The cybersecurity of municipalities in the United States: an exploratory survey of policies and practices

ABSTRACT

Few empirical studies have examined the cybersecurity policies of cities in the United States. Issues that have yet to be addressed in the literature include whether cities (of various sizes) maintain cybersecurity plans and policies that are sufficient to protect their citizens’ data, a general lack of knowledge regarding cybersecurity policies, and practices on the part of cities that place at risk the security of public services and citizens’ privacy. Our research explored these issues by administering a survey to public officials working in U.S. cities. The survey instrument included questions pertaining to (1) the existence of a formal cybersecurity strategic plan and the utilisation of internet-based technologies in cities, (2) the support received by cities for their cybersecurity planning, (3) the types of cybersecurity policies being implemented in cities, and (4) the resources needed to conduct cybersecurity planning. We collected surveys from 168 officials employed in cities across the U.S. Our analysis of the results indicates that municipalities have formal cybersecurity policies but that they need to increase the integration of cybersecurity practices into their daily management processes by tracking their data, consulting outside security auditors, and increasing management training related to data security.

KEYWORDS:

• Cybersecurity
• U.S. Municipalities

Disclosure statement

No potential conflict of interest was reported by the author(s).

Notes

1 This question is taken from the International City/County Management Association.

Additional information

Funding

This work was supported by Augusta University.

Notes on contributors

William Hatcher

William Hatcher, Ph.D., is an associate professor in the Department of Social Sciences at Augusta University in Augusta, Georgia. He directs the university's Master of Public Administration program. His research focus includes public finance, community development, and public health. His research has appeared in journals such as the Journal of Public Affairs Education, the American Journal of Public Health, Journal of Mental Health, and Public Administration Quarterly.

Wesley L. Meares

Wesley Meares, Ph.D., is an associate professor of political science and public administration in the Department of Social Sciences at Augusta University in Augusta, Georgia. His research interests include housing, community development, sustainability, and urban politics and policy. His research has appeared in journals such as Cities, Public Administration Quarterly, Journal of Urbanism, and Behavioral Sciences of Terrorism and Political Aggression.

John Heslen

John Heslen, Ph.D., is an assistant professor of political science at Augusta University and serves on faculty at Augusta University's Cyber Institute. Before coming to Augusta University, Dr. Heslen served as an intelligence officer with both the Defense Intelligence Agency and the United States Air Force, specialising in combatting terrorism, counterintelligence, and strategic cyber intelligence.