Municipal and utility · OT/SCADA · AWIA
The SCADA network was airgapped, until it wasn't.
Somewhere between the integrator's laptop, the vendor's remote access box, and the office network, the air gap became a story people tell. Water systems, public works, and small utilities run on networks like this every day.
The pressure you're under
AWIA put risk assessments and emergency response plans on a federal clock for water systems, and EPA cybersecurity guidance keeps raising what "reasonable" looks like. Meanwhile the actual environment is a PLC panel wired in 2009, a SCADA vendor with a standing VPN into the plant, and an IT person who is also the GIS person. OT is nobody's scope, and OT is exactly where the risk lives.
How we engage
We walk the plant and map what's actually connected before anyone proposes buying anything. Then the work is specific: segment OT from IT with OT-aware Fortinet firewalls, put vendor remote access behind logged and time-limited controls, document the panel-to-switch wiring nobody wrote down, and produce the evidence file the state or an insurer asks for. Where an MSP handles the office side, we coordinate with them and stay inside our own scope.
Track record
What we've actually done
- Mapped and documented an OT network where the only diagram was in a retired operator's head.
- Segmented SCADA from the business network with an OT-aware firewall pair, without dropping a single poll cycle during cutover.
- Replaced a vendor's always-on VPN appliance with logged, time-limited remote access the utility controls.
- Produced the network evidence package for an AWIA risk and resilience assessment.
One conversation
Facing an exam, an assessment, or a system nobody can prove?
Email or call. We'll tell you within one conversation whether we're the right fit, and if we're not, we'll point you to someone who is.