Water systems have access to new and updated tools to help prevent and respond to cybersecurity incidents. The U.S. Environmental Agency (USEPA) tools can assist public drinking water and wastewater systems by protecting access to safe water and aid systems conducting risk and emergency planning for cybersecurity.
To better address potential vulnerabilities and ensure all water systems have the best information and emergency safeguards available to maintain protection for drinking water and wastewater treatment operations, USEPA released the following resources:
- Emergency Response Plan (ERP) Guide for Wastewater Utilities: The updated guide describes strategies, resources, plans, and procedures utilities can use to prepare for and respond to an incident, natural or manmade, that threatens life, property, or the environment.
- Template for Developing an Incident Response Plan: The new template assists drinking water and wastewater systems with developing a Cybersecurity Incident Response Plan (CIRP).
- Incident Action Checklists: USEPA offers two new checklists to help drinking water utilities prepare for, respond to, and recover from emergencies such as wildfires, power outages, floods, and cybersecurity incidents.
- Cybersecurity Procurement Checklist: A checklist to help utilities incorporate cybersecurity into the procurement process by helping them assess the cybersecurity practices of suppliers, including vendors and manufacturers, and their products.
USEPA says cyberattacks against water systems have increased in recent years and can disrupt or contaminate drinking water and compromise the treatment of wastewater. USEPA, Federal partners, and utilities share a collective responsibility to ensure cyber threats do not threaten clean and safe water. Learn more by visiting USEPA’s cybersecurity webpage.