Question to the Department for Environment, Food and Rural Affairs:

To ask the Secretary of State for Environment, Food and Rural Affairs, what steps have been taken to safeguard domestic water treatment facilities from both cyber and physical attacks.

The Security & Emergency Measures Direction 2022 requires companies to identify and mitigate security risks to their treatment facilities. The Network and Information Systems Regulations 2018 requires companies to meet set cyber security standards and report incidents to regulators. The Drinking Water Inspectorate undertakes assurance and enforcement of both regulations.