|
March 2022
Increased threat of cyber attacks calls for increased vigilance, security awareness/actions
The war in Ukraine has increased the threat of cyber attacks on U.S. infrastructure. In light of this, the EPA is encouraging water and wastewater system owners and operators to maintain a heightened awareness for possible intrusions into their operational networks and to prepare to maintain critical operations if process control networks are disabled. The Agency is requesting facilities focus on reporting incidents or suspicious activity, and taking pre-emptive steps.
Report cyber security incidents in a timely manner
Report incidents to FBI Field Office Cyber Task Forces at https://www.fbi.gov/contact-us/field-offices and the National Cybersecurity and Communication Integration Center at (888) 282-0870 or NCCIC@hq.dhs.gov and the United States Computer Readiness Team at https://www.cisa.gov/uscert/.
Facilities that have experienced malicious or suspicious activity are also encouraged to contact the Water Information Sharing and Analysis Center (Water ISAC): email analyst@waterisac.org, call 866-H2O-ISAC, or use the confidential online incident reporting form.
Implement and vigilantly maintain pre-emptive actions
1) Require Strong, Unique Passwords. Malicious cyber actors repeatedly use stolen or easily guessed credentials. Consider forcing a global reset of all passwords in your environment before staff begin taking time off.
2) Implement Multi-Factor Authentication. After changing passwords, make implementing multi-factor authentication (MFA) a priority. MFA significantly reduces your risk from almost all opportunistic attempts to gain entry into your systems.
3) Address known exploited vulnerabilities. This could include patching and/or additional controls such as network segmentation to protect vulnerable devices that cannot effectively be patched. CISA maintains a catalog of Known Exploited Vulnerabilities that utilities are encouraged to review to identify vulnerable systems. Also, prioritize network segmentation to prevent unauthorized access to your operational technology (OT) systems from the internet and to reduce connectivity between OT and vulnerable information technology (IT) systems.
4) Surge Support. Identify surge support for responding to an incident. Malicious cyber actors are known to target organizations on weekends and holidays when there are gaps in organizational cybersecurity.
5) Network/Systems Awareness. Be alert for unusual behavior in OT and IT systems, such as unexpected reboots of digital controllers and other OT hardware and software, and delays or disruptions in communication with field equipment or other OT devices. Enhance logging to investigate anomalous activity – including collecting more logs and increasing storage capacity and retention time.
6) Backup Data. Implement and test data backup procedures on both IT and OT networks and ensure copies of backups are isolated (stored offline) from the network.
7) Incident Response Plans. Create, maintain, and exercise a cyber incident response and continuity of operations plans.
8) Manual Operations. Have a resilience plan that addresses how to operate your system if you lose access to or control of critical OT or IT systems – including the ability to sustain manual operations for extended periods.
Additional resources
In addition to systems taking these pre-emptive actions, the EPA has provided links to additional resources on maintaining cyber security, as well as how to report cyber incidents.
• Joint Cybersecurity Advisory Ongoing Cyber Threats to U.S. Water and Wastewater Systems (CISA, FBI, NSA, EPA; 10/14/21)
• WaterISAC’s 15 Cybersecurity Fundamentals for Water and Wastewater Utilities
• U.S. EPA Cybersecurity Best Practices for the Water Sector
• AWWA Resources on Cybersecurity
The wastewater conferences scheduled for March of 2022 are being offered online as a virtual event again this year. They will be held March 21st and 22nd in a format similar to the 2021 event. Registration and enrollment is available now on the MPCA Wastewater Operators Training and Certification webpage. Visit the Conference Website to view an agenda of the Conference.
The annual Wastewater Collection Systems Conference and the Wastewater Operations Conference were originally scheduled to be a hybrid event offering both in-person and virtual options to meet everyone’s needs. Numerous technical and logistical challenges to do the hybrid successfully led to the change in format, but they were not the only consideration. The decision to deliver the conferences virtually was made with careful consideration weighing the pros and cons along with the needs of our session developers, speakers/presenters, vendors, staff and technical support, and of course our operators and attendees.
