New York has implemented groundbreaking cybersecurity mandates for the water sector, requiring utilities to undergo risk assessments and implement robust security controls. The state is allocating $2.5 million in grants to support these efforts, with individual utilities eligible for up to $100,000 in security upgrades and $50,000 for assessments. This initiative aims to bolster defenses against escalating cyber threats targeting critical infrastructure, such as water and wastewater systems. The regulations mark a significant step in addressing the sector's vulnerability to attacks, which could have devastating consequences for public health and safety. By providing financial incentives and enforcing stricter security standards, New York is setting a precedent for other states to follow1. This development matters to cybersecurity practitioners, as it underscores the need for proactive measures to protect critical infrastructure from emerging threats, and highlights the importance of collaboration between government and industry to ensure the security and resilience of essential services.