Global cyber challenges need global solutions: How utilities are becoming cyber-savvy
Feb 19, 2024
Our panel of international experts examines how utilities can embrace a global outlook when it comes to security.
“Cyber-attacks against critical infrastructure facilities, including drinking water systems, are increasing, and public water systems are vulnerable. Cyber-attacks have the potential to contaminate drinking water, which threatens public health.”
Released in March, this statement formed part of a memorandum released by Radhika Fox, the U.S. Environmental Protection Agency (EPA) Assistant Administrator for Water, stressing the need for states to assess cybersecurity risks.
Threats to operators don’t respect geographic boundaries, the issue facing U.S. water utilities is one many global utilities share. So how can utilities stay secure? To find out, Making Waves brought together some of Xylem’s brightest minds focused on product and information security: India-based Sindhu Govardhan, Sweden-based Senad Pašalić, China-based Jack Zhou, and U.S.-based Griffin Harrison.
Asking the right questions
For Govardhan, sometimes the first step for utilities is straightforward: ask questions to help raise cybersecurity awareness. As scrutiny increases, she points to a rapidly growing level of awareness from utilities. She has already found that utilities are asking more questions than ever and encourages all operators to check with their suppliers to learn more about their cybersecurity best practices and the related benefits. “Customers are becoming much more interested in the subject. We work with them to encourage questions about cybersecurity, not just to us, but to all suppliers."
"The greater their awareness, the better they can respond and comply with standards. That awareness is growing by the day. It is up to us to bring our global expertise to answer their questions,” she said.
Pašalić points to the shift in the industry towards a shared responsibility model, a topic covered in detail in a previous article, as a way that customers and suppliers can work together to answer questions and solve issues quickly. “The global cybersecurity community is getting good at collaborating. It’s essential that we ask questions, highlight issues, and take an open approach to solving problems together.
That helps us help our customers, as we can draw knowledge from lots of areas and share updates,” he added.
Global outlook, local response
One of the concerns facing operators is complying with local, emerging regulatory demands, such as the expansion of the Network and Information Security (NIS) directive known as NIS2, the EU-wide legislation that provides legal measures for a high common level of cybersecurity.
Before getting into the details of local demands, utilities can go to the source. That is why Pašalić points to the importance of internationally recognized standards, such as ISO. Most local standards refer to international standards (such as ISO 27001 and IEC 62443) and requirements are often mapped to these. If utilities can work with partners to ensure these are applied, they will have a strong framework to work from.
“It is a lot easier to do a gap analysis and see where you might need to meet local requirements when you have a good grounding in the international standards,” he said. “Differing policies may present some challenges for water operators, which is why it is important to also consider unique local requirements. This is important when making any procurement decisions, so always check with vendors,” Zhou added.
Harnessing global perspectives
Standards aside, a global perspective also helps companies like Xylem ensure that appropriate barriers are built and updated to safeguard systems from very real threats, according to Harrison. “Different operators will work with many different products from vendors, so having a secure product is just part of the puzzle. Utilities need to develop partnerships so that even in the operation phase they can ensure that the security level does not drop, even as threats around them evolve. We lean on each other to get fresh perspectives and global insights that we can share with operators in our local markets,” he said.
That global knowledge pool also gives a line of sight to potential threats. “You may have one type of attack common in a region. We have broad visibility to take that knowledge and use it to prepare other operators.” “It gives us a lot of insight that we can share, and it makes us quicker in arming other operators to defend themselves,” Harrison said. Secure products mean that utilities can avail themselves of the game-changing potential of digital transformation – a subject discussed in detail in Xylem’s Ripple Effect paper – while improving their level of security.
“Utilities can see the value in connected systems and how approaches like sharing the burden can drive economies of scale that deliver a better-quality product,” Harrison added. “We are starting to overcome the notion that adding connectivity adds risk.
That is not necessarily the case and there are a lot of advantages to having a higher degree of connectivity. For municipalities going down this road, they can work with products secured by design and learn from best practices from around the globe.”
More News and Articles
Jul 24, 2024
News
UK utilities place multiple orders for settlement tank technology
Northumbrian Water, Southern Water, and Dŵr Cymru upgrading wastewater sites
Three UK water utilities have agreed orders for the installation of a total of six conical settlement …
Jul 22, 2024
Article
Reusing wastewater, rethinking water: Maharashtra's roadmap
How Maharashtra turns wastewater into a resource
Water resource management is a critical issue globally, and in India, the state of Maharashtra is pioneering efforts to regulate and …
Jul 19, 2024
News
Kansas City advances fire hydrant leak detection technology
An acoustic fixed-base pipe monitoring technology that uses fire hydrants to host multi-sensor devices, has already found more than 30 leaks for Kansas City Water, says Lou Rossetti …
Jul 17, 2024
News
When two bores right a wrong
The Edge Underground team is adamant: there is always a risk of things going wrong on a trenchless project, even for the most prepared contractor.
Experience and having the right equipment can be the difference between …
Jul 15, 2024
News
Adapting to a region’s growing water and wastewater needs
Gippsland Water has completed two major projects to provide local communities with water security. Trenchless Australasia takes a look at the two projects helping increase water supply …
Jul 12, 2024
News
Connections made in Glastonbury
Difficult ground conditions called for a specialist solution when new PE pipes for potable water services had to be installed underneath two, 10-metre road crossings in the grounds of the UK’s ultimate music festival …
Jul 10, 2024
Article
The Water-Energy Nexus: Interdependence and Challenges
Niclas Andersson, CEO of AirWater2All, explains the connection between water and energy. The importance of this connection and the areas in which it needs to be considered are explained …
Jul 08, 2024
News
Minimising cultural impacts with trenchless technology
Yarra Valley Water is leveraging the benefits of trenchless technology to lessen impacts on the Upper Darebin Creek branch sewer project.
The project consists of building a 2.7km sewer pipe …
Jul 05, 2024
News
SprayWall: Reinforcing Underground Infrastructure with Unmatched Strength
In the trenchless technology industry, finding a rehabilitation solution that offers ease of installation and exceptional structural integrity is paramount.
For three decades, …
Jul 01, 2024
News
“Don’t let stereotypes hold you back”
Trenchless Australasia sat down with Rob Carr project manager Marie Piette to discuss her career and work at the microtunnelling contracting company.
From Norway to Cambodia and now Perth, Western Australia, …
Jun 28, 2024
News
Transforming Wastewater: Towards Climate-Neutral Sewage Treatment
Baden-Württemberg’s Minister President Winfried Kretschmann recently toured the Büsnau Training and Research Sewage Treatment Plant, where a pioneering project led by researchers …
Jun 26, 2024
News
Bothar advances with significant new contracts
Having commenced work on the Fitzroy to Gladstone Pipeline earlier this year, Bothar Boring and Tunnelling has announced the award of further contracts as part of its ongoing collaboration with …
Contact
Xylem Inc.
Houston Spencer
Media
301 Water Street SE
DC 20003 Washington
United States
Phone:
+1 914 323 5723