State and local governments need to prepare for attackers getting inside their networks, with cybersecurity protocols that contain intrusions before they disrupt water systems, transportation, benefits payments and other essential services.

Complete the form to unlock this article and enjoy unlimited free access to all PYMNTS content — no additional logins required.

That is the central recommendation of a commentary published by Route Fifty, which argues that artificial intelligence is accelerating cyberattacks faster than agencies can address vulnerabilities. Prevention remains essential, but governments also need an “assume breach” mindset that treats limiting an attacker’s reach as a core responsibility.

Gary Barlet, public sector chief technology officer at cybersecurity company Illumio, writes that agencies should assess their ability to preserve operations after an intrusion. The stakes extend beyond stolen information. Compromised government systems can interrupt services that residents rely on for safety and daily necessities.

“If an attacker gets in, how far can they go,” Barlet asks, “and how quickly can we contain them?”

AI makes that assessment more urgent by helping attackers find and exploit weaknesses on compressed timelines. Barlet argues that opportunities to fixing vulnerabilities before exploitation are shrinking, leaving agencies exposed even when they maintain conventional defenses.

Patching software, managing identities, protecting endpoints and training employees remain necessary. But those measures cannot guarantee that every intrusion will be prevented, particularly when attackers exploit a weakness before a fix becomes available.

For state and local agencies, the challenge is compounded by legacy systems that combine older infrastructure, cloud services, operational technology and systems maintained by contractors.

Source link