17414_Authority_April_2024

40 The Authority | APRIL 2024 C yBErsECurity Cyber Resilience: Federal Partners Release Incident Response Guide for the Water and Wastewater Systems (WWS) Sector Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Environmental Protection Agency released a joint Incident Response Guide for the Water and Wastewater Systems (WWS) Sector. The guide includes contributions from over 25 WWS Sector organizations spanning private industry, nonprofit, and government entities – including WaterISAC. This coordination enabled CISA, FBI, and EPA to develop a guide with meaningful value to WWS sector organizations. Specifically, the guide provides information about the federal support available at each stage of the cyber incident response (IR) lifecycle and aims to enhance WWS sector cybersecurity by: • Establishing clear guidance for reporting cyber incidents; • Connecting utilities with available cybersecurity resources, services, and no-cost trainings – to include engaging with WaterISAC; • Empowering utilities to build a strong cybersecurity baseline to improve cyber resilience and cyber hygiene – such as leveraging WaterISAC’s 15 Cybersecurity Fundamentals for Water and Wastewater Utilities; and • Encouraging utilities to integrate into their local cyber communities. Please review this guidance and incorporate it into your organizational cyber incident response planning. Additionally, visit CISA.gov/water for additional sector tools, information, and resources. S Source: EPA Region 3 To view the following: Incident Response Guide for the Water and Wastewater Systems (WWS) Sector: www.cisa. gov/resources-tools/resources/water-and- wastewater-sector-incident-response-guide-0 Cyber incident response (IR) lifecycle: www. csrc.nist.gov/pubs/sp/800/61/r2/final WaterISAC’s 15 Cybersecurity Fundamentals for Water and Wastewater Utilities: www. waterisac.org/fundamentals EPA Cybersecurity Assessments Hacking incidents have occurred at several water systems, causing concern for the safety of all water system operations, and drinking water quality. Are you adequately addressing cybersecurity? Don’t know where to start? EPA is offering FREE cybersecurity assessments. Visit www.epa.gov/ waterresilience/forms/epas-water-sector- cybersecurity-evaluation-program