19473_Authority_Oct-opt

municipalauthorities.org │ 7 215-343-5700 Malvern, PA 610-489-5100 Easton, PA 610-989-4940 Lancaster, PA 717-997-4750 Warrington, PA CONTACT US TODAY: Pennsylvania Municipal Authorities Since 1973! Proudly Serving Scan me! Water & Wastewater Treatment Plant Design Arsenic Removal • Biological Nutrient Removal Iron & Manganese Removal Distribution & Collection Systems Pumping Stations Storage Facilities • Act 537 Plans Chapter 94 Reports • TMDL Reports Infiltration & Inflow Studies Construction Administration & Observation Drone Services • Grant Services OUR SERVICES: Recommendations focused on improving reliability, monitoring, backup and recovery, and long- term resilience. This assessment demonstrated the need for routine technical maintenance. Authorities routinely assess physical assets such as pumps, treatment systems, and vehicles. Critical technology warrants the same attention. A platformmay operate normally while relying on unsupported software, expired certificates, inadequate backups, or undocumented dependencies that could complicate incident recovery. 3. Securing Sensitive Public Safety Information A municipal police department received parolee information from multiple agencies through PDFs, spreadsheets, emails, and faxes. Inconsistent formats and delivery methods made the information difficult to manage and secure. A web-based application was developed within the department’s existing ArcGIS Enterprise environment to standardize records and provide a single operational view. Role-based permissions limited access for approximately 40 users based on rank, responsibility, and assignment. The project reduced manual processes and strengthened oversight, ensuring sensitive information was available only to appropriate users. Although it involved public safety, the lesson applies directly to authorities managing customer, employee, financial, infrastructure, and operational data. Cybersecurity Begins with Visibility Many authorities have accumulated technology one system at a time. A department purchases an application, a consultant creates a database, a vendor receives remote access, or employees adopt a cloud service. The combined environment becomes difficult to see and manage. Warning signs include incomplete system and account inventories, conflicting data, unclear ownership, outdated access, inconsistent patching and backups, and critical processes that depend on one person's knowledge. These are governance and cybersecurity problems. An authority cannot protect information it does not know it has or confidently recover a process it has never documented. AI Readiness Is Security Readiness Authorities are exploring artificial intelligence for customer service, reporting, document management, predictive maintenance, and decision support. However, AI is only as reliable and secure as the information and controls surrounding it. Before using AI, authorities should know what information a tool will access, whether the provider retains submitted data, who may use it, whether sensitive information could be entered, and how outputs will be reviewed. Outdated, disconnected, E FFECTIVE CYBERSECURITY DOES NOT DEPEND ON A SINGLE PRODUCT . I T REQUIRES VISIBILITY , CONTROLLED ACCESS , SECURE CONFIGURATION , RELIABLE RECOVERY , STRONG GOVERNANCE , AND CONSISTENT OPERATIONAL DISCIPLINE . ŽŶƟŶƵĞĚ ŽŶ ƉĂŐĞ ϱϴ͘