# Government OT cybersecurity

> Public works, transit and facility control systems run on budgets that did not anticipate a nation-state adversary. We make defensible posture achievable on a municipal timeline.

Canonical: https://blackbirdcyber.com/sectors/government  
Blackbird Cyber · https://blackbirdcyber.com/ · sales@blackbirdcyber.com

## The exposure — Many small systems, one adversary.

Building automation, traffic control, transit signaling and public works SCADA are often maintained by a single integrator with standing remote access. The blast radius is a city.

Regulations and guidance: CISA CPG, NIST CSF, State CIP.

- Integrator remote access is the most common path in
- Asset inventories rarely exist below the IT boundary
- Grant-funded upgrades need a security scope written in

## Typical topology

A representative control network for government operators, by Purdue level:

- L3.5 · DMZ: Jump host
- L2 · HMI: Ops center HMI
- L2 · SCADA: Facility SCADA
- L2 · Historian: Trend historian
- L1 · PLC: BAS controllers
- L1 · RTU: Traffic / signal RTU
- L1 · Safety: Life-safety
- L0 · Process: Pumps · HVAC · signals · gates

Exposed path: vendor VPN → L2 · Historian (Trend historian).

## Where we start — Recommended engagements for government operators.

- [OT Cyber Consulting](https://blackbirdcyber.com/capabilities/ot-cyber-consulting): Fractional OT security leadership for operators without a full-time ICS team.
- [OT Cyber Program Review](https://blackbirdcyber.com/capabilities/ot-cyber-program-review): An independent review of your OT security program against the standards your regulators cite.