Cyber Risk Management and Compliance Readiness for Large-Scale Smart City Infrastructure

@article{1722199,
      author = {Munir Ahmed Mohammed},
      title = {Cyber Risk Management and Compliance Readiness for Large-Scale Smart City Infrastructure},
      journal = {Iconic Research And Engineering Journals},
      year = {2026},
      volume = {10},
      number = {2},
      pages = {824-835},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1722199.pdf},
      abstract = {Large-scale smart city infrastructure is emerging as a strategic urban asset; however, it also expands the attack surface by interconnecting mobility platforms, utilities, public safety systems, data exchanges, cloud services, operational technology, and artificial intelligence-enabled decision services. Cyber risk management in this context cannot be approached as a periodic audit exercise, as disruptions may simultaneously impact safety, privacy, service continuity, public trust, and regulatory compliance. This review develops a compliance-readiness framework for smart city infrastructure by synthesising recent literature and control guidance published between 2020 and 2025. The study examines cyber risk across assets, data, identities, vendors, operational technology, cloud platforms, incident response, and governance evidence. It contends that readiness depends on the integration of risk registers with technical controls, control ownership, verification evidence, incident rehearsals, and board-level decision-making. The paper presents a structured architecture and an operating cycle intended to guide city authorities, project owners, technology integrators, and critical service operators throughout planning, procurement, commissioning, and operational phases. The review concludes that resilient smart city programmes require risk-based design, zero-trust access, privacy-aware data governance, secure-by-design procurement, continuous monitoring, tested recovery procedures, and measurable compliance evidence. These capabilities are particularly essential for Saudi smart city programmes aligned with digital transformation, national cybersecurity priorities, and Vision 2030.},
      keywords = {Smart City Infrastructure, Cyber Risk Management, Compliance Readiness, Cyber Resilience, Data Governance, Operational Technology, Cloud Security, Saudi Arabia, Vision 2030},
      month = {August},
  }