Critical Infrastructure Protection/EPA Urgently Needs a Strategy to Address Cybersecurity Risks to Water/Wastewater Systems: GAO Issued Report
The United States Government Accountability Office (“GAO”) released on August 1st a Report titled:
Critical Infrastructure Protection:
EPA Urgently Needs a Strategy to Address Cybersecurity Risks to Water and Wastewater Systems. (“Report”).
See GAO-24-106744.
GAO states that it undertook the Report because:
…Recent cyber incidents highlight the vulnerability of the 170,000 water and wastewater systems in the U.S. water sector.
The role of the United States Environmental Protection Agency (“EPA”) in leading, coordinating, and supporting activities to reduce cybersecurity risks to the water sector is addressed. However, GAO notes that EPA also works in partnership with the United States Department of Homeland Security’s Infrastructure Security Agency and other federal, state, and local entities.
GAO was asked to review:
- Cybersecurity threats facing the water sector.
- Federal government’s efforts to address these threats.
The GAO Report:
- Describes cybersecurity risks and incidents.
- Examines actions by selected federal and non-federal entities to improve cybersecurity.
- Evaluates EPA’s actions to address known risks.
The GAO report makes four recommendations for EPA that include:
- Assess sector risk.
- Develop and implement a national cybersecurity strategy.
- Evaluate the sufficiency of its legal authority to carry out its cybersecurity responsibilities.
- Seek additional authority as necessary.
EPA in response to the GAO Report is stated to have indicated its concurrence with the recommendations and that it is taking action to complete them.
A copy of the Report can be downloaded here.
The Between the Lines blog is made available by Mitchell, Williams, Selig, Gates & Woodyard, P.L.L.C. and the law firm publisher. The blog site is for educational purposes only, as well as to give general information and a general understanding of the law. This blog is not intended to provide specific legal advice. Use of this blog site does not create an attorney client relationship between you and Mitchell Williams or the blog site publisher. The Between the Lines blog site should not be used as a substitute for legal advice from a licensed professional attorney in your state.