OT/ICS Cyber Resilience – The Value in Analyzing Water & Wastewater Systems Cyber Threats Around the Globe

Today, Dragos published the Gulf Cooperation Council (GCC) Water & Wastewater Systems Cyber Threat Perspective that highlights cyber threats currently targeting water and wastewater systems in the GCC region – comprising Bahrain, Kuwait, Oman, Qatar, Saudi Arabia, and the United Arab Emirates. While the geography may not seem relevant to U.S. WWS, there is much value in awareness and understanding of what peer utilities are facing so we can better protect domestic systems. In the report, Dragos offers insights and key findings similar to observations made during assessments at U.S. systems such as, low maturity of small to medium-sized WWS organizations, unintentional exposure of ICS/OT assets to the internet, poor segmentation of IT/OT networks, and lack of asset visibility by the asset owner. The report concludes with practical advice including recommendations for defensible architecture, monitoring and visibility, incident response plans, remote access authentication, and vulnerability management. Access the full report at Dragos.