Securing the foundation: the critical role of network security in smart city implementations

 Corresponding author: Sharanya Vasudev Prasad. Copyright © 2025 Author(s) retain the copyright of this article. This article is published under the terms of the Creative Commons Attribution Liscense 4.0. Securing the foundation: the critical role of network security in smart city implementations Sharanya Vasudev Prasad * University of Maryland, USA. Global Journal of Engineering and Technology Advances, 2025, 23(01), 069-076 Publication history: Received on 03 March 2025; revised on 14 April 2025; accepted on 16 April 2025 Article DOI: https://doi.org/10.30574/gjeta.2025.23.1.0086 Abstract This article examines the critical role of network security in successful smart city implementations, highlighting how secure networking practices create the essential foundation for urban innovation. As municipalities worldwide embrace smart city technologies to optimize urban services and enhance quality of life, they simultaneously introduce complex cybersecurity challenges through the integration of formerly isolated systems into interconnected networks. The article explores multiple dimensions of smart city security, including the expanding attack surface created by distributed IoT networks, the application of zero-trust architecture principles to protect critical infrastructure, and the importance of real-time monitoring and anomaly detection. Additional areas of focus include encryption and authentication mechanisms for securing communications, standardization approaches that enable consistent security frameworks across heterogeneous systems, and the transformative benefits that become possible when robust security measures are implemented from the design phase. Through case studies and expert analysis, the article provides a comprehensive framework for municipalities to develop smart city initiatives that deliver innovation while maintaining appropriate protection for critical urban systems and citizen data. Keywords: Zero-Trust Architecture; IoT Security; Smart Infrastructure; Cybersecurity Standardization; Urban Digital Transformation 1. Introduction In the race to build more efficient urban environments, municipalities worldwide are embracing the smart city paradigm—a complex ecosystem where Internet of Things (IoT) devices, data analytics, and automation converge to enhance urban living. The global smart city movement continues to accelerate as urban centers seek solutions to manage resources more efficiently and sustainably. According to security researchers, this digital transformation introduces significant vulnerabilities alongside its benefits, creating urgent cybersecurity challenges for municipal leaders [1]. The integration of formerly isolated systems into interconnected networks fundamentally changes the risk landscape for critical urban infrastructure. Barcelona represents a leading example of smart city implementation with tangible results. The city installed 10,000 energy-efficient LED streetlights that reduce consumption while functioning as nodes in a larger sensor network. These smart lighting systems incorporate motion detection to maximize energy savings and collect valuable urban planning data. Barcelona's commitment extends to water management, where sensor-based irrigation systems in public parks have achieved substantial cost reductions. The city's transportation infrastructure similarly leverages networked technologies to optimize traffic flow and reduce congestion [2]. These initiatives demonstrate how integrated technology ecosystems can transform urban service delivery when properly implemented. Global Journal of Engineering and Technology Advances, 2025, 23(01), 069-076 70 However, as cities become more connected, security vulnerabilities increase proportionally. Ahmad et al. identify several critical security challenges in smart city implementations, including insufficient network segmentation that allows attackers to move laterally between systems once they've compromised a single-entry point [1]. Smart city deployments frequently connect previously isolated operational technology with traditional information technology networks, creating new attack vectors that traditional security approaches fail to address. When breaches occur, the consequences extend beyond data loss to potential disruption of essential physical services that residents depend upon daily. This article examines how secure networking practices form the essential foundation upon which successful smart city initiatives must be built. By implementing comprehensive security frameworks from the design phase, cities can protect vulnerable infrastructure while delivering the transformative benefits that smart technologies promise for urban residents. 2. The Expanding Attack Surface of Connected Urban Infrastructure Smart cities represent a massive deployment of networked technology across urban landscapes. From traffic management systems and public transportation to waste collection sensors and environmental monitoring stations, these interconnected systems generate and process enormous volumes of data to optimize city operations. According to NIST's IoT device cybersecurity guidance, the integration of diverse technologies without standardized security requirements creates significant risks across the connected ecosystem [3]. This interoperability challenge is particularly acute in municipal environments where systems from multiple vendors and generations must function cohesively. Table 1 Smart City Security Challenges and Vulnerabilities [3, 4] Security Challenge Description Impact Mitigation Approach Expanded Attack Surface Each connected endpoint becomes a potential entry point Increases overall vulnerability footprint Zero-trust architecture implementation Interoperability