Cybersecurity in Sanitary Surveys
On October 11, 2023, EPA issued a memorandum withdrawing the March 3, 2023 interpretive memorandum, Addressing Public Water System Cybersecurity in Sanitary Surveys or an Alternate Process. While the memorandum is being withdrawn due to litigation, improving cybersecurity across the water sector remains one of EPA’s highest priorities. Cybersecurity represents a serious and increasing threat to drinking water and wastewater utilities. EPA remains committed to using available tools and resources to help protect communities from the increasing number and severity of cyber-threats facing our nation’s water systems. EPA will continue to work with states, Tribes, and territories to protect the public from the threats created by cybersecurity incidents and support the efforts of water systems to adopt cybersecurity best practices. The Agency will continue to explore opportunities to lower cybersecurity risk for public water systems.
Cybersecurity attacks on drinking water and wastewater systems occur frequently and are a significant threat to their operations. EPA encourages all states to voluntarily review public water system cybersecurity programs to ensure that any vulnerabilities are identified and corrected, and assistance is provided to systems that need help. EPA will continue to support states, drinking water systems, and wastewater systems by providing that technical assistance in the form of cybersecurity risk assessments, subject matter expert consultations, and training. For more information, see our fact sheet below.