The connected city has arrived, as municipal leaders around the globe invest in new technologies to optimize existing services and improve citizen experiences. But these new interconnected systems create new security and privacy challenges. This report and the Forrester emerging technology risk management (ETRM) model reviews the security implications of smart cities and offers guidance on how security and risk (S&R) pros should address and overcome these security and privacy challenges.