The Foundation for Defense of Democracies has crafted a set of legislative proposals for improving cybersecurity in the water sector based on Cyberspace Solarium Commission recommendations, including language to create an entity “charged with developing mandatory cybersecurity requirements for the water sector with EPA oversight.”
“The model legislative text provides a blueprint for legislators to advance security in the water sector in the near term,” according to FDD. The group has posted six legislative proposals for water on its page of “model legislative text” for implementing assorted Solarium proposals that have yet to be enacted into law. FDD is an independent think tank that took on stewardship of the Cyberspace Solarium Commission’s work products after the body’s federal charter expired.
The model text covers establishing a Water Risk and Resilience Organization patterned after the North American Electric Reliability Corporation; creating a water and wastewater infrastructure improvement program at the U.S. Environmental Protection Agency; giving EPA additional authorities and resources; pushing more EPA funding toward cyber; creating a cybersecurity circuit rider program at USDA for rural water and wastewater infrastructure; and requiring wastewater systems to perform risk and resilience assessments under the Clean Water Act.
The so-called WRRO would develop cyber standards and submit them to EPA for approval, and would have power to enforce the standards through penalties, which would be subject to review by the EPA administrator.
The proposed legislation has yet to be introduced in Congress.
FDD explained that the model legislation reflects recommendations in the Solarium Commission’s 2020 report and subsequent work in a November FDD report, as well as the work of the Water ISAC, American Water Works Association and others. AWWA has been championing the idea of a WRRO to lead on sector cybersecurity.
“These proposals represent urgently needed changes that can be effectuated through legislation and appropriation,” according to FDD, which noted that “private stakeholders have continued to raise awareness and build capacity in the sector. Still, the water sector and its federal partners must do more.” – Charlie Mitchell (cmitchell@iwpnews.com)