This refresher training to water and wastewater utilities will reinforce their foundational understanding of cybersecurity and how it applies to the water sector. This training will cover topics from Cybersecurity 101, Cybersecurity 102, and Cybersecurity 103 trainings.
EPA will demonstrate how to use EPA’s Water Cybersecurity Assessment Tool (WCAT) to conduct cybersecurity assessments at water and wastewater systems.
EPA will demonstrate how to use EPA’s Cybersecurity Procurement Evaluation Checklist for Drinking Water and Wastewater Systems to assess and compare cybersecurity-related vendors.
Join the U.S. Environmental Protection Agency (EPA) for the 2026 National Cybersecurity Drill. This year’s exercise will challenge drinking water and wastewater utilities to operate and maintain critical functions in an environment where telecommunications and internet access are unavailable or unreliable. The exercise is built around a simulated scenario in which cyber and/or physical incidents degrade or disable commercial telecommunications infrastructure, internet service providers, and associated systems. As a result, participating organizations must operate in a “disconnected” environment with limited or no access to Supervisory Control and Data Acquisition (SCADA) remote connectivity, cloud-based services, email, Voice over IP (VoIP), and other digital communication tools. This exercise is designed to strengthen sector-wide resilience by testing operations under progressively degraded conditions. It enables participants to identify barriers and dependencies while reinforcing continuity of safe and reliable water and wastewater services in the absence of telecommunications and internet connectivity. Continuing Education Units (CEUs) will be provided in most states. Intended audience: Drinking water and wastewater utility managers and operators; IT and OT staff; emergency response planners; and state and local partners.