Office of Drinking Water Newsletter

We publish our newsletter every other month. To receive the next issue in your inbox, join the ODW Newsletter email list.

ODW Now September 2026

Printable PDF copy (PDF)

Only You Can Lock the Door on Cyber Threats

We continue to share information from our federal partners about cybersecurity threats affecting public water systems with three bulletins in the last few weeks.

The most recent Cybersecurity Advisory bulletin comes from the National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Department of Energy (DOE), and Environmental Protection Agency (EPA). In it, they warn owners and operators of industrial control systems (ICSs) of a specific active cyber threat to Siemens S7 Series programmable logic controllers (PLCs) and provide relevant mitigations to protect and defend them.

The previous bulletin came from the FBI and EPA joint announcement. It outlined the threat for drinking water and wastewater systems and provided tips and steps to reduce threats.

The first bulletin from EPA and CISA alerted water systems to an increase in cybersecurity incidents targeting public water systems across the country. It highlighted activity targeting PLCs and other operational technology (OT).

Defending Against a New Threat

The Siemens-specific content in this advisory should be understood and applied as one subset of the wider threat landscape. All PLC owners and operators should apply relevant mitigations to reduce the risk to their devices and systems.

Mitigation Tips

Inventory all Siemens S7 Series programmable logic controllers (PLCs).
Apply critical security patches.
Ensure PLCs are not accessible from the internet.
Strengthen access controls.
Monitor for unauthorized activity.
Harden PLC services, protocols, and ladder logic integrity.
Hunt for anomalies that may indicate a compromise.

Protect Your Operational Technology

CISA recommends that water systems take the following actions.

Use strong passwords for OT devices and systems.
Do not expose OT system components directly to the public internet. Use a private network, firewall, virtual private network (VPN), or other secure connection.
Remove PLCs from direct internet exposure by using a secure gateway and firewall. Work with your IT staff or system integrator to make these changes.
Install and configure PLCs according to the manufacturer’s guidelines and security best practices.
Review available system logs for indicators of compromise (IOCs) and suspicious traffic on ports commonly associated with OT devices, including 44818, 2222, 102, and 502. Pay particular attention to traffic originating from foreign hosting providers.
For Rockwell Automation devices, place the physical mode switch on the controller in the Run position.
If you suspect your system has been targeted, including an attack involving a PLC from another manufacturer, contact the appropriate federal agency and PLC manufacturer for guidance.

Reporting Cyber Incidents

Organizations can report cyber incidents to CISA 24/7 by email at Contact@mail.cisa.dhs.gov or by calling 1-844-Say-CISA (1-844-729-2472).

CISA Region 10 also provides cybersecurity assistance to water systems in Washington. Services include secure support for water systems, physical security assessments, resiliency training, and workplace safety training. CISA Region 10 can be reached at CISARegion10@cisa.dhs.gov or cisaregion10ops@cisa.dhs.gov.

Report cybersecurity incidents to us as well. For utility personnel experiencing an emergency after normal business hours, call 1-877-481-4901. During normal business hours, use the Drinking Water Contacts and Office Location webpage to find the appropriate ODW contact.

Additional Resources

You can learn more and find additional guidance through:

FBI and EPA joint announcement. Tips to protect yourself, resources for reporting impacts, and product and technical assistance.
EPA: Cybersecurity for the Water Sector.
CISA: Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across U.S. Critical Infrastructure.
CISA: Secure Connectivity Principles for Operational Technology.

If you use PLCs from Rockwell Automation (PSIRT@rockwellautomation.com), Schneider Electric (cpcert@se.com), or Siemens (productcert@siemens.com), contact them for guidance or to report incidents involving their products.

Cybersecurity threats continue to evolve, and maintaining secure OT connections is an important part of protecting water system operations and continuity of service. We will continue to share information from EPA, CISA, and other federal partners as it becomes available.

Tech Team Availability at the IACC Conference

Do you have an infrastructure project that has hit a roadblock? Need help navigating funding or regulatory requirements? The Infrastructure Assistance Coordinating Council (IACC) can help.

IACC Tech Teams provide an opportunity for communities to meet with state and federal funding and regulatory experts to discuss specific infrastructure challenges. Tech Teams bring together the right mix of program staff based on the needs and challenges of your project, with the goal of understanding your unique situation, exploring potential solutions, and developing an actionable plan to move your project forward.

Tech Team meetings are available to Washington cities, counties, towns, special purpose districts, Tribes, and privately owned not-for-profit Group A community water systems. Communities should request assistance directly as consulting firms cannot submit requests through the Tech Team process.
You can request in person Tech Team meetings at the IACC conference in Wenatchee from now until the October conference. If your community has a project that could benefit from direct access to infrastructure funding and regulatory experts, consider requesting a Tech Team meeting through the IACC website.

Seasonal Shut-Down Procedures

Late summer often means water system shut down. Summer camps, campgrounds, parks, and other seasonal facilities are shutting off water access. Here are key steps in the process to successfully close off the water and prepare for the next season.

