Introduction to Cybersecurity: Workshop and Response Exercise

Introduction to Cybersecurity: Workshop and Response Exercise
NEW! Training presented by the New Jersey Water Association – April 10, 2015, Monroe Township, Middlesex County
Cybersecurity threats are real and they are here to stay. For example, a hacker penetrated the network of a water filtration plant in
Pennsylvania. The intruder then planted malicious software that targeted the plant’s water treatment operations. So what can be
done about this threat?
To help answer that question, the U.S. EPA is sponsoring a free, one-day workshop and response exercise to teach water utilities
more about the cyber threat, ways to manage the threat, and tools (such as AWWA’s cybersecurity tool) available to help utilities. In
addition, current results from several Virginia waterworks cyber assessments will be presented to share lessons learned. Tips to
improve cybersecurity will also be given.
In the afternoon, a facilitated response exercise will be conducted presenting a realistic cyber threat scenario, allowing all
participants to talk through the actions they would take in response to the threat. The goal is to identify general planning or
procedural gaps in cybersecurity practices that can then be corrected.
Agenda:
8:00 AM: Sign-in
8:30 AM: Welcome and Cybersecurity Threat Overview – NJ-OHSP Cyber Analyst
9:00 AM: NIST Framework & Cybersecurity Standards
9:30 AM: Break
9:45 AM: Findings of Virginia Waterworks Cybersecurity Assessments
10:45 AM: Cybersecurity Tools (CRR Self-Assessment Package)
11:30 AM: Lunch - Pizza $5.00, or bring your own lunch if you prefer.
12:00 PM: Cybersecurity Response Exercise
1:30 PM: Break
1:45 PM: Cybersecurity Response Exercise
2:45 PM: Next Steps based on Cybersecurity Response Exercise
3:15 PM: Closing Remarks/Evaluations
3:30 PM: Adjourn
Instructors:
Tom Noble - Mr. Noble, a Senior Project Manager and Principal with Horsley Witten Group, has assisted both government agencies
and private clients in complying with the Bioterrorism Act, the Safe Drinking Water Act, the Clean Water Act, Superfund legislation,
and both state and local environmental laws and regulations. Currently, Tom serves as the Horsley Witten Group’s Water Sector
infrastructure preparedness and protection lead. Tom holds numerous FEMA certifications, and has a Master’s Degree in Hydrology.
Kyle Miller - Mr. Miller, an Associate with Booz Allen Hamilton, has over eight years of professional experience, including the past
four specializing in Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) security for the
Environmental Protection Agency (EPA), Department of Defense (DoD), and various commercial organizations across the water,
energy, oil, gas, and defense sectors. Mr. Miller holds various professional certifications including: Certified Information Systems
Security Professional (CISSP), Certified Ethical Hacker (CEH), Security+, Global Industrial Cyber Security Professional Certification
(GICSP), ISO 27001 Lead Auditor, and Project Management Professional (PMP). He also holds two Graduate Certificates, a Master’s
Degree in Cybersecurity, and has spoken at multiple water sector conferences on cybersecurity related topics.
Date and Location: Friday, April 10, 2015, Monroe Twp. Utility Dept., 143 Union Valley Rd, Monroe, Middlesex County
Accreditation:
6.0 Training Contact Hours for NJ-Licensed Water and Wastewater Operators. TCH Course Number: 04-021512-30
Certified Public works Managers: 6.0 Hours (1.0 Management, 5.0 Technical). CPWM Course# DLGS-NJWA-72
Pre-registration at www.njwater.org is required.