Simultaneous cybersecurity attacks on water systems across twelve states from July 2026 have put Water and Wastewater Systems (WWS) critical infrastructure squarely in the crosshairs of malicious actors. This is not an overnight incident! It’s a multi-year campaign by hacking communities to break into the water and wastewater critical infrastructure defenses by strategically discovering WWS infrastructure, identifying vulnerabilities,
exploiting weaknesses and timing these incidents. Was this the 9/11 for WWS critical infrastructure? No, but could have been close.
Being instrumental in building and implementing cybersecurity and resiliency programs for multiple water and wastewater agencies has enabled us to recognize common themes crucial for water and wastewater agencies to modernize and secure the lifeline of communities.
This is our effort to assist state and local government agencies have access to the latest cybersecurity and resiliency resources specific to WWS sector, made available through a free subscription.
Governance Frameworks
Governance for Water and Wastewater Systems (WWS) is structured utilizing federal frameworks that are implemented by various state and local government agencies. Understanding the governance hierarchy becomes the foundation to ensuring the right agencies and resources are involved during incidents and emergencies.
At the top of the framework hierarchy is the National Incident Management System (NIMS), which is established by the Department of Homeland Security and guided by Homeland Security Presidential Directive-5 and provides a standardized framework for incident management for all critical infrastructure sectors including Water and Wastewater sector. NIMS integrates multiple operational systems including the Incident Command System (ICS), Multiagency Coordination Systems (MACS) and Emergency Operations Centers (EOCs).
Water/Wastewater Agency Response Networks (WARN) is a network of public and private utilities organized and developed utility-driven model to facilitate an effective and efficient expedited access to specialized personnel and resources needed to respond to and recover from natural and human caused emergency. They operate consistent pre-established mutual aid agreements that are structured to meet NIMS requirements.
Cybersecurity and Infrastructure Security Agency (CISA) and Environmental Protection Agency (EPA) developed framework specifically for WWS and provide no-cost cybersecurity assessment, vulnerability scanning, and cybersecurity help desk. They serve complementary to WARN and support NIMS by providing federal leadership, training, and technical guidance for communications, information technology and incident management functions.
Why subscribe
For over five years, Digital Team Six, Inc through their Culper-I managed Cybersecurity and Resiliency solution has been enabling Water and Wastewater agencies and operators lead-by-example by implementing next generation defense in depth architecture and Early Warning System (EWS).
With a proven record of demonstrable milestones, we have consolidated common water and wastewater sector specific domains that control room operators, executive management and engineers should periodically review with their technical staff and consultants. With a free subscription, your agency will receive five accounts to access these monthly updates.
How to Subscribe
Click Here to submit request for Culper-I Early Warning System (EWS) subscription
