Security is one of the most fundamental services that the government provides, but how does the government provide this service for a society that sits on an ever-growing cyber foundation? Through public-private partnerships, information sharing, and public awareness? Are there more innovative ways? Is the role of the City CISO evolving to look beyond the scope of city systems? Should policy inspiration come from policing models, or public health frameworks, or something entirely new? In the age of ransomware, can small cities “go it alone” or should they look to new regional collaboration models? Do larger cities have an obligation to help protect smaller cities?