Yes. While cyber security risks are growing the physical security risks to Critical Infrastructure never went away. A robust physical security program complimenting network security is required to keep critical infrastructure secure from all hazards.
Case Study – bombing of an AWS Datacenter
A US man was recently sentenced to 10 years in prison for his plot to blow up an AWS data centre. He was arrested while picking up explosives for a bomb with his aim to “kill about 70% of the internet”.
Cyber Security has been top-of-mind recently. Ransomware is on the rise and all means of cyberattacks continue to be levelled at understaffed and overworked IT departments doing their best to keep our networks operational. We have all heard of the Colonial Pipeline hack in 2021 and the Florida water treatment facility breach where a hacker used dormant TeamViewer software to try to poison the local water supply.
Don’t forget about physical security
This post is a reminder that threats to Critical infrastructure can take all forms and we should not lose sight of our physical security requirements and controls. Physical security breaches continue to be frequent and can be just as costly. What doesn’t always make the national news are the frequent breaks in at water treatment plants that result in do-not-drink orders and untold amounts of time, energy and money being spent to flush and test the water supply.
Theft also a problem at critical infrastructure facilities with valuable assets
- In 2019 millions of dollars of copper was stolen from a gas plant in Edmonton
- 2020 arrests made by RCMP at Kelowna wastewater treatment plant
- 2021 break in at Oley Township Municipal Authority sewage treatment plant
- 2022 break in at Gas Plant in Brazeau County
A physical security threat and risk assessment is foundational starting point to ensure that your facility is appropriately secure from the most likely threats and risks with recommendations to mitigate risk exposures and identified vulnerabilities. We need to protect against hacks and physical attacks
Speak to a Kirsch Group consultant to discuss if a threat and risk assessment is right for you.