IT Solutions Architects and Cyber Security Engineering
According to reports from the National Intelligence Agency (NSA), the Federal Bureau of Investigation (FBI) and the Department of Homeland Security (DHS), Cyber Security is the top threat facing business and critical infrastructure (Utilities) in the United States.
Computers Systems provide control functions and reporting capabilities at many utilities (known as ICS or SCADA), including coordination of telecommunications, the power grid, nuclear power plants, and valve opening and closing in water and gas networks. The Internet is an attack vector for such systems if connected, the Stuxnet worm demonstrated that plant related equipment controlled by computers, though not connected to the Internet, are vulnerable to damage caused by malicious commands sent to industrial equipment (in that case uranium enrichment centrifuges) which are infected via portable processing devices and removable media. In 2014, the Computer Emergency Readiness Team, a division of the Department of Homeland Security, investigated 79 hacking incidents at energy companies
The NIST Cybersecurity Framework was created in response to Executive Order 13636 – Improving Critical Infrastructure Cybersecurity, signed by President Obama on Feb. 12, 2013.
The AWWA’s resources have been recognized by the Water Sector Coordinating Council and the USEPA as the foundation of a voluntary, sector-specific approach for adopting the NIST Cybersecurity Framework.
Based on the 2008 Roadmap to Secure Industrial Control Systems in the Water Sector, AWWA’s Water Utility Council took action to develop a cybersecurity resource designed to provide actionable information for utility owner/operators based on their use of process control systems. The AWWA’s Water Utility Council developed the Process Control System Security Guidance for the Water Sector (PDF) and the supporting Use-Case Tool for the purpose and objective of providing continuous improvements in Cyber Security for water resources.
Ethernautics, Inc. and Michael Meissner are uniquely qualified to provide consulting services to develop cyber security programs. digital asset assessments. vulnerability analysis and mitigation, cyber security as a service (service catalog). and cyber security defense in depth architecture designs for infrastructure systems that support national security interests specific to Water Utilities.