ONCD's Project Watershed 250 deploys red teams to Texas water utilities
The six-month pilot marks a departure from the federal government's advisory-only posture, putting operational capabilities directly into the hands of small water utilities at no cost.
TL;DR
The Office of the National Cyber Director launched Project Watershed 250 on August 31, a six-month pilot delivering red-team services and AI-enabled cyber tools directly to Texas water utilities. CISA, EPA, the FBI, Texas Cyber Command, and private-sector firms including Dragos are participating. The program targets small and rural utilities that lack dedicated security teams, the same ones hit in June's coordinated attacks. It marks a departure from the federal government's standard advisory posture toward directly provisioning operational capabilities at no apparent cost.
The Office of the National Cyber Director launched Project Watershed 250 at an August 31 event in San Antonio, a six-month pilot that puts AI-enabled threat detection, red-team exercises, and system hardening directly into the hands of Texas water and wastewater utilities. National Cyber Director Sean Cairncross framed the program as delivering on the Trump administration's national cyber strategy and a June 2 AI-focused executive order on modernizing critical infrastructure. "We're delivering on this mandate with a speed and level of industry support that meets the task ahead of us today," Cairncross said.
The partnership spans CISA, EPA, the FBI, Texas Cyber Command, and private-sector firms. Dragos confirmed its participation; its VP of government affairs Katherine DiEmidio told Inside Cybersecurity the program aims to "stop contemplating the problem and start addressing it by putting expertise and resources directly into the hands of the operators who need them most." The pilot follows a series of coordinated cyber attacks that hit water utilities across multiple states in June, and Cairncross said Texas was chosen for its "concentration of cybersecurity expertise" as a proving ground before scaling nationally.
What's different about Project Watershed 250 from the federal government's prior water-sector cybersecurity work is the delivery mechanism. Earlier efforts (the Cyber Readiness Institute's training pilot for up to 200 small utilities, NIST's NCCoE reference architecture project, the Def Con Franklin initiative) have been overwhelmingly advisory: frameworks, training curricula, and reference designs that utilities must implement themselves. Watershed 250 provisions operational capabilities directly, at no apparent cost to the recipients. Cairncross said the AI tools are designed to be easy to use so small and rural utilities that don't have dedicated security teams can deploy them.
What happens after the six-month pilot is the open question. Cairncross said Texas is the starting point and that ONCD will "find what works and look to scale it across the national water and wastewater infrastructure," but no timeline or commitment to specific states was offered. Whether participating utilities will be required to meet security benchmarks or share incident data with federal partners also remains unspecified. For now, the program puts capabilities into the field that the water sector's been asking for, and that the June attacks demonstrated it urgently needs.
Published ·Deep Fathom