⚠️ Aviso de traducción: Este contenido ha sido traducido automáticamente. El texto original en inglés es la versión oficial. La traducción puede contener errores.
⚠️ Este contenido ha sido traducido automáticamente. El texto original en inglés es la versión oficial. La traducción puede contener errores.
Findings and Recommendations 12 findings
F1
EBMUD’s response to the American Water Infrastructure Act is timely and conforms to all requirements of this Act.
No recommendations for this finding
F2
EBMUD’s use of staff rather than an outside consultant for the Risk and Resilience Assessment complies with the American Water Infrastructure Act requirements.
No recommendations for this finding
F3
EBMUD expects to reuse existing plans to comply with the American Water Infrastructure Act Emergency Response Plan. The Act does not discuss the reuse of existing plans, and the impact on EBMUD’s certification cannot be determined.
No recommendations for this finding
F4
EBMUD’s public security notice on its website does not include a discussion about previous risk assessments.
No recommendations for this finding
F5
EBMUD’s public security notice on its website does not discuss the American Water Infrastructure Act requirements, or how EBMUD intends to comply with this Act.
Related Recommendations (1)
R2
EBMUD Board of Directors should consider publishing its conformance with the American Water Infrastructure Act on its public webpage
F6
Federal funding is available through the Drinking Water Infrastructure Risk and Resilience Program that could strengthen EBMUD’s cybersecurity infrastructure. These grants help offset water rate increases that customers might otherwise pay.
Related Recommendations (1)
R3
EBMUD Board of Directors should consider applying for a grant to offset new technology costs and strengthen its cybersecurity infrastructure under the Drinking Water Infrastructure Risk and Resilience Program
F7
CCWD's response to the American Water Infrastructure Act is timely and conforms to all requirements of this Act.
No recommendations for this finding
F8
CCWD’s use of staff and an outside consultant for the Risk and Resilience Assessment complies with the American Water Infrastructure Act requirements.
No recommendations for this finding
F9
CCWD’s designated Risk and Resilience Assessment & Emergency Response Plan team received specific, relevant training in the areas specified under Section 2013 of the American Water Infrastructure Act.
No recommendations for this finding
F10
There is no CCWD public website statement on the issue of cybersecurity or its program to counter cyberattacks.
Related Recommendations (2)
R1
EBMUD Board of Directors should consider publishing a cyber policy acknow- ledging the cyberattack threat and informing the public of its programs to overcome and prevent attacks on the public water supply
R4
CCWD Board of Directors should consider publishing a cyber policy acknow- ledging the cyberattack threat and informing the public of its programs to overcome and prevent attacks on the public water supply
F11
The Grand Jury found no evidence regarding CCWD’s National Institute of Standards and Technology Tier level. The National Institute of Standards and Technology Tier level is releasable to the public and essential to inform CCWD of how safe its water supply is from cyberattacks.
No recommendations for this finding
F12
Federal funding is available through the Drinking Water Infrastructure Risk and Resilience Program that could strengthen CCWD’s cybersecurity infrastructure. These grants help offset water rate increases that customers might otherwise pay.
Related Recommendations (1)
R5
CCWD Board of Directors should consider applying for a grant to offset new technology costs and strengthen its cybersecurity infrastructure under the Drinking Water Infrastructure Risk and Resilience Program