The news of recent cybersecurity attacks has utility managers looking for ways to shore up their defenses to keep critical infrastructure safe. In addition to the suggestions shared in The Update articles Protecting Your Water and Wastewater System from Cyberattacks and Cybersecurity Best Practices for Control Systems, there are several webinars and online resources available.
Below, AE2S has gathered useful resources from the Cybersecurity and Infrastructure Security Agency (CISA) and U.S. Environmental Protection Agency (USEPA).
Cybersecurity Resources
CISA
CISA Free Services & Tools
CISA, a division of the U.S. Department of Homeland Security, offers no-cost cybersecurity services and tools, as well as an incident reporting form: CISA Cybersecurity Services & Tools and CISA Incident Reporting System
CISA, FBI, and USEPA Recommendations
CISA, the FBI, and USEPA jointly share the top recommendations for securing water systems: Top Cyber Actions for Securing Water Systems
USEPA
USEPA Technical Assistance
USEPA offers expert technical assistance to water utilities, State water agencies, and technical assistance providers in the form of training, device security, account security, data security, vulnerability management, policy, and procedural information: USEPA Cybersecurity Technical Assistance Program for the Water Sector
Cybersecurity Incident Action List
USEPA has a checklist to help water systems prepare for, respond to, and recover from emergencies such as cybersecurity incidents, wildfires, power outages, and floods: Water Sector Incident Action Checklist – Cybersecurity
Cybersecurity Procurement Evaluation Checklist
The USEPA Cybersecurity Procurement Evaluation Checklist helps utilities assess the cybersecurity practices of vendors, manufacturers, and service providers: Cybersecurity Procurement Checklist
USEPA Emergency Response Plan Template
USEPA offers emergency response plan (ERP) templates and instructions for water and wastewater utilities. The guide describes strategies, resources, plans, and procedures utilities can use to prepare for and respond to incidents: ERP Guide for Drinking Water and Wastewater Utilities
By maintaining cybersecurity hygiene using best practices, critical infrastructure operators can keep their systems safe. Download these and other available resources and keep them handy in case you need to refer to them in the future.