Cyber Attack Frequency on Water Infrastructure: Security Experts Grilled by Jon Husted

Frequency of Cyber Attacks on Water Systems

• 🎯 Security experts state that attempted cyber attacks on rural water systems occur on a daily basis.
• 💡 An attempted attack can range from simple phishing emails to port scans, not always resulting in a significant impact.
• 📈 Some attacks have been significant enough to require investigation and technical assistance from state and local information centers.

Key Vulnerabilities and Mitigation Strategies

• 🧠 Human error is frequently the leading cause of security breaches, despite training and systems.
• ⚠️ Increased sophistication of phishing campaigns makes it easier for individuals to inadvertently click malicious links.
• ☁️ Migrating systems to a cloud-based solution is generally considered a preferable method for managing security, though not without its own considerations.

Importance of Training and Awareness

• 📚 Water utilities, especially smaller ones, are aware of their vulnerability and the need for cybersecurity expertise and training.
• 🗣️ Developing a culture of awareness and encouraging a moment of thought before acting on emails is crucial to prevent breaches.

Response to Cyber Incidents

• 🆘 In the event of an attack, the first step for utilities is to reach out to a trusted resource, such as their IT group or system memberships.
• 📞 Following this, contacting the state and local information center can help direct them to necessary resources.
• 📝 Every utility, regardless of size, should have a cyber response plan to know exactly what actions to take during an incident.

Reporting and Threat Landscape

• 🇺🇸 CISA is identified as the primary federal agency to inform in case of a breach.
• 🤝 The Water ISAC could play a critical role in connecting utilities to share information about incidents and vulnerabilities nationwide.
• 🌍 Research indicates that most attacks originate from North Korea, Iran, Russia, and China.