# Securing the Nation's Water: A Collaborative Cyber Defense Effort The **National Rural Water Association (NRWA)** has unveiled a crucial program, the **Water Watch Center (WWC)**, designed to bolster the cybersecurity posture of smaller, often underfunded, water and wastewater systems nationwide. This initiative comes at a critical time, following a series of cyberattacks impacting water systems across at least 12 states. ## A Partnership for Resilience The **WWC** is a collaborative effort, forged between the **NRWA** and **DEF CON Franklin**, an organization known for connecting volunteer cybersecurity experts with cash-strapped water utilities. **DEF CON Franklin** co-founder **Jake Braun**, a former cyber official in the Biden administration, highlighted the program's innovative approach: "These leading cyber firms and **NRWA** are architecting a scalable cyber delivery model that has eluded water industry and national security officials to date." ## Direct Support for Vulnerable Utilities The program will see five managed detection and response (MDR) providers working alongside **DEF CON Franklin** and the **NRWA** to offer specialized cyber services. These services are specifically tailored for water utilities serving fewer than 10,000 people, a demographic that accounts for 91% of the over 50,000 community water systems in the U.S. Participating providers include **Rapid7**, **Defendify**, **Legato Security**, **L1 Secure**, and **Sentinel Technologies**. These firms will share vital threat intelligence and vulnerability patch data with the **NRWA**, which will serve as the central hub for dissemination. **Braun** emphasized the unique expertise brought by these providers: "Our incredible Franklin volunteers will support the effort to keep costs down for cash-strapped utilities fending off adversaries like the **Iranian Red Guard** or **Chinese Military**. To further accelerate the effort, we hand-picked cyber providers who already support water utilities. These folks walk in the door knowing the intricacies of cybersecurity in a water utility environment." ## Responding to Escalating Threats The launch of the **WWC** is a direct response to a growing wave of cyberattacks, many allegedly linked to Iranian hackers, targeting the operational technology of water utilities. Recent incidents have been reported in Minnesota, Michigan, Georgia, South Dakota, and two towns in New Jersey. **DEF CON Franklin** itself emerged two years ago from veterans of the popular security conference, successfully recruiting 450 volunteer cyber experts to assist water utilities in states like Arizona, Indiana, Oregon, and Wyoming. This experience underscored the challenge of scaling cybersecurity services to the nation's 150,000 water and wastewater utilities. ## Innovation and Future-Proofing The **WWC** is already active, initiating work in Maryland to identify rural water utilities in need, especially those supporting military facilities. **NRWA** Chief Executive Officer **Matthew Holmes** stated, "Water systems are facing increasing cybersecurity risks, and with the **Water Watch Center**, we’re providing rural systems with trusted resources to secure our nation’s water infrastructure." Beyond direct support, the officials behind the **WWC** are collaborating with **Vanderbilt University** and the U.S. military to develop digital replicas of water and wastewater system environments. This innovative approach will enable experts to test and refine automated defensive strategies in a controlled setting. ## Navigating Regulatory Landscapes Historically, organizations like the **NRWA** have expressed concerns about federal cybersecurity regulations, arguing that they could lead to increased costs for consumers. These concerns have prompted states like New York to pair water cybersecurity regulations with grant programs, helping utilities fund the necessary defensive systems.