Water Intelligence, Security, and Cyber Threat Protection Act of 2025
- Sponsor
- Sen. Markey, Edward J. [D-MA]
- Committees
- Environment and Public Works Committee (primary)
- Last action
- Mar 25, 2025
Bottom line
The bill seeks to bolster the cybersecurity and physical security of U.S. water infrastructure by supporting information sharing and threat preparedness through the EPA and the Water ISAC.
What it actually does
This bill establishes a program within the Environmental Protection Agency (EPA) to enhance the threat preparedness and resilience of drinking water and wastewater systems. The program aims to encourage participation in the Water Information Sharing and Analysis Center (Water ISAC), offset membership costs for water systems, and expand EPA cooperation with the Water ISAC for incident data collection and analysis. It also seeks to improve the Water ISAC's tools and resources for monitoring the water sector and enhancing preparedness against malevolent acts and natural hazards.
Proponents argue
Supporters argue that robust cybersecurity and physical security for water infrastructure are critical national security priorities, especially given increasing threats from cyberattacks and natural disasters. They contend that supporting the Water ISAC and encouraging participation by local water systems will create a more resilient and informed water sector, preventing disruptions to essential services and protecting public health.
Opponents contend
Critics might argue that while the goal is laudable, the proposed funding levels may be insufficient to address the widespread and complex challenges facing thousands of diverse water systems across the country. Some might also question the effectiveness of a voluntary program or suggest that existing federal programs already address these concerns, potentially leading to duplication of effort.
The bill is very concise and can be read and understood quickly, making it accessible for immediate evaluation.
Section 2(b)
Establishment of EPA Program for Water System Threat Preparedness and Resilience
This section mandates the Environmental Protection Agency (EPA) to create a program within one year of the bill's enactment. This program will encourage and support community water systems and treatment works in joining and maintaining membership in the Water Information Sharing and Analysis Center (Water ISAC). It also requires the EPA to increase its collaboration with the Water ISAC on threat data and analysis, and to enhance the ISAC's resources for monitoring the water sector and improving preparedness against cyberattacks, malevolent acts, and natural disasters.
Supporters argue
Supporters argue that this program is a vital step to proactively protect critical water infrastructure. By subsidizing Water ISAC membership and strengthening EPA-ISAC collaboration, the bill ensures that even smaller, resource-constrained water systems can access crucial threat intelligence and preparedness tools, thereby safeguarding public health and economic stability from evolving threats.
Critics contend
Critics might contend that while the intent is good, the voluntary nature of the program might not achieve universal participation, leaving some vulnerable systems unprotected. They might also argue that the authorized funding is modest compared to the scale of the national water infrastructure and the sophistication of modern threats, potentially limiting the program's overall impact.
Tradeoffs
The bill balances the need for enhanced security with the desire to avoid overly burdensome mandates on local water systems by offering a voluntary, incentive-based approach. There's a tension between the comprehensive nature of the threat landscape and the limited, targeted funding provided.