Smart cities have a cybersecurity problem. The operational personnel do not have the time to become cybersecurity experts on their own, but they need to be sure that their organization has an appropriate plan for managing cyber threats. Many smart city projects get too caught up in the implementation of new technologies without a sufficient focus on cybersecurity. A city CIO may become a hero by implementing a big new deployment of smart city technology, but a single ransomware attack could bring all that new technology to a grinding halt. Building a good cybersecurity program is a necessary first step. This session will discuss what it takes to build a good cybersecurity program and key considerations for managing IT/OT convergence.