In-person events for the Class A/B, C/D, SA/SB, SC/SD Certification Refreshers, Type IV refresher, and Type V refresher events are being held as separate events during the same week. Registration is available here: Collection and Wastewater Exam Refresher.
To learn more about this year’s wastewater conference, or to register to attend any wastewater or exam certification event in 2022, please check out the Wastewater Operators Training and Certification webpage to enroll.
For Conference registration questions, contact Annaliza Heesch at Annaliza.heesch@state.mn.us
For questions about the Conference Platform, contact Marc Weikert at marcus.weikert@state.mn.us
For questions related to certification, contact Tracy Finch at Tracy.Finch@state.mn.us
For vendor show questions, contact Aaron Kilpo at Aaron.Kilpo@state.mn.us.
Type IV Training Schedule – Reduction in Offerings
The 2022 Training calendar includes just one Type IV Basic Class, to be held April 12-14 at Cragun’s Conference Center in Brainerd. In total, there will be three MPCA sponsored Type IV training events in 2022. Two will be refresher courses (one day/6 hours). One of these Refreshers will be offered in-person on March 23rd and the other will be offered online as a virtual event on May 19th.
The training program is currently going through a Need to Know Process which will result in updates to the training, training materials and test.
If all continues to proceed as planned with the Need to Know process, those changes will be occurring in the fall when we would typically have a second Type IV Basic. Next year (2023) we plan to have a Type IV Basic in both April and September again.
To see the full list of trainings scheduled for 2022, visit the MPCA Wastewater Operators Training and Certification webpage via the button below.
We heard you: Quarterly municipal wastewater webinars will begin in April
Session topics gleaned from survey input
Four municipal wastewater webinars have been scheduled on a quarterly basis over the next year based on feedback received from a poll sent to permit holders in February.
An email with information specific to the topic as well as a link to the event will be emailed out via Gov Delivery at least two weeks in advance of each webinar date. Each webinar will last one hour.
One Wastewater Contact Hour is available for each webinar attended.
April 6, 2022 – 1:00 – 2:00 p.m.
“State Financial Assistance Programs: From Submittal, Certification, and into Construction”
July 13, 2022 – 1:00 – 2:00 p.m.
“Sanitary Sewer Service Laterals Ordinance/Upgrades: Examples and Funding Options"
October 5, 2022 – 1:00 – 2:00 p.m.
“Effluent Limits – An explanation of the Limit Calculation Process”
January 4, 2023 – 1:00 – 2:00 p.m.
“How to Effectively Work with your Industrial Users”
Contact Joel Peck at joel.peck@state.mn.us or 651-757-2202 with questions.
Spring is in the air (so is preparing for flooding)
Spring is known as flood season for many wastewater treatment facilities. Make sure you are prepared by having spare pumps, generators, sand bags, and other equipment on hand, along with spare sample bottles in case of an unplanned release.
Every wastewater permit issued by the MPCA includes requirements to maintain appropriate backup equipment and to collect representative samples of an unplanned release of wastewater.
Note on sample bottles
Many wastewater facilities receive sample bottles from contract laboratories which in turn are shipped back to the lab for analysis. Wastewater facilities should make sure they have enough spare sample bottles on hand, which may require contacting the lab to make arrangements. Please note that some sample bottles and/or preservatives may have expiration dates. So check bottle expiration dates at least twice per year and ask the lab how to store the bottles to maximize their use time.
Facilities should be prepared to analyze a release for total suspended solids, fecal coliform and the other parameters listed on this MPCA wastewater release sampling report. Note that your facility’s specific permit may require parameters to be analyzed in addition to those listed on the form.
Is it an overflow or a bypass? A refresher on terms
Check here to refresh your understanding of terms, as well as what to do in the event of a release or bypass.
