Skip to main content
U.S. flag

An official website of the United States government

Here’s how you know

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

HTTPS

Secure .gov websites use HTTPS
A lock (LockA locked padlock) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    • Environmental Topics
    • Air
    • Bed Bugs
    • Cancer
    • Chemicals, Toxics, and Pesticide
    • Emergency Response
    • Environmental Information by Location
    • Health
    • Land, Waste, and Cleanup
    • Lead
    • Mold
    • Radon
    • Research
    • Science Topics
    • Water Topics
    • A-Z Topic Index
    • Laws & Regulations
    • By Business Sector
    • By Topic
    • Compliance
    • Enforcement
    • Laws and Executive Orders
    • Regulations
    • Report a Violation
    • Environmental Violations
    • Fraud, Waste or Abuse
    • About EPA
    • Our Mission and What We Do
    • Headquarters Offices
    • Regional Offices
    • Labs and Research Centers
    • Planning, Budget, and Results
    • Organization Chart
    • EPA History

Breadcrumb

  1. Home
  2. Ground Water and Drinking Water

Is Your Utility Cyber Aware?

Water security is national security. Like other critical infrastructure, the water sector can be a target of cybersecurity threats and hazards. The Federal Bureau of Investigation (FBI) and U.S. Environmental Protection Agency (EPA) are partnering on a joint venture to increase cyber awareness in the water sector. 


EPA Office of Ground Water and Drinking Water and FBI logos

Did you know? 

Less than 25 percent of water and wastewater operators surveyed perform annual cybersecurity risk assessments. Develop and implement a plan to periodically assess the risks and threats to your organization’s IT and OT system.

Basic security hygiene still protects against 98 percent of attacks. Implement a cybersecurity framework to reduce your cyber vulnerability.

View EPA's:

  • Cybersecurity Tabletop Exercise (TTX)
  • Cybersecurity Incident Action Checklist (pdf) (1.38 MB)

View the Cybersecurity and Infrastructure Security Agency's (CISA) Cybersecurity Performance Goals and  the National Institute of Standards and Technology (NIST) SP 800-53 Rev. 5, Security and Privacy Controls for Info Systems and Organizations. 

View CISA's information on MFA.

For more cybersecurity resources, visit EPA's Cybersecurity Best Practices for the Water Sector and NIST's Computer Security Resource Center.


Get the Word Out

Join FBI and EPA in spreading cyber awareness at your water or wastewater utility. Download and share the pictures below to get the word out.

  • FBI and EPA Ad: Perform Risk Assessments (jpg)
  • FBI and EPA Ad: Enable MFA (jpg)
  • FBI and EPA Ad: Basic Security Hygiene (jpg)

Additional Information

This picture shows the cybersecurity TTX, Incident Action Checklist and TA Flyer.

Stay Up-to-Date on Cyber Alerts

CISA Alerts and EPA newsletters provide timely information about current security issues, vulnerabilities, and exploits. Find past and current alerts.

View FBI's Industry Alerts and annual cyber reports.

Report Cyber Incidents

  • Report a cyber incident or threat with the FBI.
  • Report a cyber incident with CISA.
Contact Us to ask a question, provide feedback, or report a problem.
Last updated on April 24, 2025
  • Assistance
  • Spanish
  • Arabic
  • Chinese (simplified)
  • Chinese (traditional)
  • French
  • Haitian Creole
  • Korean
  • Portuguese
  • Russian
  • Tagalog
  • Vietnamese
United States Environmental Protection Agency

Discover.

  • Accessibility Statement
  • Budget & Performance
  • Contracting
  • EPA www Web Snapshot
  • Grants
  • No FEAR Act Data
  • Plain Writing
  • Privacy
  • Privacy and Security Notice

Connect.

  • Data
  • Inspector General
  • Jobs
  • Newsroom
  • Regulations.gov
  • Subscribe
  • USA.gov
  • White House

Ask.

  • Contact EPA
  • EPA Disclaimers
  • Hotlines
  • FOIA Requests
  • Frequent Questions
  • Site Feedback

Follow.