Inspect

Look closely at all your water system facilities. Make sure the source, pressure tank, treatment, storage, and other structures are in good working order. Schedule repairs during the off season so that the facilities are ready for serving clean water at the start of next season. Write down the ending source meter reading.

See our Small Water System Start-up Shut-down Self-Inspection Checklist 331-312 (Word).

Drain and Repair the Storage Tank

Drain the storage tank to inspect it for cracks and leaks. Inspect vents, overflow pipes, and storage hatch edges for any unwanted holes or openings. Repair now before the new season.

Consider Draining the Pressure Tank

If freezing is a concern, drain the pressure tank’s water. If not drained, chlorinate the tank before the new season.

Shut Down the Source and Treatment

Generally, shutting off power to the source and treatment is prudent. Protect facilities from freezing by insulating in Styrofoam. Other materials may attract rodents.

Protect the Distribution System

Make sure valves work by opening and closing them. Shut off all taps. If valves or taps are leaky or inoperable, take the time to repair them so that the system is ready to start a new season.

Prepare for the New Season

Plan for next year by looking at your records, water quality reports, and monitoring plans. While sealing cracks in the storage tank or changing out a valve does not require approval by us, replacing a storage tank or adding treatment does require our approval.

Contact an Engineering Staff Member for Further Information.

Drinking Water Contacts and Office Location webpage. We want to position you for success. Let us know if you have any questions. Our main number is 360-236-3100 or Toll Free 800-521-0323 (inside Washington).

See our Start-Up and Shut-Down Assistance for Seasonal Non-Community Water Systems webpage for more information and resources. 

Drinking Water Advisory Group (DWAG) December 7, 2026, Meeting

We hold all our meetings through Microsoft Teams video, so you can join our meeting with your computer, laptop, tablet, or phone from wherever you are. You can find the Teams links and meeting agenda on our DWAG Meeting webpage. After the meeting we post any handouts or presentations and, within a month, we post the meeting notes.

Do you want to receive advance notice of meetings and their agendas? Join our advisory group email list.

Do you have questions or topics you want to discuss? Email John Freitag or DWInfo@doh.wa.gov.

ODW Fun with Numbers

We provide several annual reports to the Environmental Protection Agency that cover a wide range of topics. The reports describe how we implement our mission, vision, and values. Below are some data points from this year’s reports.

Certified Operators

Certified operators in Washington State: 3,995. Operators with more than one type of certification: 2,437.
Certified Backflow Assembly Testers (BAT): 1,871.
Certification exam applications received and reviewed: 1,282.
Group A public drinking water systems required to have a certified operator in responsible charge of their operations: 3,350.
CEU-approved training courses for certified operators’ professional growth requirements: 495.
Valid email addresses for certified operators and BAT: 99 percent.

Drinking Water State Revolving Fund

DWSRF construction loans: $168.8 million to 35 projects, with approximately $38.3 million awarded as loan subsidy.
Pre-construction Projects: $3.9 million in loans and $400,000 in grants for 15 total projects.
Consolidation Feasibility Grants: $490,000 for 8 projects.

Sanitary Surveys

Sanitary surveys completed: 785.
Significant deficiencies identified: 414.
Significant findings identified: 405.
Referrals: 52.

Publications and Required Document Reviews

Reviewed 391 and approved 273 engineering documents.
Reviewed 65 and approved 51 planning documents.
Developed 17 new publications.
Updated or revised 58 publications.

Violations

Formal enforcement documents: 986.
Community Water Systems receive 58 percent of violations.
Transient Non-Community (TNC) systems receive 72 percent of nitrate enforcement actions issued.
TNC systems also receive 53 percent of coliform enforcement actions issued.

DWSRF Update

Guideline Updates and 2026 Application Cycle

We continue to present workshop webinars as we move closer to closing the 2026 application cycle November 30. Our draft guidelines for the 2026 Application Cycle are open for comment, and we encourage anyone who is interested to provide feedback. We use the feedback to shape application requirements for construction, planning and engineering, and consolidation feasibility projects for the coming year. You can find the guidelines on our DWSRF webpage.

We have one remaining webinar October 14 from 8:30 am to noon, we posted the link and access codes on our webpage. We also provide links to the presentations and other relevant publications.

Drinking Water Needs Survey and Assessment

Every four years, Congress requires an assessment of the twenty-year forecasted capital improvement needs of public water systems across the country through the Drinking Water Needs Survey and Assessment (DWINSA). The U.S. Environmental Protection Agency (EPA) kicked off this year’s DWINSA on September 3 by sending surveys for over 40 medium and large water systems throughout Washington State. Selected systems must complete these surveys within six months. The needs identified in the surveys are vital to securing federal funding needed statewide to provide for water system projects and capacity development.

We will reach out to the systems being surveyed to help them effectively respond and identify their needs, ensuring complete and accurate information to help maintain the infrastructure funding available to Washington State water systems.

Imagine a Day Without Water: More Than an Inconvenience

What would you do if you turned on the faucet tomorrow morning and NOTHING came out?

