Rural Water Association of Utah Logo

 
 
 
Cybersecurity

Cybersecurity Resource Center

Cybersecurity is now part of utility operations.

Water and wastewater systems are critical infrastructure. This page brings together RWAU resources, CISA guidance, Utah Cyber Center information, training opportunities, and practical steps to help systems reduce cyber risk.

CYBERNEWS Cyber Events Cyber Advisor DDW Bulletin
Start Here

CISA Cybersecurity Performance Goals.

CISA’s Cybersecurity Performance Goals are voluntary, prioritized cybersecurity practices designed to help critical infrastructure organizations, including small and medium-sized systems, focus on essential actions with strong risk-reduction value.

Know What You Have

Maintain an inventory of connected systems, accounts, devices, software, and critical assets.

Protect Access

Use strong passwords, remove unused accounts, limit administrative access, and enable multi-factor authentication where possible.

Prepare to Recover

Maintain secure backups, document recovery steps, and test whether essential systems can be restored.

View CISA CPGs CPG 2.0
Tools & Services

CISA Services Catalog.

CISA’s Services Catalog provides access to cybersecurity, infrastructure security, and emergency communications services. It can help utilities find assessments, training, exercises, technical assistance, and other support.

Assessments

Find services that help identify cybersecurity gaps, operational risks, and areas for improvement.

Training

Locate cybersecurity and critical infrastructure training for staff, managers, and decision-makers.

Exercises

Use exercises and planning support to prepare staff for incidents before they happen.

CISA SERVICES CATALOG CISA Resources
Utah Support

Utah Cyber Center.

The Utah Cyber Center is Utah’s statewide cybersecurity coordination hub. It promotes cybersecurity best practices, shares cyber threat information, receives breach reports, and can help coordinate incident response for governmental entities.

Threat Information

Access statewide cybersecurity information, recommendations, best practices, and threat intelligence when available.

Incident Reporting

Use Utah Cyber Center resources to understand breach reporting and incident coordination options.

Statewide Coordination

Connect with Utah’s cybersecurity coordination resources for public-sector cyber support.

Utah Cyber Center Report a Breach
Utility Cyber Checklist

Top actions every system should review.

Use this as a practical starting point. These steps are not a complete cybersecurity program, but they help water and wastewater systems begin reducing common risks.

Enable MFA on email, remote access, financial, billing, and administrative accounts.
Inventory connected devices, including SCADA, computers, network equipment, tablets, phones, and remote access tools.
Remove former employee accounts and review who has administrator access.
Back up critical systems and keep at least one backup offline or otherwise protected.
Update software and firmware on computers, routers, firewalls, PLCs, and other network-connected devices.
Secure remote access and avoid exposed remote desktop connections whenever possible.
Train employees annually on phishing, passwords, suspicious links, and reporting procedures.
Create an incident response plan that lists who to call, what to shut down, and how to keep operations running.
Review vendor access and confirm vendors only have access when needed.
Test backup recovery before an incident, not after one.
Training & Assistance

Keep improving over time.

Cybersecurity Training

Find RWAU cybersecurity events, workshops, and training opportunities for water and wastewater systems.

View Events

Cybersecurity Advisor

Connect with CISA cybersecurity assistance to review risk areas, identify next steps, and find relevant resources.

Contact Advisor