Tip of the Week – September 3, 2026

Practice Your Cyber Incident Response Plan

Having an incident response plan is important, but knowing whether it works is even more important. Water utilities should regularly exercise their cyber incident response plans through tabletop exercises or drills involving IT, OT, management, and key vendors. Practicing realistic scenarios can reveal gaps in communication, decision-making, and recovery procedures before a real incident occurs.

Resource(s): EPA’s Cybersecurity Exercises and Technical Assistance Courses