This project was requested by the Water/ Wastewater Committee of the Indiana Executive Council on Cybersecurity. The project’s purpose is to conduct an information security analysis via questionnaire and an on-site risk assessment of Indiana’s relatively smaller water management companies. The questionnaire was created via Qualtrics, a surveying and data analysis software. Once the assessments are completed, the water companies will be given recommendations to improve their cybersecurity posture.

Currently (July 2018), there is no law or policy that standardizes cybersecurity for water companies. However, water companies will soon be required to submit a cybersecurity plan if they apply for funding from the state of Indiana.