In today's ever-evolving cyber landscape, safeguarding information and proactively addressing potential threats to a municipality and the community it serves are top priorities. Over the last two years, attackers were quick to adapt to and exploit new technology and WFH requirements, targeting relief programs and disrupting payment flows. Moreover, threat actors have increasingly abused inherent trust in system connectivity, privilege, and access, and identity continues to be a sought-after commodity.