A security change can affect safety
Falls Church, Virginia — October 26, 2026. Aktoh Cyber highlights operator-led evaluation of business systems, identity and remote access at water and municipal utilities. Inventory externally reachable services and supplier access with qualified operators before changing a connection. A recommendation is not permission to alter a control system.
Review access and recovery together
Replace default credentials through an approved process, restrict unnecessary exposure and provide individual vendor accounts with appropriate authentication. Test backup restoration and continuity procedures with the people responsible for safe plant operation. Manual-operation exercises must follow the facility's safety procedures, not generic instructions from a checker.
Use EPA and CISA resources as a baseline. Confirm operational-technology compatibility, collection methods and approval boundaries before using any service. Aktoh does not claim support for every control device, uninterrupted utility service or agency endorsement.
Takeaway. Define the scope, protect sensitive information and verify supported controls before relying on an automated recommendation.
Sources and scope
- EPA: Cybersecurity for the Water Sector
Water-sector resources for operators and authorized security teams.
- CISA: Cybersecurity Performance Goals
Voluntary baseline practices; not an authorization or endorsement of Aktoh.
About Aktoh Cyber
Aktoh Cyber, LLC is based in Falls Church, Virginia. Aktoh builds AI security for businesses and households, with one InfoSec Lead coordinating specialist roles. Consequential actions require human approval by default. Coverage depends on supported connections and authorized access.
Media contact
James Spitler · CEO and Founderjames@aktohcyber.com