You may leave and re-enter the survey to update your response at any time until the deadline of 11:59 PM on Friday, July 26, as long as you use the same computer and have not yet submitted your response.

WaterISAC encourages participants to obtain incident information from others in their organization if possible, or to provide them the survey link to fill out separately. This is especially the case if the participant's responsibilities do not include tracking the kinds of incidents asked about in this survey.

Questions with an asterisk (*) require an answer.

Question Title

* 1. What will WaterISAC do with your response?

Only WaterISAC staff will see your response. Staff will aggregate the information you submit with that of other respondents, providing numerical totals and details of incidents and suspicious activities that have occurred at water and wastewater utilities nationwide and internationally to be presented in its analyses and products, including the upcoming Quarterly Water Sector Incident Summary. When presenting a specific piece of information provided by a utility in WaterISAC's analyses and products, staff will maintain the confidentiality of the utility. Staff will not divulge the utility's name, the names of its personnel, its location, or other details that could be used to clearly attribute the information to the utility. The following is an example of how staff might share a specific piece of information provided by a utility: "A large drinking water utility reported its website was defaced by possible supporters of the Islamic State."

The analyses and products WaterISAC develops using the information will be marked TLP:AMBER. Recipients may share TLP:AMBER information with members of their own organization and its clients on a need-to-know basis to protect their organization and its clients and prevent further harm. For more information on the Traffic Light Protocol (TLP), visit this Cybersecurity and Infrastructure Security Agency webpage: https://www.cisa.gov/tlp.

WaterISAC will share the analyses and products it develops using the information provided via the survey with its members and partners, which include federal (e.g., EPA and DHS), state, and local government entities and sector associations. For all entities it shares its analyses and products with, WaterISAC will maintain the confidentiality of the utilities who provided information. This policy applies regardless of whether the utility is a member or non-member. What’s more, as a private organization, WaterISAC is not subject to public disclosure laws.

May WaterISAC have your permission to use the information you provide in an aggregated and confidential format in upcoming analyses and products to be shared with other members and partners?

T