17414_Authority_April_2024

42 The Authority | APRIL 2024 Page 2 of 2 Cybersecurity Planning EPA’s Cybersecurity Incident Action Checklist provides utilities with guidance for preparation, response, and recovery of a cybersecurity incident. By sharing examples from utilities of all sizes who have established successful cybersecurity programs, EPA has published the Water Sector Cybersecurity Case Studies to serve as a guide to similar utilities that seek to create their own cybersecurity program. Cybersecurity Funding Opportunities Most cyber hygiene practices can be implemented at minimal cost beyond time because they are focused on training and putting processes in place. When there are costs, there are several funding resources available to support drinking water and wastewater systems in implementing cyber projects. These include: • Clean Water State Revolving Fund (CWSRF): Provides assistance to any public, private, or nonprofit entity for measures to increase the security of publicly owned treatment works, including cybersecurity. • Drinking Water State Revolving Fund (DWSRF): Provides assistance with All-Hazard Risk and Resilience Assessment, Training, Equipment, and Infrastructure, including cybersecurity. • CISA State and Local Cybersecurity Grant Program (SLCGP): Cybersecurity grant program for states, cities, counties, and towns from state administrative agency. Sub-award applications for cities, counties and towns must be submitted to the respective state administrative agency. • Drinking Water System Infrastructure Resilience and Sustainability Program: This grant program can be used for planning, design, construction, implementation, operation, or maintenance of a program or project that increases resilience of public water systems, including cybersecurity. • Tribal Cybersecurity Grant Program: DHS grant program for tribal governments to help address cybersecurity risks and threats to their information systems and improve their security. Cybersecurity Workshops for Primacy Agencies EPA hosts workshops across the country to assist primacy agencies with developing a cybersecurity assessment program plan for their public water systems, using state authorities or within a voluntary construct. These workshops provide information on the potential options primacy agencies can use to assess PWS cybersecurity, a detailed overview of cybersecurity assessments, cybersecurity assessment resources, funding, training, and technical assistance available to support cybersecurity at public water systems. Threat Briefings and Alerts for Water and Wastewater Systems EPA in conjunction with the Department of Homeland Security - Cybersecurity and Infrastructure Security Agency (CISA) offers Secret level in-person threat briefing sessions to water systems. These briefings provide an overview of classified information related to water and wastewater sector security threats and preparedness. EPA issues alerts designed for the water sector for certain incidents. Partnerships to Support Cybersecurity Incident Response EPA continues to coordinate with CISA and FBI when a water or wastewater system reports a cybersecurity incident. To assist water systems in the incident reporting process, EPA’s fact sheet outlines the process, including instructions and contact information for EPA, FBI, and CISA. EPA, with our partners, will continue to leverage Cybersecurity Awareness Month each October to promote the cybersecurity tools and resources offered to the water sector through webinars, newsletters, and outreach.