Water Cybersecurity Enhancement Act of 2025
The Water Cybersecurity Enhancement Act of 2025 would amend the Safe Drinking Water Act to strengthen and extend the Drinking Water Infrastructure Risk and Resilience Program by funding training related to cybersecurity. Specifically, it would allow grants to cover training programs and the purchase of training manuals and guidance on security and resilience, with explicit emphasis on protecting community water systems from cyberattacks and on how to respond to cyberattacks. The bill also updates the eligible time frame for certain program elements from 2020–2021 to 2026–2031, signaling a long-term emphasis on cyber resilience for public water systems. In short, the bill aims to improve the cybersecurity readiness of community water systems by making training a grant-eligible activity and by broadening the program’s time horizon for ongoing support.
Key Points
- 1The bill applies to the Safe Drinking Water Act’s Drinking Water Infrastructure Risk and Resilience Program and adds funding for cybersecurity training.
- 2It amends section 1433(g) to extend the relevant timeframe from 2020–2021 to 2026–2031.
- 3It adds a new subparagraph allowing participation in training programs and purchase of manuals/guidance materials related to security and resilience, specifically including cybersecurity topics.
- 4It explicitly requires training on protecting community water systems from cyberattacks and on how to respond to cyberattacks.
- 5Grants under the program would cover these training activities, expanding how funds may be used to bolster water system resilience.