Today, the water sector, EPA and the White House National Security Council announced the launch of the Industrial Control Systems Cybersecurity Initiative – Water and Wastewater Sector Action Plan - a 100-day “surge” to investigate the pros and cons of utilities implementing industrial control system (ICS) monitoring and sharing monitoring results with the Cybersecurity and Infrastructure Security Agency (CISA).
The White House’s purpose is to encourage utilities to install ICS monitoring and share the data with CISA so that analysts there may conduct “threat hunting” for malicious activity in water utility operational technology systems.
The Water Sector Coordinating Council (WSCC), which represents the national water and wastewater associations and provides feedback on federal security programs, is a key partner in the effort.
“The [WSCC] appreciates the partnership with the [EPA] and the National Security Council to advance and mature cybersecurity across the Water and Wastewater Systems Sector. This plan represents a key step towards achieving that goal, and we look forward to continued engagement to support the sector vision of secure and resilient drinking water and wastewater infrastructure,” said Nicholas Santillo Jr., chair of the WSCC.
After a pilot involving very large water systems, if the water sector believes the program will have benefits for utilities, the sector will work with utilities and federal agencies to expand the program and offer support, such as technical assistance.
The White House has already undertaken such 100-day sprints with power companies and gas pipelines. About 150 power companies and several pipeline companies are participating, using various technologies to share monitoring information in one way or another with CISA.
WaterISAC looks forward to working with EPA, CISA, and the White House on this effort and to advising water systems that may wish to volunteer to participate in the program.
