October 16, 2023 at 06:24AM
The US Environmental Protection Agency (EPA) has withdrawn cybersecurity rules for public water systems due to lawsuits filed by states and non-profit water associations. The attorney generals of Missouri, Arkansas, and Iowa challenged the requirements, arguing they would burden small towns financially. The American Water Works Association (AWWA) and the National Rural Water Association (NRWA) joined the lawsuits, citing concerns about cybersecurity vulnerabilities and lack of expertise/resources. The EPA withdrew the rules after a court ordered a pause. The water sector has been targeted in attacks, and organizations ask for a collaborative approach to cybersecurity measures. The US government has been taking steps to improve cybersecurity in the water sector, including increased funding and vulnerability scanning services.
Key takeaways from the meeting notes:
1. The US Environmental Protection Agency (EPA) has withdrawn cybersecurity rules for public water systems due to lawsuits filed by states and non-profit water associations.
2. The attorney generals of Missouri, Arkansas, and Iowa have challenged the EPA’s new cybersecurity requirements, arguing that they pose a financial burden on small towns.
3. The American Water Works Association (AWWA) and the National Rural Water Association (NRWA) have joined the lawsuits, questioning the legality of the requirements.
4. The court has ordered the EPA to pause the new rules while the case is being tried.
5. AWWA and NRWA expressed concerns that the requirements would create additional cybersecurity vulnerabilities and would burden state regulatory agencies lacking expertise and resources.
6. Cyber threats in the water sector are real and growing, and there is a need for a collaborative approach to cybersecurity measures.
7. The US government has introduced a bill to increase cybersecurity funding for rural water systems.
8. The cybersecurity agency CISA is offering a free vulnerability scanning service to water utilities to help protect against cyberattacks.