MYRA Systems Corp.

A flat network is not evidence of neglect. It is what happens when everything works: one address space, no obstacles, no reason to revisit it.

The consequence is that the reception workstation, the finance PC and the controller running a pump sit inside the same security boundary. A phishing click on the business side has an unobstructed path to the plant floor.

Segmentation does not try to prevent every click. It governs what a successful one can reach. A defensible boundary between the operational and corporate networks is the second stage of the work.

At MYRA and Arista Cyber, we help municipalities and utilities move from one open network to zones with enforced rules between them.

The measure is not fewer incidents. It is a smaller blast radius.

Contact MYRA about putting a boundary between your networks.

Responsibility for OT security is commonly undefined inside a local government. It is shared between IT, Engineering and Public Works, which in practice means it is held by nobody.

This is not avoidance. Those systems predate the structure that would have assigned them, and each group reasonably believes another is closer to the equipment.

The cost shows up as delay. Assessments go unscoped, segmentation unfunded and monitoring unprocured, because no single budget holder has the mandate to move.

Ownership does not require one department to absorb the whole scope. It requires a named owner, an agreed change window, and one roadmap the equipment vendors have seen.

At MYRA and Arista Cyber, we help local governments move from OT security nobody owns to a program with names against it.

Undefined ownership is itself a finding.

Contact MYRA and we will help you put names against it.

Every organization running both a corporate network and a control network has one point where the two meet.

That boundary is usually a firewall bought for the office side and never re-scoped when the plant was connected to it.

The job at that point is specific. Understand industrial protocols well enough to allow the traffic the process needs and refuse the rest. Log what crosses. Keep running in a cabinet with no cooling and no one to reboot it.

That is what Fortinet builds and what MYRA configures, monitors and maintains, with the zone design taken from an assessment rather than from habit.

At MYRA, with Fortinet, we help municipalities move from an office firewall doing double duty to a boundary built for the job.

Contact MYRA to review where your two networks meet.

Water treatment is top of mind for local government. What other critical infrastructure matters?

Lift stations, traffic signals, building automation, arena refrigeration and access controls to facilities are all targets for bad actors.

These systems were added over time without standard security controls. Arista's assessments routinely find devices with undocumented and unsecured internet access.

We help local governments perform comprehensive assessments and build remediation roadmaps to secure the whole community.

Your SCADA system is built to watch the process, not the network.

The historian will tell you a pump ran at 3am and what the flow was doing. Ask it who logged into the HMI, from what address, and which setpoint they changed, and there is nothing there.

That gap matters at two moments. During an incident, when responders have nothing to work from. And afterward, when an insurer, a council or a regulator asks for an account.

OT monitoring is not an IT platform pointed at the plant. It reads the protocols the equipment already speaks, Modbus, DNP3 and EtherNet/IP among them, and produces alerts an operator can act on.

At MYRA and Arista Cyber, we help critical infrastructure operators move from no record to a defensible account of what happened.

You cannot investigate what was never recorded.

Contact MYRA today.

Securing a municipality's operational technology takes three things, and no single company supplies all of them.

The technology. Firewalls, segmentation and secure access built to sit between an office network and a control network. That is Fortinet.

The expertise. Engineers who have stood in a plant and know what a control system will tolerate and what it will not. That is Arista Cyber.

Someone accountable for running it every day, in your time zone, who already knows your environment. That is MYRA.

Fortinet and Arista Cyber are partners. Both are partners of ours. The technology, the expertise and the service come from three firms that already work together.

Contact MYRA to see how the three fit your environment.

The integrator who commissioned your control environment usually retains a way back into it. That access is contractual, reasonable, and rarely reviewed.

In practice it looks like a shared support account, a cellular modem in a cabinet, or a remote session available since commissioning.

Canada's Cyber Centre identifies dependency on the supply chain as a critical vulnerability in water system OT, because it gives an attacker information about, and access to, otherwise protected systems.

The control is not to remove vendor access. It is to make it named, time limited, logged, and behind multi-factor authentication.

At MYRA and Arista Cyber, we help utilities and municipalities move from standing remote access to access that is granted, watched and closed.

Vendor access is part of your attack surface and belongs in the same register.

Contact MYRA to review who can reach your OT, and how.

Standard vulnerability scanning is an unacceptable risk in most control environments, and operations teams are right to refuse it.

A scanner asks questions that modern IT devices answer routinely. A twenty year old controller may not, and the failure mode is a process interruption rather than a logged error.

This is why passive discovery is the default. Traffic is observed rather than probed, the environment is mapped without touching the equipment, and any change is sequenced around the operating window and the vendor who owns the device.

You get the same findings without putting the process at risk.

At MYRA and Arista Cyber, we help operations teams move from security they cannot risk applying to security designed for equipment that has to keep running.

Finding your industrial assets should never interrupt production.

MYRA and Arista Cyber are at MISA BC in Kelowna, September 21 to 24.
Come by booth #51 and see what passive discovery actually looks like.

On 29 October 2025 the Canadian Centre for Cyber Security issued alert AL25-016. Hacktivists had reached an internet-accessible industrial control system at a Canadian water facility, altered pressure values, and degraded service to the community.

The facility was not named. In the same alert, of the internet-exposed devices surveyed, almost half could be manipulated with no authentication required.

Agencies on both sides of the border have warned about attacks on critical infrastructure, the Cyber Centre, CSE and CISA among them.

The question is no longer whether OT is targeted. It is whether any of your equipment is reachable from the internet, and whether anyone would notice.

At MYRA and Arista Cyber, we help local governments move from assumed isolation to a verified answer.

The precedent is domestic and documented.

MYRA and Arista Cyber are at MISA BC in Kelowna, September 21 to 24.
Come say hello at booth #51. This is the conversation we are there to have.

The Sunset Cruise is tomorrow evening.

Wednesday, September 23 on Okanagan Lake. Boarding at 5:30, away from the dock at 6:00, back by 9:00.

Okanagan wines, private catering, and three hours at sunset with the people you have been trading emails with all year.

Hosted by MYRA, Fortinet, Arista Cyber and Scale Computing.

It sold out last year. If you have not RSVP'd yet, today is the day.

[email protected] or 250-574-6644, or come and find us at booth #51.