Water & wastewater · Utility Manager · SCADA Engineering · Cybersecurity
Establish a cryptographic baseline for a water SCADA network
Where does cryptography protect control, telemetry, engineering, and business interfaces—and where is it absent?
Operational pain
Small teams inherit vendor appliances, radio links, remote sites, and unmanaged certificates without a consolidated technical baseline.
Trigger
EPA cybersecurity assessment, treatment-plant modernization, or insurer requirement.
QNSI contribution
Connect the decision to a controlled security path
Capture protocols, certificates, keys, algorithms, locations, vendors, owners, and confidence levels in QNSI inventory.
Decision artifact
A water-system crypto baseline showing protected paths, plaintext exposure, unsupported assets, and practical first actions.
What still requires validation
The utility confirms field observations, process-safety effects, vendor support, budgets, and risk-treatment priorities.
External problem context
Primary sources
These sources establish the external requirement or risk context. They do not endorse HEOSSI or prove that QNSI completed this scenario.
Evidence boundary
What this page does—and does not—prove
This is a product evaluation pattern, not a customer case study, certification, legal opinion, regulator endorsement, or claim that a production deployment completed the described work.