The U.S. Environmental Protection Agency (EPA) has introduced new resources aimed at bolstering the cybersecurity of water systems nationwide. These tools are designed to help public water systems prevent and respond to cyber incidents, ensuring safe water access and aiding in risk and emergency planning.
Jess Kramer, EPA Assistant Administrator for Water, emphasized the importance of cybersecurity in the water sector, stating that it is crucial for national security. "Strengthening cybersecurity for the U.S. water sector is critically important because cyber resilience and water security are key to national security," said Kramer. The initiative aligns with the Powering the Great American Comeback Initiative, which aims to provide clean and safe water to all Americans.
The newly developed resources include an updated Emergency Response Plan (ERP) Guide for Wastewater Utilities, a template for developing a Cybersecurity Incident Response Plan (CIRP), incident action checklists for emergencies like wildfires and floods, and a cybersecurity procurement checklist. These tools are intended to help utilities prepare for various threats that could impact drinking water and wastewater treatment operations.
The EPA will continue collaborating with entities such as the Cybersecurity and Infrastructure Security Agency, state programs, and water associations to mitigate cyber risks at water systems. This effort is part of the agency's mission to protect human health and the environment.
In August, over $9 million in grant funding was announced by the Trump EPA to assist midsize and large water systems in safeguarding against cybersecurity threats. A report was also published with recommendations to enhance resiliency against cyberattacks in the sector.
Cyberattacks on water systems have significantly increased recently, posing risks of disruption or contamination of drinking water supplies. The EPA stresses that maintaining clean and safe water is vital not only for public health but also for supporting industries, small businesses, hospitals, military bases, and schools across communities.
More information about these efforts can be found on the EPA’s website: https://www.epa.gov/watersecurity/cybersecurity-water-sector
Information from this article can be found here.
