How do you approach securing software infrastructure against external vulnerabilities in a public utility setting like Great Lakes Water Authority?