Cybersecurity
Water/Wastewater Cybersecurity
Sector-specific guidance for water and wastewater utilities.
Written guides in this section
Full references, procedures, and diagnostic guides published under Water/Wastewater Cybersecurity.
AWIA Requirements
What the 2018 water infrastructure act requires of community water systems: a risk and resilience assessment and an emergency response plan, certified on a schedule by size and repeated every five years, with cybersecurity named in both, and who is covered.
9 min readUpdated Sep 5, 2026
EPA Guidance
What the federal environmental agency provides to water and wastewater utilities on cybersecurity and what it expects: the free assessment, the checklist aligned with federal goals, joint incident response guidance, the enforcement position, and how to use it.
8 min readUpdated Sep 5, 2026
CISA Resources
What the federal cybersecurity agency provides to utilities without charge: the performance goals, regional advisors, external vulnerability scanning, control system advisories, the exploited catalog, a self-assessment tool, exercises, and incident reporting.
8 min readUpdated Sep 5, 2026
Small Utility Cybersecurity Priorities
What a utility with a few operators and no IT department should do first: the ten measures that remove most of the risk for the least money and time, in the order to do them, with what each one costs, what it prevents, and how to know it is done.
10 min readUpdated Sep 5, 2026
Water and Wastewater Utility Threat Landscape
What has actually happened at water utilities, what those incidents had in common, and the small number of controls that would have prevented most of them.
8 min readUpdated Aug 28, 2026
Topics in this area
Utility Threat Landscape
What has actually happened at water utilities, and what those incidents had in common.
AWIA Requirements
AWIA Requirements — practical reference notes for controls engineers, integrators, and technicians working with water/wastewater cybersecurity.
EPA Guidance
EPA Guidance — practical reference notes for controls engineers, integrators, and technicians working with water/wastewater cybersecurity.
CISA Resources
CISA Resources — practical reference notes for controls engineers, integrators, and technicians working with water/wastewater cybersecurity.
Small Utility Priorities
Small Utility Priorities — practical reference notes for controls engineers, integrators, and technicians working with water/wastewater cybersecurity.
Direct contact
Have a controls question?
Reach Eric Sullivan directly about anything on this site, a controls or automation topic, or one of his personal projects.
References to manufacturers, products, model numbers, software platforms, technical specifications, companies, standards organizations, or other organizations are provided for informational purposes and do not imply sponsorship, endorsement, authorization, or affiliation unless expressly stated. Manufacturer specifications must be independently verified against current manufacturer documentation.