Additional resources on flooding preparation and response
|
Funding available for renewable energy at wastewater treatment facilities
The Legislative-Citizen Commission on Minnesota Resources (LCCMR) has a limited opportunity to welcome proposals to its Emerging Issues Account for renewable energy demonstration projects at wastewater treatment facilities. There is $1,095,000 in Environment and Natural Resources Trust Funds available and may be awarded to one or more projects. Funds would be available upon approval.
Visit the LCCMR’s Emerging Issues webpage for the full RFP and application instructions.
New search tool shows facility proximity to special, impaired waters
The Industrial Stormwater Program is excited to announce the release of our newest resource!
This tool is customized to allow Industrial Stormwater permitted facilities and No Exposure Certified facilities to identify their facility locations, monitoring locations (as applicable), and proximity to certain features of interest.
Launch the map tour and learn how to navigate in the search tool: Industrial Stormwater Special and Impaired Waters Search Tool
|
MPCA recognizes 272 facilities for outstanding operations, maintenance
Each year the MPCA recognizes permittees across the State for outstanding operation and maintenance practices at their wastewater treatment facilities. Awardees for 2022 (covering the period October 2020 through September 2021) have been named and appear in a searchable table on the MPCA website here.
Certificates and press releases will be sent following the March 22 wastewater conference.
If you have questions about the awards, contact Teresa Roth at teresa.roth@state.mn.us or 507-344-5252.
|
Free EPA virtual "water specific" ICS/NIMS training available March 29
This one-day virtual Incident Command System (ICS) and National Incident
Management System (NIMS) workshop is intended to help water and wastewater utilities in EPA Region 5 states (which includes Minnesota) as well as their
response partners to better understand ICS, integrate with other first responders within an expanding ICS structure, and implement NIMS concepts and principles that will help utilities provide mutual aid and assistance to one another.
When
Tuesday, March 29, 2022
8:30 AM – 4:00 PM Central Time
Zoom Virtual Workshop
The specific courses offered as part of this virtual workshop are:
- IS-100.C – Introduction to the Incident Command System
- IS-700.B – An Introduction to the National Incident Management
System.
What is ICS?
ICS is a standardized approach to incident management that is used to
coordinate an effective response to incidents by all types of organizations and at all levels of government. ICS allows its users to adopt an integrated organizational structure to match the complexities and demands of single or multiple incidents without being hindered by jurisdictional boundaries.
What is NIMS?
NIMS is a consistent nationwide template that enables all government and non-governmental organizations to work together during domestic incidents. NIMS requires all agencies to use ICS when responding to incidents.
Why is ICS/NIMS Training being offered?
Feedback from utilities, states, EPA regions, and other stakeholders indicates that water sector-specific ICS and NIMS training remains a priority.
Who Should Attend
Representatives from small, medium and large water and wastewater utilities, water sector trainers, state drinking water primacy agencies, state wastewater permitting agencies, and response partners with an active role in water sector emergency response.
Training Credit Hours
An application will be submitted for EPA Region 5 water and wastewater operators to earn training credit hours toward their license renewal requirements for their participation.
Contact Will Keefer, Horsley Witten Group (EPA Contractor), at wkeefer@horsleywitten.com or 508-833-6600 if you have any questions about the training event.
There is no fee to attend this course, but please pre-register so we can obtain an accurate headcount and provide you with the Zoom virtual platform information.
U o f M offering two self-paced online Industrial Stormwater courses
The University of Minnesota Erosion and Stormwater Management Program is offering two, on-demand, self-paced online Industrial Stormwater courses.
ISW 2202 (approximately 7 hours)
For those wo are new to the Industrial Stormwater permit or who would like a detailed refresher of the industrial stormwater requirements. Topics include no exposure, SWPPP development and implementation, stormwater sampling and monitoring, inspections, SWPPP modification, and annual training requirements. Learn more or register.
Permit basics, 2022 topics (1 hour, meets permit training requirement)
For those familiar with the 2020 Industrial Stormwater Permit and would like to take an online course to meet the permit's annual training requirement.
Learn more or register.
Questions? Contact Mary at the Erosion Program at erosion@umn.edu or call 612-625-9733.
|
