Texas Launches 'Watershed 250' Pilot to Bolster Water System Cybersecurity with Private Sector AI
Texas has initiated 'Project Watershed 250,' a six-month pilot program enlisting over a dozen private sector companies to leverage AI and cybersecurity expertise to protect the state's water systems from escalating threats.
The state of Texas has launched 'Project Watershed 250,' a significant six-month pilot program aimed at enhancing the cybersecurity posture of its critical water infrastructure. This initiative, unveiled in San Antonio, marks a departure from purely federal approaches, emphasizing collaboration between state governments, the private sector, and federal agencies to proactively identify and remediate vulnerabilities within water systems.
Spearheaded by the Office of the National Cyber Director, Project Watershed 250 is the first of several state-based, industry-centric pilot projects previewed as part of the national cybersecurity strategy. The program draws on lessons learned from recent attacks targeting the water sector, including a notable Iranian-backed cyberattack that impacted 30 water systems across 12 states and a suspected Russian-linked incident affecting the water system in Muleshoe, Texas.
"Project Watershed 250 is a commitment from the states, industry and federal government that we will continue to prioritize our nation's safety and deliver on America-first policies for the American people," stated National Cyber Director Sean Cairncross at the program's rollout. He highlighted the crucial role of private sector contributions, noting that U.S. companies are providing "world-class cyber capabilities, red teaming that tests utilities' current defenses, system hardening using the latest private sector cyber tools and AI tooling that helps utilities’ frontier cyber defenders."
A dozen prominent technology companies are participating in the pilot, including Parsons, Microsoft, Fortinet, Google Cloud, Palo Alto Networks, Amazon Web Services, Reflection AI, Cloudflare, Zscaler, Forescout, Abnormal AI, and Dragos. These organizations are contributing their expertise in areas such as AI-driven threat detection, advanced security tooling, and comprehensive system assessments to bolster the resilience of Texas water utilities.
The program's design contrasts with previous federal attempts, such as the Biden administration's withdrawn EPA rule that faced legal challenges from some GOP states over audit requirements. Cairncross emphasized the pilot's pragmatic approach: "For too long, at least on the federal level, the government has admired the problem of cybersecurity in water systems. We are going to find out what works. We're going to target that, and we are going to scale off of this and learn lessons."
Texas Governor Greg Abbott underscored the urgency of the initiative, pointing out that many rural water providers lack the necessary resources to defend themselves against sophisticated cyber threats. The program will be jointly overseen by Cairncross's office and the newly established Texas Cyber Command, signaling a concerted effort to address these resource disparities and strengthen defenses.
Project Watershed 250 is part of a broader national effort to secure critical infrastructure, with lawmakers also introducing legislation to address water cybersecurity in the wake of escalating attacks. The pilot aims to not only protect Texas's water systems but also to develop scalable solutions and best practices that can be replicated across the country, reinforcing the nation's overall cybersecurity resilience.