Last month, New York adopted comprehensive water cybersecurity regulations and announced $2.5M in grants to protect critical water infrastructure. This rulemaking was initially proposed in June 2025. The New York Department of Environmental Conservation and New York Department of Health developed new minimum standards for drinking water and wastewater systems including:
- Mandatory cybersecurity training for certified operators;
- Cybersecurity incident reporting requirements;
- Risk-based tired standards to protect critical operations and sensitive information; and
- Cybersecurity lead role designation at larger drinking water systems.
The state is launching the $2.5M Strengthening Essential Cybersecurity for Utilities and Resiliency Enhancements (SECURE) grant program providing funding to support implementation.
