https://www.americancityandcounty.com/wp-content/themes/acc_child/assets/images/logo/footer-logo.png
  • Home
  • Co-op Solutions
  • Hybrid Work
  • Commentaries
  • News
  • In-Depth
  • Multimedia
    • Back
    • Podcast
    • Latest videos
    • Product Guides
  • Resources & Events
    • Back
    • Resources
    • Webinars
    • White Papers
    • IWCE 2022
    • How to Contribute
    • Municipal Cost Index – Archive
    • Equipment Watch Page
    • American City & County Awards
  • About Us
    • Back
    • About Us
    • Contact Us
    • Advertise
    • Cookie Policy
    • Privacy Statement
    • Terms of Service
American City and County
  • NEWSLETTER
  • Home
  • Co-op Solutions
  • Hybrid Work
  • Commentaries
  • News
  • In-Depth
  • Multimedia
    • Back
    • Podcasts
    • Latest videos
    • Product Guides
  • Resources/Events
    • Back
    • Webinars
    • White Papers/eBooks
    • IWCE Expo
    • Calendar of Events
    • How to Contribute
    • American City & County Awards
    • Municipal Cost Index
    • Equipment Watch Page
  • About Us
    • Back
    • About Us
    • Contact Us
    • Advertise
    • Cookie Policy
    • Privacy Stament
    • Terms of Service
  • newsletter
  • Administration
  • Economy & Finance
  • Procurement
  • Public Safety
  • Public Works & Utilities
  • Smart Cities & Technology
  • Magazine
acc.com

Commentaries


Commentary

Three ways to protect your city government from a ransomware attack

Three ways to protect your city government from a ransomware attack

  • Written by Gus Evangelakos
  • 11th September 2019

A ransomware attack on the city of Baltimore took place on May 7, 2019, and left citizens unable to pay parking fines and some tax and utility bills online. In its aftermath, city government employees are struggling to provide citizens with even the most basic of digital public services. City officials depend on IT systems to collect much-needed resources, but they also rely on them for the record-keeping needed to process real estate transactions and issue building permits.

These attacks have slowed city operations to a crawl.

Baltimore is merely another victim in a long string of recent ransomware attacks targeting city and state governments. Atlanta residents still shudder at the memory of 2018’s SamSam attack, which disrupted the delivery of city services to more than 6 million people and ultimately cost taxpayers over $9.5 million. More than 169 state and local governments are reported to have been victimized by ransomware within the past five years.

As a city government official, what can you do to ensure your computer systems won’t be harmed by this sort of attack? With ransomware seemingly growing more dangerous each year, it’s important to take these three key steps.


1. Back up, but also test your ability to restore.

It has happened in the past: organizations with complete off-site backups ended up paying hefty amounts to criminals who encrypted their systems. Why? In the case of one healthcare provider, it was because the amount of time it would have taken to complete a full restore from the backups was too long. And operating without access to critical patient health records during that period would have put lives at risk.

Simply put, a disaster recovery plan isn’t complete unless it includes a process for recovering essential files quickly enough to maintain continuity of operations. If you don’t know how long a full restore would take, you don’t know whether or not the backup systems you have in place will meet your real recovery needs.


2. Educate your employees.

Security awareness training is one of the most cost-effective investments you can make into improving your municipality’s overall cybersecurity risk profile, but only if the training you implement is memorable, and your employees take it seriously.

Teach all employees best practices for identifying phishing emails and show them how to disconnect infected devices from the network quickly (including turning off WiFi connections). More importantly, make security awareness a part of the culture your employees share as public servants and professionals.


3. Treat every file as a potential threat.

Some strains of ransomware remain dangerous even though they’ve been identified and can be detected even by simple signature-based anti-malware programs. Others use familiar or weak encryption methods that may be bypassed, sometimes even with free tools available online.

But, the most dangerous strains of ransomware are those that are novel. If you’re relying on cybersecurity tools that permit unknown files to execute on endpoint devices within your network environment, you simply have no protection against these dangerous threats.

The most effective technologies offer active breach protection, allowing you to adopt a Zero Trust approach to all incoming network traffic and unknown files. Ransomware threats are always evolving, and no single technology can guarantee protection against tomorrow’s threats. Instead, your municipality should adopt a multi-layered approach incorporating email security, data loss prevention, a secure web gateway and an advanced endpoint protection solution designed not to trust unknown executables until they’ve been proven safe.

Ransomware is a serious and significant problem. But by taking a holistic, multi-layered approach to information security overall, municipalities can do a great deal to reduce their city’s risk.

 

Gus Evangelakos is the Director of North American Field Engineering at Comodo. Gus commenced his career managing IT infrastructure. For the past 10 years, Gus has applied this experience as an implementation consultant, field engineer and in managing field engineers for global brands within the Enterprise Cyber Security market segment.

