The U.S. Environmental Protection Agency (EPA) released new and updated planning tools that water systems can use to prevent and respond to cybersecurity incidents. The resources support public water systems in protecting access to safe water and in conducting cybersecurity risk and emergency planning.
EPA issued four resources: an updated Emergency Response Plan Guide for Wastewater Utilities; a new template to develop a Cybersecurity Incident Response Plan; two new Incident Action Checklists to help drinking water utilities prepare for, respond to, and recover from events such as wildfires, power outages, floods, and cyber incidents; and a Cybersecurity Procurement Checklist to help utilities assess supplier cybersecurity practices during procurement.
EPA stated it will continue working with the Cybersecurity and Infrastructure Security Agency, state programs, and water associations to reduce cyber risks at water systems and to implement best practices quickly as issues arise.
In August, EPA announced more than $9 million in grants for midsize and large water systems to address cybersecurity threats and improve resilience to extreme weather. EPA also published a report with 10 recommendations to strengthen cyber resilience in the water sector.