The Cybersecurity Best Practices for Smart Cities guide has been issued by the UK’s National Cyber Security Centre (NCSC), the Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), the Federal Bureau of Investigation (FBI), the Australian Cyber Security Centre (ACSC), the Canadian Centre for Cyber Security (CCCS), and the New Zealand National Cyber Security Centre (NCSC-NZ).
The guidance document talks about " an expanded and interconnected attack surface, risks from the supply chain and vulnerabilities that can be introduced by automating infrastructure operations."
The guidance notes: “New technology should be deliberately and carefully integrated into legacy infrastructure designs. Communities should ensure any ‘smart’ or connected features they are planning to include in new infrastructure are secure by design and incorporate secure connectivity with any remaining legacy systems.”
Please see the summary article here.