Protecting Water Infrastructure Against Cyberattacks

This report outlines rising cybersecurity risks to water utilities due to OT/IT convergence and fragile, legacy CPS/OT environments, highlighting how attackers pivot from enterprise IT (via vulnerabilities, RATs, or remote access misuse) to OT, as seen in the Oldsmar example. It underscores limited budgets and decentralized regulation, references WSCRMG-aligned controls (access control, segmentation, hardening, remote access governance), and advocates deny-all, least-functionality approaches (e.g., application allow-listing and ringfencing) to reduce ransomware and malware impact, presented alongside ThreatLocker’s solutions.