With cyber-attacks a growing threat to critical infrastructure systems, the American Water Works Association announced, on Feb. 12, 2014, the release of expert guidance on how water utilities can reduce their cyber vulnerabilities.

This guidance was prepared to provide water utility managers with a concise set of best practices and standards. It puts forth a transparent and repeatable process for evaluating a utility’s process control system. In order to provide the widest benefit, the guidance and tool are free and publicly available.

Supporting the guidance is the Cybersecurity Use-Case Tool, which offers an efficient approach to evaluating the security of cyber systems and networks of water utilities. Both the tool and guidance were prepared with leadership from AWWA’s Water Utility Council.

Additional background and a demonstration of the use-case tool will be the focus of a webinar, An Action Plan for Process Control System Security, on Feb. 26, 2014.

While developed in response to concerns and priorities in the United States, the information in the Guidance will still be applicable for Canadian utilities. Cybersecurity is a major focus of CWWA’s Security and Emergency Management Committee and will be a focus of a policy review during the 2014 Window on Ottawa.