cybersecurity

Report finds leaks in Halifax Water cybersecurity systems

Report finds leaks in Halifax Water cybersecurity systems

An audit of Halifax Water by the Halifax Regional Municipality's auditor general has found deficiencies in the utility's cybersecurity, including employees clicking links in emails. As part of the audit, an email purporting to be from a legitimate source with a link, known as a phishing email, was sent to 55 employees of the utility to test their awareness of security protocols. According to the report, 45 employees clicked a link in the email and provided their credentials. Three others clicked the link but did not submit their credentials. Auditor General Evangeline Colman-Sadd's audit looked at supervisory control and data acquisition (SCADA) systems and made 21 recommendations for improving security. 

Technicity GTA 2023: How municipalities prioritize data security

Technicity GTA 2023: How municipalities prioritize data security

Kush Sharma, director of municipal modernization and partnerships for the Municipal Information Security Association of Ontario, reported that 92 per cent of respondents to a recent poll of members said municipalities should first focus on critical infrastructure — such as the water system, public transit, solid waste and the voting system — before what they called traditional IT. “What you don’t want is the water system to be breached. If Microsoft Office 365 and your documents go down, or maybe you can’t process some financial statements, that can be fixed. But if your water system goes down there are life-safety issues. If we can try to balance the resources we have as municipalities and focus on the critical infrastructure components …. that would be a good start.”