How State and Local Governments Can Stay Safe From Cyber Attacks

### Executive summary: The report describes rising cyber threats targeting U.S. state and local governments—highlighting ransomware and business email compromise driven by phishing—identifies contributing factors (limited funding and staff, widespread use of similar software, and cloud adoption), and recommends mitigations including 24×7 monitoring/response, strong IAM and MFA, security awareness training, incident response planning, and pursuing cybersecurity grants.