In-brief: Cities and state governments often lack the expertise in cyber security that could help them properly assess the risks of smart city projects, including so-called “cyber physical” risks. (Editor’s note: updated with comments from Chris Rezendes of INEX.)