Municipal operations and critical infrastructure are considered high-value targets for those looking to disrupt government operations, assert an ideological agenda, or to profit from ransomware. Good cyber practices such as patch management, software modernization, and penetration testing are just a few ways to use proactive controls to manage threats.