Wastewater Treatment Facilities Cybersecurity

As wastewater treatment technologies develop and grow, the need for protective measures, like cybersecurity, become all the more essential. Here you will find information on sector-specific guidance on the cybersecurity requirements and recommendations for improving the cybersecurity posture of wastewater treatment facilities and wastewater to develop and improve their cybersecurity posture. collections systems. This page also serves to provide resources and contacts for wastewater treatment facilities.

Cybersecurity Assessments and Services

One of the first steps in building a facility's cybersecurity is to assess its current resiliency, practices, and capabilities. No facility is 100% secure; however, steps can be taken to reduce the risk and minimize impacts from cyberattacks. Below is information on several types of free cybersecurity assessments available for wastewater treatment facilities. Facilities can also elect to utilize another third-party cybersecurity assessment.

If this is your or your facility's first time going through a cybersecurity assessment, we encourage walking through this evaluation with representative from the associated agency.

Free Assessments

EPA Water Cybersecurity Assessment Tool Excel file, less than 1

Water Sector Cybersecurity Risk Managemenet Guidance PDF file, about 4

CISA Vulnerability Scanning Fact Sheet PDF file, less than 1

CISA Critical Infrastructure Cybersecurity Shared Services PDF file, less than 1

Cybersecurity Incidents and Reporting

In addition to the above free cybersecurity assessments detailed above, there are additional preparatory measures facilities can take by developing procedures for reporting, responding to, and recovering from cybersecurity incidents.

CISA Sector Incident Response Guide PDF file, about 1

EPA Cybersecurity Incident Action Checklist PDF file, less than 1

Wastewater Utility Emergency Response Plan Template PDF file, less than 1

Cybersecurity Resources

This section contains some additional resources and information that can be used to develop other areas of your facility's cybersecurity program. Templates for emergency communication plans, emergency response plans, and some fundamentals in building cybersecurity are listed.

Cybersecurity Checklist Final.pdf PDF file, less than 1

Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators PDF file, about 988

Water ISAC: 12 Cybersecurity Fundamentals for Water and Wastewater Utilities PDF file, about 8

CISA Physical Security Planning Workbook PDF file, about 3

Cybersecurity Training

All facility staff play an important role in detecting, preventing, and responding to the impacts of cyberattacks that may occur. Your facility's Township, City, or maybe even third-party services may provide annual cybersecurity training for your staff. Coordinating with them is one way to continue providing quality and frequent training for your staff.

There are also a number of third-party services that offer cybersecurity training to municipalities at no additional cost, several such services are listed below:

CISA Learning

EPA Cybersecurity Training