AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)

SI: System and Information Integrity – AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) SI-5: Controls over privileged programs and audit tools

What does SI-5 require?

Put controls in place that limit who can run system utilities able to reset passwords or bypass controls, and enterprise audit tools able to alter or erase audit data.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in SI: System and Information Integrity – AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)

SI-1 SI-1 Electronic commerce infrastructure integrity
SI-2 SI-2 System acceptance standards for data validation and integrity
SI-3 SI-3 Password management system enforcing strength
SI-4 SI-4 Organisation-wide clock synchronisation

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) controls