Requires Cybersecurity Plans for Rural Water Systems
New York · S10724 · Introduced Oct 23, 2026
Why it matters
Rural water systems would need new security steps and yearly audits, with grant money given priority to help pay for upgrades. Their staff would also need training on running plants manually.
What it does
- Requires a state cybersecurity plan for rural water systems serving 10,000 people or fewer
- Requires rural water systems to disconnect control devices from direct internet exposure
- Requires strong, unique system passwords and firewalls or VPNs at rural water systems
- Requires an independent third-party cybersecurity audit each year, filed with the state
- Requires breach reports within 24 hours to state homeland security and state police
In committee
Next: a committee vote
- Introduceddone
- Committeecurrent step
- Senatenot yet
- Assemblynot yet
- Governornot yet
About this bill
Would require rural water systems serving 10,000 people or fewer to follow a state cybersecurity plan, with yearly audits. The state would give priority to these systems for SECURE program grants.
Establishes the "rural state water utility modernization and security act" which requires the development and implementation of an action plan for the modernization and enhancement of cybersecurity at all rural water utilities in the state; requires SECURE program funding to prioritize rural water utilities.
Perspectives
💬 The case for
Security groups would likely say small water systems are easy targets for cyberattacks. Stronger rules and priority grants would help them protect drinking water.
💬 The case against
Some small water systems would likely say the audits and upgrades cost more than they can afford. They may also say grant priority does not add enough funding.
Sponsored by
Sponsor details for this state bill are at the source link.
News
Loading coverage…