Abstract
Checklist Compliance is a term that has been used derisively in the information security community, implying that checklists are something used for paying lip service to security without instigating real changes to technology or processes. In this paper we argue that checklists can also be used as a practical tool to quickly establish a security baseline for water and wastewater systems.