Skip to main content
Image coming soon

AWWA Cybersecurity Guidance for the Water Sector Evidence & Implementation Kit

$249.00
Adding to cart… The item has been added
AWWA Cybersecurity Guidance for the Water Sector · Evidence & Implementation Kit
Secure your water utility to the AWWA guidance, and meet the cybersecurity expectations for critical water infrastructure.
Every recommended control handed to you as adopt-ready policy for a water utility, with the OT nuance, the exact evidence an assessor examines, and the shortfall organizations most often show.
Assessment-ready in a weekend, not a quarter.

Here is the honest situation. Water and wastewater utilities are critical infrastructure and a growing target, and cybersecurity is now an expectation, not an option. The AWWA guidance is the sector reference, aligned to the NIST Cybersecurity Framework and supporting the Water Infrastructure Act. The hard part is turning it into controls for the realities of a utility: SCADA and OT running the plant, remote and unmanned sites, and a lean team. Doing that from the guidance takes time most utilities do not have.

This Kit removes the interpretation. It is the AWWA recommended controls as adopt-ready policy you personalize in a weekend, written for a water utility.

What you get, the moment you buy

38
Controls as adopt-ready utility policy. Every recommended control across govern, identify, protect, detect, respond and recover, written for water-sector OT and SCADA. Personalize and you are done.
38
Evidence-they-examine checklists. For each control, exactly what an assessor examines, plus the shortfall organizations most often show, and the water-sector or OT nuance.
1
AWWA Control Matrix, pre-built. Every control in a working spreadsheet, ready to record your implementation, status and evidence location.
1
Gap & Readiness Assessment. Score each control and the workbook tells you your posture as a single percentage, and exactly what to fix next.

Grounded in the AWWA Water Sector Cybersecurity guidance, aligned to the NIST Cybersecurity Framework and the Water Infrastructure Act, with IT/OT segmentation, remote sites and small-utility constraints called out. Editable Word and Excel files.

Written for water utilities, not generic IT
SCADA runs the treatment and distribution that communities depend on, and it cannot be secured like an office network. This Kit reflects that: IT and OT segmentation, remote and unmanned sites, manual-operations fallback, and controls a lean utility team can actually implement.

What one control looks like

This is a Protect control, segmentation between the business and SCADA networks, the single most important control for a utility. All 38 are built to this depth.

AWWA-PR-1 Segmentation Between Business and SCADA Networks PROTECT
Adopt this control

[Utility] shall segment the process control network from the business network using firewalls and a controlled intermediate zone, permit only explicitly required and inspected traffic to cross between them, and prohibit direct connectivity from general office systems and the internet into the SCADA network.

Evidence an assessor examines
  • Network diagram showing segmentation between the business network and the SCADA network
  • Firewall rule set restricting traffic between enterprise and OT zones
  • Configuration of the intermediate or demilitarized zone for shared services
  • Review records confirming no direct office to SCADA paths exist
Common finding they raise: A single flat network is common, where an infected office workstation can reach HMIs and PLCs with no barrier.

Why this is not another template pack

  • The evidence is the point. A generic IT checklist fails a water utility. This tells you exactly what an assessor examines and the shortfall they find, for every control, in a water-sector OT context.
  • Written for the sector. IT and OT segmentation, SCADA, remote sites and small-utility constraints are built in, not bolted on.
  • Built on a mapped compliance corpus, not one person's opinion, from a graph of thousands of controls across standards.
  • It compounds. AWWA guidance aligns with the NIST CSF, so this work supports your Water Infrastructure Act obligations and any wider security program.

Who buys this

Water and wastewater utilities of every size, their IT and OT and operations staff, and consultants raising a utility's cyber posture. Whether it is a first assessment or a gap-closing effort, you save weeks and walk in with the controls and evidence structured.

By the end of the weekend you will have
✓  A control for every AWWA recommended practice
✓  A completed AWWA control matrix
✓  The evidence an assessor examines
✓  Your IT and SCADA segmentation anchored
✓  A posture percentage and a fix list
✓  The common shortfalls closed

Common questions

Is it really editable? Yes. Word and Excel files you own and adapt. No portal, no subscription.

Is this the AWWA assessment tool? No. It is an independent implementation aid grounded in the AWWA guidance, turning the recommended controls into adopt-ready policy with evidence.

Does it fit a small utility? Yes. The controls are prioritized and practical for lean teams, reflecting AWWA's guidance for small and rural systems.

Does it cover OT and SCADA? Yes. IT and OT segmentation, SCADA and remote sites are central to the controls and notes.

What if it is not for me? A 30-day money-back guarantee.

Do not secure a treatment plant with an office checklist.
Turning the AWWA guidance into controls is fast with the Kit. It is instant, and it is guaranteed.
Add it to your cart and lift your posture this weekend.

Instant digital download · 30-day money-back guarantee · The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001 · support@theartofservice.com

!