Issues Integration of diverse technologies without standardized security Creates significant risks across the connected ecosystem NIST device capability baselines Visibility Gap 72% of municipalities lack comprehensive visibility into connected assets Unpatched and unmonitored devices Asset inventory and monitoring systems Lateral Movement Risk Attackers can pivot from noncritical to critical systems Breaches can cascade across interconnected systems Network segmentation and microsegmentation Traditional Security Inadequacy Perimeter-based approaches fail in distributed environments Insufficient protection for distributed assets Holistic security approach focusing on interconnections Functionality Over Security Smart city deployments prioritize features over protection Persistent security weaknesses across an urban landscape Security-by-design principles However, this interconnectivity creates a significantly expanded attack surface. Each connected endpoint—whether a humble parking meter or a sophisticated traffic control system—becomes a potential entry point for malicious actors. The distributed nature of these systems makes traditional perimeter-based security approaches inadequate. Research from Tenable reveals that smart city deployments often prioritize functionality over security, with 72% of surveyed municipalities acknowledging they lack comprehensive visibility into their connected assets [4]. This visibility gap allows vulnerable devices to remain unpatched and unmonitored, creating persistent security weaknesses across the urban landscape. A breach in what might seem like a non-critical system could potentially provide attackers with a foothold to pivot toward more sensitive infrastructure. For instance, compromised street lighting systems could potentially serve as a gateway to traffic management networks, which in turn might interface with emergency services systems. Bedi documents several case studies where attackers exploited lateral movement opportunities between connected Global Journal of Engineering and Technology Advances, 2025, 23(01), 069-076 71 municipal systems with varying security postures [4]. The NIST cybersecurity framework emphasizes the importance of implementing device capability baselines that address both direct threats and the potential for compromised devices to affect other systems in the network [3]. This holistic approach recognizes that smart city security must consider not just individual component vulnerabilities but the complex interconnections between seemingly disparate systems. 3. Zero-Trust Architecture: Segmenting Smart City Infrastructure To mitigate these risks, leading smart city implementations are adopting zero-trust security principles. This approach operates on the premise that no device or user should be trusted by default, regardless of whether they are inside or outside the network perimeter. CISA's Zero Trust Maturity Model provides a roadmap for critical infrastructure protection that is particularly relevant to smart city environments, where traditional network boundaries have become increasingly porous [5]. The model outlines progressive implementation stages across five key pillars: identity, devices, networks, applications, and data—all of which must be secured in the complex ecosystem of interconnected urban systems. In practice, implementing zero-trust architecture in smart city contexts means embracing several core principles. Microsegmentation represents the foundational element, where critical infrastructure components such as power grids, water systems, and emergency services networks are isolated from less critical systems through robust network segmentation. This approach aligns with CISA's network pillar, which emphasizes the importance of containment strategies to prevent lateral movement by threat actors [5]. By creating security zones with strict access controls between them, municipalities can prevent compromise in one system from cascading across the entire smart city infrastructure. Continuous verification forms another essential component of the zero-trust model. Authentication and authorization are required at every access point, with verification taking place continuously rather than only at the initial connection. According to Morris, this dynamic approach to identity verification has become increasingly critical in IoT-heavy environments where device identities must be rigorously authenticated and continuously monitored throughout their lifecycle [6]. The implementation of strong Multi-Factor Authentication (MFA) mechanisms adds a layer of security by requiring multiple verification methods before granting access to sensitive systems. Table 2 Zero-Trust Architecture Components for Smart City Implementation [5, 6] Zero-Trust Principle Description Application in Smart Cities Security Benefit Trust No One By Default No device or user is trusted regardless of location Applied to all connected devices and users in urban infrastructure Reduces attack surface from both external and internal threats Microsegmentation Isolation of critical infrastructure components through network segmentation Separating power grids, water systems, and emergency services from less critical systems Prevents compromise from cascading across infrastructure Continuous Verification Authentication and authorization at every access point Continuous monitoring of device identities throughout lifecycle in IoT-heavy environments Detects compromised credentials and insider threats Least Privilege Access Minimum permissions necessary for function Dynamic, context-aware access controls for all devices and users Reduces potential damage from compromised accounts or devices Assume-Breach Mentality Security systems designed assuming breaches will occur Comprehensive logging, monitoring, and response capabilities