Cybersecurity
Operational technology security for control systems, written for the people who actually maintain them.
Written guides in this section
Full references, procedures, and diagnostic guides published under Cybersecurity.
Water and Wastewater Utility Threat Landscape
What has actually happened at water utilities, what those incidents had in common, and the small number of controls that would have prevented most of them.
8 min readUpdated Aug 28, 2026
OT Security vs IT Security
Why the familiar security priorities invert on a plant floor, and what that changes about patching, scanning, authentication, and incident response.
8 min readUpdated Aug 26, 2026
The Purdue Model
The reference architecture most segmentation designs still start from: what each level contains, where the DMZ goes, and how it maps to a water utility.
8 min readUpdated Aug 20, 2026
Browse Cybersecurity
OT Security
The fundamentals that everything else rests on.
5 topics
Network Segmentation
Separating the control network from everything else.
5 topics
Remote Access
Letting people in without leaving the door open.
5 topics
Firewalls
Rules, placement, and review.
4 topics
PLC Security
Protecting the device that moves the equipment.
5 topics
SCADA Security
Hardening the supervisory layer.
5 topics
Passwords & Credentials
The most common finding in every OT assessment.
4 topics
Backups
The control that actually gets a plant back online.
5 topics
Change Detection
Knowing when something moved.
3 topics
Incident Response
Planning for the day it happens.
5 topics
Asset Inventory
You cannot protect what you have not listed.
3 topics
Vulnerability Management
Handling advisories on equipment you cannot reboot.
3 topics
Water/Wastewater Cybersecurity
Sector-specific guidance for water and wastewater utilities.
5 topics
Direct contact
Have a controls question?
Reach Eric Sullivan directly about anything on this site, a controls or automation topic, or one of his personal projects.
References to manufacturers, software platforms, products, companies, or organizations are provided for informational purposes and do not imply sponsorship, endorsement, or affiliation unless specifically stated.