Smart cities increasingly depend upon interconnected digital and cyber-physical infrastructure to deliver essential urban services, including mobility, surveillance, emergency response, utilities, healthcare, environmental monitoring, and citizen-centric governance. The convergence of Internet of Things (IoT) devices, Integrated Command and Control Centres (ICCCs), cloud and edge computing, artificial intelligence, communication networks, mobile applications and large-scale data platforms has improved administrative responsiveness while simultaneously expanding the cyber-attack surface. Because these technologies are highly interconnected, compromise of a single identity, endpoint, application, device, or third-party connection may potentially propagate across services and affect data confidentiality, operational continuity, public safety, and citizen trust. This chapter examines smart-city cybersecurity from an integrated governance, architecture, and cyber-resilience perspective. Drawing on contemporary research, national cybersecurity guidance, and practitioner-oriented analysis, it identifies major risks associated with heterogeneous infrastructure, privileged access, IoT devices, applications and APIs, supply-chain dependencies, legacy systems, fragmented ownership, and insufficient security monitoring. The chapter proposes a Smart City Cyber-Resilience Framework (SCCRF) organised around eight mutually reinforcing functions: Govern, Identify, Protect, Monitor, Detect, Respond, Recover and Improve. The model adapts established cybersecurity lifecycle principles to the operational realities of smart cities by explicitly integrating continuous monitoring, coordinated incident response, digital forensics, trusted recovery, and institutional learning. It further maps these functions across people, process and technology while incorporating; Zero Trust, Defence-in-depth, Secure-by-Design, Privacy-by-Design, Least Privilege, and Assume-Breach principles. The chapter argues that cybersecurity in smart cities should not be evaluated solely by the ability to prevent intrusions. Its ultimate measure should be the capacity to maintain or rapidly restore essential urban services despite cyber incidents. SCCRF therefore provides policymakers, city administrators, and cybersecurity practitioners with practical governance and operational models for developing secure, resilient, and trustworthy urban digital ecosystems.