Two fairly recent events should have erased all doubt about whether cyberattacks are a serious threat to critical infrastructure, including water and wastewater treatment plants.

In February, an attack on a water treatment facility in Oldsmar, Florida, briefly but dramatically...