(TLP:CLEAR) EPA Releases New Resources to Help Water Utilities Strengthen their Cybersecurity
Created: Thursday, October 30, 2025 - 13:42
Categories: Cybersecurity, Federal & State Resources, Security Preparedness
Summary: Last week, EPA released new and updated planning tools that water systems across the country can use to help prevent and respond to cybersecurity incidents. These tools will help all public water systems protect access to safe water and aid systems conducting risk and emergency planning for cybersecurity.
The following resources have been developed and updated to better address potential vulnerabilities and ensure all water systems have the best information and emergency safeguards available:
- Emergency Response Plan (ERP) Guide for Wastewater Utilities: This updated plan describes strategies, resources, plans, and procedures utilities can use to prepare for and respond to an incident, natural or man-made, that threatens life, property, or the environment. The instructions and template were updated this month to include new cybersecurity materials for practical mitigation options for wastewater utilities.
- Template for Developing an Incident Response Plan: This new template assists drinking water and wastewater systems with developing a Cybersecurity Incident Response Plan (CIRP).
- Incident Action Checklists: EPA is publishing two new checklists, as requested by the water sector, to help drinking water utilities prepare for, respond to, and recover from specific emergencies such as wildfires, power outages, floods, and cybersecurity incidents. See WaterISAC’s analysis on the Incident Action Checklist here.
- Cybersecurity Procurement Checklist: This checklist will help water and wastewater utilities incorporate cybersecurity into the procurement process. It will help utilities generally assess the cybersecurity practices of suppliers, including vendors and manufacturers, and their products during procurement.
Analyst Note: WaterISAC encourages members to make use of EPAs new and updated resources. The ERP, IRP, incident action checklists, and cybersecurity procurement checklist are all valuable tools that water and wastewater utilities can make use of to better protect themselves during this increasingly volatile time in the sector. Access WaterISAC’s latest annual Threat Analysis Report to better understand the threats facing the sector, and utilize the above tools from EPA to help defend against them.
Additionally, members are encouraged to attend the free upcoming EPA Cybersecurity Technical Courses for Water Systems listed below. Many states have approved these trainings for Continuing Education Units. The list of approved states can be found on the corresponding registration pages.
Free Upcoming EPA Cybersecurity Technical Assistance Courses for Water Systems
Cybersecurity 102 Wednesday, November 5, 2025 1:00 – 2:30 PM ET
Join EPA for a free webinar on understanding how Cybersecurity can impact Operational Technology systems. This webinar is for everyone, not just information technology personnel, as it will equip you with the skills to navigate today’s digital threats. Register here.
Cybersecurity 103 Wednesday, November 12, 2025 1:00 – 2:30 PM ET
Join us to expand your understanding of basic cybersecurity key terms, foundational principles, and a snapshot of incident history in the Water Sector. Attendees will be shown examples of recent cyber incidents as well as cyber-related resources. Register here.
Cybersecurity Refresher Tuesday, November 18, 2025 1:00 – 2:00 PM ET
Meet your annual cybersecurity training requirement and gain critical knowledge on the foundational understandings of cybersecurity and how it applies to the Water Sector. Register here.
Water Cybersecurity Assessment Tool (WCAT) Information Session Wednesday, November 19, 2025 1:00 – 3:30 PM ET
Join us to learn more about how to use the Water Cybersecurity Assessment tool. This tool can be utilized to conduct cybersecurity assessments at water and wastewater systems. Register here.
Original Source: https://www.epa.gov/newsreleases/epa-releases-new-resources-help-protect-water-systems-strengthen-cyber-resilience
Additional Reading:
Related WaterISAC PIRs: 12