Addressing Cybersecurity in Risk and Resilience Assessments and Emergency Response Plans

United States

Safe Drinking Water Act (SDWA) section 1433, which was revised by America's Water Infrastructure Act (AWIA) section 2013, requires community water systems (CWS) serving over 3,300 people to prepare (or revise) and certify risk and resilience assessments (RRAs) and emergency response plans (ERPs) to the U.S. EPA every five years. Recertification deadlines are coming up in 2026 for CWSs serving 3,301 – 99,999 people. 

CWSs are required to address cybersecurity in both their RRA and ERP. This webinar will highlight EPA resources that CWSs can use to cover cybersecurity in their RRA and ERP.

EPA is applying for continuing education units (CEUs) for certified drinking water operators. The registration page will be updated with information on which state primacy agencies will provide CEUs for attending.