The attorneys general (AG) for the states of Missouri, Arkansas and Iowa have filed a petition for review in the U.S. Court of Appeals for the Eighth Circuit challenging the legality of the March 3 U.S. Environmental Protection Agency’s (EPA) cybersecurity rule . The EPA rule directs state primacy agencies to assess the cybersecurity resilience of public water systems (PWS) using the Sanitary Survey Program. The states’ petition “asks the Court to hold unlawful and set-aside EPA’s cybersecurity rule requiring States to impose new and burdensome cybersecurity infrastructure mandates on Public Water Systems.” AWWA issued a statement today reiterating its concerns about EPA’s rule and stating its intention to ask the Court of Appeals to allow AWWA to participate in the petition 'in order to support our members’ interests and share our experience and knowledge.” AWWA and partner associations have long recognized the importance of cybersecurity and collectively have taken actions to support improvements in the water sector. The sector associations as well as associations representing local government have consistently opposed using the sanitary survey approach. Members should be aware that AWWA is actively seeking Congressional support for an alternative process that would provide for a tiered risk and performance-based approach like the process used by the energy sector. A key element is ensuring that water utility owner/operators have a leadership role in defining the requirements by which cybersecurity is assessed. This option eliminates a tremendous burden on state primacy agencies, which do not have staff with cybersecurity expertise. It also addresses security concerns arising from the fact that laws do not prevent sanitary survey results from becoming public record. Water systems of all types are encouraged to take actions now to address cybersecurity risks facing their operations. It’s important to note that the next round of AWIA §2013 compliance begins in March 2025 for community water systems serving 3,300 or more persons. Utilities can leverage AWWA’s cybersecurity guidance and assessment tool , which includes small systems guidance , to build cybersecurity resilience. Systems should be prepared to respond to media inquiries regarding the state of their cybersecurity preparedness. Questions can be directed to Kevin Morley , AWWA’s federal relations manager.