Tip of the Week – October 15, 2026

Disable Unnecessary Services on Critical Systems

Unnecessary services and open ports can create additional opportunities for unauthorized access to utility networks and devices. Water utilities are encouraged to review system configurations and disable unused services, protocols, and ports on servers, workstations, and operational technology (OT) assets where operational requirements permit. Before making changes to OT systems, coordinate with system owners and vendors to avoid disrupting essential functions. Reducing unnecessary network exposure helps minimize the attack surface and strengthens the security of critical infrastructure.

Resource: CISA’s Cross-Sector Cybersecurity Performance Goals