Case Study: a covered community water system strengthens secure OT remote access with XONA

Covered Community Water System strengthens OT remote access with XONA using a 5-part AWIA cybersecurity checklist

Covered Community Water System, a covered community water system serving over 3,300 people, faced the challenge of meeting the stringent AWIA Section 2013 cybersecurity requirements for its Risk and Resilience Assessment and Emergency Response Plan. The utility needed to strengthen its operational technology (OT) security, particularly around secure remote access for employees and third-party vendors, and required a clear framework for identifying evidence of its cybersecurity controls. They turned to vendor XONA for a solution to provide secure, controlled, and auditable access.

XONA implemented its secure remote access platform to address the utility's specific needs. The solution provided robust session logging, multi-factor authentication, and time-limited access controls, enabling the water system to generate the necessary evidence for its RRA and ERP. This included detailed audit logs, access policies, and system permission reports. As a result, the utility was able to efficiently demonstrate compliance with federal requirements, significantly strengthening its cybersecurity posture and ensuring secure remote operations for both staff and vendors.