Pages

Thursday, October 30, 2025

Cybersecurity - Please fill out the WaterISAC survey by 11/7/25

CDPHE is sharing the following survey opportunity in partnership with Water Information Sharing & Analysis Center (WaterISAC). Please take a few minutes to share your response with this critical cyber partner! The survey will close Friday, November 7, 2025.

Link to survey

WaterISAC is asking utilities to respond to its survey asking about physical and cyber incidents and suspicious activities they've experienced in the past quarter, from July 1 to September 30, 2025. WaterISAC will share with any utilities that complete the survey its next Quarterly Water Sector Incident Summary report. Even if you have no incidents to report, WaterISAC is asking utilities to complete the survey anyways, simply indicating you experienced no incidents.

Why participate?

Providing this information helps keep the water sector and its partners apprised of the threats facing water and wastewater utilities, helping to inform the prioritization of preparedness measures that can prove critical to prevention, mitigation, and response efforts. WaterISAC understands incidents and suspicious activities constitute sensitive information. Only WaterISAC staff see the full responses and, for the report and any other products it develops, it maintains the confidentiality of utilities to include by omitting their names, locations, and other details that could be used to identify them. The report will be marked TLP:AMBER, which recipients may only share with members of their own organization and with clients who need to know the information to protect themselves or prevent further harm.

WaterISAC has included further details about how it maintains respondents’ confidentiality and protects the information on the first page of the survey. It also welcomes any questions you might have, which can be submitted by emailing analyst@waterisac.org or calling 866-H2O-ISAC.

Wednesday, October 29, 2025

Submitting a coaching request has never been easier!

The water sector is more engaged now than ever before. With evolving regulations and emerging contaminants, the way we treat and distribute safe drinking water is constantly transforming. Water system owners and operators are expected to stay informed in real time as new technologies are implemented and new findings arise. Public Water Systems throughout Colorado each have varying capabilities and challenges to meet the changing compliance standards and keep up with the daily operations and maintenance. To take action in aiding systems and continuing compliance with the Safe Drinking Water Act, the Colorado Department of Public Health’s Water Quality Control Division offers free customized coaching and assistance through the Local Assistance Unit (LAU). This program provides technical assistance to public water systems that request support using the new WQCD Coaching Request Form

*Please Note: There is a new google form link to submit a coaching request. The previous formsite link is no longer available and will redirect you to the current form linked above.    

Who should submit a Coaching Request form?

If you are a water system administrator, operator, owner, or decision maker seeking assistance to increase your Technical, Managerial and Financial (TMF) capacities our coaches are available. TMF topics LAU coaches specialize in include: 

  • Meeting and understanding regulatory compliance 
  • Water resource management
  • System organization and planning
  • Operator certification
  • Asset management and Operations and Maintenance Planning 
  • Navigating grant and loan application and implementation

Specific examples of coaching requests that can be submitted include:

  • Drinking water systems seeking additional support within the water sector.
  • New or current system owners needing help hiring and defining roles and responsibilities for an Operator In Responsible Charge.
  • Systems encountering enforcement order requirements.
  • Assistance with public notices.
  • Navigating backflow or storage tank plan requirements.
  • Support creating and managing a sampling schedule.
  • Preparing for or responding to a Sanitary Survey
  • Capital improvement plans, emergency response plans or monitoring plan assistance.
  • Guidance on submitting documents, the CDPHE website, and identifying funding opportunities.

The Local Assistance Unit encourages the use of this valuable service provided throughout the state of Colorado for public water systems. Coaches offer compliance courses, direct assistance, onsite visits and arrange plans to help systems achieve or maintain compliance. Whether in a small rural town or a larger municipality, our goal remains to upkeep the culture of health and ensure communities have access to safe, reliable drinking water.

Ready to get started? Submit a WQCD Coaching Request form here for tailored coaching sessions specific to your system's needs. 

➽Priscila Lopez,  Excellence Coach

Wednesday, October 22, 2025

EPA Cyber Alerts: Mitigate Vulnerabilities in F5 Devices

The United States Environmental Protection Agency (EPA) is issuing this alert to inform water and wastewater systems about Emergency Directive (ED) 26-01 issued by the Cybersecurity and Infrastructure Security Agency (CISA). This directive highlights an ongoing exploitation campaign by a nation-state affiliated cyber threat actor that has compromised F5 systems. The actor has exfiltrated data, including portions of F5’s BIG-IP source code and vulnerability information, providing them with a technical advantage to exploit F5 devices and software. This poses a critical threat to water and wastewater systems using F5 products. F5 is a is a technology company that provides products and services to protect and enhance the speed, reliability, and security of applications and networks.

