Today, CISA, the Federal Bureau of Investigation (FBI), and the Environmental Protection Agency released a joint Incident Response Guide for the Water and Wastewater Systems (WWS) Sector. The guide includes contributions from over 25 WWS Sector organizations spanning private industry, nonprofit, and government entities – including WaterISAC. This coordination enabled CISA, FBI, and EPA to develop a guide with meaningful value to WWS sector organizations.
Specifically, the guide provides information about the federal support available at each stage of the cyber incident response (IR) lifecycle and aims to enhance WWS sector cybersecurity by:
- Establishing clear guidance for reporting cyber incidents;
- Connecting utilities with available cybersecurity resources, services, and no-cost trainings – to include engaging with WaterISAC;
- Empowering utilities to build a strong cybersecurity baseline to improve cyber resilience and cyber hygiene – such as leveraging WaterISAC’s 15 Cybersecurity Fundamentals for Water and Wastewater Utilities; and
- Encouraging utilities to integrate into their local cyber communities.
WaterISAC urges members to review this guidance and incorporate it into organizational cyber incident response planning. Additionally, utilities can visit CISA.gov/water for additional sector tools, information, and resources.