WATERSURE
Security Solution

SS

Overview

  • Industry
    Government
  • Platform
    Security Services

WATERSURE is responsible for the operations and maintenance of the Victorian Desalination Project. It is made up of a team of about 60 people all working to ensure the plant is capable of supplying up to 150 billion litres of high quality drinking water annually to Melbourne, Geelong and local regional communities. It is under contract to AquaSure by the Victorian State Government.

Challenge

The plant runs 24 hours a day, seven days a week. It uses the most energy-efficient method of desalinating water reverse osmosis and state-of-the art technology. The plant, marine tunnel and transfer pipeline require comprehensive attention throughout the operations and maintenance phase of the project.

The WATERSURE team is comprised of only 60 people there are hundreds of servers and computers on site that make up the complex control systems necessary for an operation of this magnitude.

The Victorian Desalination Project is a critical piece of infrastructure. To ensure it is capable of supplying 150 billion litres of drinking water, every system needs to function at optimum levels with no room for cyber security disturbances, such as hacking, phishing, or data loss.

WATERSURE ICT Manager, Carlos Rodriguez, identified the need to iron clad its systems to eliminate any risk to the Project’s security.

“We are not an IT company, it’s not our specialty. We also are not a big company, although we have critical assets. Kiandra IT were able to provide a straight forward solution that enabled us to take control of our own security with the backing of experts,” Carlos said.

 

Project
Budget
Project
Urgency
12
months
Project
Timeframe

Solution

The first step was to conduct a penetration test to uncover vulnerabilities. From there, WATERSURE and Kiandra’s relationship grew over five years of continuous security solutions.
 
After the first test, it was clear one of WATERSURE’s biggest risks was human error. This led to routine and ongoing security services to further improve their security posture and general security awareness of staff. A Security-as-a-Service (SaaS) solution was created and tailored to WATESURE’s needs.

WATERSURE’s SaaS solution encompasses, password audits, phishing and vishing assessments, general security notifications, reporting and trend analysis and critical advisories to ensure staff are up to date with the ever-changing IT security landscape. 

Part of this offering is an Online Security Awareness Training – a ten module training solution that covers topics from social media and malware to safe web browsing and password management. It is relevant for WATERSURE’s staff, contractors and third party suppliers.

Kiandra provides this complete service monthly, quarterly, yearly and as required to further enhance WATERUSRE’s overall IT security within the business.
 

Team

Project Manager
Quality Assurance

Methodology

Design Thinking
Agile
We keep our board informed using the reports Kiandra deliver, to show how we are managing this critical area, it makes my job easier.
Kiandra’s cyber security reporting has been especially effective at the board level on top of employee awareness. We use their report to present to Senior Management and the board. Three years ago, nobody knew what cyber security meant, now it’s taken seriously.

Outcome

WATERSURE have been able to use Kiandra’s expertise to take control of its own security by applying recommendations and engaging in ongoing training and reporting.
Carlos said Kiandra’s independent perspective on security issues has helped to roll out awareness to all the levels of the business, including board level.

“Kiandra’s cyber security reporting has been especially effective at the board level on top of employee awareness. We use their report to present to Senior Management and the board. Three years ago, nobody knew what cyber security meant, now it’s taken seriously.

“We keep our board informed using the reports Kiandra deliver, to show how we are managing this critical area, it makes my job easier,” Carlos said.

WATERSURE also incorporates security information, such as the percentage of passwords cracked during routine penetration testing, timely malware or phishing hacks to be aware of, measured improvement and threats thwarted in staff newsletters and company wide security policies.

“Kiandra’s security intel is always up to date. They are able to recommend something that is happening right away and how to put policies and procedures into place, from different points of view across organisational functions.

“There is an open line of communication with Kiandra. We are always able to seek advice on security issues when we need it,” Carlos said.