Reliable, safe access to water plays an essential role in modern life, and now more than ever amid the current global pandemic, cyber attacks against critical water infrastructure have high potential to cause significant disruption and public health risk. But a combination of legacy systems, inherently geographically dispersed operational technology (OT) environments, and growing connectivity to more users and IT systems can put water utilities at risk of cyber attacks that can disrupt our access to safe water.
Reflecting the increased cyber risk to OT environments, for the first time in its dozen years of publication the Verizon Data Breach Investigations Report (DBIR) for 2020 examined how its findings impact not just IT security, but OT security as well.
In our work with many of the leading water utilities around the world, three of the top challenges we see clients face include:
Water utilities are deploying the Claroty Platform on top of their existing infrastructure to address these challenges.
Leveraging Claroty’s Continuous Threat Detection (CTD), IT security, network, and OT teams can gain granular details of all assets, sessions, processes, and corresponding risk levels, to identify threats and vulnerabilities in the OT network to mitigate risk and assure continued operations of critical processes.
Claroty Secure Remote Access (SRA) safeguards OT networks from threats introduced via unmanaged and unmonitored access by remote users, including employees and third-party vendors. Staff and third parties can access systems to do their jobs from wherever they are. While security teams have granular control, the ability to audit access, and additional levels of security, such as password vaulting, to enforce stringent security hygiene and mitigate risk. Unauthorized access is immediately blocked, and unusual network activity triggers an alert to the team.
The Claroty Enterprise Management Console (EMC) simplifies management at scale, consolidating data from Claroty products and providing a unified view of assets, activities, and alerts across multiple sites. The Claroty Platform also integrates seamlessly via the EMC with IT security infrastructure so all teams can use the solution to strengthen security – lowering total cost of ownership (TCO) while maximizing return on investment (ROI).
Together, these solutions also give water suppliers the capabilities they need to conduct risk and resilience assessments to comply with the new AIWA mandate.
As we continue to enhance our solutions, the latest releases deliver even greater visibility and accessibility to all users. Expansions to protocol coverage, as well as the level of detail provided at the asset, network, and process levels, further enhances visibility. Meanwhile, fully customizable dashboards enable users to more-easily filter, pinpoint, and action the information most critical to their priorities.
The security and reliability of critical infrastructure—such as water, power, and telecommunications—is more essential than ever amidst the current global pandemic. In recent weeks, we’ve all gained a greater appreciation for operational uptime and availability of vital services and the capability to quickly and safely pivot to support a surge in workers who need to work from home. We’ve also learned that while there are few constants in our lives—the need for a safe, reliable supply of water will never waver.