The objective of the cybersecurity and SCADA resilience project is to enhance reliability of monterey one water's wastewater and water recycling services by strengthening cyber defenses and…

The Monterey One Water (M1W) organization was awarded a $1,565,460 Cooperative Agreement from the U.S. Environmental Protection Agency (EPA) under the Congressionally Mandated Projects program (CFDA 66.202). The funding will be used to enhance the reliability and cybersecurity of M1W's wastewater and water recycling services by upgrading critical digital assets and implementing preventative cybersecurity measures. Key project components include procuring and integrating new SCADA system hardware and software, designing enhancements to defend against vulnerabilities and reduce the risk of cyberattacks, and implementing a comprehensive SCADA system upgrade. Specific deliverables include server upgrades, network security appliances, next-generation antivirus solutions, and other security enhancements to bolster the resilience of M1W's critical infrastructure systems. This assistance agreement aims to strengthen M1W's cyber defenses and ensure the reliable operation of its wastewater and water recycling services for over 285,000 users across a 90 square-mile service area.

The objective of the cybersecurity and SCADA resilience project is to enhance reliability of monterey one water's wastewater and water recycling services by strengthening cyber defenses and upgrading critical digital assets to withstand challenges, including from external digital threats. Implementing preventative equipment and network security upgrades on the front end will not only bolster the agency's resilience but is proven to be more cost effective than after a potential incident. M1W's SCADA system monitors and controls the wastewater conveyance and treatment equipment located throughout the agency's 90 square-mile service area for the utility's 285,000 users. Defined set points within the SCADA system help ensure the system operates within local, state, and federal regulations protecting water quality, public health, and the environment. Before automation, the system was monitored manually and relied on personnel to be onsite. Personnel had to oversee and control operations and react to emerging issues. This was not only costly but could be dangerous for the personnel. While automation has optimized wastewater system management, IT has added a new layer of virtual maintenance. Digital and cyber infrastructure is essential to operations today and IT must be maintained in the same way as traditional infrastructure. This assistance agreement provides full federal funding in the amount of $1,252,000. Pre-award costs are approved back to july 1, 2024. See terms and conditions. Activities:the SCADA system encompasses three main elements: hardware or appliances that collect data from the equipment that needs to be monitored and controlled (e.g., sensors, pumps, etc.) and controls equipment; software or applications that protect and analyze data and deliver commands; and a network of physical fibers or cables to transport data between locations. The cybersecurity and SCADA resilience project will modernize hardware and software infrastructure to help ensure a reliable, robust, and secure IT and SCADA environment. The project will include three components: 1. Pre-implementation: procure and integrate new software and hardware solutions required to implement a SCADA upgrade. 2. Design: scope a SCADA upgrade to further defend against vulnerabilities and reduce the risk of cyberattacks that threaten operations. 3. Implementation: upgrade the SCADA system to rebuild the SCADA environment on new hardware and add integrated, higher-performance security solutions only available with an upgraded system. These new or enhanced security protections have been prioritized based on risk reduction, system performance and optimization, cost effectiveness, usability, and industry standards.subrecipient:no subawards are included in this assistance agreement.outcomes:specific deliverables will include: component 1 - - server upgrade with robust architecture to ensure applications are running on a reliable and scalable system. Security enhancements not available in older versions will offer better protection against evolving cyber threats. - addition of a server monitoring tool which audits server access, rogue software detection, and security patch management to defend against cybersecurity attacks. - addition of a SCADA network security appliance to capture SCADA network traffic and analyze for threats and anomalous traffic flows and performs risk assessment of SCADA devices. - upgrade the SCADA network infrastructure with newer network switches with integrated, high-performance security solutions that ensure robust protection against evolving cyber threats in critical infrastructure environments. - addition of a next-generation antivirus solution which uses a combination of artificial intelligence, behavioral detection, machine learning algorithms, and exploit mitigation to anticipate and immediately prevent known and unknown threats. - additio