**4. Study of local government cybersecurity preparedness and concerns**

As a result of our review of the various issues described in previous sections, we chose to conduct a study of one local government region as a test case to see if what we were discovering was as prevalent as it seemed. We conducted a Delphi-expert type of study to investigate the status of local government cybersecurity preparedness and concerns. We collected 18 questionnaires from directors of public agency transportation systems, as well as conducted six Zoom interviews spanning 14 city/county transportation agencies in Riverside and San Bernardino Counties. We also interviewed two consulting companies in the area. A typical intersection management team in the study region consists of 2 to 4 traffic engineers and technicians who manage day-to-day operations for about 100 to 400 traffic signals. Regarding the traffic controller hardware, over 90% of surveyed intersections were found to be using McCain systems. The majority of them use McCain 170 series controllers. For new deployment and upgrade projects, McCain 170 models are usually replaced by the McCain 2070 series which supports McCain and third party application software (e.g., applications mentioned in Section 2.2), and meets ATC 5.2b standards.
