AWWA Guidance Helps Water Utilities Guard Against Cyber Attacks

With cyber-attacks a growing threat to critical infrastructure systems, the American Water Works Assn. (AWWA) announced the release of expert guidance on how water utilities can reduce their cyber vulnerabilities.

The guidance was prepared to provide water utility managers with a concise set of best practices and standards. It puts forth a transparent and repeatable process for evaluating a utility’s process control system. In order to provide the widest benefit, the guidance and tool are free and publicly available.

Cyber security is the top threat facing business and critical infrastructure in the U. S., according to reports and testimony from the National Intelligence Agency, the Federal Bureau of Investigation and the Department of Homeland Security. On Feb. 12, 2013, President Obama issued Executive Order 13636 - Improving Critical Infrastructure Cybersecurity, which directed the National Institute of Standards and Technology to work with stakeholders to develop a voluntary framework for reducing cyber risks. AWWA’s new guidance, Process Control System Security Guidance for the Water Sector, is a product of that effort.

Supporting the guidance is the Cybersecurity Use-Case Tool, which offers an efficient approach to evaluating the security of cyber systems and networks of water utilities. Both the tool and guidance were prepared with leadership from AWWA’s Water Utility Council.

Additional background and a demonstration of the use-case tool will be the focus of a webinar, An Action Plan for Process Control System Security, on Feb. 26, 2014.

Source: American Water Works Assn.