EPA Releases Cybersecurity Tools, $9M Grants to Protect U.S. Water Systems

The U.S. Environmental Protection Agency (EPA) has introduced new and updated cybersecurity planning tools aimed at protecting public water systems from increasing cyberattacks that threaten safe water access and national security. These resources include an updated Emergency Response Plan Guide for Wastewater Utilities, a new Cybersecurity Incident Response Plan template, incident action checklists for various emergencies like wildfires and cyber incidents, and a cybersecurity procurement checklist to integrate security into utility operations. The EPA emphasizes the critical nature of cyber resilience in the water sector as cyberattacks on water systems have surged, sometimes leading to disruptions such as contamination or compromised wastewater treatment. This initiative is part of the EPA’s broader Powering the Great American Comeback effort to ensure clean and safe water for all Americans. Meanwhile, cybersecurity threats persist, exemplified by the hacktivist group TwoNet's recent attack on a water treatment plant simulation, highlighting the ongoing risks to industrial infrastructure. These developments underscore the need for robust cybersecurity measures in vital water infrastructure to safeguard public health and safety.