CISA and EPA Release Joint Fact Sheet Detailing Risks Internet-Exposed HMIs Pose to Water and Wastewater Sector

CISA and the EPA recently released a joint fact sheet titled “Internet-Exposed HMIs Pose Cybersecurity Risks to Water and Wastewater Systems.” The fact sheet offers guidance to water and wastewater systems organizations on how to minimize the exposure of human-machine interfaces and protect them from cyber threats. To mitigate the risks of cyberattacks, water and wastewater facilities are advised to inventory all internet-exposed devices, disconnect HMIs and other unprotected systems from the internet or secure them with strong usernames and passwords, and use multi-factor authentication (MFA) for HMIs and for the entire OT network. As various threat groups and hacktivists have targeted the WWS sector, WaterISAC strongly encourages utilities to review the fact sheet and implement the actions listed in the mitigations section.

CISA and the EPA recently released a joint fact sheet titled “Internet-Exposed HMIs Pose Cybersecurity Risks to Water and Wastewater Systems.” The fact sheet offers guidance to water and wastewater systems organizations on how to minimize the exposure of human-machine interfaces and protect them from cyber threats. To mitigate the risks of cyberattacks, water and wastewater facilities are advised to inventory all internet-exposed devices, disconnect HMIs and other unprotected systems from the internet or secure them with strong usernames and passwords, and use multi-factor authentication (MFA) for HMIs and for the entire OT network. As various threat groups and hacktivists have targeted the WWS sector, WaterISAC strongly encourages utilities to review the fact sheet and implement the actions listed in the mitigations section.