New York Sets Water Utility Cybersecurity Standards, Launches $2.5M Grant Program
Summary
New York introduced statewide cybersecurity standards for water utilities and a $2.5 million SECURE grant program, offering funding for assessments and upgrades plus no-cost technical assistance.
Key points
- New statewide rules set minimum cybersecurity requirements for water and wastewater utilities.
- Requirements include cybersecurity training for certified operators and mandatory incident reporting.
- The standards use risk-based tiers and require larger drinking water systems to designate a cybersecurity lead.
- The SECURE program offers up to $50,000 for assessments and $100,000 for upgrades from a $2.5 million fund.
- The Environmental Facilities Corporation will provide no-cost technical assistance through Community Assistance Teams.
Article Details
- Event Type
- New York issued cybersecurity regulations for water utilities and launched the $2.5 million SECURE grant program.
- Impact
- The standards require cybersecurity training for certified operators, incident reporting, risk-based protections, and a cybersecurity lead at larger drinking water systems. The grant program offers up to $50,000 for assessments and $100,000 for upgrades, with no-cost technical assistance, to help drinking water and wastewater utilities strengthen resilience and protect public health.
People
Colin AhernNew York State Director of Security and Intelligence who discussed the initiative's approach to strengthening water-sector defenses.Kathy HochulGovernor of New York who announced the cybersecurity regulations and SECURE grant program.Michaela LeeActing Chief Cyber Officer who discussed coordination between state agencies and local water operators.