Water Cybersecurity Enhancement Act of 2025
Summary
What This Bill Does
The Water Cybersecurity Enhancement Act of 2025 updates the Safe Drinking Water Act community water system risk and resilience provision. It replaces the old 2020 and 2021 fiscal year references with fiscal years 2026 through 2031. It also updates eligible activities so community water systems can participate in training programs and purchase training manuals and guidance materials related to security and resilience, specifically including protection from cyberattacks and response to cyberattacks. In practical terms, the bill extends the time window for federal support and makes cybersecurity training and cyber incident response part of the recognized risk and resilience toolkit for community drinking water systems.
Who Benefits and How
Community water systems benefit because the bill extends risk and resilience support and explicitly recognizes cybersecurity training and guidance as eligible. Drinking water customers benefit if utilities are better trained to prevent, withstand, and respond to cyberattacks that could disrupt safe water service. Small and medium water utilities benefit from federal recognition that training manuals and guidance materials can be part of cybersecurity readiness. Cybersecurity training providers benefit from clearer demand for water-sector cyberattack protection and response materials.
Who Bears the Burden and How
EPA drinking water security staff must administer updated fiscal year references and cybersecurity-eligible activities under the Safe Drinking Water Act provision. Community water system managers must evaluate cyber training, manuals, and response guidance to use the support effectively. Federal taxpayers bear the cost of extending the risk and resilience support window through fiscal year 2031.
Key Provisions
- Amends Safe Drinking Water Act section 1433(g) to replace 2020 and 2021 with fiscal years 2026 through 2031.
- Adds participation in training programs and purchase of training manuals and guidance materials as covered security and resilience activities.
- Specifically includes protecting community water systems from cyberattacks and responding to cyberattacks.
Evidence Chain:
This summary is generated from the full bill text using AI analysis. Expand "Detailed Analysis" below for identified beneficiaries/burden bearers with clause-level evidence links.
At a Glance
What This Bill Does
Reauthorizes Safe Drinking Water Act community water system risk and resilience support for fiscal years 2026 through 2031 and expands eligible training and guidance materials to cover protection from and response to cyberattacks.
Key Policy Areas
Drinking Water, Cybersecurity, EPA
Primary Purpose
Reauthorizes Safe Drinking Water Act community water system risk and resilience support for fiscal years 2026 through 2031 and expands eligible training and guidance materials to cover protection from and response to cyberattacks.
Policy Domains
Substantive provisions
Identified Gains
- Community water systems
- Drinking water customers
- Small water utilities
- Water cybersecurity training providers
Identified Costs
- EPA drinking water security staff
- Community water system managers
- Federal taxpayers
Sponsors
Legislative Progress
In CommitteeMs. Wilson of Florida (for herself, Mr. Moylan, Mr. Mann, …
Referred to the House Committee on Energy and Commerce.
Introduced in House
Bill Structure & Actor Mappings
Who is "The Secretary" in each section?
We use a combination of our own taxonomy and classification in addition to large language models to assess meaning and potential beneficiaries. High confidence means strong textual evidence. Always verify with the original bill text.
Learn more about our methodology