Hamilton City Council wanted to understand their potential risk and exposure to threats from a cyber security attack to their Automation and Control infrastructure for their water and wastewater plants.
CTEK undertook a review of the HCC Automation infrastructure and recommended adequate measures to mitigate potential cyber security threats.
The review involved HCC WTP/WWTP control systems against the relevant sections of US Federal Government system’s NIST SP800-53 revision 4 (“guidelines for selecting and specifying security controls for information systems”) , SP800-82 revision 1 (“guidance for establishing a secure ICS including SCADA systems, DCSs, and other systems performing control functions”) and against relevant sections of the New Zealand Information Security Manual version 2.4 (as published by the GCSB).