CISA’s got your back – water utilities, respond with confidence

In a joint effort with the FBI and the Environmental Protection Agency, the Cybersecurity and Infrastructure Security Agency (CISA) has released an incident response guide specifically aimed at water and wastewater sector (WWS) utility operators. The guide highlights cybersecurity best practices for the sector, such as hardening security posture, increasing information sharing, and building incident response plans. It also emphasizes the importance of collaboration with the federal government in the event of an incident. The publication followed recent attacks on WWS utility operators, including a campaign conducted by threat actors affiliated with the Iranian government. The incident response guide includes sections on preparation, response, and recovery.

Key Points:

• CISA, in collaboration with the FBI and the Environmental Protection Agency, has released an incident response guide for water and wastewater sector utility operators.
• The guide outlines best practices for hardening security posture, increasing information sharing, and building incident response plans.
• The publication comes in response to recent cyberattacks on water and wastewater sector utility operators, including a campaign conducted by threat actors affiliated with the Iranian government.
• CISA and the FBI are prepared to offer tailored guidance, technical support, and forensics assistance in the event of an incident.