The Invisible Frontline
Cybersecurity Protection
of Union City
AI generated content is used
in this presentation
Dwayne Thaele
Cybersecurity Manager
2 Cybersecurity is an Enabling Technology
Cybersecurity is essential to ensure Union City’s operations are available, reliable, and secured
Online Resident and
Business Services
Residents and
businesses pay bills,
file permits and renew
licenses online
because their
payment and identity
data stay protected.
Smart City
Infrastructure
Connected traffic
signals, lighting,
water, fuel systems,
and more using IoT
sensors to automate
operations.
Delivering Critical
City Services
911 dispatch,
homeless outreach,
family services and
business support
during normal
conditions and
disasters.
Resident Trust and
Compliance
Community
engagements,
protecting personal
data, meet industry,
federal, and state
requirements.
THE FOUNDATION: CYBERSECURITY
Security Design & Operations | Risk Management | Compliance | Awareness Training Protects
Payments
Secured
Networks
Reliable Service
Infrastructure
Privacy by
Design
3 Cybercriminals & Threats to Union City
State Actors
ESPIONAGE AND
DISRUPTION
Organized Crime
FINANCIAL
GAIN
Very High Risk
Target: People
Hacktivists
INFLICT
EMBARRASSMENT
Medium Risk
Target: Webpages
Insiders
INTENTIONAL
NON-INTENTIONAL
Very High Risk
Target: Everything
$
THREAT ATTACK TYPES
EMAIL ATTACKS Phishing / Ransomware / Malware
IDENTITY ATTACKS Credential & Token Theft / Impersonation / Account Compromise NETWORK ATTACKS Internet-based / Wireless Access / Cloud Infrastructure WEB / BROWSER ATTACKS Search Engine: Malicious Websites / File Downloads / QR Codes Top Threats Used By Cybercriminals Against Union
City
High Risk
Target: Infrastructure
4 Evolving Cybersecurity Threats & Risks
1980s–1990s
Viruses &
worms
Computer Attacks
Early Networking
2000s
Phishing &
Botnets
Network Attacks
Web Attacks
Dark Web
2010s
Ransomware &
Social Media
Cyber-crime is
Profitable
Cyber-crime as a
Business
Large-Scale
Service Disruption
2020s
AI & Automated
Attacks
Independent
Attack Initiation
Advanced
Impersonation
Cyber-War
2030s
Technology
Convergence
§ Artificial Intelligence
§ Quantum
Computing
§ Autonomous Actors
Bypass Current
Cybersecurity
Controls
AI
RISK LEVEL
High
Low
Increasing Attack Complexity Increasingly Difficult to Detect Decreasing Time to Respond
5 Growth of City Cybersecurity Investments
Cybersecurity share of the IT budget is increasing to meet the challenges from advanced threats
FY2023
7%
of the IT
budget
FY2024
8%
of the IT
budget
FY2025
8%
of the IT
budget
FY2026
10%
of the IT
budget
FY2027
13%
of the IT
budget
Cybersecurity share of the IT budget, FY2023–FY2027
18 Security
Vendors
Supporting
Union City
Primary Investments
Security
Operations
Email
Security
Incident
Response
Vulnerability
Management
9 Managed
Security
Service
Providers
Increasing investment in managed security services
+6% since FY2023
6 Defense in Depth Cybersecurity Protection
Multiple layers of protection to guard against complex attacks Perimeter Security
Secures Access
Network Security
Secures Communications
Endpoint Security
Secures Devices / Platforms
Application Security
Secures Services & Tools
Data Security
Secures the Organization
SECURITY LAYER
Identity Attacks
Users & Accounts / Credentials
Privileges
Internet Attacks
Firewalls / Availability / IoT
Zero-Day Attacks
Vulnerabilities / Admin. Access
Supply Chains
Phishing & Malware
Email / Web Browsers
Collaboration Services & Software
Ransomware
Confidential Data / Personnel /
Operational Systems
AI-Enhanced Threats
AI
AI
AI
AI
AI
AI
Security
Operations
Across all layers
Security
Monitoring
Incident Response
Penetration
Testing
Vulnerability Mgt
Patch Mgt
Backups
Risk Management
THREATS &
TARGETS
Significant Investment Focus
7 Thank You
Questions and discussion
8 Backup
Supporting detail
9 Defense in Depth Cybersecurity Protection
Six layers of protection, so an attacker who gets past one still faces the next Perimeter Security
Secures Access
ü Identity Monitoring
ü Risk Analysis
ü Automated Incident Response
Network Security
Secures Communications
ü Infrastructure Security
ü Honey Pots
ü Automated Incident Response
Endpoint Security
Secures Devices / Platforms
ü Endpoint Security
ü Automated Patching
ü Automated Incident Response
Application Security
Secures Services & Tools
ü New Email Security Service
ü URL Monitoring
ü Collaboration Protections
Data Security
Secures the Organization
ü Data Encryption by Default
ü Data Loss Prevention
ü Automated Backups
Security Operations
Detect / Identify / Mitigate
Threats / Targets SECURITY LAYER / Protections
Identity Attacks
§ Users & Accounts
§ Credentials
§ Privileges
Internet-based Attacks
§ Firewalls
§ Availability
§ IoT
Zero-Day Attacks
§ Vulnerabilities
§ Admin. Access
§ Supply Chains
Phishing & Malware
§ Email
§ Web Browsers
§ Collaboration Software
Ransomware
§ Confidential
§ Personnel
§ Operational
ü Security Monitoring
ü Incident Response
ü Penetration Testing
ü Vulnerability Mgt
ü Patch Mgt
ü Backups
ü Risk Management
AI-Enhanced Threats FY 2025 – 2026 Significant Investment Focus
AI
AI
AI
AI
AI
AI