Water and wastewater utilities are facing a new wave of targeted cyberattacks. A recent coordinated attack hit operational technology at more than 30 systems across Minnesota, with federal advisories tying the pattern to state-linked actors probing internet-connected PLCs nationwide. The drinking water stayed safe, but the automated controls did not, and several communities were forced back to manual operations.

Most utilities already have IT security in place, but the systems that run a treatment plant don't behave like office IT. A PLC can't be rebooted mid-cycle, and many controllers were never designed to sit near the internet, yet increasingly do. Securing OT means understanding the process, not just the network: which controllers are critical to safety, where the exposure is, and whether clean, offline backups exist if something goes wrong.

This resource lays out the Koniag Public Works OT Cyber Resilience Package, a practical path from a rapid OT/ICS assessment through immediate risk reduction, response readiness, and a prioritized roadmap leadership can fund. It pairs Koniag Energy & Water's experience building and maintaining water and wastewater facilities with Koniag Cyber's specialized OT/ICS security expertise, including work at remote sites across the country and throughout Alaska. It's a rare combination, and no year-long program is required to get started.

• Why a standard IT security assessment doesn't cover the systems that actually run your plant
• The controls that reduce real OT/ICS risk: internet exposure, segmentation, credentials, logging, and backups
• What a Rapid OT/ICS Assessment evaluates, and how findings get prioritized
• How to build response readiness before a cyber incident forces the issue
• A phased roadmap for moving from assessment to full operational resilience