Following the attack on a water treatment facility in Florida in February, there have been attacks in California. Fortunately, all were discovered before harm was done. Next time we might not be so fortunate.
Water is our most critical infrastructure; the hardest to guarantee basic cyber security, and the easiest to cause major harm. In a crisis we can go without gas - or meat - indefinitely, but we can only live three days without water.
There are 52,000 water treatment facilities in the United States, and only a handful have asked the CISA for help. The good news is each facility is independent. This makes a large scale breach difficult, but not impossible.
If and/or when Congress passes an infrastructure bill, there must be a program for water security in it.