# Local Government Cybersecurity Landscape: A Systematic Review and Conceptual Framework
## 2 Background to the Cybersecurity Concept  
Cybersecurity is a crucial strategy for organizations to protect networks, computers, programs, and data from attacks, damage, or unauthorized access [12]. The National Institute of Standards and Technology (NIST) in the USA defined cybersecurity as \"the process of protecting information by preventing, detecting, and responding to attacks\" [20]. Meanwhile, the International Organization for Standardization (ISO) defined cybersecurity as the \"safeguarding of society, people, organizations and nations from cyber risks\" [21]. Cyber risk is the effect of uncertainty on cybersecurity objectives [22]. The NIST provides an elaborative definition of cyber risk. Indeed, according to NIST Special Publication (SP) 800-160, cyber risk is \"the risk of depending on cyber resources (i.e., the risk of depending on a system or system elements that exist in or intermittently have a presence in cyberspace)\" [23].  
Cybersecurity is frequently confused with the term information security [24; 25]. However, despite their interconnectedness, these two have distinct meanings. Information security is the \"preservation of confidentiality, integrity and availability of information\" [22]. In this definition, confidentiality is the property of information that is not disclosed to unauthorized individuals, while integrity is the property of accuracy and completeness, and availability is the property of being accessible and usable on demand [4; 22; 26; 27]. Cybersecurity, on the other hand, is a subset of information security and concerns the management of information security risks that arise when data are stored, transmitted, and processed in digital formats within computer systems, storage devices, and interconnected networks [21; 24]. According to the ISO, cybersecurity also includes Internet security, network security, and web security, as shown in Figure 1.  
The Internet is a global system of interconnected digital networks that connects billions of servers, computers, and other hardware devices. Internet security is the protection of Internet-related service organizations and users. The World Wide Web, also known as the web, is a platform for sharing information on the Internet, consisting of billions of digital documents accessible through a web browser. Web security is the protection of information on the World Wide Web and web services. Network security involves designing, implementing, operating, and improving networks, as well as identifying and addressing security risks within and between organizations and users.  
Network security encompasses various types of networks within an organization, including local area networks, wide area networks, personal area networks, and wireless networks, including routers, hubs, cabling, telecommunications controllers, key distribution centers, and technical control devices. Cybersecurity also entails protecting Internet-connected systems from potential attacks, including the cloud, hardware or endpoint, and software or applications [21]. Based on the insights from the ISO definitions and scholarly publications, we identified seven critical domains of cybersecurity for organizations, especially local governments. These domains are Internet security, web security, network security, data security, endpoint security, application security, and cloud security. We  
Figure 1: Relationship between information security, cybersecurity, Internet security, network security, and web security, derived from [PERSON] and [PERSON] [24] and BSI [21; 22].  
structured our research and discussion to cover all these cybersecurity domains, which encompass a comprehensive range of cybersecurity aspects.