US needs a real plan to defend its water systems

Summer cyberattacks by Iranian hackers on water systems in 12 states exposed how vulnerable US infrastructure is. About 80% of US water systems lack basic cyber hygiene, and the EPA lacks clear authority to impose cybersecurity requirements. A five-part federal program, including zero-trust architecture and $600 million annually, has been proposed.

• Attacks hit water systems in 12 US states
• 80% of water systems lack basic cyber hygiene
• Water Safety Shield Act proposes $600M annually
• 45,000 systems serve 3,300 people or fewer