South East Water

South East Water, a major Victorian water retailer serving 1.8 million people across South-East Melbourne to Gippsland, is proactively addressing cybersecurity risks by creating a Chief Information Security Officer (CISO) role. The move follows heightened national concerns over cyber threats targeting critical infrastructure, particularly utilities like water treatment plants. While the article does not detail a specific breach, the recruitment underscores vulnerabilities in operational technology (OT) and IT systems that manage fresh water, recycled water, and sewage services.A successful cyber attack on such infrastructure could disrupt essential services, compromise public health, or even lead to contamination of water supplies—posing risks of injury or fatalities if treatment processes are sabotaged. The company’s emphasis on protecting 'sensitive and private information' and 'security of people, data, and assets' suggests awareness of threats like ransomware, state-sponsored attacks, or OT-targeted malware, which could paralyze operations. The CISO’s mandate to align security with technology strategies highlights the urgency of mitigating risks that could escalate to life-threatening or geopolitical consequences if exploited by adversaries.

Source: https://www.itnews.com.au/news/south-east-water-creates-ciso-position-606450

TPRM report: https://www.rankiteo.com/company/south-east-water

"id": "sou0434904102825",
"linkid": "south-east-water",
"type": "Cyber Attack",
"date": "10/2025",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"

{'affected_entities': [{'industry': 'Water and sewage services',
                        'location': 'Victoria, Australia (serving South-East '
                                    'Melbourne to Gippsland)',
                        'name': 'South East Water',
                        'size': '1.8 million customers',
                        'type': 'Government-owned utility'}],
 'description': 'Major Victorian water retailer South East Water is recruiting '
                'for a newly created chief information security officer (CISO) '
                'role to bolster its cybersecurity posture. The CISO will '
                'oversee both IT and operational technology (OT) security for '
                'the government-owned utility, which serves 1.8 million people '
                'across South-East Melbourne to Gippsland. The move reflects '
                "the company's commitment to addressing public concerns about "
                'cybersecurity and protecting sensitive data, assets, and '
                'systems.',
 'impact': {'brand_reputation_impact': 'Proactive measure to address public '
                                       'concerns about cybersecurity '
                                       'management'},
 'lessons_learned': 'Proactive investment in cybersecurity leadership (CISO '
                    'role) is critical for government-owned utilities to '
                    'maintain public trust and address evolving threats.',
 'post_incident_analysis': {'corrective_actions': ['Creation of a CISO role to '
                                                   'lead security strategy and '
                                                   'team.',
                                                   'Focus on building '
                                                   'confidence in security of '
                                                   'people, data, and assets.',
                                                   'Ongoing improvement in '
                                                   'security capabilities, '
                                                   'training, and '
                                                   'development.']},
 'recommendations': ['Establish a dedicated cybersecurity leadership role '
                     '(CISO) to oversee IT and OT security strategies.',
                     'Align information security strategies with broader '
                     'technology and business goals.',
                     'Invest in ongoing security training and development for '
                     'staff.',
                     'Strengthen security capabilities to protect sensitive '
                     'data, assets, and operational systems.'],
 'references': [{'source': 'iTnews'}],
 'response': {'communication_strategy': 'Public statement via iTnews '
                                        'emphasizing commitment to security '
                                        'and the creation of the CISO role'},
 'stakeholder_advisories': 'Public statement by interim GM Kim Murray '
                           'emphasizing commitment to security and '
                           'customer/people care.',
 'title': 'South East Water Creates New CISO Role Amid Cybersecurity '
          'Strengthening Efforts'}