The U.S. Environmental Protection Agency (USEPA) issued an enforcement alert outlining the urgent cybersecurity threats and vulnerabilities to community drinking water systems and the steps these systems need to take to comply with the Safe Drinking Water Act (SDWA). USEPA said it is issuing the alert because threats to, and attacks on, the nation’s water system infrastructure Read More
Tag: Cybersecurity
State Cybersecurity Plans Due in May 2024
As a follow up to the letter from National Security Advisor Jake Sullivan and U.S. Environmental Protection Agency (USEPA) Administrator Michael S. Regan to Governors in March, Anne Neuberger, Deputy National Security Advisor for Cyber and Emerging Technologies, and Janet McCabe, USEPA Deputy Administrator, met with State and local officials from across the United States Read More
Cybersecurity Incident Response Guide for Water and Wastewater Systems
The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), and U.S. Environmental Protection Agency (USEPA) collaborated on the new Incident Response Guide: Water and Wastewater Sector. The guide provides best practices for cyber incident response, including the four stages of the incident response lifecycle: CISA, the FBI, and USEPA say technical expertise Read More
Cybersecurity No Longer a Requirement for Sanitary Surveys
The U.S. Environmental Protection Agency (USEPA) rescinded its 2023 Cybersecurity Rule in October due to a lawsuit in the State of Missouri. The States of Missouri, Iowa, and Arkansas teamed with the American Water Works Association (AWWA) and the National Rural Water Association (NRWA) to challenge the regulation. The new rule, announced in March, would Read More
Cybersecurity Assessments Included in Public Water Sanitary Surveys
Cybersecurity risks to public water systems are raising alarm across the country as the U.S. Environmental Protection Agency (USEPA) released new guidance stressing the need for States to assess risks to protect public drinking water. The USEPA says survey results and reports of recent cyberattacks show that many have not adopted basic cybersecurity best practices Read More
Cybersecurity Best Practices for Control Systems
The cyber threat landscape has changed dramatically in recent years. Cyber threats are more prevalent, destructive, and financially devastating than ever before. State sponsored and financially motivated cyber criminals have recently targeted automation systems including those that serve water, electric, and gas utilities. Securing these systems and their digital assets has become critical to ensure Read More