6 ms·
I mean Some of these municipal water plants in the US are independently operated by municipalities of awfully few people and even fewer resources to spare, oft
by alwa 2mo ago
I mean
Some of these municipal water plants in the US are independently operated by municipalities of awfully few people and even fewer resources to spare, often serving relatively vast areas…
It’s probably not how you or I would set things up—especially after many years of warnings and slick best practices guides-but I can sympathize with “if it’s not broken…”-style maintenance, especially at the local level.
These things have lifespans measured in decades, and budgetary cycles to match… and for all of CISA’s good work (on limited budgets, and with power that’s more persuasive than fearsome) [0], it seems hard to get all 148,000 [1] system operators to afford to care, much less to afford to fix things—much less to check their work.
[0] https://www.cisa.gov/topics/industrial-control-systems https://www.cisa.gov/topics/industrial-control-systems , and https://www.gao.gov/assets/d24106576.pdf https://www.gao.gov/assets/d24106576.pdf for an idea of the staffing they’re doing it with…
[1] https://www.epa.gov/dwreginfo/information-about-public-water-systems https://www.epa.gov/dwreginfo/information-about-public-water...
- zahlman 2mo agoWho connected the systems to the Internet in the first place? Why?
- M95D 2mo agoMost likely to cut costs and have one person remote-admin all pumps, valves, etc. instead of a crew for each location. Why didn't they have firewalls, admin accounts, access rights, you know, proper security? They were glad it barely worked at all.