On January 27, the water sector, EPA, and the White House National Security Council announced the launch of the Industrial Control Systems Cybersecurity Initiative – Water and Wastewater Sector Action Plan, a 100-day “surge” to investigate the pros and cons of utilities implementing industrial control system (ICS) monitoring and sharing monitoring results with the Cybersecurity and Infrastructure Security Agency (CISA).
The White House’s purpose is to encourage utilities to install ICS monitoring and share the data with CISA so that analysts there may conduct “threat hunting” for malicious activity in water utility operational technology systems.
After a pilot involving very large water systems, if the water sector believes the program will have benefits for utilities, the sector will work with utilities and federal agencies to expand the program and offer support, such as technical assistance.
The White House has already undertaken such 100-day sprints with power companies and gas pipelines. About 150 power companies and several pipeline companies are participating, using various technologies to share monitoring information in one way or another with CISA.
Both AMWA and WaterISAC will be working with EPA, CISA, and the White House on this effort and advising water systems that may wish to volunteer to participate in the program.