Senator Capito Warns of Cyber Attacks on Water Infrastructure

Cyber Threats to Water Systems

• ⚠️ Cyber attacks on water and wastewater systems are a growing concern, targeting approximately 170,000 utilities across the country.
• 🎯 These attacks are often carried out by entities linked to geopolitical adversaries such as Iran, China, and Russia.
• 🚨 Attacks can range from ransomware compromising data to manipulating operational technology, disrupting water treatment or distribution, and altering chemical levels.

Challenges in Cybersecurity

• 💻 The increasing reliance on digital control technologies for efficiency coincides with rising cyber threats.
• ⚙️ Legacy systems are difficult to maintain and update, and workforce shortages limit in-house expertise.
• 🔑 Basic cybersecurity hygiene is often neglected, with examples like single logins for all employees and failure to change default passwords.

Addressing the Threats

• 🤝 Enhancing system resiliency requires collaboration between utilities, federal agencies, and cybersecurity experts.
• ⚖️ Solutions must be deliberate and tailored to the size and location of utilities, as a one-size-fits-all federal mandate may be burdensome, especially for smaller systems.
• 💡 Innovative solutions are needed to enable utilities to adapt to a constantly evolving technological environment.
• 🛠️ Building and maintaining resilience is an ongoing process, not a one-time event, and should not rely on a single technological fix.

Federal and Local Roles

• 💰 Costly federal requirements can distract from the core mission of providing safe, reliable, and affordable water services.
• 🌐 A balance must be struck between federal agency roles and empowering local utilities to manage their own cybersecurity.
• 📈 The discussion aims to identify how to be better partners with water utilities to address threats and provide a flexible toolkit.