Mitigations

Although Emergency Directive 26-01 is directed at federal agencies, EPA strongly recommends that water and wastewater systems review the Emergency Directive and follow the mitigation steps. Systems that outsource technology support should consult with their service providers for assistance with these steps.

Important: Water and wastewater systems are not required to report their activities to CISA, including those outlined in mitigation steps 2.b, 6, and 8 in the Emergency Directive. This requirement applies only to federal agencies; however, systems may choose to report voluntarily and are encouraged to do so if a compromise is detected.

Conclusion

If you have questions about any of the information in this alert, including assistance with the mitigation steps included in the Emergency Directive, please submit a request to EPA’s Cybersecurity Technical Assistance Program for the Water Sector. Additionally, CISA has provided the following contact information specific to this Emergency Directive:

Wildfire Response and Recovery Resources for the Water Sector

The Water Quality Control Division has resources available to assist your county, municipalities, communities, and water and wastewater systems through wildfire response and recovery processes. 

General resources

  • CO - Post Fire Playbook: updated May 2025. 
  • After the Flames: general community resource. 
  • CoWARN: Use CoWARN if you need to, update your profile so you receive activations, and utilize the message board to discuss post-fire treatment issues, etc. 

Best practices to protect public health and comply with regulatory requirements

Communicate with the division if your water or wastewater system’s source water, collections system, treatment, or distribution system may be impacted by a wildfire. 

Non-emergency concerns for planning and response: 

  • Drinking water - communicate with your compliance specialist
  • Wastewater - communicate with the division’s Lead Wastewater Engineer - David Kurz  (303)692-6298.

Emergency concerns: 

  • Immediate challenges with treatment, distribution, and collections, call the department’s 24-hour Incident Report Line - 1-877-518-5608
  • Drinking water - Please consult the Pressure Loss Response Guidance for additional information on pressure loss/outages. 
  • If any portion of your distribution system was burned by the fire, please consult the WQCD acute team regarding flushing, sampling, and potential advisories. Contact Lead Drinking Water Engineer, Chelsea Cotton, chelsea.cotton@state.co.us, and the acute team email inbox, cdphe.wqacutes@state.co.us 
  • If any portion of your distribution system loses pressure for any reason, such as wildfire impacts to infrastructure, power outage or intentional shutdown due to evacuation, please call the department’s 24-hour Incident Report Line - 1-877-518-5608.
  • If you are a surface water system and have filtration concerns, including but not limited to, if you are unable to meet your microbial removal or are getting close to exceeding your turbidity limits, following a wildfire, please call your compliance specialist. If you are calling outside of normal business hours please call the Incident Report Line. 

Best management practices for immediate response: 

Communicate the following information to the incident management team: locations of critical infrastructure, special considerations or hazards such as high-voltage power, chlorinators, source water protection areas.  If you don’t have a direct line of communication with the incident management team, please reach out to our 24-hour report line and the department emergency management team will assist you with getting the correct point of contact. 

  • Evacuation 
    • Pay attention to all emergency alerts, instructions, and evacuate immediately if asked by authorities.
    • Turn off air conditioning or air circulation systems.
    • Detach any electrical garage doors.
    • Have an N-95 or other type of respirator available, if possible, to limit exposure to smoke and other toxic fumes.
  • Re-entry
    • Consult with the local incident management team before any utility personnel re-enter the facility. 
    • Minimize the risk of inhaling dust particles by wetting debris.
    • If returning from evacuation, remember that dangers could still exist for personnel such as hot spots, charred and fallen trees, downed power lines, smoldering and falling debris, sinkholes, mud, and landslides, etc.
  • Resources

Best management practices for long-term recovery:  

➽ Kyra Gregory Drinking Water Training Specialist 

➽ Chelsea Cotton, P.E. Lead Drinking Water Engineer

Wednesday, October 15, 2025

Program Manager Message: A reminder about The Significance of Deficiencies!

Hello everyone, 

In the Winter 2009 Aquatalk issue, we ran a Program Manager message about significant deficiencies. This was in the aftermath of the 2008 waterborne disease outbreak in Alamosa, Colorado. We have not had a waterborne disease outbreak at a public water system in Colorado in the 17 years since. Water utilities and the Safe Drinking Water Program have worked together since 2009 to correct thousands of significant deficiencies across the state. But we thought it would be a good time to rerun this article (with a few updates) as a reminder of how important it is to address significant deficiencies and avoid complacency despite our strong recent track record. We have had situations of reported illnesses likely associated with drinking water problems, but the exact combination of epidemiological evidence needed to confirm a waterborne disease outbreak did not materialize. 

