Local Governments Face Cybersecurity Crisis Amid Funding Gap

Municipalities lack the financial resources to retain cybersecurity specialists, creating a dangerous discrepancy compared to government-level staff despite being responsible for critical infrastructure and sensitive public data.

Unequal Standards in Cybersecurity

Current regulations impose near-identical cybersecurity obligations on local governments and central administration under the National Cybersecurity System Act. This includes protecting ICT systems, managing incidents, and cooperating with CSIRT teams.

However, legislation governing salaries does not provide local government specialists with the same financial support available to their central government counterparts. This has led to the exclusion of local employees from the Cybersecurity Fund, which provides tele-IT bonuses to central staff.

Critical Infrastructure at Risk

Local governments manage essential infrastructure, including water supply, heating, public transport, and sensitive databases containing citizen information. A data breach or systemic failure could cause severe disruption to daily life and public services.

According to recent parliamentary inquiries, municipal IT staff perform identical tasks—such as threat detection and incident response—to those performed by central government personnel who qualify for additional state-funded compensation.

The Talent Drain to the Private Sector

Municipalities are struggling with wage competition from the private sector, often serving only as training grounds before IT professionals move to higher-paying firms. Official salary scales for local government IT staff, typically ranging from categories X to XIII, fall significantly below private sector standards.

While municipalities have some flexibility in setting internal salary regulations, limited municipal budgets make it impossible to bridge the gap compared to private industry, where experts can earn several times more.

Escalating Threats and Legislative Uncertainty

Cybersecurity experts warn that the rise in ransomware attacks against local authorities risks paralyzing administrative services and causing multi-million dollar losses. With the state acting as a system of interconnected elements, vulnerabilities at the local level threaten the entire nation’s security.

Parliamentarians have requested that the Ministry of Digital Affairs prioritize legislative changes to allow Cybersecurity Fund resources to cover bonuses for local IT specialists. The Ministry has yet to provide an official response.