# Local Government Cybersecurity Landscape: A Systematic Review and Conceptual Framework
## 5 Findings and Discussion  
### The Need and Foundation: Cybersecurity Conceptual Framework from Local Government Perspective  
Information on the cybersecurity issues of local governments is fragmented and scattered, leaving a significant gap in understanding the threat landscape. For example, we found a total of 30 types and techniques of potential cyber-attacks scattered in 43 articles and 20 cybersecurity tools in 31 articles. However, none of the articles in this research \begin{table}
\begin{tabular}{c c c c} \hline \hline
**Name** & **Topic** & **Description** & **Reference** \\ \hline \multirow{6}{*}{ISO/IEC 27001:2013 (Standard)} & \multirow{3}{*}{Key Components} & This international standard describes & \\  & & Information Security Management & \\  & & System (ISMS) recommended practices. & \\ \cline{3-4}  & & Risk management process: Offers & \\  & & comprehensive methods for risk & \\  & & assessment, monitoring, and review. & \\  & & Audit and review: Emphasizes the need & \\  & & for routine internal audits and & \\  & & management reviews to achieve & \\  & & continuous improvement. & \\ \cline{3-4}  & & \multirow{3}{*}{Relevance} & Because of its global recognition and & \\  & & rigorous certification process, it has & \\  & & become an indicator of trust in & \\  & & organizations’ commitment & \\  & & to cybersecurity. & \\ \hline \multirow{6}{*}{Purpose/Background} & \multirow{3}{*}{Key Components} & Non-regulatory federal agency in the & \\  & & USA, develops and promotes & \\  & & measurement standards in cybersecurity, & \\  & & providing guidelines, standards, and & \\ \cline{3-4}  & & best practices. & \\ \cline{3-4}  & & \multirow{3}{*}{Key Components} & Frameworks: The NIST cybersecurity & \\  & & framework encompasses five concurrent & \\  & & and ongoing functions—identify, protect, & \\  & & detect, respond, and recover. & \\  & & Guidelines and standards: Provides & \\  & & cybersecurity best practices for federal & \\  & & agencies to prevent cyberthreats. & \\ \cline{3-4}  & & \multirow{3}{*}{Relevance} & Widely adopted in organizations, & \\  & & especially in the private sector to ensure & \\  & & robust cybersecurity posture. & \\ \hline \multirow{6}{*}{NIST SP 800-53 (Assessment  Framework)} & \multirow{3}{*}{Key Components} & This is a part of NIST’s special & \\  & & publication series designed to safeguard & \\  & & federal information systems. & \\ \cline{3-4}  & & \multirow{3}{*}{Key Components} & Detailed security controls: Broken down & \\  & & into categories, such as incident response, & \\  & & maintenance, and system integrity. & \\ \cline{3-4}  & & Appendices: Provide additional & \\ \cline{3-4}  & & information regarding the science & \\ \cline{3-4}  & & underlying security control selection & \\ \cline{3-4}  & & and customization. & \\ \cline{3-4}  & & \multirow{3}{*}{Relevance} & While designed for federal compliance, & \\ \cline{3-4}  & & its in-depth examinations of diverse & \\ \cline{3-4}  & & security controls make it an invaluable & \\ \cline{3-4}  & & resource for any organization, regardless & \\ \cline{3-4}  & & of the industry. & \\ \hline \hline \end{tabular}
\end{table} 
Table 6: _Cont._domain provided a comprehensive list or discussion of all the potential cyber-attack types and techniques. This fragmented insight into local governments' cybersecurity hinders the ability of responsible officials and elected members to formulate and deploy robust defensive strategies to safeguard the confidential information of residents and employees and maintain organizational integrity. Additionally, this fragmented information landscape may cause the removal of critical details. Decision-makers may remain aware of widely discussed matters but oblivious to less popular but important ones. This limited viewpoint can unintentionally neglect key vulnerabilities, leaving local governments exposed.