Participants explored the role of urban critical infrastructures and why their protection is central to municipal cybersecurity strategies. Critical urban infrastructure, including energy, transport, water systems and public services become increasingly digital and interconnected, managing vulnerabilities in these systems can quickly escalate into wider societal crises. Therefore understanding the evolving cyber threat landscape is essential. Instructors explained that risks in urban settings are multifaceted, ranging from human error and insider threats to increasingly sophisticated attacks, as well as technological dependencies and financially or politically motivated activities.
A key focus of the day was the development of cybersecurity action plans based on comprehensive urban cyber risk analysis. Participants examined how structured risk assessments can help to better identify vulnerabilities, prioritise resources and strengthen preparedness. Instructors explained that effective urban cyber risk analysis requires clear baseline criteria, involvement of relevant sectors and stakeholders and regular exercises as well as building situational awareness among authorities. Discussions highlighted the importance of organisational maturing in cybersecurity: moving from unprepared reactive approaches towards more proactive and anticipatory strategies that enable cities to prevent, detect and respond incidents more effectively.
Furthermore, instructors emphasized that cyber resilience depends on people as much as technology. Building a cyber resilient organizational culture requires strengthening cyber and digital literacy across institutions and communities, promoting awareness, training and engagement with citizens and the private sector. Examples from Europe highlighted how cities and authorities can collaborate with startups and technology companies to support digital transformation while maintaining strong cybersecurity standards and keeping citizens’ needs at the centre. These discussions illustrated that resilient urban environments are built together through multi-stakeholder cooperation, innovation and continuous learning.
Participants also explored the importance of multi-agency collaboration and effective public communications in managing cyber crises. As cyber incidents rarely affect a single institution, coordination between municipal authorities, national agencies, private sector operators and communication teams essential. Transparent communication, clearly defined responsibilities and joint preparedness exercises help maintain public trust and ensure that critical services remain operational even during disruptions.
The second day concluded with panel discussion with instructors ahead of the final day’s practical exercise, offering insights on key measures cities can adopt to foster safer and more resilient urban environments. A key takeaway from the discussion was that cyber resilience is not achieved by individual organisations or efforts alone, but through coordinated efforts across the entire urban ecosystem.
Training is organised in cooperation with Intendancy of the Department of Montevideo (Intendencia Departamental de Montevideo), Agency for Electronic Government and Information and Knowledge Society of Uruguay (AGESIC, Agencia de Gobierno Electrónico y Sociedad de la Información y del Conocimiento), National Administration of Telecommunications of Uruguay (ANTEL, Administración Nacional de Telecomunicaciones) and the Delegation of the European Union to Uruguay.
