State Cybersecurity Plans Due in May 2024

As a follow up to the letter from National Security Advisor Jake Sullivan and U.S. Environmental Protection Agency (USEPA) Administrator Michael S. Regan to Governors in March, Anne Neuberger, Deputy National Security Advisor for Cyber and Emerging Technologies, and Janet McCabe, USEPA Deputy Administrator, met with State and local officials from across the United States Read More

Cybersecurity Incident Response Guide for Water and Wastewater Systems

The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), and U.S. Environmental Protection Agency (USEPA) collaborated on the new Incident Response Guide: Water and Wastewater Sector. The guide provides best practices for cyber incident response, including the four stages of the incident response lifecycle:   CISA, the FBI, and USEPA say technical expertise Read More

Cybersecurity No Longer a Requirement for Sanitary Surveys

The U.S. Environmental Protection Agency (USEPA) rescinded its 2023 Cybersecurity Rule in October due to a lawsuit in the State of Missouri. The States of Missouri, Iowa, and Arkansas teamed with the American Water Works Association (AWWA) and the National Rural Water Association (NRWA) to challenge the regulation. The new rule, announced in March, would Read More

Cybersecurity Assessments Included in Public Water Sanitary Surveys

Cybersecurity risks to public water systems are raising alarm across the country as the U.S. Environmental Protection Agency (USEPA) released new guidance stressing the need for States to assess risks to protect public drinking water. The USEPA says survey results and reports of recent cyberattacks show that many have not adopted basic cybersecurity best practices Read More

Cybersecurity Best Practices for Control Systems

The cyber threat landscape has changed dramatically in recent years. Cyber threats are more prevalent, destructive, and financially devastating than ever before. State sponsored and financially motivated cyber criminals have recently targeted automation systems including those that serve water, electric, and gas utilities. Securing these systems and their digital assets has become critical to ensure Read More

Plan to Accelerate Cyber-Resilience for the Water Sector

The U.S. Environmental Protection Agency (USEPA) announced the Industrial Control Systems Cybersecurity Initiative – Water and Wastewater Sector Action Planto help protect water systems from cyberattacks. The Action Plan focuses on high-impact activities that can be surged within 100 days to safeguard water resources by improving cybersecurity across the water sector. The Action Plan is part Read More