From private to public, working in local government.
2019-11-08, 15:00–15:25, Blue Day

Why do local governments constantly get compromised? What I've learned after leaving my glamorous pentesting job to join a local municipality.

This is a summary of what I've learned in the last few months after taking a security role at a medium sized (100k+ resident) city. Topics include regular IT Security problems, problems specific to working in the public space, water department SCADA security, along with unique problems like dealing with CJIS and other compliance requirements relating to law enforcement.

From the perspective of someone who has worked for Tech Companies™ and penetration testing boutique shops.