There was an alert, or something happened a county over

Post-Alert Exposure Check

In late July, attackers got into more than thirty Minnesota systems in about two days. Operators switched to manual and no water was contaminated. We check whether your controllers can be reached from the internet, and write one page for the board.

Get your price Five questions, two minutes

Who is asking

Your board, council, or general manager

Who can pay

Operating budget

Starts at

$2,900, fixed

A small community water system with its control network Well and pump house, treatment building, clearwell, elevated storage tank, distribution mains to homes, and a lift station. Programmable controllers at the pump house, tower, and lift station connect to an office HMI, with a remote access path entering from outside. PLCPLC PLCPLC REMOTE ACCESS WELL TREATMENT CLEARWELL ELEVATED STORAGE LIFT STATION DISTRIBUTION

The dashed line is a remote connection into the plant: a cell modem, a vendor's link, or a laptop at home.

Who does the work

A method built on 500+ live plants.

Written by a founding contributor and editor of ISA/IEC 62443, with twenty-five years inside live plants. A senior control-system engineer signs off on your report before it goes out.


What happens

Three weeks, one document.

Week 1A call and a remote session. We're figuring out what's connected, what's reachable from outside, and who's got access. We don't touch a running PLC. If we need to be on site, we'll say so before you sign.
Week 2What we found, written for the person who has to explain it. The GM, the council, the inspector. Plain words, photos, and worst-first order.
Week 3The document you came for: the binder, the questionnaire answers, or the recert package, depending.

If there's work to do after, we quote it separately at a fixed price and tell you which grant programs pay for it. Each step after this one is optional.

Start the post-alert exposure check

Fastest is to look up your price and buy it.

Rather talk first? Leave these two and we'll call you back, or ring 877.387.7733.

One engineer, one conversation. If you don't need us, we'll tell you that.

Find your system

Type your system or your town. We've already got your numbers.

Every community water system in the country is in the federal record. We pull yours up, show you what applies at your size, and give you the price. No form first.

Source: EPA SDWIS federal reporting, active community water systems.

Also common

Other places to start.

You have a sanitary survey coming up

EPA Inspection Prep Pack

We take the cyber part of the survey. We walk the plant, fix what can be fixed before the inspector arrives, and put together the paperwork for that section.

The renewal questionnaire is sitting on your desk

Cyber Insurance Readiness Audit

Underwriters now ask whether logging in takes a second step, how people get in from outside, and whether the plant network is kept separate. We fill it out straight. If two or three answers would've cost you at renewal, we fix those first, then you send it.

Your AWIA recertification is coming due

AWIA Triennial Update Check

Your risk and resilience assessment has a date on it, and it covers physical and cyber together. We take the cyber section. Fixed fee.