Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Rensselaer County Sewer District reviews NYSDEC wastewater cybersecurity rules with 2027 compliance deadlines
Summary
The district reviewed new NYSDEC cybersecurity regulations (6 NYCRR Parts 616, 650 and 750) that require updated incident-response and network controls by March 11, 2027; a follow-up training is set for May 15, 2026.
The Rensselaer County Sewer District No. 1 discussed New York State Department of Environmental Conservation cybersecurity rules affecting wastewater facilities and began planning to meet phased compliance deadlines.
District staff told commissioners that NYSDEC’s rules (cited as 6 NYCRR Parts 616, 650 and 750) include incident reporting requirements effective March 26, 2026 and require updated Emergency Response Plans and Cybersecurity Incident Response Plans, access-control procedures, vulnerability-management processes and written network descriptions protecting operational technology by March 11, 2027. The district noted that plants with design flows of 10 million gallons per day or more will also face network monitoring and logging requirements unless certain OT/IT separation or unidirectional-device conditions apply.
A free live webinar was held April 10, 2026 and staff said another training is scheduled for May 15, 2026 as the District begins a gap analysis to meet compliance timelines. Commissioners were informed the District will assess each cybersecurity section and prepare updates to existing plans as needed ahead of the March 11, 2027 deadlines.
The board did not take formal action on the regulations at the meeting; staff described the regulations and the training schedule and will report back as the District’s assessment progresses.
