Content area
Supervisory Control and Data Acquisition (SCADA) systems are paramount for protecting public health, safety, and national security. These systems are integral to the operation of critical infrastructures, including electrical grids, oil pipelines, water distribution systems, and nuclear power facilities, all of which are increasingly vulnerable to cyber threats. Legacy systems that are widely used in these sectors present heightened risks as threat actors exploit legacy systems' cybersecurity weaknesses. This research examines the multifaceted cybersecurity challenges facing U.S. critical infrastructures that focus on SCADA system security by examining technical vulnerabilities, legal and regulatory frameworks, organizational learning, and specific challenges related to spent fuel transportation. Despite existing regulatory frameworks, vulnerabilities persist, necessitating a proactive, adaptive cybersecurity approach. The researcher advocates for critical infrastructure organizations, particularly within the nuclear sector, to adopt a "learning organization" model, enabling them to pivot effectively in response to evolving threats. The use of emerging technologies and comprehensive risk management frameworks covering risk identification, assessment, mitigation, and continuous monitoring are crucial for enhancing resilience. Cross-sector collaboration and strict adherence to regulatory standards are necessary to bolster national security. Immediate action is required to address both digital and physical vulnerabilities, ensuring the protection of critical infrastructures.