H.R. 5868: Water Cybersecurity Enhancement Act of 2025

The Water Cybersecurity Enhancement Act of 2025 aims to strengthen the cybersecurity of public water systems in the United States. Specifically, the bill proposes the following key actions:

Amendments to Existing Law

The bill amends the Safe Drinking Water Act, focusing on the Drinking Water Infrastructure Risk and Resilience Program. The amendments are designed to extend and enhance training and support for public water systems against cyber threats. Key changes include:

• Training Programs: The act mandates the provision of grants for the training of personnel involved in managing community water systems. This training will address methods for protecting these systems from cyberattacks and ensuring an effective response when such incidents occur.
• Grant Period Extension: The period during which the community water systems can apply for grants and funding will be extended to include the years 2026 through 2031, replacing the previously covered years of 2020 and 2021.
• Materials and Guidance: The bill allows for the purchase of training manuals and guidance materials that focus on improving the security and resilience of water systems against cyber threats.

Overall Purpose

The primary goal of this bill is to enhance the security posture of community water systems across the United States. By improving training and resources available to these systems, the bill aims to better equip them to prevent cyberattacks and to implement effective responses in cases where their systems may be compromised.

Administration and Oversight

The administration of these programs and distribution of grants will likely fall under the existing frameworks managed by the Environmental Protection Agency (EPA) or related governmental bodies responsible for public water system safety and security.

Funding Implications

Through the provision of federal grants, the bill seeks to allocate necessary resources to support these initiatives. This will involve funding from the federal budget, thereby potentially impacting financial planning and resource allocation within the government for public infrastructure enhancements.

Relevant Companies

• GE (General Electric) – GE may be impacted as a provider of infrastructure technology, including cybersecurity solutions for water systems.
• ORCL (Oracle Corporation) – Oracle could see changes in demands for its cybersecurity solutions as water infrastructure seeks to enhance their protection against cyber threats.
• ADBE (Adobe Inc.) – Adobe may be indirectly affected if any of its cybersecurity software products are utilized within public water system protections.