18706_Authority_Oct

municipalauthorities.org | 21 EPA has created many detailed guides, checklists and plan templates for your use. This article discusses these resources and offers links for you and your staff to learn more. In addition, EPA has offered FREE technical assistance workshops, and cyber evaluations to the water sector. EPA has also worked closely with the FBI and the Department of Homeland Security/Cybersecurity and Infrastructure Security Agency or CISA to provide alerts to the water sector with identified threats and actionable steps. A good place to start at your utility is with an evaluation either by the utility performing a self-assessment or requesting EPA assistance. EPA’s Water Cybersecurity Assessment Tool (epa.gov/system/files/documents/2024-08/epa-water-cybersecurity-assessment- tool-3.1_links.xlsx?) supports a self-assessment of a drinking water or wastewater system for identifying cybersecurity gaps and developing a cybersecurity risk mitigation plan. EPA’s free support for assessments can be obtained by completing an online request form (epa.gov/waterresilience/ forms/epas-water-sector-cybersecurity-evaluation-program) . CISA’s Cyber Security Evaluation Tool (CSET) is a desktop tool for self-evaluations (cisa.gov/downloading-and-installing- cset) . CISA’s vulnerability scanning can help your utility identify and address cybersecurity weaknesses that an attacker could use to impact your system. The benefits of this service include identifying internet-accessible assets and vulnerabilities in your utility’s assets connected to the internet, and so much more. (Cyber Vulnerability Scanning for Water Utilities - cisa.gov/sites/default/files/2023-09/23-05187d - Water Vulnerability Scanning Fact SheetV2_508c.pdf) A cyber response plan, either separate or integrated into the Safe Drinking Water Act (SDWA) required emergency response plan for community water suppliers serving greater than 3,300 persons, can be crafted using an EPA’s template which will be available soon. t hIs Is an ever - evolvIng landscape ; therefore , cybersecurIty needs to be thought about every day . Continued on page 41.