Enables rapid containment of lateral movement The principle of least privilege access ensures every device and user operates with the minimum permissions necessary to perform their functions. This granular approach to authorization significantly reduces the potential damage from compromised accounts or devices. Morris emphasizes that in a zero-trust framework, access controls must be dynamic Global Journal of Engineering and Technology Advances, 2025, 23(01), 069-076 72 and context-aware, adjusting privileges based on factors like device health, user behavior patterns, and threat intelligence [6]. Finally, zero-trust architectures incorporate an assume-breach mentality, where security systems are designed with the assumption that breaches will occur. This focus on containing lateral movement and limiting the impact of compromises aligns with CISA's guidance on enhancing visibility through comprehensive logging, monitoring, and response capabilities [5]. By implementing these complementary security principles, municipalities can create layered defenses that protect critical urban systems even when individual security controls fail. 4. Real-Time Monitoring and Anomaly Detection The dynamic nature of smart city networks requires equally dynamic security monitoring. Advanced monitoring systems that leverage machine learning can establish behavioral baselines for network traffic and identify anomalies that might indicate compromised endpoints or attack attempts. According to Palo Alto Networks' research on AI in cybersecurity, machine learning-based threat detection offers significant advantages in smart city contexts by analyzing patterns and behaviors rather than relying solely on known signatures [7]. This approach enables security teams to identify sophisticated attacks that might otherwise evade traditional detection methods. These systems must process vast amounts of telemetry data from disparate sources, correlating events to distinguish between normal variations in network behavior and genuine security incidents. Modern AI-powered security systems use techniques like supervised and unsupervised learning to establish behavioral baselines, identify anomalies, and reduce false positives. As Palo Alto Networks reports, these capabilities are particularly valuable in IoT-intensive environments where device behaviors may be complex but generally follow predictable patterns [7]. By learning what constitutes "normal" for each device category, these systems can more accurately identify deviations that warrant investigation. For example, unusual traffic patterns in a network of smart street lights might trigger investigation if they match known attack signatures or deviate significantly from established baselines. A case study from Trigyn Technologies demonstrates how this approach works in practice. In their implementation of a smart city public safety solution, comprehensive monitoring enabled security teams to detect anomalous behavior in connected infrastructure components [8]. The city-wide surveillance system, which encompassed multiple municipal domains including traffic management and public safety, utilized AI-driven anomaly detection to distinguish between routine operational changes and potential security incidents. By applying this layered approach to security monitoring, municipalities can develop more resilient defenses that adapt to evolving threat landscapes while maintaining operational efficiency. Table 3 AI-Powered Anomaly Detection Methods for Smart City Security Monitoring [7, 8] Detection Approach Methodology Data Requirements Application in Smart Cities Key Advantage Machine LearningBased Threat Detection Analysis of patterns and behaviors Network traffic baselines Identifying sophisticated attacks Detects attacks that evade signaturebased methods Supervised Learning Training on labeled datasets Pre-classified normal and abnormal patterns Establishing behavioral baselines High accuracy for known threat patterns Unsupervised Learning Pattern recognition without labeled data Large volumes of normal traffic data Identifying previously unknown anomalies Discovers novel attack patterns Behavioral Baseline Analysis Learning normal device behavior patterns Device-specific telemetry data Category-specific deviation detection Reduces false positives Event Correlation Connecting data from disparate sources Multi-system telemetry data Distinguishing between normal variations and security incidents Contextual awareness Cross-Domain Monitoring Integration of data across municipal systems Traffic, public safety, and infrastructure data Comprehensive security oversight Holistic threat detection Global Journal of Engineering and Technology Advances, 2025, 23(01), 069-076 73 5. Encryption And Authentication: Securing Communications and Control As smart cities often involve remote management of physical infrastructure, robust encryption and authentication mechanisms are essential to prevent unauthorized control of city assets. The consequences of compromised communications in urban systems can be severe, potentially affecting essential services that thousands of residents depend upon daily. The Internet Society's 2018 IoT Security for Policymakers report emphasizes that security should be a fundamental design consideration for connected devices in critical infrastructure, rather than an afterthought [9]. This approach is particularly relevant for smart city deployments, where the scale and interconnectedness of systems amplify the potential impact of security failures. End-to-end encryption forms the foundation of secure smart city communications, ensuring that data transmitted between devices and management systems remains protected from interception or manipulation. This approach protects both the privacy of collected data and the integrity of control