There's A Way To Solve The Cybersecurity Problem In Water

For years, water and wastewater utilities have relied on the belief that air-gapped systems –– those physically separated from external networks –– offer the ideal level of cybersecurity protection. This notion, often reinforced by traditional SCADA vendors, suggests that isolating critical infrastructure from the internet shields it from cyber threats. Unfortunately, no system is ever truly disconnected. Air-gapped systems frequently have dozens of points of unintended connectivity (e.g., for updates, backups, maintenance).

In addition, today’s savvy cyber attackers have numerous ways of bypassing air gaps, from compromised supply chains to insider threats and infected portable media. This reliance on isolation creates a false sense of security, which can lead utilities to overlook essential cybersecurity best practices as well as the operational benefits of digital transformation. As such, the water sector would be better served by embracing a cloud-based approach that includes continuous monitoring and rapid incident response, all of which offers layered resilience far beyond the illusion of an air gap.