Water Sector Physical Threat Briefing: Utilizing Penetration Testing to Strengthen Your Utility’s Physical Security Posture
Wednesday, January 21, 2026, 2pm ET
On January 21 at 2 pm ET, WaterISAC will convene the next event in its quarterly Water Sector Physical Threat Briefings series. Presenters from Loudoun Water and DirectDefense will discuss penetration testing and how utilities can leverage these tests to enhance their physical security program.
Utilities of all sizes face an increasingly complex physical threat landscape, with a widening range of threat actors seeking to gain unauthorized access to sensitive water infrastructure. Amid this heightened threat environment, penetration testing is a critical security best practice because it allows utilities to proactively identify vulnerabilities in their physical and cyber defenses before malicious actors can exploit them. Through controlled assessments that simulate real-world attack scenarios utilities gain a clearer understanding of their true security posture. The insights from penetration testing help prioritize investments, refine incident response plans, and ensure that both physical and cyber defenses work as intended.
To help owners and operators gain a better appreciation of penetration testing, WaterISAC is excited to welcome Lenny McDonald, Manager-Risk, Safety & Security for Loudon Water, who will discuss his utility’s recent experience conducting penetration tests, lessons learned, and how his utility plans to enhance its physical security posture going forward. Following that, Jesse Rodriguez, Principal Security Consultant with DirectDefense, will detail how his company conducts penetration tests, provide an overview of common vulnerabilities he sees at critical infrastructure organizations, and ways to mitigate them.
Don’t miss this opportunity to learn how your peers are working to strengthen their physical security posture.
Members Only.
