This Safety & Security Webinar will focus on the recent rise in cyberattacks across multiple industries, including water/wastewater, to help utilities better understand the range of risks and new advanced persistent threats targeting our industry. Featured speakers will present their first-hand experience behind the scenes of cyber incidents and conducting post-mortem investigations to enhance security. The overall goal is to help water/wastewater entities better protect their information technology (IT) and operations technology (OT) infrastructure through improved planning, training, and technological solutions. Specific recent case studies that will be discussed include:
- Oldsmar, Florida, water supply system manipulation (February 2021)
- Colonial Pipeline ransomware attack (May 2021)
- Metropolitan Water Reclamation District of Greater Chicago email phishing (2018)
The case studies will describe what we know about the incidents, potential strategies that would have prevented them, and other lessons gained from the forensic analysis. This information will be valuable to water and wastewater utilities alike in helping them gain a more in-depth understanding of the complexity of similar advanced attacks. Additionally, the presentation will help utilities identify their current vulnerabilities and steps they should take to prevent or mitigate future cyberattacks.
Presenters:
John Burns – Senior Industrial Hunter, Dragos
John Burns is a Senior Industrial Hunter at the industrial cyber security company Dragos, Inc. where he utilizes a background in control systems engineering and cyber security to perform threat hunting, security assessments, and Incident Response services for ICS Networks.
Prior to joining Dragos, John worked at Shell Pipeline as a Senior Technical Analyst, for 6 years, where he was responsible for the administration and maintenance of the SCADA domains and systems at the Control Center. John was also responsible for ensuring the security of those systems by performing security audits to check for vulnerabilities.
John previously spent 8 years working for systems integrators performing a variety of control systems engineering tasks, such as programming PLCs and HMIs for SCADA systems, across multiple industries including Oil and Gas, Water/Wastewater, Food and Beverage, Chemical, and Manufacturing.
John Sudduth, CISSP, PMP – Chief Information Officer, Metropolitan Water Reclamation District of Greater Chicago
John H. Sudduth is the Chief Information Officer (CIO) at the Metropolitan Water Reclamation District of Greater Chicago (MWRD). As CIO, his responsibilities include oversight of the MWRD’s information technology as it relates to IT strategy, policy, support and operations. John is also part of MWRD’s Executive Team which is responsible for developing and executing the organization’s strategic plan.
John has more than 25 years of information technology experience and is skilled in defining organizational structure, resource requirements, and mission/vision alignment. John’s industry information technology experience includes professional services, legal, retail, government, and healthcare.
John earned a Bachelor of Science degree from Northwestern University and a Master of Science in information technology specializing in Information Systems Security from Northwestern University. He also currently holds several technical and professional certifications including: Project Management Professional (PMP), Microsoft Certified Information Technology Professional (MCITP), Certified Information Systems Security Professional (CISSP), and Certified in Risk and Information Security Control (CRISC).
Subsequent to the presentations, Doug Short, CIO of the Trinity River Authority of Texas and Founder of Defensor Solutions, an industrial cybersecurity consulting firm will join our two presenters in a panel discussion where attendees can pose questions to these subject matter experts.
Complimentary registration for members.
Non-member Registration ($65)
Registration includes webinar and 1-year of WEAT-only membership.
Sponsorship opportunities are currently available.
Webinar Sponsorship - $300
Sponsorship includes your name and logo acknowledgment at the webinar, on the WEAT website, and on WEAT social media pages.
Register and Sponsor here
