Water and wastewater system facilities have been urged to secure internet-exposed human-machine interfaces (HMIs).