First are the obvious things: no water for your morning coffee, shower, brushing your teeth, or flushing the toilet. No dishwasher or washing machine. But there is so much more to water than household needs. From the food you eat and the beverages you drink to the clothes you wear and the everyday products you use, water touches nearly every aspect of our lives.

On October 15, communities across the country will participate in Imagine A Day Without Water, an annual campaign that highlights how essential reliable water service is to our health, communities, environment, and economy.

Water Keeps Communities Healthy

Clean, reliable drinking water is essential for more than staying hydrated. We depend on water to prepare food, wash our hands, bathe, clean, and maintain sanitation. Without reliable water service, routine activities that help prevent illness and disease become much more difficult.

Hospitals, clinics, nursing homes, and other facilities need water for patient care, cleaning, sanitation, and other essential operations.

Water Keeps Communities Safe

Water is critical for public safety. Firefighters rely on water systems and adequate water supplies to respond to fires. A disruption in water service can affect a community's ability to respond to emergencies and protect people and property.

We’ve seen this with Washington's recent wildfires. Even when a home is not damaged by fire, residents may not be able to return if their community does not have safe and reliable water service.

Water Keeps Businesses Running

Think about how many businesses use water every day. Restaurants need water to prepare food and clean dishes. Farmers need water to grow crops and care for livestock. Manufacturers use water to produce many different products and consumer goods. Schools, offices, hotels, and countless other businesses and organizations depend on reliable water service to operate.

When water service is interrupted, the effects extend far beyond your faucet. Businesses may have to reduce operations or close, employees may be unable to work, and services that communities depend on can be disrupted.

Water Supports Your Daily Life

We have some of the most reliable water infrastructure in the world. That makes it easy to take water for granted because it's there whenever we need it. We turn on a faucet without thinking about the work behind it—the source water, treatment facilities, pumps, pipes, storage, monitoring, maintenance, and skilled waterworks professionals who keep safe, clean water flowing.

Water system operators have an important role in helping their customers recognize the value of this essential resource. Imagine A Day Without Water provides an opportunity to start a conversation with your customers about where their water comes from, what it takes to provide reliable service, and why using water wisely matters.

You can find water conservation brochures, flyers, and bill stuffers on our Marketing Resources webpage. Consider sharing with your customers through your website, newsletter, social media, or other communications. Encourage customers to make water conservation part of their everyday routines—not only when drought or water shortages make headlines. Small changes in how we use water can help protect this valuable resource and support the long-term reliability of our water supplies.

Imagine A Day Without Water reminds us that water is much more than a resource that comes out of the tap. It is the foundation for healthy people, safe communities, thriving businesses, and a strong economy. On October 15, help your customers imagine a day without water—and then encourage them to do their part to make every drop count.

Updated Ladder Safety Requirements

In 2020, the Washington State Department of Labor and Industries (L&I) updated WAC 296-876-60065 to include a new requirement passed by OSHA. Fixed ladders that are more than 24 feet high, such as those on water towers, built after October 1, 2020, are required to be equipped with a personal fall arrest or ladder safety system, not just a protective cage or well. Existing fixed ladders should install a personal fall arrest or ladder safety system before October 1, 2040.

Studies show that fixed ladders equipped with cages as the primary means of fall protection were highly correlated with injuries and could make rescue efforts more difficult when workers’ limbs became caught in the cage bars. Cages are also not entirely effective at preventing falls, as workers could still fall through the cage and potentially be injured, without one of their limbs becoming caught. Studies show that personal fall arrest systems provide safer and more reliable protection against fall-related injuries and deaths. If a ladder and/or cage at your facility is reaching the end of its serviceable life, replacing it with a fall arrest or ladder safety system may also be more cost-effective.

Fixed ladder safety systems are designed specifically for the ladder and its use, with brackets installed on the ladder, cables, and a cable guide the climber will attach to, using a lanyard or lifeline with a harness. The guide moves with the climber without the need to attach and detach from multiple anchor points and locks into place in case of a fall. Some systems can be designed for transfer to a track at the top, to allow for horizontal movement if work is necessary away from the ladder exit.

L&I’s Unified Safety Standards for Fall Protection under WAC 296-880 detail more requirements for any time a worker is exposed to risk of falling, and the protections that must be put in place. Workers must be trained to use the equipment to protect them from falls, to ensure it is properly installed, used, and maintained. If you are looking at new equipment or need help making sure your training and documentation is sufficient, L&I offers free, confidential safety consultations.

In 2022, L&I paid more than $94 million for more than 4,500 claims for fall injuries from heights.

If you're unable to print the newsletter, please contact our office closest to you and a staff member will print and mail you a copy.

Archived Issues of ODW Now

2026

2025

2024

2023

2022

Archived Issues of Water Tap

2020

Spring 2020 (PDF)

2019

2018

2017

H₂Ops Newsletter Webpage

Note: The documents on this page were published on the dates specified. The internet links and other resources cited in the document were current as of those dates.