New tools for water utility cyber security in KYBER-VESI project

The two-year joint project led by VTT resulted in assessment tools and guidelines which will improve the cyber security of the water supply. These are now available for operators in the sector. The tools will help safeguard Finland’s security of supply during disruption or emergency situations.  

In the KYBER-VESI (cyberwater) project that has just ended, VTT developed two separate assessment tools for water utilities. These tools will enable the utilities to assess the status and development needs of their cyber security from the perspective of automation and procurement. The assessment tools are specifically intended for cyber security personnel, automation managers and specialists at the utilities.

The project also generated a number of guidelines relating to cyber security. General guidelines, such as “Management of Water Utility Cyber Security” are intended for water utility executives and managers. The more technical guidelines enable personnel responsible for water utility automation, IT and cyber security to safeguard remote access solutions, radio, mobile and ICT devices as well as IDS systems at the utilities. A guideline was also produced for the utilities’ cyber physical security. It can be used by all personnel responsible for general security and continuity of operations at water utilities. In addition, brief cyber security guidelines were produced. The guideline, which contains some 20 topics, can be quickly browsed by topic area.

“Water supply is one of the fundamental requirements for the functioning of our society. Without drinking water or waste water treatment, we could not survive even a day. The particular features of Finland, such as cold climate, peripheral location and dependence on maritime transport bring their own challenges to the security of supply. The role of cyber security in critical functions such as water supply is indeed vitally important,” says Research Scientist Heimo Pentikäinen, who acted as Project Manager in the project.

The project helped launch the water supply ISAC (Information Sharing and Analysis Centre) group directed by the National Cyber Security Centre, which aims at enabling information security issues to be handled confidentially between the participants. Through the exchange of information, the aim is to increase the information security competence of organisations and enhance the overall picture of cyber security in the sector.

The KYBER-VESI project is part of the National Emergency Supply Agency’s KYBER2020 programme. The project was funded by the National Emergency Supply Agency, the Finnish Water Utilities Development Fund and the water utilities that participated in the project.

For further information, please contact:

Tuomas Korpela
Solution Sales Lead
tuomas.korpela@vtt.fi
+358407296238

Heimo Pentikäinen
Research Scientist, VTT
heimo.pentikainen@vtt.fi
+358 44 7307161

Riku Juhola
Special Adviser, National Emergency Supply Agency
riku.juhola@nesa.fi
+358 2950 51043

Riina Liikanen
Chief of Preparedness at Water Services Pool, Finnish Water Utilities Association
riina.liikanen@vvy.fi
+358 9 8689 0113

Further information on VTT:

Kirsi Jaatinen
Specialist, Communications
+358 20 722 6757, kirsi.jaatinen@vtt.fi 
www.vtt.fi

VTT Ltd is one of Europe’s leading research, development and innovation organisations. We help our customers and society to grow and renew through applied research. The business sector and society in general benefit most from VTT when we solve challenges requiring world-class know-how together, and convert them into business opportunities. VTT in social media: Twitter @VTTFinland, Facebook, LinkedIn, YouTube and Instagram. For photos and videos, please visit our Image Bank.

Tags: