CASE STUDY:
Audit and Implementation of Cybersecurity Practices at County Utility
BRIEF:
A county of ~375k residents operated their own power and water utility with limited security staff and underdeveloped programs for securing their infrastructure.
ROLE OF MAX2:
Max² was engaged to assess the security posture of a mid-sized utility to aid in deciding whether to privatize the services or implement changes to the risk management program currently in place.
WHAT WAS DELIVERED?
A full assessment of cyber security through interview of management, operators, customers, and vendors along with analysis of current programs and systems.
A detailed plan for hardening cyber defenses at the utility paired with costing for implementation of changes which would allow the utility to continue independent operation without requiring outside investment.
OUTCOME:
The utility identified potential avenues for cyber threat and was able to block dozens of attack vectors.
Details of a new position to manage cyber at the utility were created.
Reports back to the County and Municipal governments were delivered giving confidence in current security along with details and audit methodologies for future changes.
services:
INDUSTRIES: