Governor Kathy Hochul has announced new cybersecurity regulations and grant funding aimed at protecting New York’s drinking water and wastewater systems from cyber threats.
The plan includes new statewide cybersecurity standards for water and wastewater operators, along with $2.5 million in grant funding to help communities improve their cyber defenses. State officials say the initiative is designed to protect critical infrastructure that millions of New Yorkers rely on every day.
“Cyber attacks on our water infrastructure can disrupt services and threaten public health and safety,” Hochul said. “My administration is protecting New Yorkers by modernizing regulations and providing resources to adopt these important safeguards.”
State officials say water infrastructure is an increasingly attractive target for cyber attacks as systems rely more heavily on digital and internet-connected technologies.
To address those risks, the New York State Departments of Environmental Conservation and Health have developed new minimum cybersecurity standards for drinking water and wastewater systems. The standards include mandatory cybersecurity training for certified operators, requirements for reporting cyber incidents, and tiered protections based on system risk levels.
Larger drinking water systems will also be required to designate a cybersecurity lead responsible for overseeing security efforts.
To help communities meet the new standards, the state is launching the Strengthening Essential Cybersecurity for Utilities and Resiliency Enhancements (SECURE) grant program, administered by the Environmental Facilities Corporation.
The program will provide up to $50,000 for cybersecurity assessments and up to $100,000 for system upgrades to improve cybersecurity protections.
State officials say the Environmental Facilities Corporation will also offer free technical assistance through its Community Assistance Teams. Those teams will help local water and wastewater systems apply for grants, receive training, and implement cybersecurity best practices.
Applications for the SECURE grant program are now open.
