Skip Navigation

Training and resources

Free Cybersecurity Pilot Program for Small and Medium Water Systems

The Cyber Readiness Institute has launched a new pilot project to provide free cybersecurity training to small and medium-sized water and wastewater utilities to help prevent cyberattacks and build a culture of cyber readiness. The program is actively recruiting participants.

In partnership with the Center on Cyber and Technology Innovation and Microsoft, CRI is conducting a "Resiliency for Water Utilities" pilot to provide coach-supported training and resources focused on improving cybersecurity risk management and ability to respond and recover from a cybersecurity incident. The pilot is for water and wastewater utilities serving between 500 and 10,000 customers. The pilot will provide free training to as many as 200 utilities.

The program is based on CRI’s Cyber Readiness Program which is designed to be clear and accessible for organizations regardless of size and technical expertise. The program focuses on human behavior, helping a designated Cyber Leader develop and implement cyber readiness policies throughout the organization. The program only requires about an hour per week for six weeks and very minimal technical expertise. Participants proceed at their own pace, with the help of a coach to work through implementing organization-wide trainings and policies for strong passwords, multi-factor authentication, patch management, anti-phishing, business continuity, and other core cyber readiness topics. The program will help utilities establish an asset inventory and improve employee awareness of cybersecurity issues.

If you are interested in participating in this program or learning more, please visit the Pilot Program interest page. If you’re chosen to participate, please contact Rheanna Morgan at 775-687-9448.

Learn More About the Pilot Program

Definitions

  • Emergency Support Function (ESF): Details the missions, policies, structures and responsibilities of federal agencies for coordinating resource and programmatic support to states, tribes, and other federal agencies or other jurisdictions and entities during Incidents of national significance.
  • Hazardous Waste Operations and Emergency Response Standard (HAZWOPER): A regulation of US OSHA that regulates the safety and health of the employees of hazardous waste facilities and in any emergency response activities involving hazardous substances.
  • Incident Command System (ICS): A standardized, on-scene, all-hazard incident management protocol originally designed for fire fighting agencies and later federalized. The goal of ICS is to prove a common framework within which people can work together effectively in a crisis situation. ICS is designed to give standard response and operation procedures for emergency incidents to reduce the potential for miscommunication between multiple agencies that do not usually work together.
  • National Incident Management System (NIMS): A system used to coordinate emergency preparedness and incident management among various federal, state, and local agencies.
  • National Infrastructure Protection Plan (NIPP): Called for by Homeland Security Presidential Directive 7, this plan aims to unify critical infrastructure and key resource protection efforts across the country.
  • National Integration Center (NIC): This center oversees all aspects of NIMS including the development of compliance criteria and implementation activities at federal, state and local levels. It also provides guidance and support to jurisdictions and incident management and responder organizations as they adopt the system.
  • Pneumatic tools: Also known as "air tools," these tools are driven by gas, usually compressed air supplied by a gas compressor, or compressed carbon dioxide (C02) stored in small cylinders.
  • Requestor: The utility in need of and requesting or receiving mutual aid and assistance resources.
  • Responder: The utility providing mutual aid and assistance resources.
  • Supervisory Control And Data Acquisition (SCADA): Refers to a large-scale, distributed measurement and control system used to perform data collection and control at the supervisory level. These systems typically handle many daily operational functions at water and wastewater utilities.
  • Water-Sector Specific Plan (SSP): A strategic "roadmap" for future water-specific security efforts developed by the Department of Homeland Security, the US EPA, the Water Sector Coordinating Council, and the Government Water Sector Coordinating Council.

Acronyms

  • AWWA: American Water Works Association
  • CDL: Commercial Driver's License
  • CFM: Cubic feet Per Minute
  • CFR: Code of Federal Regulations
  • CWA: Clean Water Act
  • DOT: U.S. Department of Transportation
  • EOC: Emergency Operations Center
  • FEMA: Federal Emergency Management Agency
  • GAC: Granular Activated Carbon
  • GPS: Global Positioning System
  • HAZMAT: Hazardous Materials Team
  • HP: Horsepower
  • KW: Kilowatts
  • MGD: Million Gallons Per Day
  • MIOX: Mixed Oxidants
  • OSHA: Occupational Safety and Health Administration
  • PAC: Powdered Activated Carbon
  • PIO: Public Information Officer
  • PLC: Programmable Logic Controller
  • PPE: Personal Protective Equipment
  • RCRA: Resource Conservation and Recovery Act
  • RO: Reverse Osmosis
  • RMP: Revolutions Per Minute
  • SCADA: Supervisory Control and Data Acquisition
  • SDWA: Safe Drinking Water Act
  • SSO: Sanitary Sewer Overflow
  • SUV: Sport Utility Vehicle
  • UV: Ultraviolet (disinfection)
  • WARN: Water/Wastewater Agency Response Network
  • WITAF: Water Industry Technical Action Fund