Cybersecurity Exercises and Technical Assistance Courses
“The Cybersecurity Incident Response Plan and Tabletop Exercise (TTX) sessions were extremely helpful in giving a structured foundation and practical tools for building a comprehensive Cybersecurity Incident Response Plan. I was able to take the Cybersecurity Incident Action Checklist and align it with our operational needs, develop actionable procedures, and generate a complete, department-coordinated plan that integrates with our existing Emergency Response Plan (ERP). EPA’s clear explanations and real-world insights made it easier to turn guidance into something functional and site-specific. Thanks to your instruction, we are significantly more prepared to respond confidently and clearly to cyber incidents.”
Contact us at watercyberta@epa.gov to request a technical assistance course or a tabletop exercise
Upcoming Cybersecurity Exercises and Technical Assistance Courses
EPA is committed to providing exercises and technical assistance on cybersecurity topics to the Water Sector. Please see the upcoming schedule below.
-
EPA Quarterly Cybersecurity Vulnerability Snapshot Webinar
EPA and CISA will provide the 3rd quarterly overview of the most common cybersecurity vulnerabilities identified at systems via CISA’s Free Cyber Vulnerability Scanning for Water Utilities and EPA’s Proactive Vulnerability Identification Program.
-
Cybersecurity 102
The technical assistance course will offer deeper insights into cybersecurity for those with basic knowledge in the field, as it applies to Operational Technology (OT).
-
Cybersecurity 103
EPA's Water Infrastructure and Cyber Resilience Division (WICRD) will provide this technical assistance course to expand understandings of cybersecurity basic key terms, foundational principles, and a snapshot of its history in the Water Sector.
-
Cybersecurity Refresher
EPA's Water Infrastructure and Cyber Resilience Division (WICRD) will provide a cybersecurity technical assistance course on to water and wastewater utilities to reinforce foundational understandings of cybersecurity and how it applies to the Water Sector.
-
Water Cybersecurity Assessment Tool (WCAT) Webinar
EPA’s Water Infrastructure and Cyber Resilience Division will be hosting a free training on our Water Cybersecurity Assessment Tool (WCAT).
Recorded Technical Assistance Courses
Cybersecurity 101 Technical Assistance Courses
Cybersecurity 101 Webinar: This webinar is an introduction to the basic principles of cybersecurity. The presentation slides can be downloaded here: Cybersecurity 101 Webinar Slides (pdf) .
The following states have approved this technical assistance course for CEUs: AZ – 0.5 PDH (DW/WW), CT – 0.5 TCH (WW), MN – 1.0 CH (DW), NV – 1.0 CH (WW), NH – 1.0 CH (DW), NM – 0.5 TCH (Both), VT – 1.0 CH (WW), WY – 0.5 CH (Both), NY – 0.5 RTC (WW)
The following states have approved this technical assistance course as a requirement for the water operator recertification:
- Maryland Department of the Environment (MDE)
To receive a certificate of completion for the technical assistance course, please complete the following quiz: Cybersecurity 101 Quiz. You should receive your certificate of completion within 3-5 business days. If you have any questions, please feel free to reach out to cyberta@gdit.com.
Additional Exercise and Technical Assistance Resources
Develop and Conduct a Cybersecurity Tabletop Exercise (TTX): Tool used to plan, conduct, and evaluate a cybersecurity tabletop exercise.
CISA’s Tabletop Exercise Packages (CTEPs): Cybersecurity-based threat vector topics including ransomware, insider threats, phishing, and Industrial Control System compromise, featuring a Water and Wastewater Systems Situation Manuel.
CISA Learning: Free virtual training to gain a better understanding of cybersecurity. Classes provide a certificate of completion which could grant CEUs.
CISA Incident Response Training: Free training that provides information on cybersecurity awareness and organizational best practices.
CISA Industrial Control System Cybersecurity Training: Free training that provides information on cybersecurity for industrial control systems. Trainings are either self-virtual or instructor led virtual.
Massachusetts DEP Basic Cybersecurity Measures for Water and Wastewater Systems in Massachusetts: This self-paced course on water and wastewater system cybersecurity addresses the growing importance of protecting these essential services from evolving threats and vulnerabilities. Massachusetts Board of Certification Approved for 1 TCH.