Blog Post  Cybersecurity Tips to Help Public Entities Stay Secure

Cybersecurity threats continue to evolve, creating new challenges for public entities responsible for protecting critical systems, sensitive information, and the services their communities rely on. 

In a recent episode of the WOSD: News Procurement Insights podcast, host Layla Palmer spoke with Mass Cyber Center Director John Petrozzelli and OSD Senior Category Manager Joshua Flanagan-Lanier about today’s cybersecurity landscape, practical steps public entities may take to strengthen their defenses, and Statewide Contract resources available to eligible buyers. 

For public entities, protecting user identities is particularly important. If attackers obtain an employee’s credentials, especially credentials with elevated privileges, they may be able to move deeper into an organization’s systems. “For public entities, that identity piece is so critical,” Petrozzelli emphasized. “Organizations should be able to lock down the identities of their employees, limiting credential access based on job responsibilities.” Furthermore, he recommends using tools such as endpoint detection and response and zero-trust technologies as part of a layered cybersecurity strategy to protect against evolving threats. 

Public entities may use Statewide Contracts to implement cybersecurity. Joshua Flanagan-Lanier highlighted Statewide Contract  ITS78: Data, Cybersecurity, and Related Audit, Compliance, and Incident Response Services, which provides access to services including cybersecurity audits, third-party risk assessments, testing and readiness, and incident response. These resources may help organizations understand existing gaps in their technology environments, assess cybersecurity risks, test preparedness against threats, and respond to suspected incidents. 

Explore Cybersecurity Tips from MassCyberCenter: Helping Agencies Stay Secure Cybersecurity Tips to help the Public Sector Stay Secure on the OSD YouTube Channel for more cybersecurity tips tips from the Mass Cyber Center and additional information about Statewide Contract resources available to public buyers.