OT Cyber Threat Landscape for the U.S. Water & Wastewater Sector

**Executive Summary:** Dragos' Water & Wastewater Threat Perspective provides a high-level assessment of cyber risks to the water sector, noting 27 publicly disclosed events (2006–early 2023), a high share of controller-related vulnerabilities (PLCs/VFDs), and significant exposure from remote access technologies and inadequate network segmentation; it recommends five ICS-focused controls (incident response, defensible architecture, OT visibility/monitoring, secure remote access, and risk-based vulnerability management) and use of OT-native tooling to improve resilience.