(TLP:CLEAR) EPA to Conduct 2026 National Cyber Drill Focused on Operating Without Telecommunications and Internet Connectivity

Summary: The EPA will host its 2026 National Cyber Drill on July 8, challenging drinking water and wastewater utilities to maintain critical operations during a simulated disruption of telecommunications and internet services. The exercise will place participants in a “disconnected” environment with limited or no access to SCADA remote connectivity, cloud services, email, VoIP, and other digital communications. Utilities will test their ability to sustain operations through manual processes, identify dependencies on communications infrastructure, and evaluate continuity plans under degraded conditions.

In advance of the drill, EPA is hosting an informational session on June 4 to provide guidance on transitioning to manual operations and answer participant questions. Continuing Education Units (CEUs) will be available in most states.

Analyst Note: This exercise addresses a realistic and often overlooked risk scenario for the water sector: the loss of telecommunications and internet connectivity resulting from cyber, physical, or infrastructure-related incidents. As utilities become increasingly dependent on remote access, cloud-based services, and digital communications, the ability to safely operate during extended outages becomes a critical resilience capability.

WaterISAC encourages utilities to use this opportunity to validate manual operating procedures, identify single points of failure, and assess how critical business and operational functions would be sustained in a degraded communications environment. Participation can help utilities strengthen preparedness for a range of disruptive events that extend beyond traditional cybersecurity incidents.

Original Sources: https://www.epa.gov/cyberwater/epa-2026-national-cyber-drill

Related WaterISAC PIRs: 6, 8, 12