Austrian Activities in Protecting Critical Water Infrastructure

Möderl, M.; Rauch, Wolfgang; Achleitner, Stefan; Lukas, Aditya Alexander; Mayr, Ernest; Neunteufel, Roman; Perfler, Reinhard; Neuhold, Clemens; Godina, Radu; Wiesenegger, H.; Friedl, Franz; Fuchs-Hanusch, Daniela; Lammel, J.; Hohenblum, Philipp; Skopik, Florian; Bleier, Thomas; Weber, Karl; Eder, Franz; Brugger, Matthias

doi:10.1007/978-3-319-01092-2_16

Cited by 3 publications

(4 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Möderl et al . () provides an overview of legal rules and standards concerning risk, safety and security management in the Austrian water sector, including interdependencies to other sectors such as the energy sector. Further, best practices in management and planning established by Austrian utilities are discussed as well as the development of utility performance benchmarks.…”

Section: Iwrmmentioning

confidence: 99%

Securing water and wastewater systems: global perspectives

Clark

2014

Water & Environment J

View full text Add to dashboard Cite

There has been long-standing concern that water systems are vulnerable to manmade and natural threats. In the United States, after the events of 11 September 2001, government planners focused on the possibility that the nation's critical infrastructure may be vulnerable to terrorist attacks. However, as demonstrated in this paper, there are many other factors that influence water supply security including lack of water resource availability, threats from point and nonpoint source pollution to water-related ecosystems, and impact of climate change. In order to meet water security threats, there is a need to balance human and environmental water needs while at the same time safeguarding essential ecosystem services and biodiversity. Integrated water resources management may help achieve this balance. Examples are presented, which illustrate the diversity of water security throughout the world.

show abstract

Section: Iwrmmentioning

confidence: 99%

Securing water and wastewater systems: global perspectives

Clark

2014

Water & Environment J

View full text Add to dashboard Cite

show abstract

“…Attacks on CI may broadly be categorised according to one of two threat sources (Birkett and Mala-Jetmarova, 2014), namely, adverse weather and natural events, as well as human threat sources. As the first source of CI threats, adverse weather and natural events include earthquakes, droughts, storms and infrastructure failures during its deployment life cycle (Birkett and Mala-Jetmarova, 2014; Clark and Hakim, 2014; Möderl et al , 2014). The second source of threats to the security of CI is of human origin and includes terrorism, criminal activity, vandalism, sabotage and human error (Colding and Barthel, 2017; Greiman, 2015; Janke et al , 2014).…”

Section: Introductionmentioning

confidence: 99%

Cybersecurity capabilities for critical infrastructure resilience

Malatji

Solms

2021

ICS

View full text Add to dashboard Cite

Purpose For many innovative organisations, Industry 4.0 paves the way for significant operational efficiencies, quality of goods and services and cost reductions. One of the ways to realise these benefits is to embark on digital transformation initiatives that may be summed up as the intelligent interconnectivity of people, processes, data and cyber-connected things. Sadly, this interconnectivity between the enterprise information technology (IT) and industrial control systems (ICS) environment introduces new attack surfaces for critical infrastructure (CI) operators. As a result of the ICS cybersecurity risk introduced by the interconnectivity between the enterprise IT and ICS networks, the purpose of this study is to identify the cybersecurity capabilities that CI operators must have to attain good cybersecurity resilience. Design/methodology/approach A scoping literature review of best practice international CI protection frameworks, standards and guidelines were conducted. Similar cybersecurity practices from these frameworks, standards and guidelines were grouped together under a corresponding National Institute of Standards and Technology (NIST) cybersecurity framework (CF) practice. Practices that could not be categorised under any of the existing NIST CF practices were considered new insights, and therefore, additions. Findings A CI cybersecurity capability framework comprising 29 capability domains (cybersecurity focus areas) was developed as an adaptation of the NIST CF with an added dimension. This added dimension emphasises cloud computing and internet of things (IoT) security. Each of the 29 cybersecurity capability domains is executed through various capabilities (cybersecurity processes and procedures). The study found that each cybersecurity capability can further be operationalised by a set of cybersecurity controls derived from various frameworks, standards and guidelines, such as COBIT®, CIS®, ISA/IEC 62443, ISO/IEC 27002 and NIST Special Publication 800-53. Practical implications CI sectors are immediately able to adopt the CI cybersecurity capability framework to evaluate their levels of resilience against cyber-attacks, given new attack surfaces introduced by the interconnectivity of cyber-connected things between the enterprise and ICS levels. Originality/value The authors present an added dimension to the NIST framework for CI cyber protection. In addition to emphasising cryptography, IoT and cloud computing security aspects, this added dimension highlights the need for an integrated approach to CI cybersecurity resilience instead of a piecemeal approach.

show abstract

“…An example of a water-specific critical infrastructure is the Latvian water supply and sewerage enterprises association [3] which oversees 27 member organisations [4]. In Austria, there are approximately 5500 water utilities, 1900 community-based utilities, 165 water supply associations and 3400 water supply cooperatives [5]. Having a regularly updated inventory list of such critical infrastructures is a good practice [6].…”

Section: Introductionmentioning

confidence: 99%

“…In many countries, the water and wastewater supply systems are classified as critical infrastructure as they are vital to national public health and economic security. Thus, prolonged interruptions of such critical infrastructures would naturally result in deteriorating public health and economic losses [5]. It is therefore crucial to understand the cybersecurity policy trends and discussions [7] to ensure proper coordination of cybersecurity activities in a country.…”

Section: Introductionmentioning

confidence: 99%

Cybersecurity Policy and the Legislative Context of the Water and Wastewater Sector in South Africa

Malatji

Solms

2020

Sustainability

View full text Add to dashboard Cite

The water and wastewater sector is an important lifeline upon which other economic sectors depend. Securing the sector’s critical infrastructure is therefore important for any country’s economy. Like many other nations, South Africa has an overarching national cybersecurity strategy aimed at addressing cyber terrorism, cybercriminal activities, cyber vandalism, and cyber sabotage. The aim of this study is to contextualise the water and wastewater sector’s cybersecurity responsibilities within the national cybersecurity legislative and policy environment. This is achieved by conducting a detailed analysis of the international, national and sector cybersecurity stakeholders; legislation and policies; and challenges pertaining to the protection of the water and wastewater sector. The study found some concerning challenges and improvement gaps regarding the complex manner in which the national government is implementing the cybersecurity strategy. The study also found that, along with the National Cybersecurity Policy Framework (the national cybersecurity strategy of South Africa), the Electronic Communications and Transactions Act, Critical Infrastructure Protection Act, and other supporting legislation and policies make provision for the water and wastewater sector’s computer security incidents response team to be established without the need to propose any new laws or amend existing ones. This is conducive for the immediate development of the sector-specific cybersecurity governance framework and resilience strategy to protect the water and wastewater assets.

show abstract

Austrian Activities in Protecting Critical Water Infrastructure

Cited by 3 publications

References 21 publications

Securing water and wastewater systems: global perspectives

Securing water and wastewater systems: global perspectives

Cybersecurity capabilities for critical infrastructure resilience

Cybersecurity Policy and the Legislative Context of the Water and Wastewater Sector in South Africa

Contact Info

Product

Resources

About