Securing Water and Wastewater Treatment Facilities
Most cybersecurity guidance is written for somebody else. This one is written for the person who runs the plant.
Paperback · Hardcover · Kindle
From a working operator
“Connecting technical best practices and language to the actual work field operators are familiar with is great. This is missing in most if not all of the other toolkits I’ve reviewed.”
What’s inside
Off the public internet
The single highest-value change most plants can make, usually at no cost at all.
IT and OT, separated
Segmenting the office network from the control network without interrupting the process.
Backups that survive
Ransomware-resistant backups, and controller programs you actually hold a copy of.
Manual operation
The capability that protected every plant that came through a real attack intact.
Response and recovery
An incident response plan usable at two in the morning, and detection on a shoestring.
A complete crosswalk
Every EPA checklist control mapped to its chapter, plus a first-90-days checklist and templates.
Built around one plant
Every chapter ends at Millbrook — a small combined water and sewer utility with three operators, 8,400 connections and a SCADA system installed in 2011.
You follow it through fourteen months of work: what it found, what each fix cost, what broke, and what it decided to leave alone. Millbrook is an invented example, reviewed by a working water treatment specialist, so the guidance lands at a plant rather than in the abstract.
Written for operators, lead operators, instrumentation techs and superintendents at small systems — and organised around the EPA Cybersecurity Checklist and the CISA Cross-Sector Cybersecurity Performance Goals.
24 chapters · 246 pages · 8 appendices
About the author
Jeremy Harris, CISSP, CISM, has spent 28 years in information technology — much of it in security assessment, audit and regulatory compliance, including the security of numerous water treatment facilities.
“I wrote this book because I am passionate about securing our vital water services and protecting critical infrastructure.”
Found something that doesn’t match your plant?
A cost, a timeline, a piece of equipment, a word nobody uses — write to
info@securewatertreatment.com. Corrections go into the next version.