Critical Infrastructure Security, Government Regulations

Microsoft urges federal hands-on assistance for water sector

Aerial view of water treatment factory at city wastewater cleaning facility. Purification process of removing undesirable chemicals, suspended solids and gases from contaminated liquid.

Water and wastewater utilities across the U.S. require hands-on cybersecurity assistance and workforce incentives to strengthen their cybersecurity capabilities, with Microsoft noting the inadequacy of free training programs alone, according to Cybersecurity Dive.

Only 72 of 119 water utilities that noted interest in Microsoft's cybersecurity assistance pilot program which was conducted alongside the Cyber Readiness Institute and Foundation for Defense of Democracies between 2023 and 2025 joined the initiative, well below the 200 targeted recruits, while only 43 completed the program, findings from a Microsoft report showed. Utilities with dedicated cyber coaches finished at a 77% rate, compared to just 23% of self-paced participants, highlighting the critical role of direct support. Microsoft concluded that "free is not enough" and urged policymakers to "invest in hands-on technical assistance models" for small, understaffed utilities.

Participating utilities praised the program, with over 90% reporting improved cybersecurity understanding and intention to take action. Along with its criticisms over the Trump administration's downscaling of Cybersecurity and Infrastructure Security Agency support for critical infrastructure, Microsoft called for embedding cybersecurity with existing operator requirements, leveraging trusted sector associations, and mandating training for operator certifications to bolster the sector's cybersecurity posture.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds