EXCLUSIVE — The Environmental Protection Agency plans to launch new cybersecurity tools to prevent and respond to cyberattacks on the United States’ water systems amid increased attacks by foreign adversaries.
To curb attacks from Russia and China, the EPA has introduced new, updated tools for water and wastewater systems as of Thursday to help mitigate potential attacks.
Jess Kramer, EPA assistant administrator for water, said in a statement, “Strengthening cybersecurity for the U.S. water sector is critically important because cyber resilience and water security are key to national security. Water systems across the country are facing cyberattacks that threaten the ability to provide safe water.”
“As part of advancing the Powering the Great American Comeback Initiative, EPA is committed to ensuring every American has access to clean and safe water. Guarding against cyberattacks is central to this mission,” the statement continued.
Last year, the Biden administration’s EPA warned water facilities about hacking threats after Russian-linked hackers targeted a Texas water facility, causing a tank to overflow. They also attacked a wastewater treatment facility in Indiana the following April. The administration also warned that the Chinese hacker group known as Volt Typhoon had compromised the information technology of drinking water systems.
The EPA’s announcement includes updating its Emergency Response Plan Guide for Wastewater Utilities to enhance preparedness against cyberattacks. It offers strategies and resources for utilities to address natural or man-made incidents that threaten life, property, or the environment.
It has also updated its Template for Developing an Incident Response Plan to assist drinking water and wastewater systems with developing a Cybersecurity Incident Response Plan.
BURGUM REJECTS COMPROMISE ON WIND ENERGY OR PERMITTING REFORM
The EPA released Incident Action Checklists to help drinking water utilities prepare for emergencies such as natural disasters, power outages, and cybersecurity incidents. Additionally, a Cybersecurity Procurement Checklist has been introduced to help water utilities integrate cybersecurity into their procurement processes and evaluate suppliers’ practices.
The move by the EPA follows its August announcement, which granted over $9 million in funding to midsize and large water systems to help mitigate cybersecurity threats and improve resilience against extreme weather events.
