https://www.americancityandcounty.com/wp-content/themes/acc_child/assets/images/logo/footer-logo.png
  • Home
  • Co-op Solutions
  • Hybrid Work
  • Commentaries
  • News
  • In-Depth
  • Multimedia
    • Back
    • Podcast
    • Latest videos
    • Product Guides
  • Resources & Events
    • Back
    • Resources
    • Webinars
    • White Papers
    • IWCE 2022
    • How to Contribute
    • Municipal Cost Index – Archive
    • Equipment Watch Page
    • American City & County Awards
  • About Us
    • Back
    • About Us
    • Contact Us
    • Advertise
    • Cookie Policy
    • Privacy Statement
    • Terms of Service
American City and County
  • NEWSLETTER
  • Home
  • Co-op Solutions
  • Hybrid Work
  • Commentaries
  • News
  • In-Depth
  • Multimedia
    • Back
    • Podcasts
    • Latest videos
    • Product Guides
  • Resources/Events
    • Back
    • Webinars
    • White Papers/eBooks
    • IWCE 2022
    • How to Contribute
    • American City & County Awards
    • Municipal Cost Index
    • Equipment Watch Page
  • About Us
    • Back
    • About Us
    • Contact Us
    • Advertise
    • Cookie Policy
    • Privacy Stament
    • Terms of Service
  • newsletter
  • Administration
  • Economy & Finance
  • Procurement
  • Public Safety
  • Public Works & Utilities
  • Smart Cities & Technology
  • Magazine
acc.com

Commentaries


Photo by El Sun from Pixabay

Commentary

Why water utilities must invest in cybersecurity

Why water utilities must invest in cybersecurity

  • Written by Kristen Sanders
  • 5th May 2021

In Albuquerque, N.M., arid conditions and frequent droughts make water a precious commodity that must be carefully managed. Aggressive conservation programs, water recycling and storage of excess water underground (safe from evaporation) are just some of the methods we employ to safeguard the water supply for our 650,000 users. Recently, safeguarding has taken on new meaning for utilities such as ours, as cybercriminals have made water suppliers targets for attack.

Everyone in the water industry fears a repeat of what happened in Oldsmar, Fla., last February, when hackers took advantage of a remote-access system that was beyond the local water utility’s security perimeter. The intrusion only lasted between three and five minutes, according to the Tampa Bay Times. But that was time enough for the hackers to increase the levels of sodium hydroxide (lye) being fed into the water system as a corrosion inhibitor from 100 parts per million to 11,100 parts per million. If not for the operator who saw the change and quickly corrected it, it could have been a disaster.

The harsh reality is that too many water utilities are stuck with antiquated systems and limited visibility into what’s happening in their operational technology (OT) environments. Historically, OT environments and IT environments were completely separated (air-gapped). We are now able to leverage smart sensors to help detect leaks and save manpower. This technology allows water utilities to become proactive as opposed to reactive. However, this also means the convergence of IT and OT environments. Often, equipment within OT environments was never designed with the intent of one day communicating with IT networks. This opens a whole new world of vulnerabilities that must be addressed, and air-gapping is no longer an adequate fail-safe response.

Fortunately, the Water Authority is not afraid of innovation, and we’re taking advantage of remarkable new technology that offers solutions to the challenges of OT/IT convergence and the security risks that arise when these worlds come together.

Deploying this technology was not an overnight process, and we didn’t fully recognize the need for it until our IT and OT teams began collaborating more on system integration. This led to the realization that our end-of-life network equipment was not up to the task—and that our IT staff lacked an in-depth understanding of the operational environment. Cisco technology opened a window for us into that environment, allowing us to safely leverage the benefits of IoT sensors to monitor a vast array of operational metrics: equipment efficiency, water conditions and even the presence of system leaks. This emerged from our participation in Cisco’s County Digital Acceleration program, which included the stand-up of a network refresh with the help of Cisco Customer Experience (CX), and added solutions like Cisco Cyber Vision, an asset inventory and threat detection tool for industrial control systems that gives both IT and OT teams intuitive and clear visibility into all that’s happening. Besides making the utility more efficient, these improvements mean that we can see and respond to anomalies in real time.

You can’t protect what you don’t know about, and you can’t detect anomalous behavior if you don’t know what’s “normal.” Visibility is key to detecting malicious activity before operations are negatively impacted. A common problem with cyberattacks is that security teams simply don’t know they’re happening, leaving hackers free to steal information or disrupt operations for days, weeks or months.

With solutions like these in place, utilities can become hard targets for cybercriminals. The incident in Oldsmar brought important awareness to the weaknesses in utility IT and OT systems that hackers are eager to exploit.

A recent report from the FBI revealed a 69 percent increase in cybercrime complaints from 2019 to 2020, noting that most cybercriminals had access to networks for several weeks or even months before they were discovered. Given these recent events and threats trending higher, utility companies must become more vigilant in securing their operations—which starts with investing in a security strategy that enables visibility for early threat detection.

It can be challenging for any utility company to justify network upgrades or enhanced security, especially when post-pandemic budgets are tight and revenue is down. Given all that’s at stake, though, there is no better expenditure than taking steps now to secure essential utility services for the public.

