it? Many municipal leaders often think their organization has a plan, but then are surprised to learn just how threadbare that plan actually is.<\/p>\n<\/li>\n Should we allow our legacy (and presumably less likely to \u201csecure by design\u201d) systems to connect with other systems and devices on the edge?<\/p>\n<\/li>\n In the end, successful smart cities initiatives require four major elements: visibility, to make sure you see what is actually happening in those systems; analytics, to identify risks and abnormal systems and network behavior; control, to manage and, if necessary, to compartmentalize key systems against threats, and coordination among all key constituents to ensure that security is \u201cbaked in\u201d for smart cities initiatives.<\/p>\n\n
![\"Smart-Cities-Cybersecurity-techxmedia\"](\"https:\/\/techxmedia.com\/wp-content\/uploads\/2020\/08\/Smart-Cities-Cybersecurity.jpg\")
<\/p>\nSmart Cities Must Be Secure by Design<\/strong><\/h4>\n
Ensuring Cyber Resilience<\/strong><\/h4>\n
Four Major Elements<\/strong><\/h4>\n
\n