How local water systems stop cyberattacks
The safety of our water is in the hands of our water suppliers. Because water systems are targets for cyberattacks, these companies need to put in extra work to keep the water safe.
The Mahoning Valley Sanitary District has the IT department overlooking the system to make sure it's safe from potential attackers. The company also has a third party firm monitoring their system at all times. Aqua Ohio also makes sure their employees are watching the systems closely.
A statement from the Aqua Ohio IT Department said:
"Aqua is vigilant in protecting our water systems and keeping them safe and secure. We employ a multilayered approach to cybersecurity that includes tools such as continual risk assessment, technology, and robust protocols and procedures to prevent unauthorized access to our systems. A key component of our efforts is ongoing education for our employees to heighten their awareness of potential threats. Our operations and information technology teams work collaboratively to protect our water systems. As we continue to build and improve our security program, we follow recommendations and guidance from CISA and industry organizations such as the American Water Works Association (AWWA) and WaterISAC."
Matthew DeMaria, Program Coordinator for cybersecurity programs at Penn State Shenango said because there are so many moving parts to water systems, potential attackers will look for a weakness.
"With the water situations and a lot of our public infrastructure, a lot of the systems are old. They've been around for a long time, and they're managed locally. So, there's a lot of little pieces that need to be managed or controlled," said DeMaria.
One water agency being breached can put thousands of people at risk.
"You're no longer drinking purified water. If the original water source is tampered with or breached, then impurities can get into that water," said Robert Gilliland, Cybersecurity professor at YSU.
DeMaria said this is an example of a disruptive attack, meaning the goal is usually to cause damage and coverage.