Kristen Sanders is the chief information security officer at the Albuquerque Bernalillo County Water Utility Authority.

 

Tags: homepage-featured-1 homepage-featured-4 Public Works & Utilities Commentaries Commentaries Public Works & Utilities Smart Cities & Technology Commentary

Most Recent


  • New York mayor announces city-wide curbside composting program, impacting 8.5 million residents by 2024
    On the heels of a successful 3-month-long pilot program in Queens, New York City has announced the largest curbside composting program in the United States. The initiative will begin following a winter-long hiatus of the Queens pilot, which is set to return permanently March 27. Curbside service to Brooklyn will begin Oct. 2, followed by the […]
  • Phoenix
    Federal funds help fast-growing Arizona city address several infrastructure challenges and needs
    Joe Giudice, public works director for the city of Phoenix, says the influx of new residents is driving a lot of construction in his community. “Phoenix is the fifth largest city in the United States. It is one of the fastest growing cities in a fast-growing region, which influences infrastructure product and service demand. This […]
  • ARPA funds
    Spending American Rescue Plan Act funds: A primer for municipalities
    The American Rescue Plan Act (ARPA) of 2021 is a $1.9 trillion legislative package that includes funding for states, local governments and tribal nations to respond to the economic and public health impacts of the COVID-19 pandemic. While initially restricted, subsequent guidance from the federal government has expanded what those funds can be used for. […]
  • landslides
    Managing landslides along road corridors using remote sensing
    Maintaining roads is an optimization problem. Local officials must balance limited and sometimes shrinking budgets with the needs of their communities to have safe and reliable transportation systems. Unfortunately, the importance of a particular maintenance issue is often judged based on anecdotal information and complaints from the public rather than hard data. This approach is […]

Leave a comment Cancel reply

-or-

Log in with your American City and County account

Alternatively, post a comment by completing the form below:

Your email address will not be published. Required fields are marked *

Related Content

  • NLC releases State of Cities 2021 report
  • How local governments can get ahead of the infrastructure wave: Strategies to mitigate risk
  • Prioritizing rapid restore leads to stronger ransomware attack recovery
  • Ultrafast electric vehicle charging will propel local governments into the future

WHITE PAPERS


Modernizing government services for today’s resident expectations

24th January 2023

Preparing Your Community Now for the Next Generation of Older Adults

18th October 2022

Helping Government Fleets Achieve Their Goals

30th September 2022
view all

Webinars


How To: Evaluate Digital Government Service Delivery Technologies

23rd January 2023

Using Technology to Enhance Communications

29th November 2022

Learn the benefits of transforming and automating your Contract Management process

4th November 2022
view all

Podcast


Young Leaders Episode 4 – Cyril Jefferson – City Councilman, High Point, North Carolina

13th October 2020

Young Leaders Episode 3 – Shannon Hardin – City Council President, Columbus, Ohio

27th July 2020

Young Leaders Episode 2 – Christian Williams – Development Services Planner, Goodyear, Ariz.

1st July 2020
view all

GALLERIES


Report: While remote work is causing offices to empty out, walkable cities are still in high demand

26th January 2023

10 American cities with a great downtown

24th January 2023

Miami leads the way in FT-Nikkei ranking of best U.S. cities for foreign companies

20th January 2023
view all

Twitter


AmerCityCounty

New York mayor announces city-wide curbside composting program, impacting 8.5 million residents by 2024 dlvr.it/ShhRk1

30th January 2023
AmerCityCounty

Federal funds help fast-growing Arizona city address several infrastructure challenges and needs dlvr.it/ShhBtf

30th January 2023
AmerCityCounty

How 5G is making cities safer, smarter, and more efficient dlvr.it/ShYNcx

27th January 2023
AmerCityCounty

Shifting city demographics present an opportunity to build coalitions, address inequality dlvr.it/ShYMMm

27th January 2023
AmerCityCounty

Spending American Rescue Plan Act funds: A primer for municipalities dlvr.it/ShXzvl

27th January 2023
AmerCityCounty

Report: While remote work is causing offices to empty out, walkable cities are still in high demand dlvr.it/ShVhBW

26th January 2023
AmerCityCounty

Managing landslides along road corridors using remote sensing dlvr.it/ShTpL6

26th January 2023
AmerCityCounty

Report: Prioritizing neighborhood infill, expanding transit options increases neighborhood resilience dlvr.it/ShRrFM

25th January 2023

Newsletters

Sign up for American City & County’s newsletters to receive regular news and information updates about local governments.

Resale Insights Dashboard

The Resale Insights Dashboard provides model-level data for the entire used equipment market to help you save time and money.

Municipal Cost Index

Updated monthly since 1978, our exclusive Municipal Cost Index shows the effects of inflation on the cost of providing municipal services

Media Kit and Advertising

Want to reach our digital audience? Learn more here.

DISCOVER MORE FROM INFORMA TECH

  • IWCE’s Urgent Communications
  • IWCE Expo

WORKING WITH US

  • About Us
  • Contact Us

FOLLOW American City and County ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookie Policy
  • Terms
Copyright © 2023 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.