Abstract
Water critical infrastructures are undergoing a process of digital transformation which entails an increasing integration between the physical and cyber layers of the system. This integration brings efficiency and monitoring advantages, but it also exposes water systems to a new threat surface that includes cyber-attacks. Formed in 2017, STOP-IT is Europe’s first project dedicated to developing cyber-physical security solutions tailored to the water sector. During the four years of collaboration, the STOP-IT team has co-developed an extensive list of technologies that integrates cyber and physical layers of infrastructure, allowing water utilities to prevent, detect, assess, and treat risks, as well as simulate scenarios of attacks and explore how to react to increase preparedness. This article first introduces the overall aim and main outcomes of the STOP-IT project and then focuses on the risk management integrated framework composed of modelling solutions developed to help water utilities identify vulnerabilities and protect critical parts of their systems. The solutions are presented along with the results from the demonstration activities performed by a selected water utility.