- Securing Things Newsletter
- Posts
- OT Cybersecurity Procurement Process & Practices (OTCS PPP) an ultimate guide - Part 2
OT Cybersecurity Procurement Process & Practices (OTCS PPP) an ultimate guide - Part 2
[ST # 69] Tailored strategies for the Water & Wastewater Utility sector by Alana Murray, reference resources and more ✍️ [Securing Things by M. Yousuf Faisal]

Disclaimer: All views presented here, in this newsletter, are my own.
Author or the newsletter are not liable for any actions taken by any individual or any organization / business / entity. The information provided is for education and awareness purposes only and is not specific to any business and or situation.
Hey there,
Hope you are doing well.
This is Part 2 of special a multi-part series titled:
🔐OT Cybersecurity Procurement Process & Practices (OTCS PPP) - ultimate guide📘- for procuring / buying industrial solutions / services to protect our industrial operations and or critical infrastructure.
🚨 For IT-OT Tech, Cybersecurity & Industrial Procurement Professionals! 🚨
🔥 What you’ll learn in this series:
📘Part 1 - Foundations & best practices for OT cybersecurity procurement (already published, click Part 1 in case you missed it).
📘Part 2 - Tailored strategies for the Water & Wastewater Utility sector (we cover Alana' Murrays 7 step framework. She share✍️her expert insights, drawing from years of hands-on experience from water / wastewater utility sector).
In the upcoming newsletter’s we’ll cover the following.
Part 3 - Procurement insights for the Manufacturing industry
Part 4 - Industry 4.0 supply chain security dos & don’ts every buyer must know
What would you like us to add more? Let us know in the comments below.
In this edition, we’ll also cover,
related📘industry best practice references, risk assessment tools, and guidance 📘for Water Wastewater utility sector and
updates on next part 3 and upcoming webinar where I’ll be joining as one of the panel participant among seasoned leaders and newsletter.
If you find Alana's 7-step framework helpful, we'd love to hear from you! Please let us know by filling out the poll at the end of this edition and feel free to share your thoughts through comments, likes, or reshares.
♻️if you know someone in your professional circle who will benefit from this guidance and or are interested in learning. Thanks 🌟
So let’s dig in.
Yours truly.
— Yousuf.
Call out for expert insights:
Also, if you are an expert in Power, Transportation (Airport and Railway) and Oil & Gas sectors📜and want to contribute to this series ✍
DM 📥 / drop a comment 👇 for guest posts and get a shout out! 📢
I see many of you visit the newsletter site, consume the content, however, a low percentage of you actually registers.
So before we begin, do me a favour and make sure you hit the “Subscribe” button to let me know that you care or liked what you’ve read and keep me motivated to publish more. Thanks!
Together with:
Optimize global IT operations with our World at Work Guide
Explore this ready-to-go guide to support your IT operations in 130+ countries. Discover how:
Standardizing global IT operations enhances efficiency and reduces overhead
Ensuring compliance with local IT legislation to safeguard your operations
Integrating Deel IT with EOR, global payroll, and contractor management optimizes your tech stack
Leverage Deel IT to manage your global operations with ease.
7 Critical Steps for Bullet-proofing Your OT Cybersecurity Procurement Process in Water & Wastewater Utilities📜
By Alana Murray is an industrial controls expert with 35+ years of experience in critical infrastructure sectors, including water/wastewater utilities. She writes on operational technology security and just about everything else in the industrial control system industry.
Here are 7 critical steps for bullet proofing OT cybersecurity Procurement processes:
Clearly define Cybersecurity Requirements from day one.
Incorporate Security Clauses in Contracts, that have real teeth.
Focus on Lifecycle Security, not just installation.
Secure the Supply Chain like water quality depends on it (because it does).
Implement comprehensive vendor assessment tailored to water operations.
Foster Genuine cross-functional collaboration (not just meeting invites).
Apply a Risk-Based Approach grounded in water system realities.
Plus,
Real-World Implementation: Putting These Steps into Action
Next Steps: Building Your OT Security Procurement Process.
7 Critical Steps for Bullet-proofing Your OT Cybersecurity Procurement Process in Water & Wastewater Utilities by Alana Murray - Original post → here.
To continue reading → Register below to read for free, where Alana breaks down each of these 7 steps in detail, with industry specific examples/references.
Reply