SIA responds to cyberattacks on U.S. water facilities, plans utility security initiatives

SILVER SPRING, Md.—The Security Industry Association (SIA) issued a statement Aug. 12 in response to recent cyberattacks targeting water and wastewater utilities across multiple U.S. states, outlining plans to expand resources and guidance aimed at helping utilities address converging physical and cybersecurity threats.

According to SIA, cyberattacks in late July affected water and wastewater facilities in at least a dozen states, highlighting the increasingly interconnected nature of operational technology, cybersecurity and physical security.

"The threats to water facilities are not new, yet they require a renewed and broad commitment by our industry to work with this essential sector to enhance preparedness strategies," said Don Erickson, CEO of SIA. "SIA is developing plans to expand our OT-physical security resources into practical advice for water utilities."

SIA said its Utilities Advisory Board and Cybersecurity Advisory Board are working to develop new content and recommended practices intended to help utilities improve security and resilience through the use of physical security and cybersecurity technologies.

Among the initiatives announced by the association is the Protecting Utilities Lunch at ISC East 2026, where attendees will discuss emerging threats facing water utilities, challenges associated with securing connected IT and operational technology environments, and strategies for coordinating physical security and technology teams during incidents.

SIA said additional ISC East programming will focus on topics including zero trust, artificial intelligence (AI), cybersecurity and converged threats.

The association also plans to launch a survey examining the current state of utility security programs and physical security infrastructure. Findings from the survey and industry discussions will be compiled into a white paper intended to provide guidance for utility security professionals.

"SIA believes infrastructure resilience must encompass both cybersecurity and physical security, as well as the people, processes and technologies that keep essential services operating," the association said.

SIA is encouraging utility security practitioners, systems integrators and security technology providers to participate in the initiative through interviews, feedback and industry events. 

Related: SIA names Jasvir Gill vice chair of Utilities Advisory Board 

Photo courtesy of Security Industry Association (SIA)