Frakes Engineering, Inc. shared an update PostedWednesday, May 25,2016 at 3:39 PM https://youtu.be/0gxvVRvMSM4 INDIANAPOLIS - With growing concerns on securing critical infrastructure from cyber-attacks, Frakes Engineering joined 15 public and private sector organizations to raise awareness and train utility operators on cybersecurity in the water and wastewater industry last week. During the exercise, red teams (hackers) conducted real cyber-attacks on a real, operational water utility’s SCADA system at Muscatatuck Urban Training Center in Southern Indiana. Critical Infrastructure Exercise 16.2, also known as Crit-Ex, is helping utility companies learn where those cyber weaknesses might be. Emergency Services Program Manager at Indiana Department of Homeland Security, Jennifer De Medeiros, said cyber security and cyber warfare have recently gained traction in the public’s eye. “I don’t think everybody understands the immediacy of the issue, or the fact that it is very real and it’s probably happening to them right now and they just don’t realize it,” said Jennifer De Medeiros. Vice-President and General Manager at Frakes Engineering, Cliff Campbell agreed that the threat is growing and highlighted some recent cyber hacks. “What happened to Sony?” said Cliff Campbell. “How many million dollars did it cost Sony? How much money did it cost Target? Now think how much is one life worth? Sony and Target lost money, what we are talking about here is something that people drink. Something that keeps people alive, and quite honestly the potential exists for people to hack into these systems. There was an example just a month ago where hackers broke into a system looking for billing information and inadvertently changed chemical set points related to potable water.” The organization caught the threat in time, but if it would have gone unnoticed, Campbell said they had the potential to put out non potable water. “And when you’re talking about a system that could be incredibly overdosed with chlorine or chlorine totally removed from the system, you can really endanger a lot of lives. The financial hackers need to realize this,” said Cliff Campbell. Critex 16.2 demonstrated how easy it was to hack into a water plant’s control system as well as training operators to detect and defend against water attacks. “What this exercise is really formulated to do is, explore the intersection between critical infrastructure and cyber security. Understanding that cyber security and cyber incidents affect all sectors. Every critical infrastructure, all 16 of them and all of these effects are interrelated and interdependent,” said Jennifer De Medeiros. Without any delay, the hackers at the exercise were able to infiltrate the system as quick as 2.5 seconds. There are few government regulations currently that require utilities to protect their plants from cyber threats. “The FBI can’t arrest its way out of a problem like this,” said Jay Abbot, Special Agent-in-Charge at FBI Indianapolis. “This is something that requires a very significant partnership with all of those entities, in order to be successful.” Other participating organizations include: Cyber Leadership Alliance, Pondurance, Rook Security, Citizens Energy Group, Federal Bureau of Investigation, Indiana Information Sharing & Analysis Center (IN-ISAC), Indiana Department of Homeland Security, Infragard Indiana, Indiana Office of Technology, Indiana National Guard, Indiana State Police, and US Department of Homeland Security. Check out a video on this exercise here: https://youtu.be/0gxvVRvMSM4 About Frakes Engineering Frakes Engineering is a leading, full-service control systems engineering/integration firm serving the automation needs of the water and wastewater, manufacturing, food and beverage, pharmaceutical and paper and pulp markets since 1978. Our firm is comprised of an innovative and talented staff of 30+ employees; mostly engineers and programmers who specialize in the design and implementation of PC/PLC based open-architecture Supervisory Control & Data Acquisition (SCADA) systems. We have vast experience in advanced automation including robotics, functional machine safety, machine vision, quality control, and industrial control systems cybersecurity. Visit our page on Water and Wastewater Cybersecurity.