As a Water Utility, we are very aware of the various potential attacks on our infrastructure both cyber and physical. Although GPIWA is considered a small system that does not mean we have any less responsibility or commitment to our customers.
As a Utility Member of the American Water Works Association, we are provided information that the public does not have access to for security threats. GPIWA through this membership then had access to other information issued as a joint situational report by the Federal Bureau of Investigation, Department of Homeland Security, US Secret Service, and the Pinellas County Sheriff’s Office. GPIWA has many of the tools in place that are recommended to mitigate threats. In this recent incident of the Pinellas County City of Oldsmar water treatment facility, we will state that we do not use TeamViewer remote access software.
GPIWA reverse osmosis plant is controlled by SCADA, Supervisory Control & Data Acquisition. This control program is monitored by state certified operators. This control system is separated by a virtual private network (VPN). Without presenting all our security measures, no chemical dosing pumps are operated without supervision. Alarms are set at various set points such as low, high, and critical high. Some chemical pumping and resultant values in turn can cause a pump to ramp to zero percent or automatically shut down the plant completely.