H.R. 5868 (119th)Bill Overview

Water Cybersecurity Enhancement Act of 2025

Environmental Protection|Environmental Protection
Cosponsors
Support
Democratic
Introduced
Oct 28, 2025
Discussions
Bill Text
Current stageCommittee

Referred to the House Committee on Energy and Commerce.

Introduced
Committee
Floor
President
Law
Congressional Activities
01 · The brief
Plain-English summaryWhat this bill actually does

This bill amends the Safe Drinking Water Act to allow Drinking Water Infrastructure Risk and Resilience Program grants to be used for participation in training programs and for purchase of training manuals and guidance materials specifically addressing security and resilience of community water systems, including preventing and responding to cyberattacks. It also updates the authorization period from the previously listed years (2020 and 2021) to a new multi‑year window (2026 through 2031).

Why people may split

Scope of federal role: liberals want guarantees funds reach disadvantaged systems; conservatives worry about federal overreach and bureaucracy.

Watch point

Relative to its intended legislative type, this bill is a focused statutory amendment that expands permissible grant uses under an existing drinking water program to include cybersecurity-related training and extends the program period.

This bill amends the Safe Drinking Water Act to allow Drinking Water Infrastructure Risk and Resilience Program grants to be used for participation in training programs and for purchase of training manuals and guidance materials specifically addressing security and resilience of community water systems, including preventing and responding to cyberattacks.

It also updates the authorization period from the previously listed years (2020 and 2021) to a new multi‑year window (2026 through 2031).

The changes explicitly add cybersecurity preparedness and response training as eligible grant activities for community water systems under section 1433(g).

Passage70/100

On content alone this is a small, technocratic change to allow cybersecurity training under an existing grant program and to extend authorization years — characteristics that historically increase chances of enactment. The main practical dependencies are committee consideration, inclusion in a funding or infrastructure package, and subsequent appropriations; absent those procedural steps the text by itself does not force large policy disputes.

CredibilityAligned

Relative to its intended legislative type, this bill is a focused statutory amendment that expands permissible grant uses under an existing drinking water program to include cybersecurity-related training and extends the program period. It precisely identifies the statutory provision to be changed and the text to be inserted.

Contention45/100

Scope of federal role: liberals want guarantees funds reach disadvantaged systems; conservatives worry about federal overreach and bureaucracy.

02 · What it does

Who stands to gain, and who may push back.

Likely benefits vs burdens50% / 50%
Communities · Federal agenciesFederal agencies · Local governments

These are examples from the analysis, not a ranked list of the most-affected groups.

Likely helped
  • CommunitiesIncreases the capacity of community water systems to prevent, detect, and respond to cyberattacks through funded traini…
  • Federal agenciesProvides federal grant support that can help small and medium-sized utilities acquire expertise and preparedness resour…
  • Potential benefitMay create short-term demand for trainers, consultants, and authors of training materials, supporting related jobs and…
Likely burdened
  • Potential burdenImposes additional administrative requirements on utilities and grant recipients to apply for and manage grants for tra…
  • Federal agenciesRequires ongoing federal appropriations to fund the expanded allowable uses; absent new or increased funding, other eli…
  • Local governmentsSome stakeholders may view federally funded cybersecurity activities as increasing federal involvement in local utility…
03 · Why people split

Why the argument around this bill splits.

Scope of federal role: liberals want guarantees funds reach disadvantaged systems; conservatives worry about federal overreach and bureaucracy.
Progressive90%

This persona would generally view the bill positively as a targeted federal investment to protect public health infrastructure and vulnerable communities from cyber threats.

They would emphasize that water systems are essential services and that cyberattacks can cause disproportionate harm to low-income, rural, and historically marginalized communities.

They would welcome federal grant support for workforce development and resilience training, while wanting guarantees that funds reach small and disadvantaged systems.

Leans supportive
Centrist75%

A centrist would likely support the bill as a practical, narrowly focused measure to bolster resilience of critical infrastructure while seeking clarity about costs, oversight, and coordination.

They would appreciate that the bill targets cybersecurity training rather than creating broad new regulatory burdens but would want details about funding levels, matching requirements, and how this interacts with existing federal and state cyber programs.

They would favor measurable goals and interagency coordination (e.g., with EPA, CISA, and state authorities).

Leans supportive
Conservative55%

A mainstream conservative would view the bill with guarded acceptance on the basis that protecting drinking water and national infrastructure is legitimate, but would be wary of expanding federal programs and potential bureaucratic growth.

They would prefer solutions that maximize local control and minimize federal conditions, and would be concerned about recurring costs and whether this creates dependence on federal grants.

They may support the goal of cybersecurity for water systems but insist on limiting federal strings and ensuring efficient use of taxpayer dollars.

Split reaction
04 · Can it pass?

The path through Congress.

Introduced

Reached or meaningfully advanced

Committee

Reached or meaningfully advanced

Floor

Still ahead

President

Still ahead

Law

Still ahead

Passage likelihood70/100

On content alone this is a small, technocratic change to allow cybersecurity training under an existing grant program and to extend authorization years — characteristics that historically increase chances of enactment. The main practical dependencies are committee consideration, inclusion in a funding or infrastructure package, and subsequent appropriations; absent those procedural steps the text by itself does not force large policy disputes.

Scope and complexity
24%
Scopenarrow
24%
Complexitylow
Why this could stall
  • The bill does not specify appropriation amounts or mandatory funding; whether training is actually financed depends on future appropriations and budget priorities.
  • No Congressional Budget Office (CBO) or cost estimate is included in the text provided; potential fiscal impact is unknown and could affect support.
05 · Recent votes

Recent votes on the bill.

No vote history yet

The bill has not accumulated any surfaced votes yet.

06 · Go deeper

Go deeper than the headline read.

Included on this page

Scope of federal role: liberals want guarantees funds reach disadvantaged systems; conservatives worry about federal overreach and bureaucr…

On content alone this is a small, technocratic change to allow cybersecurity training under an existing grant program and to extend authori…

Unlocked analysis

Relative to its intended legislative type, this bill is a focused statutory amendment that expands permissible grant uses under an existing drinking water program to include cybersecurity-related training and extends th…

Go beyond the headline summary with full stakeholder mapping, legislative design analysis, passage barriers, and lens-by-lens tradeoff breakdowns.

Perspective breakdownsPassage barriersLegislative design reviewStakeholder impact map
Open full analysis