Cybersecurity in the Water Sector (EL264)

Course Length: 2 Hours / 0.2 CEUs*

Course Description:  This course is designed to provide water sector cybersecurity risk management training to the water sector. The goal of this course is to provide the knowledge and skills needed to recognize gaps in a utility’s cybersecurity coverage, and to be able to help a utility take actionable steps to manage cybersecurity risk.

This course is also designed to teach participants how to use the AWWA Water Sector Cybersecurity Risk Management Tool (the Tool). The workshop and eLearning seminar which comprise the course both consist of five modules that focus on the cybersecurity landscape, the self-assessment questionnaire and the controls in the Tool. During the workshop or seminar, participants will see a demonstration of how to use the Tool to identify recommended controls and potential gaps that can be included in a utility’s cybersecurity improvement plan.

Learning Objectives:

• Recognize the drivers behind cybersecurity, including America’s Water Infrastructure Act of 2018
• Understand the use of the Water Sector Cybersecurity Risk Management Guidance and Tool including evaluating a utility’s implementation and use of process control system and enterprise system environments
• Explain the priorities of controls recommended by the tool
• Learn how the Tool works and how to use the Tool
• Generate a report and output files for their utility through proper use of the Tool
• Learn the purpose and applications of control system use cases
• Utilize the recommended controls to develop an improvement plan for bringing their utility’s process control system and enterprise system environments into alignment with current cybersecurity standards (e.g. NIST Cybersecurity Framework v1.1).

This course is based on American Water Works Association (AWWA) management standards. It is not a specification. AWWA standards do not supersede or take precedence over or displace any applicable law, regulation, or codes of any governmental authority.