VENTURA COUNTY — Cyber-attacks are a serious threat to the public drinking water supply. Recent cyber-attacks around the United States have resulted in community water supplies being poisoned or their suppliers’ business operations being held hostage by ransomware. In recognition of this critical threat, the 2021-2022 Ventura County Grand Jury investigated the cybersecurity of Ventura County public water providers.
The Grand Jury investigated two primary areas of cyber vulnerability in the water sector: the information technology used to bill consumers and record usage, and the operational technology used to control and monitor treatment and delivery of the water supply. Malicious actors can take advantage of network vulnerabilities and/or weak user access controls in either information or operational technology to disrupt the business and the water service, and potentially degrade public safety.
The Grand Jury found that Ventura County relies on a complex network of public and private water wholesalers and retailers. The investigation encompassed those public water providers who supply 76% of Ventura County water users and concluded that there is considerable opportunity for improvement of cybersecurity policies and procedures.
The Grand Jury recommends that Ventura County water providers seek out and utilize free Federal and State expert support for implementing cybersecurity best practices, such as regular vulnerability assessments and cyber training for all employees. The Grand Jury further recommends that water providers utilize forums such as water agency associations to share information concerning cybersecurity threats, attacks, protections and remedies.
The Grand Jury recommendations can serve as a model to strengthen the cybersecurity of all Ventura County water providers.
To read the entire report please go to https://www.ventura.org/grand-jury/fiscal-year-2021-2022/
The Ventura County Civil Grand Jury is a panel of 19 local citizens established to investigate public complaints about county, city or special districts management, policies, practices and processes. More information about the Grand Jury can be found here: https://www.ventura.org/grand-jury/