AWWA IMTECH57892

This paper discusses considerations used in formulating the Network Security Policy of the City of Detroit Water and Sewerage Department (DWSD), the nation's third largest water and sewer utility. The challenges imposed upon DWSD, which serves 4.3 million people in 126 communities across 1,011 square miles in southeastern Michigan, and which is undergoing a $4.3 billion upgrade of its water facilities, underscore the necessity of balancing security issues with a continuing high level of customer service. Intended to supplement the City of Detroit's information technology security policy, the DWSD strategy addresses security issues involved in the relationship between the DWSD business network (which includes financial information, maintenance planning and control, e-mail, e-business, office automation) and its SCADA network (which includes wide area networks, local area networks, and radio-based networks). Specific strategies address physical connectivity, secure connection and shared media, as well as contractor networks, equipment and Web sites. Participants will gain insight in planing for and implementing effective cyber security policies without unnecessarily impeding efficient utility operation or customer service. The principles described can be applied equally well to both small and large SCADA networks.