commands sent to infrastructure components. The Internet Society recommends that policymakers and implementers ensure encryption is enabled by default for data in transit, with appropriate key management practices to maintain long-term security [9]. Their guidance highlights how encryption serves not only to protect sensitive information but also to preserve the trustworthiness of the entire smart city ecosystem. Certificate-based authentication provides another essential layer of protection, ensuring that devices use strong cryptographic identities rather than simple shared credentials. The Internet Society's recommendations include the use of unique credentials for each device and implementation of mutual authentication between devices and services [9]. These approaches prevent credential theft from compromising multiple systems simultaneously and ensure that devices only communicate with legitimate management platforms. By establishing a trusted identity framework based on cryptographic principles, municipalities can significantly reduce the risk of unauthorized access to critical infrastructure components. Table 4 Encryption and Authentication Methods for Smart City Infrastructure Protection [9, 10] Security Mechanism Function Implementation Recommendation Protection Provided Application Area End-to-End Encryption Protects data transmitted between devices and management systems Enabled by default for all data in transit Prevention of data interception and manipulation All smart city communications Key Management Practices Maintains encryption security over time Appropriate lifecycle management of cryptographic keys Long-term security of encrypted communications Encryption infrastructure CertificateBased Authentication Establishes cryptographic device identities Unique credentials for each device Prevention of credential theft affecting multiple systems Device identity management Mutual Authentication Verifies both parties in a communication Implementation between devices and services Ensures devices only communicate with legitimate platforms Device-to-service communications Multi-Factor Authentication Requires multiple verification methods Particularly for administrative access to control systems Protection against unauthorized access to critical systems Administrative system access Secure Boot Mechanisms Verifies integrity of firmware at startup Implementation across all smart city devices Prevention of compromised code execution Device boot processes Code Signing Cryptographically verifies software integrity Implementation for all software updates Protection against malicious code injection Software update processes Global Journal of Engineering and Technology Advances, 2025, 23(01), 069-076 74 Administrative access to control systems requires particularly stringent protection through multi-factor authentication, especially for systems managing critical infrastructure. The U.S. Department of Energy's Cybersecurity Capability Maturity Model (C2M2) provides a framework for evaluating and improving cybersecurity capabilities in critical infrastructure contexts like smart cities [10]. The model emphasizes robust identity verification across multiple domains, including access control, asset management, and third-party risk management. By implementing graduated security controls aligned with the criticality of different systems, municipalities can focus resources on protecting their most essential infrastructure while maintaining appropriate safeguards across all systems. Secure boot and code signing mechanisms represent the final essential component of smart city communication security, verifying the integrity of firmware and software to prevent the execution of compromised code. The Internet Society emphasizes the importance of "security by design" principles that include secure update mechanisms and the ability to cryptographically verify software integrity [9]. These protective measures ensure that even if attackers gain physical access to devices, they cannot compromise system functionality through malicious code injection. The C2M2 model further reinforces this approach through its focus on configuration and change management practices that maintain system integrity throughout the deployment lifecycle [10]. By implementing these complementary security controls, smart cities can establish a resilient foundation for their increasingly interconnected infrastructure. 6. Standardization and Interoperability: Security Through Common Frameworks The heterogeneous nature of smart city systems—often involving multiple vendors, technologies, and stakeholders— creates additional security challenges. Adopting standardized protocols and open data frameworks can help address these issues by creating a more coherent security approach across disparate systems. NIST's Framework and Roadmap for Smart Grid Interoperability Standards, while primarily focused on energy systems, provides principles directly applicable to broader smart city deployments [11]. This framework, now in its fourth release, presents a model architecture with interfaces clearly defined where interoperability standards are needed, establishing a foundation for secure interconnections between disparate systems. Standardized interfaces and protocols significantly simplify security auditing processes, making them more effective and comprehensive. Proprietary solutions often create "black boxes" that resist thorough security analysis, while standardized approaches enable consistent evaluation methodologies. The NIST framework specifically addresses cybersecurity as one of its eight priority areas, emphasizing how standards-based approaches facilitate more robust security evaluation across complex system boundaries [11]. By implementing consistent interfaces based on welldocumented standards, municipalities