Cyberattacks against water utilities prompted U.S. Senators Amy Klobuchar of Minnesota and Adam Schiff of California to introduce the Water Cyber Shield Act in mid-August. The legislation aims to strengthen Federal oversight by the U.S. Environmental Protection Agency (USEPA), provide funding for utilities, and safeguard drinking water and wastewater systems from cyberattacks.
“The recent cyberattacks on Minnesota have highlighted the urgent need to improve the security of our water systems and critical infrastructure,” said Sen. Klobuchar. “Our legislation will direct the EPA to assess water infrastructure cybersecurity and identify vulnerabilities and help municipal water systems defend against cyber threats. Protecting our critical infrastructure and the safety of Minnesotans is a top priority.”
Water Cyber Shield Act
The Water Cyber Shield Act would:
- Authorize USEPA to conduct cybersecurity assessments and require corrective measures when significant vulnerabilities are identified.
- Provide $300 million for cybersecurity improvements each year in the Drinking Water and Clean Water State Revolving Funds.
- Require large drinking water and wastewater systems to assess cybersecurity risks as part of their existing risk and resilience planning.
- Direct USEPA to establish tiered cybersecurity standards.
- Extend Federal cyber incident reporting requirements to State and locally owned water and wastewater systems that were previously exempt.
- Protect sensitive cybersecurity information submitted by utilities from public disclosure.
- Provide pathways for States with sufficient capacity to assume primary enforcement responsibility while allowing USEPA to lead as needed.
- Smaller water systems would be prioritized for Federal financial assistance.
- USEPA would be required to work with water utilities through a new technical advisory committee to develop practical cybersecurity standards.
The Update will continue to follow the Water Cyber Shield Act through the legislative process and provide updates.