You are here

Water Sector Cyber AND Physical Threat Web Briefing - Tips on How to Improve Utility Security Programs from H2OSecCon Tabletop Exercises

Wednesday, December 14, 2022, 2:00 – 3:00 PM ET

For the December Cyber Threat Briefing WaterISAC is doing things a bit differently. Foremost, the briefing won’t just be about cybersecurity and will include a discussion of physical security. For the discussions, WaterISAC will share the most significant findings from two separate tabletop exercises (TTXs) conducted with water and wastewater utility personnel during its recent H2OSecCon, which focused on cybersecurity and physical security. During the first TTX, participants responded to a ransomware incident that impacted operational technology (OT). For the second TTX, participants discussed an incident that involved an insider threat, domestic violent extremism, and an attack utilizing weapons and explosives. While the scenarios for both TTXs were entirely fictional, they were designed with the current threat environment in mind and intended to prepare the participants for real-world situations they might face at their utilities.

Both TTXs provided participants opportunities to rehearse their incident response processes and procedures and identify strengths and areas for improvement. They also served as forums for utility personnel to share best practices, including about resources they’ve used to better protect themselves, and learn from one another. So that all members can learn from and benefit from these experiences, WaterISAC will highlight findings from the TTXs that include best practices, lessons learned, and more.

This briefing is open to all WaterISAC members as well as H2OSecCon registered attendees. Don’t miss out on this invaluable opportunity to learn from the experiences of your peers!