Infrastructure

U.S. officials have testified about People’s Republic of China (PRC) hackers’ capability and intent to be able to disrupt domestic infrastructure by 2027. This targeting of critical infrastructure by PRC army units creates leverage in a potential conflict, as the disruption of civilian life could impair policymakers’ capacity for rapid response in a crisis. While we cannot control the PRC’s strategic aims, we can reinforce the resilience of our communities.

UnDisruptable27’s mission is to bridge this preparedness gap by equipping communities on the front lines with the information, tools, and support they need to mitigate the impacts of increasingly complex and cascading infrastructure disruptions. By empowering local leadership, infrastructure operators, and everyday Americans with accessible, actionable insights, UnDisruptable27 aims to enhance national resilience… starting at the local level.

Wow. I'm actually speechless. I don't even know where to start. I feel like I'm going fucking crazy some times.

I thought it was widely accepted that the US was involved in Stuxnet?

Why focus on China and future capability and not the serious threats that have existed for almost 30 years? Like the incident in 2000 with a disgruntled former employee from an Australian water utility who used remote access to fuck things up. Or that time in 2013 that Iran logged in to the SCADA system of a Dam in New York? Or in 2023 when Iran left anti-Isreal messages on the HMI of a water utility in Pennsylvania? All the reminders of Russia capabilities and history of attacks that were published in 2022?

Where in their plan are they going to bully local politicians into properly funding water infrastructure? Oh, they think we need "clear, actionable step"s? Like the Roadmap to Secure Control Systems in the Water Sector published by the AWWA in 2009? Or their Water Sector CybersecurityRisk Management Guidance (2014)? Or other tools used to support the 2018 requirement for utilities that serve >3300 people to complete risk and resilience assessments and emergency response plans and certify their completeness with the US EPA? And how this same law mandates that US EPA provide guidance to smaller systems too? Like how the US EPA offers free cyber security evaluations, including risk mitigation templates and guidance on overcoming discovered vulnerabilities?

Armed with success stories and blueprints, U27 will get ahead of supply chain and other dependencies that would prevent this approach from scaling to the 6,000 hospital communities nationwide and beyond.

There is no way anyone involved in this has opened up a PLC cabinet in a water utility.