ZARZĄDZANIE INCYDENTAMI CYBERBEZPIECZEŃSTWA W JEDNOSTKACH SAMORZĄDU TERYTORIALNEGO
CYBERSECURITY INCIDENT MANAGEMENT IN LOCAL GOVERNMENT UNITS

Summary/Abstract: The aim of this article is to identify key organizational and procedural barriers to cybersecurity incident management in local government units and to synthetically systematize findings derived from available empirical analyses. The study is based on a qualitative secondary analysis of the 2025 report of the Supreme Audit Office, data published by CERT Poland, and selected case studies of ransomware incidents affecting Polish local governments. An exploratory and comparative approach was applied to identify recurring organizational response patterns and systemic weaknesses. The findings indicate a widespread lack of business continuity plans, insufficient backup protection, unclear responsibility allocation, and a low level of information security culture within local governments. The article concludes with practical recommendations focused on implementing a cybersecurity incident management lifecycle and strengthening the digital resilience of local government units.

• Details
• Contents