Managing Cybersecurity in the Water Sector: When the Human Factor Does Matter

The water sector is considered critical due to its essential role in human life and the severe consequences that may arise from supply disruptions or compromised water quality. The increasing digitalization and connectivity within the sector and its supply chain, along with the recent inclusion of the wastewater domain in cybersecurity regulations, present new challenges for addressing cyberattacks and their consequences. However, empirical research on these issues is scarce. Decisions regarding the management of water cybersecurity depend on professionals; thus, through interviews with 15 professionals in the sector, this study analyzes the perspectives of various Spanish water cybersecurity professionals regarding how cybersecurity management is conducted, how the sector responds to cyber threats, the significance of the regulatory framework, and potential future challenges. The importance of human factors in the management of water cybersecurity is the topic on which there is the greatest consensus among all participants.