HB3576

Illinois HB3576 mandates cybersecurity measures for water purveyors, including program development, incident reporting, and insurance.

HB3576 amends the Public Utilities Act to require water purveyors to develop a cybersecurity program within 120 days of the act's effective date. This program must define and implement organizational accountabilities and responsibilities for cyber risk management activities. Water purveyors must also create a cybersecurity incident reporting process, obtain a cybersecurity insurance policy, and conform to industry-recognized cybersecurity frameworks.