New York State is taking significant steps to bolster cybersecurity in its water systems, with an investment of over $9 million aimed at fortifying 153 drinking and wastewater facilities against potential cyber threats. Governor Kathy Hochul revealed this initiative as part of the SECURE grant program on Monday, emphasizing the need for enhanced digital defenses.
SECURE Program Details
The Strengthening Essential Cybersecurity for Utilities and Resiliency Enhancements (SECURE) grant program is designed to fund comprehensive cybersecurity assessments and improvements across local utilities. Additionally, the initiative offers no-cost technical support through the New York State Environmental Facilities Corporation (EFC), ensuring that these facilities have the necessary resources to enhance their cybersecurity frameworks.
These grants are aligned with the cybersecurity standards introduced by the state in March, which mandate cybersecurity training for certified operators, rigorous incident reporting protocols, risk-based protections, and the appointment of cybersecurity leads in larger water systems. Utilities can receive up to $50,000 for assessments and up to $100,000 for implementing security upgrades.
Addressing Escalating Threats
The urgency of this funding is underscored by recent cyberattacks targeting operational technology systems at water facilities across the United States. On July 26 and 27, over 30 community water systems in Minnesota faced disruptions, with some municipalities experiencing temporary operational halts. Although contingency plans ensured continued operation, the incident highlighted vulnerabilities in water infrastructure.
While no New York utilities have been directly linked to these attacks, the threat prompted the US Cybersecurity and Infrastructure Security Agency (CISA) to advise operators to secure their systems by removing exposed controllers, changing default passwords, and restricting network access to trusted IP addresses.
Implications and Future Initiatives
Governor Hochul’s announcement comes as New York continues to invest in its water infrastructure, with a separate $3.8 billion allocated for clean water projects over five years, pushing the state’s total investment since 2017 past $10 billion. This comprehensive approach underscores the critical nature of maintaining secure and resilient water systems.
As cyber threats evolve, New York’s proactive measures reflect a broader commitment to safeguarding essential services. The SECURE program not only strengthens current defenses but also lays the groundwork for future cybersecurity enhancements, ensuring that the state’s water systems remain protected against emerging threats.
