STATE News:

• • • • • State’s goals for protecting water, wastewater systems get high marks

SANTA FE — A state plan for protecting critical water and wastewater systems from cyber-attacks has received high praise and approval from the White House.

The National Security Council, Environmental Protection Agency and the Cybersecurity and Infrastructure Security Agency asked all states to prepare an action plan to mitigate cybersecurity risks in water and wastewater systems. The plan was submitted by Gov. Michelle Lujan Grisham in August and received approval in late September. The plan details cyber protections to cover public water systems and wastewater treatment facilities in New Mexico that serve a population of more than 3,300.

The New Mexico Office of Cybersecurity (OSC) collaborated on the plan with the state Environment Department (ENV) and Department of Homeland Security and Emergency Management (DHSEM).

The three state agencies plan to work collaboratively with public water systems and wastewater treatment facilities to facilitate access to the federal and state resources. The state will provide guidance, services, and support to safeguard these critical infrastructure systems from cyber threats.

“I am excited to say that if we were asked to grade this outcome, the state can say it passed with an ‘A’,” said Raja Sambandam, state chief information security officer. “The first step in this plan is to understand where the gaps are and where the greats needs are. This will be done through a cybersecurity risk assessment. It is important for the state to continue this crucial and collaborative effort to assess, secure and protect one of our critical infrastructures from potential nation-state sponsored threats.”

Notice of the plan’s approval coincides with Gov. Michelle Lujan Grisham proclaiming October as ‘Cybersecurity Awareness Month’ in New Mexico. The DoIT is offering tips through social media and can be followed on Facebook, Instagram, LinkedIn or X.

For other tips and information on how to participate in the Cybersecurity Awareness Month visit: cisa.gov/cybersecurity-awareness-month and staysafeonline.org/cybersecurity-awareness-month/.