On Oct. 11, 2023, the U.S. EPA issued a memorandum withdrawing the March 3, 2023, interpretive memorandum, ‘Addressing Public Water Systems in Sanitary Surveys or an Alternative Process.’

While the memorandum is being withdrawn due to litigation, improving cybersecurity across the water sector remains one of the EPA’s highest priorities. 

Cybersecurity represents a serious and increasing threat to drinking water and wastewater utilities. The EPA remains committed to using available tools and resources to help protect communities from the increasing number and severity of cyber threats facing our nation’s water systems. The EPA will continue to work with states, Tribes, and territories to protect the public from the threats created by cybersecurity incidents and support the efforts of water systems to adopt cybersecurity best practices. The Agency will continue to explore opportunities to lower cybersecurity risk for public water systems.

Cybersecurity attacks on drinking water and wastewater systems occur frequently and are a significant threat to their operations. The EPA encourages all states to voluntarily review public water system cybersecurity programs to ensure that any vulnerabilities are identified and corrected and assistance is provided to systems that need help. The EPA will continue to support states, drinking water systems, and wastewater systems by providing technical assistance in the form of cybersecurity risk assessments, subject matter expert consultations, and training. 

Although the memorandum has been withdrawn, the EPA still offers a host of information on cybersecurity on its website for water and wastewater agencies, including technical assistance, training, planning, funding opportunities, workshops, and more. Go to bit.ly/494G9H3 for more details.