Tags: Smart Cities & Technology Commentaries Commentary

Most Recent


  • digital
    How to leverage digital tools to drive innovation in government
    The rapid evolution of digital technologies transformed the way governments function, making them more efficient, transparent and citizen-friendly. Rather than relying on crystal trophies, governments can leverage digital tools to drive innovation and streamline processes, benefiting the population they serve. Open data and crowdsourcing Open data refers to making government data available to the public, […]
  • Broadband
    Oversight committee addresses NTIA reauthorization, FCC broadband map ahead of BEAD Program funding allocations
    As technological advancements continue to roll out at a breakneck pace, from artificial intelligence to high speed broadband connectivity, investment in digital infrastructure has become a defining theme of the modern era. Rep. Cathy McMorris Rodgers, (R-Wash.), chair of the House Energy and Commerce Committee, stressed the importance of this charge in opening remarks at […]
  • zero trust
    Zero trust is a great strategy but a terrible name
    The monthly town hall meeting was going well until they got to the agenda item called “zero trust.” What was to be a routine request for additional funding to implement a zero-trust environment quickly became one of confusion and misunderstanding. Trust in government at all levels has continued its downward spiral over the years. So, […]
  • ransomware
    Dallas ransomware attack shuts down systems, forces public safety to use backup communication protocols
    For the last week, information technology administrators in Dallas have been working around the clock to mitigate the impact of a widespread ransomware attack that disrupted business, caused first responders to impliment backup communication protocols, and took public-facing digital infrastructure offline. Since the early morning hours of last Wednesday, when ransomware was discovered in the […]

Leave a comment Cancel reply

-or-

Log in with your American City and County account

Alternatively, post a comment by completing the form below:

Your email address will not be published. Required fields are marked *

Related Content

  • What “smart city” means for 2021: How digital twins, AI and other innovations drive smart transformation
  • 10 reasons why local governments should outsource all IT: Post pandemic view
  • MS-ISAC members get free access to Deloitte’s Cyber Detect and Respond Portal to help respond to cyber threats
  • North Texas alliance partners with Marketplace.city on smart government solutions

WHITE PAPERS


5 reasons why Plan Examiners need Objective Trapeze

30th May 2023

7 Permitting & Licensing Fails Slowing Community Growth

24th May 2023

The Secret Ingredient to Local Government Employee Retention

23rd May 2023
view all

Webinars


How to Centralize and Build a Grants Management Process at your Organization

24th May 2023

Making Permitting Easier: What We’ve Learned Helping America’s Largest Cities Improve Their Permitting Process

16th May 2023

Digital Property Tax Collection: Tales from the Trenches of Modernization

16th May 2023
view all

Podcast


Young Leaders Episode 4 – Cyril Jefferson – City Councilman, High Point, North Carolina

13th October 2020

Young Leaders Episode 3 – Shannon Hardin – City Council President, Columbus, Ohio

27th July 2020

Young Leaders Episode 2 – Christian Williams – Development Services Planner, Goodyear, Ariz.

1st July 2020
view all

GALLERIES


Gallery: Annual index ranks America’s top performing cities; most are in the West

30th May 2023

Gallery: Top 10 American cities for seasonal and summer jobs

25th May 2023

Gallery: 10 of America’s most affordable cities

9th May 2023
view all

Twitter


AmerCityCounty

5 reasons why Plan Examiners need Objective Trapeze dlvr.it/Sptl5z

30th May 2023
AmerCityCounty

Navigating crises with confidence: Five ways strategic plans support crisis response dlvr.it/SptVKN

30th May 2023
AmerCityCounty

Gallery: Annual index ranks America’s top performing cities; most are in the West dlvr.it/SpszdK

30th May 2023
AmerCityCounty

2022 Crown Communities Award winner: Miami-Dade County Clerk of Courts’ jury selection system dlvr.it/SphCBk

26th May 2023
AmerCityCounty

Gallery: Top 10 American cities for seasonal and summer jobs dlvr.it/SpdFWy

25th May 2023
AmerCityCounty

How to leverage digital tools to drive innovation in government dlvr.it/Spcktb

25th May 2023
AmerCityCounty

With many cities facing a fiscal cliff as ARPA funding ends, debt ceiling debate continues on Capitol Hill dlvr.it/SpZLph

24th May 2023
AmerCityCounty

7 Permitting & Licensing Fails Slowing Community Growth dlvr.it/SpYqBS

24th May 2023

Newsletters

Sign up for American City & County’s newsletters to receive regular news and information updates about local governments.

Resale Insights Dashboard

The Resale Insights Dashboard provides model-level data for the entire used equipment market to help you save time and money.

Municipal Cost Index

Updated monthly since 1978, our exclusive Municipal Cost Index shows the effects of inflation on the cost of providing municipal services

Media Kit and Advertising

Want to reach our digital audience? Learn more here.

DISCOVER MORE FROM INFORMA TECH

  • IWCE’s Urgent Communications
  • IWCE Expo

WORKING WITH US

  • About Us
  • Contact Us

FOLLOW American City and County ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookie Policy
  • Terms
Copyright © 2023 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.