Local Government Cybersecurity Landscape: A Systematic Review and Conceptual Framework
Source abstract
Abstract
Local governments face critical challenges in the era of digital transformation, balancing the responsibility of safeguarding resident information and administrative documents while maintaining data integrity and public trust. These responsibilities become even more critical as they transition into smart cities adopting advanced technological innovations to revolutionize governance, enhance service delivery, and foster sustainable and resilient urban environments. Technological advancements like Internet-of-Things devices and artificial intelligence-driven approaches can provide better services to residents, but they also expose local governments to cyberthreats. There has been, nonetheless, very little study on cybersecurity issues from the local government perspective, and information on the multifaceted nature of cybersecurity in local government settings is scattered and fragmented, highlighting the need for a conceptual understanding and adequate action. Against this backdrop, this study aims to identify key components of cybersecurity in a local governmental context through a systematic literature review. This review further extends to the development of a conceptual framework providing a comprehensive understanding of the local government’s cybersecurity landscape. This study makes a significant contribution to the academic and professional domains of cybersecurity issues and policies within the local governmental context, offering valuable insights to local decision-makers, practitioners, and academics. This study also helps identify vulnerabilities, enabling stakeholders to recognize shortcomings in their cybersecurity and implement effective countermeasures to safeguard confidential information and documents. Thus, the findings inform local government policy to become more cybersecurity-aware and prepared.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Cybercrime and Law Enforcement Studies · Smart Cities and Technologies · Internet Traffic Analysis and Secure E-voting
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
City 4.0 Lab, School of Architecture and Built Environment, Faculty of Engineering, Queensland University of Technology, 2 George Street, Brisbane, QLD 4000, Australia
School of Electrical Engineering and Robotics, Faculty of Engineering, Queensland University of Technology, 2 George Street, Brisbane, QLD 4000, Australia
School of Computer Science, Faculty of Science, Queensland University of Technology, 2 George Street, Brisbane, QLD 4000, Australia
Funding
Australian Research Council Discovery Grant Scheme
References (100+)
Show source-provided references
1. Rotta, M.J.R., Sell, D., dos Santos Pacheco, R.C., and Yigitcanlar, T. (2019). Digital commons and citizen coproduction in smart cities: Assessment of Brazilian municipal e-government platforms. Energies, 12.10.3390/en12142813 ↗
2. Micozzi, N., and Yigitcanlar, T. (2022). Understanding smart city policy: Insights from the strategy documents of 52 local governments. Sustainability, 14.10.3390/su141610164 ↗
3. Artificial intelligence in local governments: Perceptions of city managers on prospects, constraints and choices10.1007/s00146-022-01450-x ↗
4. Access to the ICT network as a public task of local government
5. Artificial intelligence in local government services: Public perceptions from Australia and Hong Kong10.1016/j.giq.2023.101833 ↗
6. Norris, D.F., Mateczun, L., and Forno, R. (2022). Cybersecurity and Local Government, John Wiley & Sons, Inc.10.1002/9781119788317 ↗
7. Cyberattacks at the grass roots: American local governments and the need for high levels of cybersecurity10.1111/puar.13028 ↗
8. Cyberattacks on local governments 2020: Findings from a key informant survey10.1080/23738871.2023.2178319 ↗
9. When cyber threats loom, what can state and local governments do?10.1353/gia.2018.0008 ↗
10. The cybersecurity of municipalities in the United States: An exploratory survey of policies and practices10.1080/23738871.2020.1792956 ↗
11. Cybersecurity at the grassroots: American local governments and the challenges of internet security10.1515/jhsem-2017-0048 ↗
12. Cybersecurity assurance in smart cities: A risk management perspective10.1080/07366981.2023.2165293 ↗
13. Demertzi, V., Demertzis, S., and Demertzis, K. (2023). An overview of cyber threats, attacks and countermeasures on the primary domains of smart cities. Appl. Sci., 13.10.3390/app13020790 ↗
14. Cybersecurity policy-making at the local government level: An analysis of threats, preparedness, and bureaucratic roadblocks to success10.1515/jhsem-2012-0003 ↗
15. Managing cybersecurity at the grassroots: Evidence from the first nationwide survey of local government cybersecurity10.1080/07352166.2020.1727295 ↗
16. A proactive approach to assess web application security through the integration of security tools in a security orchestration platform10.1016/j.cose.2022.102886 ↗
17. Almeida, F. (2023). Prospects of cybersecurity in smart cities. Future Internet, 15.10.3390/fi15090285 ↗
18. Cybersecurity threats in local government: A sociotechnical perspective10.1177/02750740221125432 ↗
19. Cybersecurity in the local government sector in Poland: More work needs to be done10.4335/20.1.161-192(2022) ↗
20. NIST (2023, December 03). Framework for Improving Critical Infrastructure Cybersecurity, Available online: https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf.