can more effectively identify and remediate security vulnerabilities before they can be exploited in operational environments. Common frameworks also enable vital cross-domain security coordination between government agencies, private partners, and security researchers. ENISA's guidance on security for IoT in the context of the Secure Software Development Lifecycle emphasizes how interoperability standards support coordinated security approaches across organizational boundaries [12]. Their recommendations highlight the importance of security information sharing through standardized formats and protocols, enabling rapid dissemination of threat intelligence and vulnerability information. This coordination becomes particularly valuable during security incidents, when consistent communication frameworks can significantly accelerate response efforts and limit potential damage across interconnected city systems. Standardized update mechanisms represent another critical advantage, supporting security updates at scale across diverse device types. ENISA specifically identifies update mechanisms as a key security consideration in IoT deployments, recommending standardized approaches that can be deployed consistently across heterogeneous device populations [12]. Their guidance emphasizes the importance of robust authentication for update servers, secure transport for update packages, and verification mechanisms for firmware integrity. By implementing these standardized security controls for update processes, municipalities can more effectively manage the ongoing security lifecycle of their distributed infrastructure components. Finally, open standards foster broader security innovation by enabling wider participation in security research and more rapid identification of vulnerabilities. The NIST framework highlights how open development processes for interoperability standards lead to more robust and secure implementations [11]. This collaborative approach creates a wider base of security expertise focused on identifying and addressing vulnerabilities in critical infrastructure components. By adopting open standards for their smart city deployments, municipalities can leverage this collective security intelligence rather than depending solely on the security capabilities of individual vendors. This approach Global Journal of Engineering and Technology Advances, 2025, 23(01), 069-076 75 aligns with ENISA's recommendation for security-aware engineering, where security considerations are integrated throughout the development lifecycle rather than added as an afterthought [12]. 7. The Benefits of a Secure Foundation By prioritizing network security, smart cities can safely unlock transformative benefits while minimizing risks. NIST's Smart Cities and Communities Key Performance Indicators Framework provides a structured approach to measuring these outcomes, emphasizing that security is essential for achieving measurable quality-of-life improvements [13]. Their hierarchical KPI (H-KPI) method enables municipalities to assess progress across multiple domains while maintaining appropriate security guardrails to protect critical infrastructure and citizen data. Reduced congestion and improved mobility through intelligent traffic management systems represent one of the most visible benefits of secure smart city implementations. The McKinsey Global Institute estimates that smart mobility applications can reduce commuting times by 15-20% on average, with some cities experiencing even greater improvements [14]. Their research demonstrates how secure, integrated transportation systems that combine traffic flow optimization, intelligent signals, and real-time public transit information can significantly enhance urban mobility. These benefits depend on maintaining the integrity of the underlying communication networks that transmit accurate, timely traffic data while preventing manipulation that could create artificial congestion or safety hazards. Energy efficiency gains via smart grid technologies and automated building management systems offer significant environmental and economic benefits. According to McKinsey's analysis, smart building solutions can reduce energy consumption by 20-30% through optimized heating, cooling, and lighting systems [14]. These technologies depend on secure communication channels between sensors, control systems, and management platforms to maintain both efficiency and reliability. NIST's framework highlights how performance indicators related to energy efficiency must be evaluated alongside corresponding cybersecurity metrics to ensure that optimization doesn't come at the expense of security [13]. This balanced approach recognizes that energy systems represent critical infrastructure requiring robust protection against both physical and cyber threats. Enhanced public safety through coordinated emergency response systems and environmental monitoring delivers critical societal benefits. The McKinsey Global Institute reports that cities implementing comprehensive smart security solutions have achieved crime reductions of 30-40% in target areas [14]. These improvements stem from securely integrated surveillance systems, predictive policing tools, and emergency response coordination platforms that depend on uncompromised data flows. NIST's framework emphasizes how these safety outcomes must be measured alongside privacy and security metrics to ensure responsible implementation [13]. This approach acknowledges the sensitive nature of safety-related data and the importance of maintaining public trust through appropriate security controls. Operational cost reductions resulting from optimized resource allocation and predictive maintenance create significant fiscal benefits for municipal governments. McKinsey estimates that smart city applications can reduce