Water Infrastructure Cybersecurity Pack

Combines the water treatment asset model with ICS threat and control knowledge: purdue-level zoning, ICS-specific ATT&CK technique subsets, CISA water sector guidance and continuous validation rules for network segmentation and remote-access hygiene.

• mitre.attack.enterprise>=16.0MITRE ATT&CK Enterprise (STIX 2.1)
• nimble.cyber.core>=1.1.0Cybersecurity Core Ontology
• nimble.water.treatment.cdt>=1.0.0Water Treatment Plant CDT Starter Pack

• v1.0.0latestNimble ≥ 1.1.08/29/2026

  Current release.

• v0.9.0Nimble ≥ 1.0.01/31/2026

  Initial public preview.

Nimble consumes this machine-readable manifest when resolving and installing the package.

{
  "package": {
    "id": "nimble.water.ics.cyber",
    "name": "Water Infrastructure Cybersecurity Pack",
    "version": "1.0.0",
    "status": "published"
  },
  "publisher": {
    "name": "Nimble",
    "type": "first-party"
  },
  "domains": [
    "cybersecurity",
    "manufacturing-industrial",
    "critical-infrastructure"
  ],
  "solution_areas": [
    "water-wastewater",
    "ics",
    "ot",
    "infrastructure-cybersecurity",
    "industrial-cybersecurity"
  ],
  "artifacts": [
    "ontology-extension",
    "validation-rules",
    "compliance-mapping"
  ],
  "dependencies": [
    {
      "id": "mitre.attack.enterprise",
      "version": ">=16.0",
      "optional": false
    },
    {
      "id": "nimble.cyber.core",
      "version": ">=1.1.0",
      "optional": false
    },
    {
      "id": "nimble.water.treatment.cdt",
      "version": ">=1.0.0",
      "optional": false
    }
  ],
  "compatibility": {
    "nimble": {
      "minimum": "1.1.0",
      "maximum": null
    }
  },
  "license": {
    "type": "CC-BY-4.0",
    "name": "Creative Commons Attribution 4.0",
    "url": "https://creativecommons.org/licenses/by/4.0/",
    "redistribution": "bundled",
    "attribution_required": true,
    "attribution": "Water Infrastructure Cybersecurity Pack, Nimble. Guidance references: CISA, U.S. EPA.",
    "source_authority": "Nimble, referencing CISA and EPA public guidance",
    "source_url": "https://www.cisa.gov/water"
  },
  "validation": {
    "security": "scanned",
    "validation": "validated"
  },
  "contents": {
    "rules": [
      "segmentation-validation.ttl"
    ],
    "mappings": [
      "ics-attack-subset.csv"
    ],
    "ontology": [
      "water-ics-security.ttl"
    ],
    "documentation": [
      "README.md"
    ]
  },
  "distribution": {
    "available": false,
    "reason": "bundled"
  }
}