1、The State of Critical Infrastructure ResilienceEvaluating Cyber Threats to Water and Electric Utilities“The technology and systems that deliver critical services like power grids and drinking water underpin every facet of our health and safety.Far too manypeople assume that the government or private

2、 sector companies are managing the essential task of addressing the resilience of these systems.This is a flawed assumption,borne out by frequent systemic failures of poorly designed and weakly defended systems that are easy prey for criminals and rogue nation states.This responsibility cannot be de

3、ferred to others.We need to harden our systems and extract criminal elements now.”Chris Inglis Former US National Cyber DirectorStrategic Advisor,SemperisCyber threats pose a growing risk to utility operators and public safety.Identity systems remain a top target for initial access and escalation.Na

4、tion-state actors are behind most breaches and are adept at remaining undetected.Both publicly and privately operated utilities can better adapt to these threats by adopting a resilience mindset.Executive SummaryReliable access to fresh water and adequate electricity is a critical component of daily

5、 life in the United States and United Kingdom.As recent outages driven by environmental catastrophes,human error,or cyberattacks have shown,even short disruptions to these services have the potential for social and economic harm.Ransomware groups and nation-states such as China,Russia,Iran,and North

6、 Korea all known to be advanced persistent threat actors are well aware of this fact.The question is not whether critical utility infrastructure in the US and UK poses a cyberattack target.The question is:How prepared are utility operators to detect,respond to,and recover from cyberattacks?To gauge