EPA announces $9 million in grants to protect drinking water from natural hazards and cybersecurity threats

The U.S. Environmental Protection Agency (EPA) announced on August 5, 2025, over $9 million in grant funding for midsize and large water systems to help protect drinking water from cybersecurity threats and improve resiliency for extreme weather events. The agency is also publishing a report highlighting 10 recommendations to strengthen resiliency to cyberattacks in the water sector. 

$9 million for water system resilience

The Midsize and Large Drinking Water System Infrastructure Resilience and Sustainability grant program is authorized by Congress through the Safe Drinking Water Act. EPA is seeking grant applications from public water systems serving 10,000 people or more. This funding opportunity will remain open for 60 days.

Water cybersecurity recommendations

EPA is publishing a report titled, Securing the Future of Water: Addressing Cyber Threats Today (pdf). The report includes recommendations calling for a holistic approach to strengthen cybersecurity in the water sector by enhancing coordination and collaboration across government, associations, and water utilities. Systems are being encouraged to address unique needs, normalize and promote cybersecurity measures, and improve access to technical assistance. These recommendations were produced by a Water Sector Cybersecurity Task Force that EPA co-lead at the time they were developed.

There are several priority actions that accompany the recommendations, including the development of water-sector focused cybersecurity leadership training, increasing direct cybersecurity technical assistance, providing webinars and curated resources for utilities, integration of cybersecurity into operator certification and continuing education, coordination with state Chief Information Officers (CIO) Offices for Cybersecurity Support, and more.