Podcast · Water
Small Utility, Big Target: Rethinking Cyber Resilience in Water Treatment
Trust Me, It’s Air-Gapped · Episode 9

In this episode
Small Utility, Big Target: Rethinking Cyber Resilience in Water Treatment
SEP. 2026 - EPISODE 9
29 minute watch
This video is a part of Trust Me, It’s Air-Gapped, GrayMatter’s podcast that cuts through OT cybersecurity buzzwords with real, plant-floor insights from Scott Christensen and Tom Walker.
- Scott Christensen Cyber Practice Director, GrayMatter
- Aaron Cromer Water and SCADA veteran
- Zach Vera AMDT (Octoplant)
- Dan Topley AMDT (Octoplant)
A coordinated nation-state campaign has hit more than 100 water utilities since it was first spotted near Minneapolis two months ago, prompting warnings from CISA and the FBI andtargeting one thing in particular: publicly addressable PLCs and industrial automation systems.
In this episode, GrayMatter’s Cyber Practice Director Scott Christensen sits down with water and SCADA veteran Aaron Cromer, along with Zach Vera and Dan Topley from AMDT, makers of Octoplant, to unpack what’s actually happening in the field.
They dig into why “we’re too small to be a target” no longer holds up (it was the suburban utilities near major cities that got hit first), why claiming you’re air-gapped rarely means you actually are, and why utilities should focus more on recovery. Aaron, Zach and Dan walk through what real asset awareness looks like, how change management separates a good recovery from a scramble.
Visit graymattersystems.com.
Episode transcript
Transcript coming soon.