Less than 25%

[water/ wastewater
operators] surveyed
perform annual
cybersecurity risk
assessments.'

Develop and implement
a plan to periodically assess
the risks and threats
to your organization's IT
and OT systems.

' WaterlSAC Cybersecurity State of The Sector
2NIST SP 800-53 rev. 5; RA-3 [Risk Assessment]

Learn how to
protect your business at

www.epa.gov/ safewater/ cyberaware

Water Security is National Security

-------