Recent cyber incidents affecting two water authorities in Georgia, along with attacks on water and wastewater systems across the country, are a timely reminder of the cybersecurity risks facing critical infrastructure.
Since July 27, water and wastewater utilities in at least seven states have reported cyber incidents to the FBI, with some attacks disrupting operations. In response, the FBI and Environmental Protection Agency issued an alert urging water and wastewater systems to strengthen protections for internet-connected operational technology.
For Georgia’s municipal leaders, the message is clear: cybersecurity is not only an IT issue. City leaders also have an important role in supporting cybersecurity preparedness.
Understanding the Risk
Technology plays an important role in the day-to-day operation of water and wastewater systems, helping utilities monitor equipment and manage essential processes. As more of these systems become connected, protecting them from unauthorized access is an increasingly important part of cybersecurity preparedness.
According to the FBI, malicious actors recently gained remote access to internet-facing programmable logic controllers (PLCs), devices used to monitor and control physical equipment. Attackers changed device settings and passwords, causing some utilities to lose monitoring and control capabilities and disrupting operations.
The FBI recommends several protective measures, including removing PLCs from direct exposure to the public internet, strengthening access controls, checking systems for unauthorized changes and maintaining the ability to operate critical systems manually when necessary.
Recent incidents demonstrate how a cyberattack can quickly extend beyond technology. When digital systems support essential public services, a cyber disruption can also affect operations and service delivery.
GMA Resources for Your City
GMA has updated Cybersecurity Threats: Your Leadership Needed, a one-page resource designed to help municipal leaders understand their role in protecting city systems, information and services.
The resource is part of GMA’s Cybersecurity Toolkit, which also includes the Cybersecurity Minute, a 12-part video series covering important cybersecurity topics for municipal officials and employees.