maintenance costs by 10-15% while extending asset lifetimes by 25-35% [14]. These efficiencies depend on secure communication between networked sensors, maintenance scheduling systems, and resource allocation platforms. The accuracy and integrity of monitoring data directly impacts operational decisions, making security essential for realizing these financial benefits. NIST's framework provides specific guidance on measuring these operational improvements while maintaining appropriate security controls for the underlying systems [13]. Improved quality of life for residents through responsive urban services and reduced friction in daily activities represents the ultimate goal of smart city implementations. McKinsey's research indicates that comprehensive smart city solutions can improve overall quality-of-life indicators by 10-30% [14]. These improvements stem from integrated services that reduce waiting times, enhance accessibility, and create more personalized urban experiences. NIST's multidimensional approach to measuring these outcomes emphasizes that security and privacy must be fundamental considerations rather than secondary concerns [13]. By prioritizing secure networking from the foundation, municipalities can deliver these citizen-centric benefits while maintaining the trust necessary for widespread adoption of smart city services. 8. Conclusion As urban populations continue to expand, the imperative for creating more efficient, sustainable, and livable cities grows increasingly urgent. Smart city technologies offer powerful solutions to address these challenges, yet their successful deployment hinges on establishing robust security foundations from the outset. By embedding comprehensive security Global Journal of Engineering and Technology Advances, 2025, 23(01), 069-076 76 practices into the fabric of smart city designs, municipalities can ensure technological innovations genuinely serve citizens' needs while protecting against evolving cyber threats. The holistic security approach detailed throughout this article—incorporating zero-trust architecture, dynamic monitoring systems, robust encryption protocols, standardized frameworks, and security-by-design principles—provides a roadmap for creating smart cities that are not merely connected, but connected securely. This security-first mindset enables cities to confidently pursue digital transformation initiatives that enhance urban mobility, improve energy efficiency, strengthen public safety, reduce operational costs, and elevate overall quality of life for residents, all while maintaining the public trust essential for widespread adoption and continued innovation in smart urban environments. References [1] Faisal Alzyoud et al., "Security Challenges and Solutions in Smart Cities," Research Gate, 2024. [Online]. Available: https://www.researchgate.net/publication/377402349_Security_Challenges_and_Solutions_in_Smart_Cities [2] Mahnoor Inam, "Example of a Smart City: A Case Study into Barcelona," Smart City Journal, Minnovation Technologies, 2024. [Online]. Available: https://minnovation.com.au/smart-cities-2/example-of-a-smart-city-acase-study-into-barcelona/ [3] Michael Fagan et al., "Core Cybersecurity Feature Baseline for Securable IoT Devices: A Starting Point for IoT Device Manufacturers," NIST IR 8259, 2019. [Online]. Available: https://csrc.nist.gov/pubs/ir/8259/ipd [4] R. Bedi, "Putting the S-M-A-R-T in Smart Cities: How to Address the Expanding Attack Surface," Tenable Blog, Jan. 2023. [Online]. Available: https://www.tenable.com/blog/putting-the-s-m-a-r-t-in-smart-cities-how-toaddress-the-expanding-attack-surface [5] CISA, "Zero Trust Maturity Model," Cybersecurity and Infrastructure Security Agency. [Online]. Available: https://www.cisa.gov/zero-trust-maturity-model [6] Thangaraj Petchiappan, "Implementing Zero Trust Security Framework: A Comprehensive Guide," iLink Digital, 2024. [Online]. Available: https://www.ilink-digital.com/insights/blog/implementing-zero-trust-securityframework-a-comprehensive-guide/ [7] Palo Alto Networks, "What Is the Role of AI in Threat Detection?," Palo Alto Networks. [Online]. Available: https://www.paloaltonetworks.com/cyberpedia/ai-in-threat-detection [8] Trigyn Technologies, "Trigyn Insights: Smart Cities Public Safety Solution for Medium-Sized City," Trigyn Technologies, 2024. [Online]. Available: https://www.trigyn.com/insights/case-study-smart-cities-publicsafety-solution-for-medium-sized-city [9] Internet Society, "IoT Security for Policymakers," 2018. [Online]. Available: https://www.internetsociety.org/resources/2018/iot-security-for-policymakers/ [10] C2M2, "Cybersecurity Capability Maturity Model (C2M2),". [Online]. Available: https://c2m2.doe.gov/ [11] Avi Gopstein et al., "NIST Framework and Roadmap for Smart Grid Interoperability Standards, Release 4.0," National Institute of Standards and Technology, NIST Special Publication 1108r4, 2021. [Online]. Available: https://www.nist.gov/publications/nist-framework-and-roadmap-smart-grid-interoperability-standardsrelease-40 [12] ENISA, "Good Practices for Security of IoT - Secure Software Development Lifecycle," European Union Agency for Cybersecurity (ENISA), November 2019. [Online]. Available: https://www.enisa.europa.eu/publications/goodpractices-for-security-of-iot-1 [13] Martin Serrano et al., "Smart Cities and Communities: A Key Performance Indicators Framework," National Institute of Standards and Technology, 2022. [Online]. Available: https://www.nist.gov/publications/smartcities-and-communities-key-performance-indicators-framework [14] Lola Woetzel et al., "Smart cities: Digital solutions for a more livable future," McKinsey Global Institute, 2018. [Online]. Available: https://www.mckinsey.com/capabilities/operations/our-insights/smart-cities-digitalsolutions-for-a-more-livable-future.