Challenge

This large critical infrastructure organization was looking at determining the security posture of water and wastewater treatment plants and improving their defense and response processes around cyber incidents by testing its technology, people, and processes to determine their capabilities.

 Solution

MNP worked with the organization to create a testing plan tailored to the environments ensuring technologies (IT / OT), plant physical security, people and processes were thoroughly assessed. MNP performed a Red Team exercise (a simulated attack) on the water and wastewater treatment plant environment to gain physical access and test the environments. MNP also performed penetration testing of the environments to identify gaps with network segmentation of IT and OT, vulnerability and patching, and build / hardening.

 Results

MNP identified gaps in the environments including physical and application / network layers and developed a targeted remediation plan to reduce the risk and bolster security posture.

Services provided

Red teaming • Network and application layer penetration testing