Jerome Crawford
March 24, 2025
BLUF
SCADA systems control our everyday services like electricity and water but have
security weaknesses. Organizations protect these systems through network defenses,
access controls, And continuous monitoring.
SCADA System Vulnerabilities
SCADA systems face three major risks !!!
1. Outdated Technology
Many SCADA systems still use older computers that unfortunately can’t run on
modern security software . For example, A 2021 attack on a Florida water plant
was successful because the system used Windows 7, As we know Microsoft no
longer updates (CISA Alert AA21-042A).
2. Network Attacks
When SCADA systems connect to other networks, Hackers can find many ways in
sometimes even brute force. The famous Stuxnet virus infected Iran’s nuclear
program through network connections (Zetter, 2014).
3. Insider Threats
Employees with more access than allowed or just given too much access can
accidentally or purposely cause harm. In Australia, A water plant worker used his
access to dump sewage into parks (ABC News, 2016).
How SCADA Systems Stay Secure
Companies use three main methods to protect SCADA systems:
1. Network Protection
Keeping SCADA systems on Its own networks prevents most outside attacks.
The U.S. energy department reports this stops 80% of hacking attempts. We still
want to keep working towards 100%, But 80% is still better than the lower
numbers we have seen before. (DOE, 2022).
2. Stronger Logins
Requiring two-step verification (like a password plus text message code) makes

systems much harder to break into. Even a real badge for scanning purposes
would be significant and we even see them today in hospitals.
3. Constant Monitoring
Security teams watch over SCADA systems all the time for strange activity. After
Texas pipelines added monitoring systems, They caught and stopped 150
attacks in one year (ICS-CERT, 2021).
Conclusion
While SCADA systems have vulnerabilities, Proper security measures can effectively
protect our critical infrastructure at last. Regular updates, limited access, And great
monitoring create strong defenses against both hackers and insider threats.
References
1. U.S. Department of Homeland Security. (2016). SCADA Systems Security Guide
2. CISA. (2021). Alert AA21-042A: Cyber Attack on Florida Water Treatment Facility
3. U.S. Department of Energy. (2022). Energy Sector Cybersecurity Report