Governor Kathy Hochul announced on March 11 new cybersecurity regulations and $2.5 million in grants to help communities protect their drinking water and wastewater systems. The initiative aims to provide a comprehensive approach that equips operators with the necessary framework and tools to defend against cyber threats, ensuring the reliability of essential services for millions of New Yorkers.
The move addresses growing concerns about the vulnerability of water infrastructure, which is increasingly reliant on digital technologies. Cyber attacks on these systems can disrupt services and pose risks to public health and safety. “Cyber attacks on our water infrastructure can disrupt services and threaten public health and safety,” Governor Hochul said. “My administration is protecting New Yorkers by modernizing regulations and providing resources to adopt these important safeguards. There is nothing more important than keeping New Yorkers safe.”
The Departments of Environmental Conservation (DEC) and Health (DOH) have developed minimum standards for wastewater and drinking water systems that are threat-informed, risk-centric, and cost-balanced. These include mandatory cybersecurity training for certified operators, incident reporting requirements, risk-based tiered standards, and the designation of a cybersecurity lead at larger facilities. The Environmental Facilities Corporation (EFC) will administer the SECURE grant program, offering up to $50,000 for assessments and up to $100,000 for upgrades.
State officials highlighted the importance of proactive measures in defending critical infrastructure. Colin Ahern, State Director of Security and Intelligence, said: “In today’s threat environment, the security of our digital infrastructure is just as critical as the physical security of our reservoirs… we are providing New York’s water sectors with the intelligence-driven framework and the muscle they need to preemptively harden our most vital systems against sophisticated global adversaries.” Michaela Lee, Acting Chief Cyber Officer, added: “Effective cybersecurity is not a one-time fix; it is a sustained partnership between the State and our local operators… By providing both the regulatory roadmap and the $2.5 million SECURE grant, we are ensuring that water and wastewater utilities have the guidance and resources they need to remain resilient in an increasingly digital world.”
Other state leaders echoed support for these efforts. Dr. James McDonald from DOH said: “Governor Hochul’s nation-leading cybersecurity regulations reflect a steadfast commitment to protecting the health and safety of New Yorkers.” Maureen A. Coleman from EFC stated: “Thanks to Governor Hochul’s leadership, New York is pairing strong cybersecurity protections with meaningful support for local governments.” Amanda Lefton from DEC noted: “Governor Hochul’s leadership is proactively enhancing cybersecurity across our water and wastewater systems to protect our environment and public health.” Community leaders also praised clear standards, financial support, technical assistance, as well as ongoing collaboration among state agencies.
New York continues its investments in water infrastructure with $3.8 billion allocated in State Fiscal Year 2025—including $1.1 billion in grants—and plans outlined by Governor Hochul would bring total state grants above $10 billion since 2017.