Only seven of the 22 civilian Chief Financial Officer (CFO) Act agencies reviewed had fully addressed all three of the Office of Management and Budget’s networked device requirements, which cover establishing and maintaining device inventories and processing cybersecurity waivers, according to a new audit published Sept. 30 by the Government Accountability Office (GAO). The report says the gaps may leave agencies at risk of cyberattacks that could compromise sensitive data and systems. … Networked technologies face increasing cyber threats worldwide, and in July, cyber threat actors disrupted operations in the water sector by changing passwords to disconnect networked programmable logic controllers, a type of OT device. 

Other water cybersecurity news:

• The Washington Post: Opinion: More dangerous cyberthreats are coming. That leaves a limited window.