Abstract
The high level of automation and growing connectivity with external networks that characterize
the digital shift in water utilities make the facilities more susceptible to cyberthreats. In addition
to causing financial loss and reputational harm, a cyberattack can set off significant occurrences
that could have a negative impact on the environment, the water supply and water quality.
Cybersecurity-related incidents that have occurred in the water and wastewater sectors were
investigated for this research.
The aim of this research was to develop recommendations that outline cybersecurity
considerations for business operations processes to reduce vulnerabilities of water service
delivery. The development and analysis of a database containing 24 cybersecurity-related
incidents in the water and wastewater sectors, acquired from a variety of sources, served as the
basis for the investigation.
Time trends, geographical distribution, asset damage, impacts of incidents and plant location
were investigated. The analysis of the cybersecurity incidents in the water sectors contributes to
the body of knowledge by providing insight into the types of cyberattacks that occur there, the
impact that they have and the more prevalent countermeasures that can be used to prevent an
attack.