New York will require community water and wastewater systems serving more than 3,300 people to meet new cybersecurity regulations by year’s end, including mandatory operator training, incident response and recovery plans, reporting requirements, and a designated cyber lead for larger utilities. The state is providing a $2.5 million grant program plus up to $50,000 for assessments and $100,000 for upgrades and is acting in response to escalating nation-state threats such as China’s Volt Typhoon. #VoltTyphoon #NewYorkWaterSystems
Keypoints
- New rules apply to community water systems serving more than 3,300 people, with additional requirements for those serving over 50,000.
- Mandatory measures include certified-operator cybersecurity training, incident response plans, tested recovery plans, reporting requirements, and a designated cyber lead for larger utilities.
- The state established a $2.5 million grant program and offers free technical assistance, with up to $50,000 for assessments and $100,000 for upgrades.
- State action was driven by nation-state threats—citing China’s Volt Typhoon campaign—and concerns about stalled federal mandates.
- Officials coordinated with the EPA and CISA to align the regulations with federal guidance and avoid duplicative requirements.
Read More: https://therecord.media/new-york-water-cyber-regulations