CISA's Water Sector Guide Puts Incident Response Front & Center

CISA published a 27-page Cyber Incident Response Guide for the water and wastewater sector in response to a rise in targeted attacks — including an attempted chemical manipulation in Oldsmar, ransomware against Maine sewage plants, Iranian-backed intrusions at Aliquippa, and recent ransomware disruption at Veolia — and recommends preparedness measures (incident response plans, improved detection, containment/recovery planning, and post-incident playbooks) while noting many utilities are small, under-resourced, and therefore particularly vulnerable.