Digital Team Six 973-339-0090 Request an assessment

HomeSDWA readiness review

Book an SDWA readiness review

Section 1433 of the Safe Drinking Water Act requires community water systems serving more than 3,300 people to assess their cybersecurity risk, plan their response and certify both to EPA. A readiness review shows where you stand and what is left before your deadline.

Next deadline
December 31, 2026
Due then
Emergency Response Plans, systems serving 3,301 to 49,999 people

The review covers

  • Your Risk and Resilience Assessment, including electronic, computer and automated systems
  • The cyber incident procedures in your Emergency Response Plan
  • What certification will ask for, mapped to EPA’s water sector cybersecurity checklist
  • New Jersey Water Quality Accountability Act requirements, for systems over 500 service connections

Prefer to talk now? 973-339-0090

DT6 SDWA readiness review

Your details stay with Digital Team Six.

What happens next.

  1. Scoping call

    We confirm your population served, your deadline and what you already have.

  2. Review

    We check your assessment, plan and evidence against Section 1433, and New Jersey rules where they apply.

  3. Readout

    You get what is missing, in order, against your deadline.

  4. Delivery, if you want it

    We write the cyber section of your assessment and your incident procedures, run a tabletop exercise and assemble the certification package.

Read the Section 1433 guide first.

Who it applies to, what is due and when, and a checklist to certify with confidence.

Read the guide

Questions people ask.

It depends on the population you serve. The next one is December 31, 2026, for Emergency Response Plans at systems serving 3,301 to 49,999 people. Our Section 1433 guide lists every deadline.

Yes. Systems with more than 500 service connections also answer to the Water Quality Accountability Act, and we cover both in one engagement.

Section 1433 applies to community water systems serving more than 3,300 people, so you are not required to certify. The same review is still a sound way to find and fix cyber risk at your plant.