Is Your Utility Cyber Aware?
Water security is national security. Like other critical infrastructure, the water sector can be a target of cybersecurity threats and hazards. The Federal Bureau of Investigation (FBI) and U.S. Environmental Protection Agency (EPA) are partnering on a joint venture to increase cyber awareness in the water sector.
Did you know?
Less than 25 percent of water and wastewater operators surveyed perform annual cybersecurity risk assessments. Develop and implement a plan to periodically assess the risks and threats to your organization’s IT and OT system.
Basic security hygiene still protects against 98 percent of attacks. Implement a cybersecurity framework to reduce your cyber vulnerability.
View EPA's:
- Cybersecurity Assessment and Technical Assistance
- Cybersecurity Tabletop Exercise (TTX)
- Cybersecurity Incident Action Checklist (pdf)
View the Cybersecurity and Infrastructure Security Agency's (CISA) Cybersecurity Performance Goals and the National Institute of Standards and Technology (NIST) SP 800-53 Rev. 5, Security and Privacy Controls for Info Systems and Organizations.
View CISA's information on MFA.
For more cybersecurity resources, visit EPA's Cybersecurity Best Practices for the Water Sector and NIST's Computer Security Resource Center.
Get the Word Out
Join FBI and EPA in spreading cyber awareness at your water or wastewater utility. Download and share the pictures below to get the word out.
- FBI and EPA Ad: Perform Risk Assessments (jpg)
- FBI and EPA Ad: Enable MFA (jpg)
- FBI and EPA Ad: Basic Security Hygiene (jpg)
Additional Information
Stay Up-to-Date on Cyber Alerts
CISA Alerts and EPA newsletters provide timely information about current security issues, vulnerabilities, and exploits. Find past and current alerts.
View FBI's Industry Alerts and annual cyber reports.