Utilities Security Community

Utilities Security Community,

In a rare collaboration between these 3 entities, CISA, the Environmental Protection Agency (EPA), and the Federal Bureau of Investigation (FBI) have released the joint fact sheet, Top Cyber Actions for Securing Water Systems.

This fact sheet outlines the following practical actions Water and Wastewater Systems (WWS) Sector entities can take to better protect water systems from malicious cyber activity.    It also includes an updated list of free resources to help Public Water Systems (PWS) address the most common vulnerabilities many PWSs have today.

In the wake of the EPA having to rescind their memo requiring all PWSs to institute 33 Cybersecurity controls via their regular Sanitary Survey, this is a more digestible "carrot" than the controversial memo (for which they were sued by the AWWA and several states).

It's worth a read and I think it is pretty actionable, even for smaller, less mature, and resource-constrained utilities.