21. (2023). Cybersecurity. Guidelines for Internet Security (Standard No. BS ISO/IEC 27032:2023).
22. (2020). Information Technology. Information Security Management Systems. Overview and Vocabulary (Standard No. BS EN ISO/IEC 27000:2020).
23. Ross, R., Pillitteri, V., Graubart, R., Bodeau, D., and Mcquaid, R. (2021). Developing Cyber-Resilience Systems: A Systems Security Engineering Approach.10.6028/NIST.SP.800-160v2r1 ↗
24. Cybersecurity and information security—What goes where?10.1108/ICS-04-2017-0025 ↗
25. A comprehensive study of the IoT cybersecurity in smart cities10.1109/ACCESS.2020.3046442 ↗
26. The information security strategy of Bogor’s smart city to deal with threat in cyber space10.1088/1757-899X/1073/1/012054 ↗
27. Sensuse, D.I., Putro, P.A.W., Rachmawati, R., and Sunindyo, W.D. (2022). Initial cybersecurity framework in the new capital city of Indonesia: Factors, objectives, and technology. Information, 13.10.3390/info13120580 ↗
28. Motivations, barriers and risks of smart home adoption: From systematic literature review to conceptual framework10.1016/j.erss.2021.102211 ↗
29. Regona, M., Yigitcanlar, T., Xia, B., and Li, R.Y.M. (2022). Opportunities and adoption challenges of AI in the construction industry: A PRISMA review. J. Open Innov. Technol. Mark. Complex., 8.10.3390/joitmc8010045 ↗
30. David, A., Yigitcanlar, T., Li, R.Y.M., Corchado, J.M., Cheong, P.H., Mossberger, K., and Mehmood, R. (2023). Understanding local government digital technology adoption strategies: A PRISMA review. Sustainability, 15.10.3390/su15129645 ↗
31. Senadheera, S., Yigitcanlar, T., Desouza, K.C., Mossberger, K., Corchado, J., Mehmood, R., Li, R.Y.M., and Cheong, P.H. (2024). Understanding chatbot adoption in local governments: A review and framework. J. Urban Technol., 1–35.10.1080/10630732.2023.2297665 ↗
32. Computer vision applications for urban planning: A systematic review of opportunities and constraints10.1016/j.scs.2023.105047 ↗
33. Research on information security system of smart city based on information security requirements10.1088/1742-6596/1069/1/012040 ↗
34. Cyber security attacks on smart cities and associated mobile technologies10.1016/j.procs.2017.05.391 ↗
35. Cyber resilience and incident response in smart cities: A systematic literature review10.3390/smartcities3030046 ↗
36. Kalinin, M., Krundyshev, V., and Zegzhda, P. (2021). Cybersecurity risk assessment in smart city infrastructures. Machines, 9.10.3390/machines9040078 ↗
37. Kim, K., Istabraq Mohammed, A., Ramachandran, S., Kim, J., Zia, T., and Almorjan, A. (2023). Cybersecurity and cyber forensics for smart cities: A comprehensive literature review and survey. Sensors, 23.10.3390/s23073681 ↗
38. Understanding ‘smart cities’: Intertwining development drivers with desired outcomes in a multidimensional framework10.1016/j.cities.2018.04.003 ↗
39. Concept of implementing big data in smart city: Applications, services, data security in accordance with internet of things and AI
40. D’Amico, G., L’Abbate, P., Liao, W., Yigitcanlar, T., and Ioppolo, G. (2020). Understanding sensor cities: Insights from technology giant company driven smart urbanism practices. Sensors, 20.10.3390/s20164391 ↗
41. Cortese, T.T.P., Almeida, J.F.S.d., Batista, G.Q., Storopoli, J.E., Liu, A., and Yigitcanlar, T. (2022). Understanding sustainable energy in the context of smart cities: A PRISMA review. Energies, 15.10.3390/en15072382 ↗
42. Liu, Y.S., Yigitcanlar, T., Guaralda, M., Degirmenci, K., Liu, A., and Kane, M. (2022). Leveraging the opportunities of wind for cities through urban planning and design: A PRISMA review. Sustainability, 14.10.3390/su141811665 ↗
43. Algorithmic urban planning for smart and sustainable development: Systematic review of the literature10.1016/j.scs.2023.104562 ↗