The Safe Drinking Water Program periodically conducts sanitary surveys at all public water systems in Colorado. During the survey, we review source(s), treatment, distribution system, finished water storage, pumps and controls, monitoring and reporting data, system management and operation, and operator certification

compliance. The Safe Drinking Water Program believes that the benefits of conducting sanitary surveys include providing compliance and technical assistance, communicating with water systems to better clarify current and upcoming regulations, and conducting a detailed review of all the elements listed above to help ensure that the water system is able to provide safe drinking water to its customers.

After the survey is complete, a sanitary survey report letter is sent to the water system. The sanitary survey letter will notify you if your system has any significant deficiencies. Significant deficiencies are conditions or practices at a water system that may result in the production of finished water that represents an unacceptable health risk to the public. Occasionally, we find situations that represent an imminent, acute health threat to public health. These instances require the immediate attention of both the water system and the state.

However, more typically, the sanitary survey letter will include a specific time frame for the water system to correct the significant deficiency or contact us regarding its plan to correct the significant deficiency. This follow-up is required in the Colorado Primary Drinking Water Regulations. Due to the public health risk that significant deficiencies represent, it is imperative that public water systems correct significant deficiencies and that the Safe Drinking Water Program verifies that these issues are addressed. Section 11.38(3) of the regulations requires a public water system to respond in writing to significant deficiencies and violations from Sanitary Survey reports no later than 45 days after receiving the report. The response must indicate what actions the system will take to address the significant deficiencies and violations noted in the survey letter and include a proposed schedule for completing those actions.

Therefore, I encourage you to locate your last sanitary survey letter from us and review it to see if any significant deficiencies were noted. If there were significant deficiencies, are you sure that they were corrected? I recommend verifying that the deficiencies were corrected and contacting the person who conducted the sanitary survey, if necessary. If the deficiencies have not been corrected, then I recommend contacting the person who conducted the survey and developing a plan to correct the deficiencies. When the deficiencies are corrected, please provide documentation of the correction, including photos, by uploading them to the Drinking Water portal. This will confirm that the deficiency is resolved. 

By working together to identify and correct significant deficiencies, the Safe Drinking Water Program and public water systems can help ensure that the public always receives safe drinking water.

➽ Ron Falco, P.E. Safe Drinking Water Program Manager


Thursday, October 9, 2025

Acute Health Risks - Can it happen to you?

The below article is a re-run and update from an article published in the 2007 Summer Aqua Talk newsletter. Since then, the water sector has navigated many acute and emergency situations in partnership with the WQCD. We value your continued partnership and vigilance as you protect the public health and environment for our communities. 

We could all learn a little something from the Boy Scouts, especially when it comes to acute health risks in drinking water systems. Acute health risks that must be reported can be caused by events such as:

  • Acute total coliform maximum contaminant level violations (when fecal or E. Coli is present);
  • Failure to collect repeat samples after a fecal or E. Coli positive sample;
  • Failure to test for fecal or E. Coli in a total coliform positive repeat sample;
  • Nitrate, nitrite or total nitrate nitrite maximum contaminant level violations;
  • Failure to take nitrate or nitrite confirmation sample within 24 hours after receipt of the first sample showing exceedance of the maximum contaminant level;
  • Surface water treatment rule violations, such as not using a filter cartridge, not feeding coagulant, or a single exceedance of the maximum allowable turbidity limit or failure to maintain chlorine level entering the distribution system; etc).
  • Suspected waterborne disease outbreak;
  • Situations such as depressurization of a distribution system due to a line break or loss of power;
  • Uncontrolled cross connections that contaminate the water supply;
  • A treatment or supply emergency (for example, failure or significant interruption of key water treatment processes, a natural disaster that disrupts water supply, chemical spill or unexpected loading of pathogens);
  • Tampering or vandalism that could have contaminated the water supply

Preparing for these situations can save lives, not to mention save you time and money. To help you keep your cool in a stressful situation, consider preparation measures such as:

  • Plan: Gather necessary forms and phone numbers, including the 24-Hour incident reporting hotline (877) 518-5608. 
  • Be familiar with the Public Notice wizard to create public notice templates and think through possible acute situations.
  • Designate people responsible for specific activities, make sure your Operator Delegation Plan is up to date.
  • Practice with benchtop exercises/drills. Use this coaching request form to request a  Local Assistance Unit benchtop exercise for your facility.

If your system has experienced tampering or suspected tampering, including a cyber attack, you are required to notify the Colorado Department of Public Health and Environment immediately. For details, see section 11.2(1) of the Colorado Primary Drinking Water Regulations and visit the Drinking Water Security Response Toolbox. Report physical and cyber security incidents to the WQCD Tampering Threat and Incident Report Form

For more information about acute procedures, please check Drinking Water Policy DW-0001 Response to Acute Health Threats from Public Water Systems, the Pressure Loss and Main Break Guidance and the Drinking Water Emergency information website.

CoWarn, the statewide Water/Wastewater Agency Response Network (CoWARN) of utilities helping utilities to prepare for the next natural or human-caused emergency is also a resource to help public water systems.

By being prepared, water suppliers can effectively handle emergency situations and potential acute situations to protect public health. 

➽ Heather Young, PE, CWP, Field Services Section Section Manager 

➽ Emily Clark, Drinking Water Enforcement Unit Manager

Wednesday, October 1, 2025

Legionella Bacteria and Drinking Water Disease Outbreaks


I attended the American Water Works Association’s (AWWA’s) Annual Conference and Exposition (ACE) in Denver, Colorado, earlier this year. There were some excellent sessions on a wide variety of topics. However, the session that stood out the most to me covered Legionnaires'  Disease and drinking water. Presenters include Dr. Mark Lechavellier, Dr. Chad Seidel, Sheldon Masters, and Julie Kennedy. The session covered some of the latest research into Legionella and drinking water, plus a case study regarding an outbreak in Grand Rapids, Minnesota, that occurred from 2023 to 2024.

Although there are over fifty Legionella species and about half can cause disease, Legionella pneumophila is the most important because it causes most Legionnaires' disease cases and occurs naturally in aquatic environments. The species can infect free-living Amoeba, where the amoeba can act as a host for Legionella. The 1989 drinking water Surface Water Treatment Rule (SWTR) set a treatment technique for Legionella and established a Maximum Contaminant Level Goal (MCLG) equal to zero. Groundwater systems have no such treatment technique requirements, but one-third of the outbreaks occur in groundwater systems. Partly due to better reporting and testing, Legionella cases rose 10-fold from 1990 to 2021. Legionnaires’ outbreaks often occur in buildings such as hotels, medical facilities, and offices. People catch Legionnaires’ disease by inhaling small droplets of water suspended in the air containing Legionella. Legionnaires’ disease does not spread from person to person.

Dr. Lechavallier reported on a Legionella occurrence study that involved water testing 57 utilities. Overall, 9,118 samples were collected, and 1.2% (109) were positive. Thirty-two percent of utilities had detections. A chlorine residual of at least 0.4 mg/L dramatically reduced the positive detection frequency. Dead-end water lines, low water usage, and tank sediment raised the risk of finding Legionella. Flushing can be effective in reducing Legionella levels. Optimum Corrosion Control Treatment (OCCT) reduces pipe corrosion, which reduces the habitat where Legionella can grow. The study concluded that while eliminating Legionella is impossible, testing and management are feasible. Communicating with commercial and industrial customers about Legionella can also be beneficial. 

Unfortunately, Grand Rapids, Minnesota, experienced a severe Legionella outbreak from 2023 to 2024. Grand Rapids has a population of 11,000 and uses groundwater from five wells. The community did not disinfect and had three storage tanks (0.5 million-gallons each) and 81 miles of distribution system. Increased disease incidence began in mid-2023, but water was not believed to be the cause at that time. Legionella were not found in the water system, but the bacteria were found in the water in buildings with Legionnaires’ Disease cases. Over the next year, there were 34 total cases with 30 people hospitalized and two fatalities. After a complete assessment and expert assistance, including Dr. Seidel, chloramination started in June 2024. There have been no Legionella cases in Grand Rapids since then. Considerable effort also involved working with building owners in the town. Generally, buildings that maintain and actively implement water quality management plans do not have outbreaks.

