Meeting Federal AWIA Resilience Mandates
Federal law required community water systems to develop or update comprehensive risk assessments and emergency response plans by 2020. The district needed to assess its entire system's overall resilience against malevolent acts and natural disasters while prioritizing policies to mitigate identified vulnerabilities.
Integrating 100 Specialized Cybersecurity Controls
Working collaboratively with staff, our team performed a detailed cybersecurity analysis of operational technology use cases and critical assets. This bridged the gap between system data and action by recommending 100 specific cyber controls to mitigate risk. The solution involved reviewing corporate guidelines, disaster recovery policies, and security awareness training from the perspective of an Information Security Officer. These efforts were incorporated into an overall Risk and Resilience Plan that used AWWA standards like J100 and G430 to frame risky assets. By evaluating capital and operational needs alongside resilience factors, the team identified opportunities for third-party funding and prioritized infrastructure improvements. This integrated approach ensures that the district's cybersecurity posture is strengthened against a wide array of scenarios, including site contamination, facility break-ins, and data breaches.
Improved Cybersecurity Posture and AWIA Compliance
The district achieved compliance with federal standards and significantly increased its system resiliency. The 100 recommended cyber controls provide a clear path for ongoing risk reduction, ensuring the community’s water supply remains protected against diverse threats for years to come.
.jpg)
.jpg)
.jpg)