OIG Report Identifies Security Flaws in Water Systems

The issues described in the EPA OIG report are as much cultural as they are technical, John Terrill tells Claroty Nexus. The report highlights security gaps in water and wastewater utilities that could lead to disrupted service or cause irreparable damage to drinking water infrastructure.

Why are these gaps present? Terrill calls our poor cyber hygiene practices that should have been fixed in the 90s but we see prevalent throughout industries today.

“I’m well aware that poor practices like that are still in place in many organizations, but the water infrastructure operators have lacked organizational oversight for some time. I suspect the EPA’s focus has been on water quality levels and not on the efficacy or modernization of the operators.”

Read more about the report here.