Water utilities face tightening cybersecurity compliance deadlines

Water and wastewater utilities face a growing wave of binding cybersecurity compliance deadlines as federal enforcement tightens and states introduce their own rules. The EPA is using existing authority to inspect cyber gaps, while AWIA recertification deadlines approach for most systems by June 2026. CIRCIA will soon require incident reporting to CISA within 72 hours and ransom payments within 24 hours.

Tenable highlights its OT security platform to help utilities meet these requirements, citing the City of Raleigh as an example of a utility using Tenable One OT Exposure to improve asset visibility and vulnerability management.