Public bodies delivering citizen services and holding large volumes of personal data under public scrutiny.
Common risks include: Legacy systems and integrations with limited security maintenance; Large citizen datasets attractive to a wide range of threat actors; Fragmented ownership of security across departments and vendors; Public accountability when incidents occur.