44. Algorithmic green infrastructure optimisation: Review of artificial intelligence driven approaches for tackling climate change10.1016/j.scs.2024.105182 ↗
45. IoT based big data analytics for cloud storage using edge computing10.5373/JARDCS/V12SP7/20202262 ↗
46. Helping local governments improve cyber security
47. Future smart cities: Requirements, emerging technologies, applications, challenges, and future aspects10.1016/j.cities.2022.103794 ↗
48. The influence of artificial intelligence on e-governance and cybersecurity in smart cities: A stakeholder’s perspective10.1109/ACCESS.2023.3293480 ↗
49. A general view of industry 4.0 revolution from cybersecurity perspective10.18201/ijisae.2020158884 ↗
50. Smart city and cyber-security; technologies used, leading challenges and future recommendations10.1016/j.egyr.2021.08.124 ↗
51. Smart contract-based security architecture for collaborative services in municipal smart cities10.1016/j.sysarc.2022.102802 ↗
52. Smart cities, playable cities, and cybersecurity: A systematic review10.1080/10447318.2021.2012381 ↗
53. Cybersecurity at the local government level: Balancing demands for transparency and privacy rights10.1111/j.1467-9906.2012.00640.x ↗
54. Municipal cybersecurity: More work needs to be done10.1177/1078087420973760 ↗
55. A security review of local government using NIST CSF: A case study10.1007/s11227-018-2479-2 ↗
56. Ali, H., Elzeki, O.M., and Elmougy, S. (2022). Smart attacks learning machine advisor system for protecting smart cities from smart threats. Appl. Sci., 12.10.3390/app12136473 ↗
57. Neupane, C., Wibowo, S., Grandhi, S., and Deng, H. (2021). A trust-based model for the adoption of smart city technologies in Australian regional cities. Sustainability, 13.10.3390/su13169316 ↗
58. Cybersecurity strategy for smart city implementation10.5194/isprs-archives-XLII-4-W17-3-2019 ↗
59. The local government’s position in the Polish cybersecurity system10.4335/19.3.609-620(2021) ↗
60. Wu, Y.C., Sun, R., and Wu, Y.J. (2020). Smart city development in Taiwan: From the perspective of the information security policy. Sustainability, 12.10.3390/su12072916 ↗
61. Wu, S.M., Guo, D., Wu, Y.J., and Wu, Y.C. (2018). Future development of Taiwan’s smart cities from an information security perspective. Sustainability, 10.10.3390/su10124520 ↗
62. Cybersecurity in the making—Policy and law: A case study of Georgia10.2478/iclr-2019-0019 ↗
63. Ahmad, M.O., Ahad, M.A., Alam, M.A., Siddiqui, F., and Casalino, G. (2021). Cyber-physical systems and smart cities in india: Opportunities, issues, and challenges. Sensors, 21.10.3390/s21227714 ↗
64. Exploring the challenges and issues in adopting cybersecurity in Saudi smart cities: Conceptualization of the cybersecurity-based UTAUT model10.3390/smartcities6030072 ↗
65. Security for smart cities10.1049/iet-smc.2020.0001 ↗
66. Data security in smart cities: Challenges and solutions
67. Sadik, S., Ahmed, M., Sikos, L.F., and Najmul Islam, A.K.M. (2020). Toward a sustainable cybersecurity ecosystem. Computers, 9.10.3390/computers9030074 ↗
68. Hossain, S.T., Yigitcanlar, T., Nguyen, K., and Xu, Y. (2024). Understanding local government cybersecurity policy: A concept map and framework. Information, 15.10.3390/info15060342 ↗
69. An investigation of the challenges and issues influencing the adoption of cloud computing in Australian regional municipal governments
70. Vigliarolo, B. (2023, September 08). Ransomware Attack Sends US County Back to 1977. Available online: https://www.theregister.com/2022/05/29/security_roundup/#:~:text=In%20brief%20Somerset%20County%2C%20New%20Jersey%2C%20was%20hit,as%20land%20records%2C%20vital%20statistics%2C%20and%20probate%20records.
