Meanwhile, other states have already spent several years strengthening cybersecurity for water and wastewater systems.

New Hampshire, for example, worked with the Overwatch Foundation to help secure drinking water systems, while Kansas launched a related cybersecurity assessment program in early 2024.

New York, New Jersey and Massachusetts are actively providing grants aimed at improving cybersecurity for community water systems.

Kellerman said that public utilities can better defend themselves by elevating cybersecurity leadership and focusing on basic cybersecurity hygiene.

The advice closely tracks with ongoing advice from agencies such as the Cybersecurity Infrastructure and Security Agency.