EPA rescinds cybersecurity rule for water systems

The Environmental Protection Agency (EPA) has rescinded a rule that would have required states to conduct cybersecurity evaluations of their public water systems. The decision comes after a lawsuit from Republican states and water industry groups, who argued that the EPA did not have the authority to issue the rule without Congressional approval.

The EPA’s decision is a major setback for efforts to protect the nation’s drinking water from cyberattacks. In recent years, there has been a growing number of cyberattacks on water and wastewater plants, including a 2021 incident in Oldsmar, Florida, where a hacker attempted to poison the city’s water supply.

The EPA has warned that many public water systems have failed to adopt basic cybersecurity best practices, leaving them at high risk of being compromised. The rescinded rule would have helped to identify and address these vulnerabilities.

In a statement, the EPA said that it “continues to believe that adopting cybersecurity best practices at public water systems is essential to providing safe and reliable drinking water.” However, the agency said that it will now rely on states to voluntarily review their cybersecurity programs.

Industry groups applauded the EPA’s decision to rescind the rule, but acknowledged that cyber threats against the water sector are growing.

“AWWA is pleased that EPA has decided to withdraw its cybersecurity rule,” said American Water Works Association CEO David LaFrance. “We also recognize that cyber threats in the water sector are real and growing, and we cannot let our guard down for even a moment.”

LaFrance urged Congress and the EPA to support a “co-regulatory model” that would engage utilities in developing cybersecurity requirements with oversight from the agency.

The sources for this piece include an article in TheRegister.

IT World Canada Staff
IT World Canada Staff
The online resource for Canadian Information Technology professionals.

Would you recommend this article?


Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.

Jim Love, Chief Content Officer, IT World Canada

Featured Download

ITW in your inbox

Our experienced team of journalists and bloggers bring you engaging in-depth interviews, videos and content targeted to IT professionals and line-of-business executives.

More Best of The Web