Over 40 Years in BusinessISO 27001 compliantPublic sector: GSA · CMAS & TESMA (CA)
LA 562-298-5000 · Chicagoland 312-432-5300 · Phoenix 602-733-6807 · Client Support
Over 40 Years in BusinessISO 27001 compliantPublic sector: GSA · CMAS & TESMA (CA)
LA 562-298-5000 · Chicagoland 312-432-5300 · Phoenix 602-733-6807 · Client Support
Water systems are a recognized target. CISA and EPA have repeatedly warned that attackers are probing internet-exposed control systems, default passwords and weak remote access at water and wastewater utilities. Many utilities run small teams, older equipment and remote sites connected over a mix of links. BTI protects the business network and the boundary to operational technology around the clock, supports your AWIA risk and resilience work, and keeps evidence ready for regulators, boards and insurers. BTI supports several water utilities.
This page is part of BTI's connected technology solutions and advisory services for utilities and critical infrastructure.
Get a Free Cybersecurity AssessmentBook an AI Opportunity AssessmentCall 800-435-7284
AWIA Section 2013 requires community water systems serving more than 3,300 people to complete a risk and resilience assessment, including cybersecurity, and an emergency response plan, and to certify them to EPA on a recurring schedule. BTI supports the cybersecurity and physical security portions with assessment data, findings and documented countermeasures. Your utility certifies to EPA.
Controls prioritized using CISA's water and wastewater sector resources and the CISA Cross-Sector Cybersecurity Performance Goals, starting with the basics that stop most attacks: remove internet exposure, change default passwords, require MFA on remote access, segment networks and keep tested backups.
Assessments and roadmaps aligned to the NIST Cybersecurity Framework, giving boards and councils a clear picture of risk and progress.
Firewalls and zones that separate business IT, security devices and SCADA, with MFA-protected, logged and time-limited remote access for staff and vendors. We design with your operations team and control system integrator and never change process control without them. → Network security · IoT security
BTI's 24/7 NOC/SOC partner backed by a SOC 2 audited operations center monitors endpoints, identity, email and network traffic, including activity at the IT/OT boundary: 10,000+ alerts handled, zero missed.
Assessments that feed your AWIA risk and resilience assessment, ranked by risk and cost, plus a virtual CISO who briefs your board or council. → Cybersecurity assessment · vCISO
Immutable backups, tested restores, an incident response plan that ties into your emergency response plan, and tabletop exercises with operations, following CISA #StopRansomware guidance.
Security policies, access reviews, staff training and evidence packages for regulators, insurers and grant applications. Our clients pass 94% of audits on the first attempt. → Governance, risk & compliance
AWIA assessments cover both cyber and physical risk. Because BTI also designs critical infrastructure security systems, including perimeter analytics, thermal and radar at remote sites, the cameras and access controllers at your plants are segmented, patched and monitored inside the same program. → Converged security
Operators see AI in headlines. They don't see the AI virtual workforce that correlates thousands of events and flags unusual access at the IT/OT boundary in real time. BTI is your Guided Automation Partner, closing that gap safely.
This page covers threat protection and compliance. For helpdesk, multi-site networks, field devices and business system support, see Utilities IT Services. Most utilities use both under one agreement.
BTI supports several water utilities.
AWIA Section 2013 requires community water systems serving more than 3,300 people to assess risks to their system, including cybersecurity, prepare an emergency response plan and certify both to EPA on a recurring schedule.
BTI supports the cybersecurity and physical security portions with assessment data, findings and documented countermeasures. Your utility completes and certifies the assessment to EPA.
By segmenting business IT from control systems, securing and logging remote access, and monitoring the boundary 24/7, designed with your operations team and control system integrator.
Remove internet exposure of control systems, change default passwords, require MFA on remote access, segment networks and keep tested, offline backups, as CISA recommends.
Yes. BTI supports several water utilities and designs programs that fit wastewater agencies, municipal utility departments and special districts.
We map controls to AWIA, CISA guidance and the NIST CSF, collect evidence and package it for regulators and insurers. Our clients pass 94% of audits on the first attempt.
Get My Free Cybersecurity AssessmentBook an AI Opportunity AssessmentCall 800-435-7284
Tell us about your sites and systems. An engineer replies within one business day on new design and technical sales inquiries.