Calm guidance from someone who's been in the room.
HackFirstAid Municipal is built and maintained by Travis Barlow — 25+ years of incident response across the public sector, founder of AtlSecCon, based in Atlantic Canada.
Municipal cyber incidents look different from corporate ones. Council is watching. Residents are calling. The local paper has the story before your IR firm has parsed the first log. The wrong word in a public statement at 9am will be quoted at every meeting for the next year.
HackFirstAid Municipal exists because the corporate playbooks I've used for decades don't quite fit a town clerk or a CAO on a Monday morning. The vocabulary is wrong, the procurement constraints are wrong, and the time pressure is different — most municipalities have one IT person, sometimes contracted, and no security team.
The voice here matches the rest of the HackFirstAid family: plain language, no jargon, no fear marketing. The guidance is opinionated where it should be (call your carrier before hiring anyone; isolate, don't unplug; MS-ISAC is free, use it) and quiet where it should be (your counsel and your insurance lawyer will make the ransom-payment call, not a website).