“Smart cities”, now referred to as connected places, are changing how people interact with the built environments. While the redesign of streets to include digital elements may make a city infrastructure more efficient, it may also create new opportunities that puts the urban street environment into the spotlight of cybercrime. In the public spaces owned by Local Authorities (LAs), many of the delivery, operations, management, and maintenance of the smart infrastructure services is outsourced to private operators. The purpose of this research is to explore how LAs in the UK mitigate as well as govern the cyber and resilience risks of the connected place ecosystem. To explore the real-time challenges faced by the LAs, the security specifications in the procurement contracts for smart EV charging services were assessed against the guidance for managing security and resilience risks specified in the connected place principles rolled out by National Cyber Security Centre (NCSC). The initial observations indicate that the UK Government understands the urgent requirements to protect the smart infrastructure services, however, there needs to be improvements in operational governance, accountability, and assurance within the commissioning process to manage systemic risks of the connected ecosystem.