How secure are the digital systems controlling our water, transportation, traffic, and other essential public services?
In this episode of TechDaily.ai, David and Sophia examine findings from the 2026 State of Cybersecurity in Critical Infrastructure survey, focusing on state and local governments and the growing gap between cybersecurity confidence and operational reality.
While 87% of surveyed organizations report having documented security policies and 80% rate their cyber recovery capabilities as good or excellent, another finding raises a serious concern: 40% report having only partial visibility into their public-facing digital assets.
The conversation explores why compliance alone doesn’t equal cybersecurity readiness—and why legacy operational technology (OT), modern IT systems, IoT devices, and decades-old infrastructure can create dangerous blind spots.
You’ll hear about:
• The difference between cybersecurity compliance and operational maturity
• Why IT and OT convergence creates new security challenges
• How legacy infrastructure becomes exposed as physical systems connect to modern networks
• Why tabletop exercises may not accurately demonstrate recovery capabilities
• How threat actors can target gaps between IT and OT environments
• What “validated readiness” means for critical infrastructure cybersecurity
• Why operational resilience assumes breaches can happen and prepares systems to keep functioning
• How minimum viable operations can protect essential services during an attack
• Why live testing, asset visibility, and cross-department coordination matter
The episode also examines a fundamental change in cybersecurity strategy: instead of relying entirely on perimeter defense, governments may need infrastructure designed to maintain essential physical operations even when digital systems are compromised.
When traffic lights, water systems, transportation networks, and other public services depend on increasingly connected technology, knowing what exists across the entire environment becomes essential to protecting it.
Tune in for a deeper look at cybersecurity, operational resilience, IT/OT security, and the challenge of protecting the critical infrastructure communities depend on every day.
