Syracuse Sun

Government agencies are increasingly taking steps to enhance their cybersecurity measures. This week, the Environmental Protection Agency (EPA) announced it would intensify inspections of water facilities that may be vulnerable to cyberattacks.

Lee McKnight, an associate professor at the Syracuse University School of Information Studies (iSchool) specializing in cybersecurity, provided insights on this issue. McKnight commented: "With state-sponsored actors taking advantage more frequently of outdated to non-existent water supply security practices, it is refreshing - like a glass of (clean) water – that the EPA and CISA have begun to raise the alarm. The fact that 70% of water systems upon inspection failed to demonstrate their ability to maintain basic cyberhygiene is regrettable, but far from shocking."

McKnight emphasized the urgency for both public and private sector organizations involved with water systems to take these threats seriously. He drew parallels with the oil pipeline sector, which prioritized cybersecurity only after a significant ransomware attack on the Colonial Pipeline several years ago. "In the case of water supplies," he noted, "the risks are more local but can be no less devastating if their operational technology is breached."

He also stressed the importance of training for IT workers and the broader workforce in maintaining basic cyberhygiene: "Sending the sector’s IT workforce back to school – or at least scaling up online sector-specific training programs – is long overdue. Beyond ‘IT’ workers, the wider workforce must have more opportunities for training in basic cyberhygiene as well."

McKnight concluded by highlighting the persistent risk: "Since now that it is widely known that cyber-attackers have a 70% probability of finding a soft target when going after a water system – unfortunately, we know the most recent successful cyberattacks on water systems will not be the last."

For interviews or additional information:

Daryl Lovell

Syracuse University Media Relations

M 315.380.0206

dalovell@syr.edu | @DarylLovell

Syracuse University