71. Sytas, A. (2023, September 12). Russian Group Claims Hack of Lithuanian Sites in Retaliation for Transit Ban. Available online: https://www.reuters.com/technology/lithuania-hit-by-cyber-attack-government-agency-2022-06-27/.
72. Toulas, B. (2023, September 12). Vice Society Ransomware Claims Attack on Italian City of Palermo. Available online: https://www.bleepingcomputer.com/news/security/vice-society-ransomware-claims-attack-on-italian-city-of-palermo/#:~:text=The%20Vice%20Society%20ransomware%20group%20has%20claimed%20responsibility,million%20people%20and%20many%20tourists%20visiting%20the%20city.
73. Lewton, J. (2023, September 12). Troup Confirms Cyber Attack on City Was Ransomware. Available online: https://www.wgem.com/2022/05/24/troup-confirms-cyber-attack-city-was-ransomware/.
74. Sarima-based cyber-risk assessment and mitigation model for a smart city’s traffic management systems (SCRAM)10.1080/10919392.2022.2054259 ↗
75. Security threats, countermeasures, and challenges of digital supply chains10.1145/3588999 ↗
76. Identifying threats, cybercrime and digital forensic opportunities in smart city infrastructure via threat modeling
77. A survey on cybersecurity, data privacy, and policy issues in cyber-physical system deployments in smart cities10.1016/j.scs.2019.101660 ↗
78. Data-driven security for smart city systems: Carving a trail10.1109/ACCESS.2020.3015510 ↗
79. A master attack methodology for an AI-based automated attack planner for smart cities10.1109/ACCESS.2018.2867556 ↗
80. Alzahrani, N.M., and Alfouzan, F.A. (2022). Augmented reality (AR) and cyber-security for smart cities—A systematic literature review. Sensors, 22.10.3390/s22072792 ↗
81. Security challenges and requirements for smart internet of things applications: A comprehensive analysis10.1016/j.procs.2021.07.053 ↗
82. Smart cities and cyber security: Are we there yet? A comparative study on the role of standards, third party risk management and security ownership10.1016/j.cose.2019.02.009 ↗
83. Assessing information security risks in the cloud: A case study of Australian local government authorities10.1016/j.giq.2019.101419 ↗
84. An empirical investigation of the relationship between local government budgets, IT expenditures, and cyber losses10.1109/TETC.2019.2915098 ↗
85. Aslam, M., Khan Abbasi, M.A., Khalid, T., Shan, R.u., Ullah, S., Ahmad, T., Saeed, S., Alabbad, D.A., and Ahmad, R. (2022). Getting smarter about smart cities: Improving data security and privacy through compliance. Sensors, 22.10.3390/s22239338 ↗
86. Cyber governance studies in ensuring cybersecurity: An overview of cybersecurity governance10.1365/s43439-021-00045-4 ↗
87. Taherdoost, H. (2022). Understanding cybersecurity frameworks and information security standards—A review and comprehensive overview. Electronics, 11.10.3390/electronics11142181 ↗
88. Model-based security engineering for cyber-physical systems: A systematic mapping study10.1016/j.infsof.2016.11.004 ↗
89. Indicators for maturity and readiness for digital forensic investigation in era of industrial revolution 4.010.1016/j.cose.2021.102237 ↗
90. SCADA vulnerabilities and attacks: A review of the state-of-the-art and open issues10.1016/j.cose.2022.103028 ↗
91. The making of responsible innovation and technology: An overview and framework10.3390/smartcities6040093 ↗
92. The emerging threat of Ai-driven cyber attacks: A review10.1080/08839514.2022.2037254 ↗
93. Testing human ability to detect ‘deepfake’ images of human faces10.1093/cybsec/tyad011 ↗
94. CTIMD: Cyber threat intelligence enhanced malware detection using API call sequences with parameters10.1016/j.cose.2023.103518 ↗
95. A Survey of cybersecurity certification for the internet of things
96. Khan Abbasi, M.H., Ullah, S., Ahmad, T., and Buriro, A. (2023). A real-time hybrid approach to combat in-browser cryptojacking malware. Appl. Sci., 13.10.3390/app13042039 ↗
97. Towards post-quantum blockchain: A review on blockchain cryptography resistant to quantum computing attacks10.1109/ACCESS.2020.2968985 ↗
98. Secure multifactor remote access user authentication framework for iot networks
99. Deep reinforcement learning in the advanced cybersecurity threat detection and protection
100. Edge-cloud resource federation for sustainable cities10.1016/j.scs.2022.103887 ↗