Cyber attackers are always looking to exploit the IT vulnerabilities of municipalities to steal information and money — often by holding data and computer systems for ransom and shutting down the regular business of the city or town. Attacks can come as ransomware, viruses and cyberattacks.
Municipalities can use these tips to protect information, detect vulnerabilities and respond and recover if an attack occurs.
Protecting information
- Train employees on policies and how to detect common cyber threats. Technology staff and others can train users by showing them examples of incoming emails identified as phishing attempts, where hackers pose as trusted senders to gain access to sensitive information such as login credentials, or trick users into clicking links or opening attachments that will download malware into a computer.
- Use multifactor authentication, which uses two or more factors to verify a user’s identity before providing access to a system or account.
- Use endpoint detection and response, which automatically monitors users’ devices for threats and responds to it automatically.
- Use antispam and email filtering tools. This can stop viruses and malware before employees could click on it.
Responding to cyber attacks
- Back up data onsite and offsite, and test the backups regularly. Offsite service provides greater security against security breaches.
- Have a cyber incident response plan. These plans should include preparation for a business-disrupting incident. They should cover steps to take once a breach is detected to reduce and ultimately recover from the damage.
Insurance
- Purchase cyber liability insurance. This can be a critical part of cyberattack protection, but the liabilities that many local governments face — a lack of multifactor authentication, a lack of endpoint detection and response and a lack of data backup — are causing insurers to see municipalities as uninsurable. Taking these steps can make municipalities eligible for insurance and help them control premium costs.
Members of the SC Municipal Insurance and Risk Financing Fund have access to the eRiskHub as a resource for innovative cyber risk management solutions.