Every utility shares the same mission: safe, reliable water and wastewater service, often delivered by a lean team.

‍

Yet the full picture of the control environment rarely lives in one place. Engineering, operations, IT and outside vendors each see only part of it.

‍

In this joint webinar hosted by Nozomi Networks and Kroll, we will walk through a practical five-step approach to identify the systems and threat exposure, detect changes that could affect operations, prioritize risks, and prepare for disruption. We will connect continuous OT visibility with independent risk assessment, pragmatic risk reduction, and incident preparedness in a way that respects uptime, safety and limited resources.

‍

Attendees will leave with a management-ready OT resilience action plan that can be used to identify priorities, communicate risk to leadership and determine the next practical security investments.

‍

Five steps you'll walk away with:

1. ‍Know what supports your operations. Replace spreadsheets with a live, passively built inventory of PLCs, HMIs and field devices, down to firmware and controller modules, including assets at remote lift stations and pump sites. ‍
2. Understand asset behavior and threat exposure. See how assets talk across your control and business networks, including every vendor and remote access path, so you know what normal looks like at the protocol level. ‍
3. Detect cyber incidents and operational anomalies. Catch unauthorized logic changes, out-of-range set points and early signs of failing equipment or network instability before they cause harm. ‍
4. Prioritize and reduce most critical risks. Rank vulnerabilities and exposures by process impact and reachability, then decide where to segment, restrict access or apply compensating controls when patching isn't an option. ‍
5. Accelerate remediation and response. Put playbooks, forensic tools and a clear plan for the first 72 hours in place, aligned with CISA and EPA guidance for water systems.

‍