In Person Events
-
Tuesday, June 23rd, 9:15-9:38 AM EST: AWWA ACE: Dr. Kenneth Crowther will be co-presenting on Zero Trust in OT/ICS Environments
-
Tuesday, June 23rd, 3:00-3:20 PM EST: AWWA ACE show - Xylem booth 806: Dr. Kenneth Crowther, Dr. Matthew Rogers (CISA), and Andrew Krapf (Loudoun County utility) will be presenting on Secure-by-Default Is Here: Modernize Without Disrupting Operations
Written Communications and News
Blogs, Press Releases, Articles and Whitepapers
- February 2026 - Barriers to Secure OT Communication: Why Johnny Can’t Authenticate
- January 2026 - Beyond Debugging: Can Static Analysis Become a Reality for PLC Software Security? You must be a member of IEEE in order to access the complete article
- September 2025 - How the Overview Effect can help us end the cybersecurity standards war
- May 2025 - Xylem’s Progress on its Secure-by-Design Pledge : Security Patches
- April 2025 - Water Sector Cybersecurity: Effective IAM Practices
- August 2024 - Hardening the Internet of Things: Toward Designing Access Control For Resource Constrained IoT Devices
- November, 2023 - Adaptive Security: Certificate and Key Rotation for Firmware Integrity - You must be a member of IEEE in order to access the complete article
- May, 2023 - Cybersecurity for Entrepreneurs: Product Security for Entrepreneurs Selling Digital Products or Services - You must be a member of SAE in order to access the complete article for no additional charge
- March 2023 - Securing Water Utilities with AWS - A Bluefield Research interview with Nick Nedostup and Amazon Web Services
- January, 2023 - Securing Over-the-Air Firmware Updates (FOTA) for Industrial Internet of Things (IIOT) Devices - You must be a member of IEEE in order to access the complete article
- July 2022 - Replace 'Air Gap' Cybersecurity With a Multibarrier Approach - You must be a member of AWWA in order to access the complete article
- May 2022 - Cybersecurity in a Digital Water and Infrastructure World
- May 2022 - Cybersecurity: A Marathon, Not a Sprint – Water Online
- April 2022 - CISA Expands the Joint Cyber Defense Collaborative to Include Industrial Control Systems Expertise – Cybersecurity and Infrastructure Security Agency
- October 2021 - Xylem, Dragos Partner to Bring Cybersecurity Leadership to Water Utilities
Making Waves
- September 2025 - Securing water’s future: Xylem signs CISA’s Secure by Design Pledge
- January 2025 - 5 ways to maintain water infrastructure cybersecurity while going digital
- April 2024 - Knowing beats wondering: Steps to cybersecurity success
- April 2024 - How a proactive stance can help utilities stay cyber secure
- October 2023 - Global cyber challenges need global solutions: How utilities are becoming cyber-savvy
- August 2023 - Managing the changing tides of cybersecurity
- August 2023 - How tech can modernize, optimize, and protect
- January 2022 - Human machine interface (HMI) or hacker machine interface?
- October 2021 - Start Planning Today For Smart Incident Response
Cybersecurity Product Brochures
Videos, Webinars, and Conference Recordings
- March 2024 - OT Security Standards Wars
- January 2023 - Podcast: Cybersecurity in the Water Sector & How Utilities Can Be Prepared
- November 2022 - Texas Cyber Summit on Securing Over the Air Firmware Updates (FOTA) for IIOT
- October 2021 - Weftec: Behind the Scenes of Securing Digital Solutions
- October 2021 ICS Security Month in Review with Clay Carter
- September 2021 - Collaborating to assess water system cybersecurity
- March 2021 - Building Cyber Security in the Water and Wastewater Industry - SANS ICS Security Summit
External Threat information sources
ISAC: Membership in the Water Information Sharing and Analysis Center (ISAC), the international security network created by and for the water and wastewater sector. As a cybersecurity partner, you can learn more about security preparedness at www.waterisac.org
CISA
NIST
- Cybersecurity Activities Overview
- National Cybersecurity Center of Excellence
- National Vulnerabilities Database
- Cybersecurity Framework
- ENISA (European Union Agency for cybersecurity)
- Europol's European Cybercrime Centre (EC3)
- CERT-EU (Computer Emergency Response Team for the EU)