Overwatch Foundation – Helping to Improve Water System Cybersecurity in New Hampshire

The Drinking Water and Groundwater Bureau (DWGB) has been supporting improvements in water system cybersecurity in New Hampshire through a variety of avenues, including education and outreach, grant programs, and a partnership with the Cybersecurity and Infrastructure Security Agency’s (CISA) New Hampshire Cybersecurity Advisor Rick Rossi to complete cyber assessments and cybersecurity training. DWGB understands there is a need to provide more direct assistance from cybersecurity experts to help water systems implement cybersecurity improvements.

To expand that effort, NHDES in partnership with the New Hampshire Department of Information Technology, issued a request for proposals for cybersecurity services. Overwatch Foundation, a New Hampshire-based, nonprofit group, was selected. Its “Cyber in a Box” program will provide cybersecurity assessment and implementation services to municipal water systems across New Hampshire. NHDES has provided funding for this pilot program through the Drinking Water State Revolving Fund (DWSRF) set asides, as well as funding through the American Rescue Plan Act of 2021 (ARPA).

This program will focus on identifying and addressing the most critical cybersecurity vulnerabilities and providing a uniform baseline of security upgrades that goes beyond replacing hardware and software, to redesigning networks and improving overall cybersecurity protections. This solution builds a system that can be deployed efficiently and renewed affordably on a defined cycle. Most importantly, it also offers training and support for water system staff, and the technology professionals who support them, in the tools, techniques, and procedures to provide water cybersecurity for years to come.

Five municipal water systems have been selected to pilot this program. Additional systems will be selected over the next couple of years. For more information about this program, please contact Brenda Leonard at brenda.j.leonard@des.nh.gov or (603) 271-0867.

Even if your water system is not part of this program, you should examine your cybersecurity vulnerabilities and make improvements using the many resources available on NHDES’ Water System Cybersecurity page.