Hi All,
Increasingly, localities in the United States are implementing smart, emerging, and connected technologies across critical infrastructure sectors, seeking cost-savings and enhanced quality-of-life for their citizens. These localities, otherwise known as connected communities or "smart cities," are urban, suburban, and rural government entities that utilize a confluence of several technological applications such as cloud computing, Internet of Things, and artificial intelligence. Connected communities use these technologies to interconnect infrastructure systems to provide more efficient, innovative, and sustainable services.
The process of securing critical infrastructure in connected communities requires addressing more technology types across sectors, ranging from energy to clean water and even emergency services. As a result of the increased interconnectedness within connected communities, traditional perimeter-based security measures are no longer sufficient to protect networks from intrusion and secure critical infrastructure data.
Multiple U.S. government agencies have developed frameworks and strategies to apply zero trust principles across federal networks. However, there is a lack of guidance for State, Local, Tribal, and Territorial (SLTT) governments, specifically within connected communities. The purpose of this document is to explain the concept of zero trust as an effective approach to protect interconnected critical infrastructure systems within connected communities.
------------------------------
Michael Roza CPA, CISA, CIA, CC, CCSKv5, CCZTv1, MBA, EMBA, CSA
------------------------------