From the Utility Management edition of October 31, 2026
Insider Threats in the Water Sector: A Growing and Underestimated Risk (AI agents amplify insider access)
Gate15 (Alec Davison, David Pounder); posted on OSF · Water and wastewater utilities · United States
- Publisher
- OSF (Open Science Framework)
- Original publication
- Report dated September 2026; OSF posting created 5 Oct 2026
- Source retrieved
- 2026-11-01
What happened
The report argues that insider risk to water and wastewater utilities is rising because of contractor and third-party remote access, cloud services, automation and workforce change. It notes that AI tools and agents without proper governance give faster ways to access, summarize, move or expose sensitive information and operational data, so insider risk now includes how quickly access can be amplified and automated before detection. Mitigations include least privilege and need-to-know access for contractors and vendors, regular access reviews, a scalable insider threat program with defined reporting thresholds, a multidisciplinary threat management group including privacy and HR, and recurring training covering acceptable use.
Why it matters
Connects AI adoption to the OT and data security risks most relevant to small and mid-size water utilities, where contractors and integrators often hold privileged access.
Evidence and measured results
Secondary synthesis by sector practitioners citing WaterISAC, CISA, Ponemon, SentinelOne and a Proofpoint report (87% of organizations use AI beyond pilots, 63% have controls). The AI discussion is brief and relies on vendor survey data; no water-specific AI incidents are documented.
Limitations and uncertainty
AI is a small part of a broader insider threat report; statistics are cross-sector and partly vendor-sourced. Dated September 2026 and posted 5 Oct, before this stream's first edition, and not archived; included now as the most recent water-specific source found linking AI agents to OT and insider risk.
Put this evidence to work
Lighthouse Advisory interpretation, grounded in this source. Enriched 2026-10-31; this does not change the original publication date. Each role follows the same checklist so takeaways compare across sources.
Sales
Role takeaway
- Customer problem
- Utilities are adopting AI tools without extending insider threat and access controls to them or to contractors using them.
- Stakeholders
- Utility general manager
- Security or risk lead
- OT manager
- HR and legal
- Contracted system integrators
- Discovery questions
- Which AI tools can access operational data today?
- Do contractor agreements address AI tool use?
- When were privileged and remote access permissions last reviewed?
- Value hypothesis
- Extending insider threat controls to AI tools may reduce exposure of sensitive operational data.
- Potential engagement
- An AI access review covering staff and third-party tools, with recommended controls.
- Unsupported claims
- Documented AI-driven water sector incidents
- Water-specific AI adoption rates
- Quantified risk reduction
Pre-sales engineering
Role takeaway
- Fit
- Relevant to any utility using AI assistants, agents or analytics on operational data.
- Architecture and integration
- Identity and access management, logging and monitoring extended to AI tools and agents alongside contractor remote access.
- Prerequisites
- Inventory of AI tools
- Identity and access management
- Logging for operational data stores
- Constraints
- Small security teams
- Vendor-embedded AI features
- Contractor tool sprawl
- Security
- Least privilege and need-to-know for people and agents; regular access reviews; monitoring with privacy safeguards.
- Proof of value
- Inventory AI tools touching operational data
- Map tool identities to permissions
- Identify and remove excess access
Delivery
Role takeaway
- Work
- Policy updates, AI tool inventory, access reviews, contractor terms and training.
- Dependencies
- Security
- Operations
- HR and legal
- Procurement
- Ownership
- Security or risk lead with a cross-functional insider threat group.
- Skills and adoption
- Staff training on acceptable use, data handling and reporting concerns.
- Governance checkpoints
- Acceptable use policy covers AI
- Quarterly access review
- Contractor AI clause in agreements
- Acceptance criteria
- Proposed: complete AI tool inventory
- Proposed: quarterly access reviews completed
- Proposed: contractor agreements updated
- Risks
- Over-monitoring employees
- Capacity limits at small utilities
- Unvetted contractor AI tools
Implementation considerations
Lighthouse Advisory interpretation across the operating dimensions a public-sector buyer must settle before this evidence becomes a design. Each note answers the question under its heading for this specific source.
Architecture and integration
What must connect, and where does the AI sit in the workflow?
AI agents and assistants with access to document stores, SCADA historians or operational data should be treated as privileged identities with scoped access and logging.
Governance
Who approves, reviews and stays accountable for outcomes?
Insider threat programs should cover AI acceptable use, agent permissions and contractor AI tools, with cross-functional oversight.
Security and privacy
What data, permissions and controls need testing?
Central theme: least privilege, access reviews and monitoring, now extended to automated tools and agents; the report also stresses protecting employee privacy and civil liberties in monitoring.
Accessibility and workforce
Who is affected, and what skills or accommodations follow?
Workforce change and dissatisfaction are drivers of insider risk; training should be non-punitive and encourage reporting.
Procurement
What should contracts, pricing and exit terms secure?
Contracts with integrators and vendors should address AI tool use, access scope and logging.
Operating model
Which teams own the service once it runs?
Insider risk management is cross-functional rather than a security-only task.
Publication history
- 2026-10-31Utility Management · Issue 036 resources
Stable resource ID: water-sector-insider-threats-ai-amplification-2026