Senators Push Cybersecurity Overhaul to Protect Vulnerable Rural Water Systems

At a glance

• Bills reintroduced: Senators have brought back two bills to help rural water systems, one focused on cybersecurity and one on disaster preparedness.
• Bipartisan support: Both bills have sponsors from both parties.
• Focus areas: The cybersecurity bill would expand technical help and assessments for small utilities.
• Federal support: Advocates point to a wide gap between rural and urban utilities’ cyber defenses.

Why rural water is exposed

Rural water systems are easy targets. Policymakers have noticed. In March 2025, Sen. Catherine Cortez Masto reintroduced two bipartisan bills to help rural water systems, one aimed at cybersecurity and one at disaster preparedness. The push is part of a wider effort to protect U.S. infrastructure from growing cyber threats.

Support from both parties

The bills have support from both parties in a divided Congress. Both sides want the rural-urban security gap closed. The bills would give small water systems resources and guidance to strengthen their defenses, which lag behind those of larger city utilities.

The cybersecurity bill, the Cybersecurity for Rural Water Systems Act (S. 1018), is sponsored by Cortez Masto and co-sponsored by Sen. Mike Rounds. It would expand the U.S. Department of Agriculture’s Circuit Rider Program, which sends technical experts to rural utilities, to cover cybersecurity assessments, protocols, technical assistance and incident reporting. The bill was referred to the Senate Agriculture Committee.

What the bill would do

The legislation focuses on several goals:

More help and training

Rural water services have long been underfunded. The bill would put more federal help behind them, including cybersecurity training for rural utility operators, so staff can spot and respond to attacks.

Better defenses

Rural systems would be encouraged to adopt better security tools, such as monitoring that detects intrusions in real time so staff can step in quickly.

Security built into daily operations

The aim is to make security part of how small water systems run day to day. A common baseline across rural utilities would bring their defenses closer to a shared national standard.

Federal support and industry response

Advocacy groups and industry experts back the push, noting that rural water systems are critical to public health and safety. Infrastructure security consultants point out that attacks on rural utilities rarely make headlines, but the damage can be just as severe.

Federal cybersecurity programs have done little for rural utilities so far. The bills aim to get federal help to the small systems that are most often left out.

What happens next for rural utilities

The bills would give rural water systems training, tools and on-site help they cannot afford alone. They still have to clear the Agriculture Committee and a floor vote. Small utilities do not need to wait. They can request a free CISA vulnerability scan now, change default passwords on remote access tools and make sure control systems are not reachable from the open internet.

Fred Templeton, CISA, CASP, SEC+

Fred Templeton is a practicing Information Systems Auditor in the Washington DC area. Fred works as a government contractor and uses his skills in cyber security to make our country's information systems safer from cyber threats. Fred holds a master's degree in cybersecurity and is currently working on his PHD in Information Systems.