CISA, EPA, and FBI Release Incident Response Guide for the Water Sector

The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), and Environmental Protection Agency (EPA) published a guide to assist owners and operators in the Water and Wastewater Systems (WWS) Sector with best practices for cyber incident response and information about federal roles, resources, and responsibilities.

Developed in collaboration with over 25 WWS Sector industry, nonprofit, and state/local government partners, including ASDWA, this Incident Response Guide aims to enhance WWS Sector cybersecurity by:

  1. Establishing clear guidance for reporting cyber incidents,
  2. Connecting utilities with available cybersecurity resources, services, and no-cost training,
  3. Empowering utilities to build a strong cybersecurity baseline to improve cyber resilience and cyber hygiene, and
  4. Encouraging utilities to integrate into their local cyber communities.

All WWS utilities are encouraged to use this incident response guide to augment their incident response planning and collaboration with federal partners and the WWS before, during, and following a cyber incident. Familiarity with this guide will better prepare WWS utilities to respond to—and recover from—a cyber incident.

WWS utilities are encouraged to visit CISA’s Water and Wastewater Systems Cybersecurity webpage for more information and resources.