{"resourceId":"water-sector-insider-threats-ai-amplification-2026","versions":[{"version":"external-a106a41c63c67636c4ba5aae3dc573426758512db41e0ffe7747489cf14e38fd","resource":{"id":"water-sector-insider-threats-ai-amplification-2026","title":"Insider Threats in the Water Sector: A Growing and Underestimated Risk (AI agents amplify insider access)","organization":"Gate15 (Alec Davison, David Pounder); posted on OSF","sector":"Water and wastewater utilities","geography":"United States","publishedAt":"Report dated September 2026; OSF posting created 5 Oct 2026","publicationDate":"2026-10-05","eventDate":null,"sourceName":"OSF (Open Science Framework)","sourceLabel":"Independent sector risk report (PDF)","sourceUrl":"https://osf.io/download/cqvpw/","evidenceClass":"independent-research","outcomeClass":"cautionary","topics":["data-security","governance-procurement","accessibility-workforce"],"finding":"The report argues that insider risk to water and wastewater utilities is rising because of contractor and third-party remote access, cloud services, automation and workforce change. It notes that AI tools and agents without proper governance give faster ways to access, summarize, move or expose sensitive information and operational data, so insider risk now includes how quickly access can be amplified and automated before detection. Mitigations include least privilege and need-to-know access for contractors and vendors, regular access reviews, a scalable insider threat program with defined reporting thresholds, a multidisciplinary threat management group including privacy and HR, and recurring training covering acceptable use.","sledRelevance":"Connects AI adoption to the OT and data security risks most relevant to small and mid-size water utilities, where contractors and integrators often hold privileged access.","evidence":"Secondary synthesis by sector practitioners citing WaterISAC, CISA, Ponemon, SentinelOne and a Proofpoint report (87% of organizations use AI beyond pilots, 63% have controls). The AI discussion is brief and relies on vendor survey data; no water-specific AI incidents are documented.","architectureImplications":"AI agents and assistants with access to document stores, SCADA historians or operational data should be treated as privileged identities with scoped access and logging.","governanceImplications":"Insider threat programs should cover AI acceptable use, agent permissions and contractor AI tools, with cross-functional oversight.","securityPrivacyImplications":"Central theme: least privilege, access reviews and monitoring, now extended to automated tools and agents; the report also stresses protecting employee privacy and civil liberties in monitoring.","caveats":"AI is a small part of a broader insider threat report; statistics are cross-sector and partly vendor-sourced. Dated September 2026 and posted 5 Oct, before this stream's first edition, and not archived; included now as the most recent water-specific source found linking AI agents to OT and insider risk.","streamIds":["utility-management"],"roles":{"sales":"Sales framing: AI adoption changes the insider threat conversation for water utilities. The report says ungoverned AI agents let trusted users and contractors move or expose data faster than detection. That opens a discussion with utility managers and security leads about which AI tools contractors and staff are using with operational data. A bounded engagement is an AI access review covering staff and third-party tools. Avoid claiming documented AI-driven water incidents; the report cites none.","engineering":"Engineering framing: treat AI assistants and agents as privileged identities. Any tool that can read SCADA historians, GIS, asset records or operational documents should have scoped credentials, logging and review like a contractor account. A proof of value is an inventory of AI tools touching operational data, mapped to identities and permissions, with gaps against least privilege. Remote access paths used by integrators deserve particular attention.","delivery":"Delivery framing: the owner is the utility's security or risk lead with operations, HR, legal and privacy. Work includes extending acceptable use and access review processes to AI tools and contractors, and adding AI scenarios to insider threat training. Acceptance should be proposed completion of an AI tool inventory and quarterly access reviews. Risks include over-monitoring staff, small utilities lacking capacity, and contractors using unvetted AI tools."},"roleDetails":{"sales":{"customerProblem":"Utilities are adopting AI tools without extending insider threat and access controls to them or to contractors using them.","stakeholders":["Utility general manager","Security or risk lead","OT manager","HR and legal","Contracted system integrators"],"discoveryQuestions":["Which AI tools can access operational data today?","Do contractor agreements address AI tool use?","When were privileged and remote access permissions last reviewed?"],"valueHypothesis":"Extending insider threat controls to AI tools may reduce exposure of sensitive operational data.","potentialEngagement":"An AI access review covering staff and third-party tools, with recommended controls.","unsupportedClaims":["Documented AI-driven water sector incidents","Water-specific AI adoption rates","Quantified risk reduction"]},"engineering":{"fit":"Relevant to any utility using AI assistants, agents or analytics on operational data.","architectureIntegration":"Identity and access management, logging and monitoring extended to AI tools and agents alongside contractor remote access.","prerequisites":["Inventory of AI tools","Identity and access management","Logging for operational data stores"],"constraints":["Small security teams","Vendor-embedded AI features","Contractor tool sprawl"],"security":"Least privilege and need-to-know for people and agents; regular access reviews; monitoring with privacy safeguards.","proofOfValue":["Inventory AI tools touching operational data","Map tool identities to permissions","Identify and remove excess access"]},"delivery":{"work":"Policy updates, AI tool inventory, access reviews, contractor terms and training.","dependencies":["Security","Operations","HR and legal","Procurement"],"ownership":"Security or risk lead with a cross-functional insider threat group.","skillsAdoption":"Staff training on acceptable use, data handling and reporting concerns.","governanceCheckpoints":["Acceptable use policy covers AI","Quarterly access review","Contractor AI clause in agreements"],"acceptanceCriteria":["Proposed: complete AI tool inventory","Proposed: quarterly access reviews completed","Proposed: contractor agreements updated"],"risks":["Over-monitoring employees","Capacity limits at small utilities","Unvetted contractor AI tools"]}},"retrievedAt":"2026-10-31T22:09:08-05:00","enrichedAt":"2026-10-31T22:14:58-05:00","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Workforce change and dissatisfaction are drivers of insider risk; training should be non-punitive and encourage reporting.","procurementImplications":"Contracts with integrators and vendors should address AI tool use, access scope and logging.","operatingModelImplications":"Insider risk management is cross-functional rather than a security-only task.","sourceVerification":{"openedUrl":"https://osf.io/download/cqvpw/","referenceExcerpt":"Automated tools and agents, especially those without proper governance and controls, will have faster ways to access, summarize, move, manipulate, or expose sensitive information","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}