Abstract
Historically, the design of water treatment plants relied on infrastructure such as pipelines, tanks and sand filters. Today the industry uses more advanced equipment, control systems, instrumentation and communication technologies. Improved technology brings benefits, but it also introduces cybersecurity risks. Due to the potential impact on public health, the potential for cyber attack on a water treatment facility is not an insignificant issue. Are digital controls sufficient, or should additional methods be used to secure drinking water supplies? In light of the safety hierarchy of controls and the multiple barrier (Defence-in-Depth) approach, the authors contend that water authorities should be doing more to address the risk of cybersecurity events to water infrastructure. Discussion about some opportunities to further reduce cyber risks is included in this paper. However, by no means should these considerations be taken as exhaustive. Cybersecurity incidents are a continuously evolving concern for most industries. Safety and security management must evolve faster to close the current gaps and keep pace with emerging risks.
Published Version
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have