Evaluating Or Testing Utility SCADA Security?

EncryptedBit writes "I am a local elected official involved in bringing new water and waste water treatment plants online in a small town. The new plants will incorporate SCADA, which can be used to change operational aspects at the plants, up to forcing a shutdown or changing operational parameters. Can any Slashdotters recommend ways to make sure it is secure? Any testing recommendations? The operational engineers are oblivious to security and SCADA is a new factor, so this concerns me. Any pointers would be appreciated."

Pointers

[PiAndWhippedCream]

0x00000047, 0x000008C4, and 0x00000A08 All hold awful vulnerabilities, make sure no one has access to them.

Re:Don't put it on the Internet!

[mail2345]

But I want to be able to blame "hackers" when I mess up.

Re:Don't put it on the Internet!

[j35ter]

Now *that's* what I call bareback :)

Re:Don't put it on the Internet!

[darkpixel2k]

But but but.... I have the god given, constitution granted inalienable right to play Farmville, have my desktop covered with widgets and surf the web while at work! By god, I'm an 'merican!! What the hell do you expect me to do while I'm at work, WORK?!? I don't get paid to stare at those blinking pixels and dial thingamabobs all damn day.

I think you're confusing us "'mericans" (people residing on the American landmass) with a uniquely retarded subset of those people called 'Government Employees'.