Skip to main content
U.S. flag

An official website of the United States government

Here’s how you know

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

HTTPS

Secure .gov websites use HTTPS
A lock (LockA locked padlock) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    • Environmental Topics
    • Air
    • Bed Bugs
    • Cancer
    • Chemicals, Toxics, and Pesticide
    • Emergency Response
    • Environmental Information by Location
    • Health
    • Land, Waste, and Cleanup
    • Lead
    • Mold
    • Radon
    • Research
    • Science Topics
    • Water Topics
    • A-Z Topic Index
    • Laws & Regulations
    • By Business Sector
    • By Topic
    • Compliance
    • Enforcement
    • Laws and Executive Orders
    • Regulations
    • Report a Violation
    • Environmental Violations
    • Fraud, Waste or Abuse
    • About EPA
    • Our Mission and What We Do
    • Headquarters Offices
    • Regional Offices
    • Labs and Research Centers
    • Planning, Budget, and Results
    • Organization Chart
    • EPA History

Breadcrumb

  1. Home
  2. Water Resilience

Cybersecurity Awareness Month 2024

Tips for Drinking Water and Wastewater Systems

Week 1 | Week 2 | Week 3 | Week 4


 Week 3 - Phishing

Over 90% of cyber-attacks start with a phishing email
  1. What is phishing?
    1. Phishing is when criminals use fake emails or social media posts to direct a user into clicking on a malicious link.  Once the link is clicked, malware can be installed onto the system.
  2. Questions to ask to identify phishing
    1. Is the greeting very generic?
    2. Is it too good to be true?
    3. Does it include language that increases the urgency to respond?
    4. Is it an email that is strange to receive?
    5. Does it include a request for personal information?
    6. Does the senders email address match who they are claiming to represent?
    7. Are there any spelling/grammar errors?
  3. What to do when a phishing attempt is detected
    1. Report it to IT manager or security as quickly as possible.
    2. DO NOT click on any links.
    3. Delete the email.
    4. If available, use the “Report Phishing” function in email.

Water Resilience

  • Basics of Water Resilience
  • Water Resilience Tools
  • America's Water Infrastructure Act (AWIA)
    • AWIA Section 2013
    • AWIA Section 2018
  • Cybersecurity
    • Cybersecurity Assessments
    • Cybersecurity Planning
    • Cybersecurity Exercises and Technical Assistance
    • Cybersecurity Response
    • Cybersecurity Funding
  • Contamination
  • Supply Chain Resilience
    • Chemical Suppliers and Manufacturers Locator Tool
    • Defense Production Act
    • Safe Drinking Water Act Section 1441
  • Interdependencies
    • Emergency Services Sector
    • Energy Sector
    • Healthcare Sector
  • Preparedness Exercises
  • EPA Events
Contact Us about Water Resilience
Contact Us to ask a question, provide feedback, or report a problem.
Last updated on October 1, 2024
  • Assistance
  • Spanish
  • Arabic
  • Chinese (simplified)
  • Chinese (traditional)
  • French
  • Haitian Creole
  • Korean
  • Portuguese
  • Russian
  • Tagalog
  • Vietnamese
United States Environmental Protection Agency

Discover.

  • Accessibility Statement
  • Budget & Performance
  • Contracting
  • EPA www Web Snapshot
  • Grants
  • No FEAR Act Data
  • Plain Writing
  • Privacy
  • Privacy and Security Notice

Connect.

  • Data
  • Inspector General
  • Jobs
  • Newsroom
  • Regulations.gov
  • Subscribe
  • USA.gov
  • White House

Ask.

  • Contact EPA
  • EPA Disclaimers
  • Hotlines
  • FOIA Requests
  • Frequent Questions
  • Site Feedback

Follow.