Strengthening Cybersecurity of Water Infrastructure through Legislative Actions

Abstract

Many water and wastewater utilities are vulnerable to cyberattacks and cyber intrusions. The COVID‐19 pandemic has exacerbated this weakness by moving water‐related employees to remote work, which has increased vulnerability to cyber threats. However, policymakers recognize the need to strengthen the cybersecurity resilience of water infrastructure, as evidenced by legislative activity. This article reviews four cases of recently adopted cybersecurity legislation at the federal and state levels. The empirical focus is on (1) the America’s Water Infrastructure Act of 2018, (2) the Internet of Things Cybersecurity Improvement Act of 2020, (3) the New Jersey Water Quality Accountability Act, and (4) the New York Water Supply Emergency Plans. The legislative review recapitulates the core components of these legislative efforts to amplify strategies for securing and improving water infrastructure.

Machine learning and user interface for cyber risk management of water infrastructure

“…The urgent need to protect water infrastructure is also reflected in the growing recognition by policymakers to strengthen the cybersecurity resilience (Kott & Linkov, 2021) of water infrastructure through legislation. For example, in the United States, the America's Water Infrastructure Act of 2018 and the Internet of Things Cybersecurity Improvement Act of 2020, at the federal level and some legislation at the state level, are focusing on strategies for securing water infrastructure (You, 2022). Further, critical systems such as water are closely linked to social order and well‐being.…”