Today, CISA and the EPA jointly released a Water Sector Cybersecurity Toolkit to aid water and wastewater sector stakeholders in bolstering their cybersecurity preparedness. The toolkit can help water and wastewater utilities build their cybersecurity foundation and progress to implement more advanced, complex tools to strengthen their defenses and stay ahead of current threats.
CISA and EPA developed the toolkit to highlight the most relevant CISA and EPA resources to protect against, and reduce impacts from, threats posed by malicious cyber actors looking to attack water and wastewater systems. CISA brings technical expertise as the nation’s cyber defense agency and EPA, as the Sector Risk Management Agency, offers extensive sector expertise and resources.
For organizations that are just starting to develop their cybersecurity strategies, CISA includes the fundamental cyber hygiene steps which are basic, low or no cost steps that every organization and individual should take to improve their security.
The toolkit provides resources to enable sector stakeholders to proactively assess vulnerabilities and implement solutions to reduce risk and increase resilience. CISA and EPA will update the toolkit periodically to include new resources and respond to the evolving needs of the sector. Among other resources, the toolkit includes:
- Incident Response Guide: Water and Wastewater Sector
- CISA's Free Cyber Vulnerability Scanning for Water Utilities
- EPA Water Resilience Cybersecurity Help Desk
- EPA Free Cybersecurity Assessment Service
- Cross-Sector Cybersecurity Performance Goals
- EPA Cybersecurity for the Water Sector
For more information, access CISA.