The US has experienced multiple attacks on #critcalinfrastructure, the most recent being our water supply. Local governments MUST know who has remote access, how it's secured, who monitors suspicious activity & how fast vendors respond to an incident. #Vendorrisk is part of #operationalresilience.