18706_Authority_Oct

municipalauthorities.org | 19 Most systems grow faster than they are documented. New equipment is added, and existing devices stay in place because they still work, but the flow of data is altered. Over time, it becomes harder to say exactly what connects to what or how those connections are protected. Securing communication between sites starts with understanding how those links work. This will help you confirm what’s working, identify what needs attention, and reduce your risk before problems occur. Water and wastewater operations frequently depend on site-to-site communications. You might think it’s just a few tank levels or pressure values being passed between systems. However, the moment one site stops receiving that data, pumps may shut down, tanks may drop, and crews could be forced into emergency response mode. If your SCADA or system automation relies on communication between locations, it can be exploited to cause a major operational issue. The good news is that you don’t have to guess. By asking targeted questions and taking straightforward steps, you can gain visibility and reduce your risk. If You Do Not Know About It, You Cannot Secure It Effective cybersecurity starts with documenting the active equipment and their configurations. This should include the manufacturers, models, and serial numbers, as well as the firmware and software versions that are in use. Any networking values such as hardware and Internet Protocol (IP) addresses should also be captured. It is also important to understand if site-to-site communications are occurring over a private network or if they are using the Internet. Wide-area networks (WANs) often rely on a combination of both private and public segments. You should not assume that private implies secure, nor should you assume that the Internet means insecure. Any network can create exposure if it is not properly protected. Before You Act, Start with the Right Questions The fastest way to improve your security posture is to start the right conversations. These questions help uncover whether the basics are in place. Use them when coordinating with your IT support, systems integrators, and your internal team. Look for clear answers and ask for documentation. Avoid vague assurances and confirm that protection is real. These questions help build visibility and accountability. Do we have an updated map of all systems and connections? Why it matters: Everyone, regardless of their technical expertise, needs to understand how the system communicates so they can participate in supporting and improving it. What to look for: A diagram that shows every remote site and how it connects to the rest of the system. It e ffectIve cybersecurIty starts wIth documentIng the actIve equIpment and theIr confIguratIons . Continued on page 34.