U.S. House representatives introduce cybersecurity bill supporting AWWA’s recommendation

The American Water Works Association (AWWA) has long served as a leading advocate for strong cybersecurity oversight in the water sector. 

A key milestone in this process unfolded in the U.S. House of Representatives last week with Reps. Rick Crawford (R-Ark.) and John Duarte (R-Calif.) introducing legislation to authorize AWWA’s recommendation for a collaborative approach that creates a Water Risk and Resilience Organization (WRRO).

This method of oversight would leverage the technical knowledge of utilities, cybersecurity experts and regulators to implement a comprehensive cybersecurity risk management strategy for the sector. 

Federal oversight and approval of cybersecurity requirements would be provided by the U.S. Environmental Protection Agency, which already regulates drinking water and wastewater utility operations. 

“The introduction of this legislation represents a critical milestone in defining the process by which we institutionalize the foundation for governance of cybersecurity in the water sector,” said Kevin Morley, AWWA’s federal relations manager. “We believe this collaborative framework that is inclusive of field-level expertise will help build bipartisan support for advancing cybersecurity in the sector.”

Implementation of the requirements will include periodic assessments by the WRRO, using a tiered risk- and performance-based framework designed to address the diversity in size and complexity of water systems. This collaborative approach builds on a similar model that has already been successfully applied in the electric sector. 

AWWA first proposed this approach after commissioning a report on strengthening cyber resilience in the water sector, prepared in 2021 by Paul Stockton, former assistant secretary of defense for Homeland Defense and Americas’ Security Affairs. 

Leading up to the introduction of the legislation, Morley joined other water experts earlier this year to testify (pictured left) before key federal subcommittees on the Hill to advance this collaborative approach. This recommendation is also endorsed by the National Association of Water Companies (NAWC) and the Association of Metropolitan Water Agencies.

The cybersecurity legislation spearheaded by Representatives Crawford and Duarte is the first step in the process toward garnering additional support for a final bill.