The presenters will discuss cyber and physical security threats facing water and wastewater systems and free resources and best practices that small water systems can use to protect against these threats. They will highlight common vulnerabilities at water systems that have been exploited in cyberattacks and basic actions water systems can take to increase their physical and cybersecurity posture. The speakers will share examples of how some water systems increased cybersecurity and physical security with limited resources. This session will also provide information on free services, assistance, and tools to support small water systems, including vulnerability scanning, training, and incident response and how CISA works with the Environmental Protection Agency (EPA) to advance the resilience of the Water and Wastewater Sector.