Resource Center
Data sheets, templates and funding guides for OT cybersecurity
For OT cyber experts, systems integrators, and the utilities and plants they work for.
Product Data
Data sheets, docs and demos
Looking for a data sheet that isn't here? Every product page carries its own, and an OT cyber expert can send the current revision. Call (508) 289-1195.
Guides
Water cybersecurity funding, state by state
Start here
Water cybersecurity funding by state
A few states pay for OT security work at water and wastewater systems. A few more require it. This page keeps track of both, with the official source for each and priced parts for the work.
For water and wastewater utilities, and the integrators and engineers who work for them.
How to read the cards
Pays for parts or assessments
Grants of $15,000, $30,000 or $50,000, by system size, to fix assessment findings.
First SECURE round awarded August 3, 2026: more than $9 million to 153 projects. No new round scheduled.
Federal money passed through the state for hardening SCADA/OT at local governments.
Forgivable planning loans; security studies, including cybersecurity, are capped at $20,000.
Requirements, financing and pilots
First vulnerability assessment and first certification are both due December 31, 2026.
State Revolving Fund financing. Cybersecurity is worth 3 of 100 points in the 2027 criteria, and only when it is more than half of the project cost.
All community water and sewer systems: a cyber contact, yearly training, incident reports within one hour, and an updated emergency plan.
Standard toolset supplied through one contracted provider.
The state says 2026 is the program's last year.
Project Watershed 250: six-month pilot, November 1, 2026 to April 30, 2027, giving utilities assessments, remediation help and tools at no cost.
Up to 0.50% off the lending rate for eligible cyber components of SRF projects.
Voluntary assessment program in the 2024 plan, plus loan ranking points per EPA.
20 points on the FY 2028 letter-of-interest form for cyber-informed engineering.
Free assessments
EPA's Water Sector Cybersecurity Evaluation Program assesses drinking water and wastewater systems at no cost.
Request an assessment from EPA →Free help from EPA experts
EPA's Cybersecurity Technical Assistance Program for the Water Sector gives free help from EPA cybersecurity subject matter experts.
Ask EPA for technical assistance →Incident response plan template
Our own template for OT networks. It covers roles, detection, containment, recovery, communication and escalation. Add your state's reporting rules.
Download the template (PDF) →State Revolving Funds
EPA says the drinking water and clean water funds in every state can finance cybersecurity equipment and assessments.
EPA's cybersecurity funding page →Watch: EPA grants for midsize and large systems
Not an open grant. EPA's Midsize and Large Drinking Water System Infrastructure Resilience and Sustainability Program, for systems serving 10,000 or more, funds projects that reduce cybersecurity threats. The FY25 competition is closed ($11.75 million to ten systems, announced August 31, 2026). The next round will come through a new Notice of Funding Opportunity.
EPA's program page →CISA State and Local Cybersecurity Grant Program (not specific to water)
Federal money goes to each state's administrative agency, and the state must pass at least 80% of it to local governments, with at least 25% going to rural areas. Local governments, including the water utilities they own, receive it as a sub-award from the state and do not apply to CISA directly. Status as of November 2026: the program's authorization lapsed on September 30, 2026 and Congress has not appropriated new money. States may still be distributing earlier awards, so ask your state's administrative agency whether a sub-award round is open.
CISA's program page →Program notes are summarized from the linked state and federal sources as read in November 2026, and from what state program staff told us in November 2026. Programs open, close and change. Check the official source before you plan around any of them.
OT Cyber Direct is not affiliated with or endorsed by any of the agencies named on this page.
Have a findings list? Get it priced.
Send the recommendations from an assessment, or just the part numbers. An OT cyber expert will come back with fit and price.
