Governance, risk & compliance

US Water & Wastewater Cyber Security (AWIA) 2026

Cyber and physical security requirements for community water systems, which in most of the United States means the municipality.

Section 2013 of America's Water Infrastructure Act requires a community water system serving more than 3,300 people to conduct a risk and resilience assessment covering electronic and computer systems, certify it to the EPA, and then prepare or revise an emergency response plan within six months, on a recurring five-year cycle. Layered on top: the EPA and CISA water sector cybersecurity guidance, the AWIA-aligned WaterISAC recommendations, and the operational technology controls that apply to any SCADA-run plant.

Water treatment and distribution control systems have been a repeated target because they are internet-reachable, run on default credentials, and have a physical consequence.

How Lavawall® helps you get to US Water & Wastewater Cyber Security (AWIA) compliance

Most of US Water & Wastewater Cyber Security (AWIA) comes down to technical controls you have to run and prove: keeping systems patched, hardening configuration, detecting breaches early, backing up what matters, controlling access, and keeping evidence that all of it actually happened. Lavawall® runs those controls across Windows, macOS, Linux, and Microsoft 365 / Google Workspace from one console, maps them to US Water & Wastewater Cyber Security (AWIA), and tracks your posture continuously instead of once a year at audit time.

• Assess your current state against US Water & Wastewater Cyber Security (AWIA) in the Lavawall GRC module, with the questionnaire and control set built in.
• Remediate the gaps with the same platform — automated patching, configuration fixes, backups, and access review — not a separate project.
• Evidence everything with timestamped, exportable records auditors, insurers, and clients accept.

Related

Lavawall® supports US Water & Wastewater Cyber Security (AWIA) as part of a built-in catalogue of compliance frameworks. Framework requirements are summarized for planning purposes; always confirm the current official text before certifying.