Category: Hot topics

Defending Against S7 Series PLCs

Posted on by matthewframe

Defending Against an Active Threat to Siemens S7 Series PLCs

Overview

The National Security Agency (NSA) has issued a cybersecurity advisory to inform owners and operators of Siemens S7-series Programmable Logic Controllers (PLCs) of an active cyber threat to these industrial control systems (ICSs).

Recommended Actions

EPA recommends water and wastewater systems review the tactics, techniques, and procedures (TTPs) in the advisory and the potential operational impacts to learn more about this threat, and apply the recommended mitigation actions and preventative hardening actions to minimize the likelihood of an attack.

For the full CISA report visit Defending Against an Active Threat to Siemans S7 Series PLCs.

Remember- If you see something, say something:

Report suspicious activity and threats of violence, including online threats as appropriate to local law enforcement, FBI – Richmond Field Office, and the VSP Fusion Center. The VSP Fusion Center will take appropriate action and investigate reports of concern with appropriate state and federal partners. The EPA Incident Action Checklist for Cybersecurity also includes resources for preparation and recovery. 

Maintain vigilance to protect critical infrastructure.  Please ensure your workforce is aware of the potential threats and that they know to report any and all suspicious activity to the VSP Fusion Center.  Thank you for taking immediate action to harden assets and protect people and critical infrastructure.

Cybersecurity & Infrastructure Security Agency (CISA)
Incident Reporting Webpage
Email: report@cisa.gov
Phone: 1-844-Say-CISA (1-844-729-2472)
Virginia Fusion Center
Virginia Fusion Center: Incident Reporting Webpage
Phone: 877-4VA-TIPS (877-482-8477)

View the VDH-Office of Drinking Water Website for Waterworks Cybersecurity for more resources.

Hurricane Season Information

Posted on by matthewframe

Hurricane season runs from June 1 through November 30, and Virginia’s water utilities play a critical role in community safety and resilience. Even storms that don’t make landfall in Virginia can bring heavy rainfall, flooding, power outages, and supply chain disruptions that affect water operations.

The Commonwealth is entering hurricane season, which runs from June 1 through November 30. Now is the time to prepare and review your emergency plans to ensure your utility is ready for severe weather impacts. Review the Hurricane Checklist to help stay prepared. Below is the link to the EPA Hurricane Incident Action Checklist: Water Sector Utility Incident Action Checklist – Hurricanes.

More information on hurricane season and emergency preparedness can be found here.

Virginia Drought Conditions Alert

Posted on by matthewframe

Virginia is currently experiencing severe drought conditions, with much of the Commonwealth under a drought watch or warning. Now is the time for utilities to ensure they are prepared should conditions continue to worsen by reviewing response plans, monitoring water supply levels, and coordinating with local partners. Utilities are encouraged to review the EPA Drought Checklist to assess preparedness and continue monitoring DEQ’s Drought webpage for the latest updates and conditions.

Please also find more information on the ODW Drought Monitoring Program – Drinking Water Webpage.

Provided is a recent drought report map.  To see the current drought monitoring maps and report click the link here.

 

Consumer Confidence Reports (CCR)

Posted on by kylefuller

Community waterworks must distribute an annual drinking water quality report, known as the CCR, to their customers and to the Office of Drinking Water, by July 1st each year.  Updated guidance on optional electronic delivery can be found in the CCR Electronic Delivery Guidelines and updated guidance on CCR Preparation can be found in the Preparation Guidelines.  The Office of Drinking Water will review draft CCRs sent to field offices before May 1.

The deadline for wholesalers to provide their CCR information to their consecutive waterworks is April 1st each year.

Each Community Waterworks must certify to the Office of Drinking Water how and when the CCR was distributed.  Certifications must be submitted to the Office of Drinking Water by October 1st each year.  Here is the link to the CCR certification form

For more information, visit our CCR webpage here.

ODW Newsletter

Posted on by matthewframe

The August 2026 ODW Newsletter covers several important topics highlighted below:

  • Defend Against Active Threat to Siemans S7 Series PLCs
  • Technical and Regulatory Updates
  • US EPA: Checklist for Laboratories providing Analytical Support for Water Contamination Incidents
  • 2026 Drought Update
  • Security & Resilience
  • Hurricane Season Update
  • Upcoming Training and Webinars

More information on all these topics can be found in the August 2026 Newsletter.

A link to previous ODW Newsletters and bulletins can be found on the ODW Newsletters page.

City of Richmond Water Crisis

Posted on by matthewframe

On January 6, 2025 a winter weather-related power outage impacted operations at the City of Richmond’s water plant along the James River. As a result, the City of Richmond, Hanover, Henrico, and Goochland Counties were put under a Boil Water Advisory. The link below provides information on the Virginia Department of Health’s (VDH) response, investigation, and ongoing efforts to increase the City of Richmond’s drinking water system reliability.

More information on the city of Richmond Water Crisis can be found here