Around 2000 a former contractor used stolen SCADA software and a radio link to release sewage across a Queensland shire. Which lesson is most associated with this case?
- A.Install antivirus on the pump station controllers themselves
- B.Move the SCADA master into the public cloud for resilience
- C.Replace the radio links with satellite links at pump sites
- D.Retire the credentials of a contractor who leaves
Why D is correct
The Maroochy Shire attacker was a former contractor whose knowledge and equipment still worked after he left, so offboarding and credential control are the core lessons. The radio medium, antivirus, or cloud hosting were not the root issue.
Know someone studying for OT Security Fundamentals? Send them this one.