Protecting networks, devices and data from unauthorized access or criminal use are ongoing concerns for consumers, governments and businesses. Cybersecurity has emerged as a major issue for the U.S. water sector, as cyberattacks against water systems have increased several-fold in recent years and can disrupt or contaminate drinking water and compromise the treatment of wastewater.

In response to this threat, the U.S. Environmental Protection Agency has developed planning tools that enhance cyber-resilience and safeguard access to clean water.

The Emergency Response Plan guide for wastewater utilities outlines strategies, resources, plans and procedures utilities can use to prepare for and respond to an incident, natural or man-made, that threatens life, property or the environment. A template for developing an Incident Response Plan assists drinking water and wastewater systems with developing a Cybersecurity Incident Response Plan.

In addition, new Incident Action Checklists have been prepared to help drinking water utilities prepare for and recover from specific emergencies such as wildfires, power outages, floods and cybersecurity incidents. A Cybersecurity Procurement Checklist will help water and wastewater utilities incorporate cybersecurity into the procurement process and assess the cybersecurity practices of suppliers, including vendors and manufacturers and their products during procurement.