Senators Propose Water Cybersecurity Bill as Water Watch Center Launches
Summary
The proposed Water Cyber Shield Act would expand EPA oversight and fund water-system security. The Water Watch Center will provide managed detection and response to small utilities and develop AI-driven defenses.
Key points
- The proposed Water Cyber Shield Act would authorize EPA cybersecurity assessments, corrective measures, and security standards developed alongside CISA and NIST.
- The bill would authorize $300 million annually for drinking-water and clean-water revolving funds, require risk assessments for large systems, and expand cyber incident reporting.
- DEF CON Franklin and the National Rural Water Association launched the Water Watch Center to serve utilities with fewer than 10,000 people.
- Five cybersecurity firms will provide managed detection and response services and share threat intelligence through the NRWA.
- The center builds on a two-year pilot that paired nearly 450 volunteer cyber experts with utilities across seven states; it is expanding into Maryland.
- A partnership with Vanderbilt University will use DARPA CASTLE research to develop digital twins for testing AI-driven defenses.
Article Details
- Event Type
- Introduction of the Water Cyber Shield Act and launch of the Water Watch Center, a cybersecurity initiative for small water utilities.
- Impact
- The proposed bill would authorize $300 million annually for water-system security funding, require risk assessments for large systems, expand cyber incident reporting, and give the EPA cybersecurity assessment and enforcement authority. The Water Watch Center will provide managed detection and response services to small utilities and share threat intelligence through the NRWA.
People
Vendors
DefendifyThrough the WWC, five cybersecurity firms — Defendify, Legato Security, L1 Secure, Rapid7, and Sentinel Technologies — will deliver managed detection and response services directly to small utilities while sharingL1 SecureThrough the WWC, five cybersecurity firms — Defendify, Legato Security, L1 Secure, Rapid7, and Sentinel Technologies — will deliver managed detection and response services directly to small utilities while sharingLegato SecurityThrough the WWC, five cybersecurity firms — Defendify, Legato Security, L1 Secure, Rapid7, and Sentinel Technologies — will deliver managed detection and response services directly to small utilities while sharingRapid7Through the WWC, five cybersecurity firms — Defendify, Legato Security, L1 Secure, Rapid7, and Sentinel Technologies — will deliver managed detection and response services directly to small utilities while sharingSentinel TechnologiesThrough the WWC, five cybersecurity firms — Defendify, Legato Security, L1 Secure, Rapid7, and Sentinel Technologies — will deliver managed detection and response services directly to small utilities while sharing