001-40 WC 143 JULY-AUG25 PT - Flipbook - Page 32
DRINKING WATER
Overexposed SCADA systems pose a cybersecurity risk. While tools like TeamViewer and Remote Desktop are great for IT, remote operators
don’t need access to the entire control systems or its Operating System to become aware of an alarm or acknowledge it. Instead, remote noti昀椀cation software can link remote personnel with operations data from the control network while keeping SCADA behind a series of 昀椀rewalls
for added protection from attacks.
*Sami Khoury was the head of the Canadian Centre for Cyber Security
(CCCS) but left his position in fall 2024 to start a new role as the Canadian
government’s senior o昀케cial for cybersecurity.
Digital water solutions
Water utilities of all sizes are increasingly turning
to digital solutions to address a range of challenges,
including regulatory changes, workforce retirements,
aging infrastructure, and climate-related risks. A report
from Bluefield Research forecasts strong demand for
digital water solutions in the U.S. and Canada, with the
market projected to grow from US$11.5 billion in 2024
32
WATER C AN ADA • JULY/AUGUS T 2025
to US$23.8 billion by 2033. As digital systems become
more integral to utility operations, the sector faces growing risks from cyberattacks.
Water and wastewater infrastructure security
In Canada, water providers fall under a broad national-security banner called critical infrastructure. But
unlike other industries in that category such as energy,
banking and telecommunications, water utilities are
not federally regulated. In the absence of regulation and
adequate funds, many municipal water systems forgo
adequate cybersecurity measures. The adoption of digital
and remotely operated technologies for critical infrastructure systems has also left water utilities increasingly vulnerable to exploitation by cybercriminals and
state-sponsored actors.
Approximately 33.3 million Canadians rely on
regulated public municipal systems for drinking water.
This critical infrastructure spans tens of thousands of
kilometres, involves many remote sites, and requires
multiple networks with complex software and hardware
needs. The size and scope of these systems offers hackers
many exploitable entry points. Canada has taken strides
SmartSights
While ransomware attacks have become commonplace in corporate and government sectors, threats
against the water sector have a more malicious element.
“We have not seen the same volume of cyber incidents in Canada as the U.S., but that’s no reason for us
to be complacent,” said Sami Khoury, the cybersecurity
czar.*
A cyberattack causing an interruption to drinking
water and wastewater services could erode public confidence, or worse, produce significant public health and
economic consequences.
