I am going to use the Cisco SAFE security reference architecture as a complimentary method to NIST CSF to help explain how these methods can be used to support a Smart City Cyber Security Strategy. SAFE is further expanded through its identification of threat types and mapping to MITRE ATT&CK. In particular i will focus … Continue reading Cisco SAFE security reference architecture
Category: Cyber Security Strategy
For an overview of this concept, I am going to reference an article written by Dave McComb called The Enterprise Ontology. It offers a good description of an Enterprise Ontology as well as some very good reasons as to why an organisation, and in this case a City or the City Administration, should build one. The … Continue reading Learning from an Enterprise Ontology
In this second part introduction to the Cyber Security Framework for a Smart City i will cover the scope of the framework using the best practice described by the NIST Cybersecurity Framework and how the components can be used to work together with a Smart City strategy and thus effect a smart city cyber security … Continue reading Cyber Security Framework for Smart Cities – part 2
The term Capability is often used in business reports and publications to describe something particular to a person, technology or an organisation but in many cases it is often less clear as to what exactly that "capability" is, how it materialises or is managed. So for the sake of clarity and understanding i am going … Continue reading Cyber Security capability for Smart Cities
A recent article from IOT World highlights that real world events can trigger cyber attacks either as protest or retaliation. City Security: How Fort Lauderdale Deals with Cyber Threats The article describes: In 2014, the city of Ferguson, Mo. was hit with a cyberattack in apparent retaliation for the police shooting of the unarmed teen … Continue reading Lessons to be learned from recent attacks to cities
It is important to be aware of and take note from Ashby's Law of Requisite Variety when addressing the problem of cyber security for a smart city. If a system is to be stable, the number of states of its control mechanism must be greater than or equal to the number of states in the … Continue reading Smart Cities, cyber security and cybernetics