Municipal Water Systems Brace for Cyber Threats

Three utilities serving a combined 480,000 residents confirmed they are rolling out new SCADA intrusion-detection rules after a contractor flagged unusual remote-access attempts at a treatment plant in March.

Source: Statehouse Wire

We caught this before it touched anything operational, but the margin was thinner than anyone wants to admit.

State regulators are now drafting a rule that would require annual third-party penetration tests for any utility serving more than 50,000 customers.