For FY27 proposed projects in its Intended Use Plan, the Idaho Department of Environmental Quality reports that 85% of its Clean Water and Drinking Water State Revolving Fund (SRF) projects have committed to use ‘cyber-informed engineering’ (CIE). CIE integrates cybersecurity principles into engineering practices to protect critical infrastructure. The 2027 rate of adoption represents an increase from 66% of SRF funded projects that committed to use CIE in FY26.

“We are pleased that we are seeing an increase in communities voluntarily committing to plan for and implement cybersecurity practices.” said Idaho DEQ Director Jess Byrne. “Adoption of cybersecurity practices further ensures communities and residents are protected from potential harmful disruptions and protects water sources from potential uncontrolled releases.”
In its October 2025 report Strengthening and Integrating Cybersecurity Measures into State SRF Funded Projects, EPA notes Idaho’s scoring criteria as an example of a state using its priority score points to encourage cybersecurity project elements in SRF awards and incentivize activity to safeguard public health services. Idaho’s funded projects for FY27 have assigned point ranges from 190 to 300 for clean water and 84 to 221 points for drinking water. Applicants may earn 20 “Sustainable (Green) Infrastructure Efforts” bonus points for a commitment to implement CIE analysis and incorporate recommended security measures into either a planning grant or an SRF construction loan.
For more information, see Idaho DEQ’s CIE Guidance and FY27 Letter of Interest.
