Adoption of cybersecurity policies at the grassroots: 2022

Donald F. Norris and Laura K. Mateczun

Journal of Cyber Policy, 2025, vol. 10, issue 1, 13-33

Abstract: In this paper, we examine the adoption of cybersecurity policies by local governments in the United States using data from four local government cybersecurity surveys that were conducted in 2016, 2018, 2020 and 2022. Among other things, we asked whether local governments had adopted formal cybersecurity plans and other policies, purchased cybersecurity insurance, offered or mandated cybersecurity training for staff, officials and on-site contractors, or taken one or more of seven specific actions to improve their cybersecurity, adopted one or more of three cybersecurity agreements with other organisations, applied for and/or had received external funding to improve their cybersecurity from the American Rescue Plan Act (ARPA) and/or the Infrastructure Investment and Jobs Act (IIJA) and last, we asked what the biggest challenges in cybersecurity that these governments believed that they faced. Our most significant finding is that local governments have not done an adequate job in adopting cybersecurity policies. Likewise, these governments lagged in taking specific actions to improve their cybersecurity. A few governments have entered into agreements with other entities to assist them in improving their cybersecurity or recovering from breaches. Finally, we made recommendations to help local governments improve their cybersecurity.

Date: 2025
References: Add references at CitEc
Citations:

Downloads: (external link)
http://hdl.handle.net/10.1080/23738871.2025.2512459 (text/html)
Access to full text is restricted to subscribers.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:taf:rcybxx:v:10:y:2025:i:1:p:13-33

Ordering information: This journal article can be ordered from
http://www.tandfonline.com/pricing/journal/rcyb20

DOI: 10.1080/23738871.2025.2512459

Access Statistics for this article

Journal of Cyber Policy is currently edited by Emily Taylor

More articles in Journal of Cyber Policy from Taylor & Francis Journals
Bibliographic data for series maintained by Chris Longhurst ().