1. Membership in WaterISAC is open to U.S. Water and Wastewater Utilities, as well as Water and Wastewater utilities that are domiciled in countries that fall under the Five Eyes Security Alliance, their consultants and contractors, government and law enforcement partners who support water and wastewater utilities. All membership applications are reviewed.
2. Confidentiality of Sensitive Information and Data Classification and Sharing. WaterISAC owns or has permission to use, distribute, or store information, materials, knowledge, and facts that are sensitive from a security perspective, confidential and/or proprietary, known hereafter as "Sensitive Information." Without limiting the foregoing scope of confidentiality: Member acknowledges that it may receive Sensitive Information, including information of other members of the WaterISAC pursuant to its mission. Members will treat all information according to the “Traffic Light Protocol” (information handling policy). All information, including Sensitive Information, is to be treated CONFIDENTIAL (TLP:AMBER) as default unless otherwise specified according to the Traffic Light Protocol (TLP). WaterISAC follows TLP according to the FIRST Standards Definitions and Usage Guidance.
• Information classified as TLP:RED may not be shared with anyone else. In the context of a meeting, for example, TLP:RED information is limited to those present at the meeting.
• Information classified as TLP:AMBER+STRICT is restricted to participants’ organization on a need-to-know basis.
• Information classified as TLP:AMBER can only be shared with members of their own organization and its clients, but only on a need-to-know basis to protect their organization and its clients and to prevent further harm.
• Information classified as TLP:GREEN may be shared with peers and partner organizations within their community, but not via publicly accessible channels. Note: when “community” is not defined, assume the cybersecurity/defense community.
• Information classified as TLP:CLEAR is information that can be shared with no limit on disclosure but is subject to standard copyright rules.
3. Commercial Use Restrictions. Work products created by WaterISAC may not be resold or otherwise used for commercial purposes except under license agreement with WaterISAC or other express written consent of WaterISAC. The commercial use of information produced by other organizations is subject to the originators’ commercial use restrictions.
4. Public Disclosure Laws. Members may not retain, record, or print Sensitive Information that cannot be protected from public disclosure.
5. Return of Sensitive Information. Upon request of WaterISAC at any time and for any reason, members must return Sensitive Information, including original and any and all copies, in whatever form or media, in their possession
6. Termination of Membership. Members remain subject to these Terms and Conditions despite termination of their membership.
7. Breach. Unauthorized disclosure of Sensitive Information may cause WaterISAC, the nation, and individual drinking water and wastewater utilities and their consumers irreparable damage for which WaterISAC cannot be reasonably or adequately compensated in damages. WaterISAC shall therefore be entitled to seek injunctive relief to prevent such disclosure and may rescind membership and participation in WaterISAC if these Terms and Conditions are violated.
8. Disclaimer. Information submitted to or disseminated by WaterISAC may be unevaluated and unverified. WaterISAC makes no representation or warranty with respect to the accuracy, completeness, or currency of such information, and disclaims any and all liability whatsoever with respect to or in any way related to such information. Members bear the sole responsibility for, and assume all risks and liabilities related to, the taking or not taking of any action based on such information.
9. By joining WaterISAC, members agree to fully comply with these Terms and Conditions, including any amendments thereto, and to otherwise abide by the provisions of this Agreement. Individuals affirm that the information provided in connection with the member’s application for WaterISAC membership is true and correct.
