Read on Twitter
At #HackTheCapitol, EPA cyber branch chief Nushat Thomas says the EPA understands complaints from states and utilities that they lack the resources to comply with a new water cyber assessment rule.
She lists a bunch of resources and services that EPA offers.
She lists a bunch of resources and services that EPA offers.
Thomas: "We have training in place for those states who actually want to conduct the...assessment themselves." EPA developed a water-specific cyber checklist based on CISA's cross-sector cyber performance goals, "and we're training the states on how to utilize that checklist..."
EPA also made "an easy-to-use tool" that lets water utilities run through that checklist themselves.
Utilities can also register with the EPA to have the agency conduct the required assessments for them.
Utilities can also register with the EPA to have the agency conduct the required assessments for them.
"It is very plausible that an attack could happen at a water system and actually have significant consequences," Thomas says when asked about the threat level.
"That's very plausible across small, medium, and large systems across the nation. ... It's a growing threat."
"That's very plausible across small, medium, and large systems across the nation. ... It's a growing threat."
.@ASPRgov's Brian Mazanec and EPA's Thomas both say they're working with CISA to release cybersecurity toolkits based on CISA's cross-sector performance goals but tailored to their sectors (healthcare and water).
CISA already has one for K-12 schools: cisa.gov/partnering-saf…
CISA already has one for K-12 schools: cisa.gov/partnering-saf…
Mazanec says that ASPR is "standing up a dedicated cyber division within our critical infrastructure protection office" that will help HHS engage corporate executives on cyber hygiene, "to continue to raise awareness [of the] threat and these tools that we offer."
• • •
Missing some Tweet in this thread? You can try to
force a refresh
