The Cyber Readiness Institute (CRI) provides small water and wastewater utilities with basic cybersecurity training and promote a culture of cyber readiness. Following the Phased Critical Infrastructure Pilot with the Foundation for Defense of Democracies sponsored by Microsoft, this program helps address the challenge of securing the Nation’s water infrastructure from cyber threats. The Critical Infrastructure Program is based on the CRI’s Cyber Readiness Program (CRP), which is designed to assist small and medium-sized businesses in improving their cybersecurity risk management and their ability to respond and recover from a cybersecurity incident.

This document provides additional guidance for Cyber Leaders at water utilities to address their unique cybersecurity challenges of operational technology (OT) that controls the facility and the information technology (IT) used for business purposes such as email and billing.