EPA is in the process of updating its rules addressing Microbial Pathogens/Disinfection Byproducts (M/DBPs). It will be a few years before the update is finalized, and these rules will still not apply to groundwater systems. The updated rules are likely to improve the treatment technique requirements for Legionella at surface water systems. While we believe that Colorado is well-positioned to implement improvements due to our rules covering disinfectant residual, storage tanks, and cross connection control (backflow prevention), the occurrence data in this study are concerning. Additionally, even with solid operations by water utilities, important work involving water quality management plans within buildings is not part of our oversight. We encourage utilities to learn more about Legionella and consider partnering with their commercial and industrial customers, especially health facilities like hospitals and nursing homes, to take steps that could reduce the likelihood of a Legionnaires’ Disease outbreak in Colorado.  


As always, thank you for keeping our drinking water safe.

➽ Ron Falco, P.E. Safe Drinking Water Program Manager 

➽ Co-Author Chelsea Cotton, P.E. Lead Drinking Water Engineer



Monday, September 29, 2025

EPA Cyber Alerts: Cisco Products and SonicWall Cyber Incidents

The Colorado Department of Public Health and Environment (CDPHE) is posting the following cyber alerts in partnership with the Environmental Protection Agency (EPA). Please reach out to EPA with any questions about this or any additional Cyber concerns  watercyberta@epa.gov.

Alert: Identify and Mitigate Potential Compromise of Cisco Devices

The United States Environmental Protection Agency (EPA) is issuing this alert to inform water and wastewater systems about Emergency Directive (ED) 25-03 issued by the Cybersecurity and Infrastructure Security Agency (CISA). This directive highlights an ongoing exploitation campaign by an advanced threat actor targeting Cisco Adaptive Security Appliances (ASA). The campaign is widespread and involves exploiting zero-day vulnerabilities to achieve unauthenticated remote code execution on Cisco ASAs. Additionally, it includes the manipulation of read-only memory (ROM), enabling threat actors to maintain access even through reboots and system upgrades.

Link to Emergency Directive 25-03

Mitigations

Although Emergency Directive 25-03 is directed at federal agencies, EPA strongly recommends that water and wastewater systems review the Emergency Directive and follow the mitigation steps. The Emergency Directive includes a detailed step-by-step guide along with resources to assist in implementing each mitigation. Systems that outsource technology support should consult with their service providers for assistance with these steps.

Important: Water and wastewater systems are not required to report their activities to CISA, including those outlined in mitigation steps 2, 3, and 6 in the Emergency Directive. This requirement applies only to federal agencies; however, systems may choose to report voluntarily and are encouraged to do so if a compromise is detected.

Conclusion

If you have questions about any of the information in this alert, including assistance with the mitigation steps included in the Emergency Directive, please submit a request to EPA’s Cybersecurity Technical Assistance Program for the Water Sector.

Additionally, CISA has provided the following contact information specific to this Emergency Directive:

Wednesday, September 24, 2025

PFAS Grant Program Over the Past 5 Years


Click here for more information about the PFAS Grant Program.

PFAS are man-made chemicals with unique properties that make them useful for many consumer and industrial uses (e.g., waterproofing, non-stick surfaces). But those properties also make them persistent in the environment. PFAS chemicals from firefighting foam, personal products, and other substances are toxic and may get into the groundwater and surface water, potentially contaminating Colorado’s drinking water supplies. There is evidence that exposure to PFAS can lead to adverse human health effects including low infant birth weights, cancer and negative effects on the immune system. 

The state continues to address PFAS issues through legislative-directed funding from Senate Bill 20-218. The Colorado Department of Public Health and Environment Hazardous Substances Response Act (SB20-218) was signed into law on June 29, 2020 ( C.R.S. 8-20-206.5(7)). 

The act created fees on the transportation of fuel products, which will be collected between September 1, 2020, and September 30, 2031, when the available balance in the fund is less than nine million dollars. The collected fees are placed in the PFAS Cash Fund established by the legislative bill. The funding is managed by the Water Quality Control Division and can be used for the PFAS grant program, PFAS takeback program, and PFAS technical assistance to impacted communities.

The PFAS Grant Program provides funding opportunities to eligible entities through three (3) primary project categories: 

  1. Sampling - standard sampling and Independent Environmental Studies;
  2. Emergency Assistance - to communities and water systems affected by PFAS; and 
  3. Infrastructure -water system infrastructure for the treatment of PFAS and prevention strategies for upstream sources of PFAS.

The PFAS grant program has awarded over 19 million dollars in grant funds to help communities across Colorado identify and mitigate PFAS in water. Some current and past projects include:

  • Determining the impacts of firefighting foam, ski wax, and septic systems on source water. 
  • Piloting PFAS treatment for drinking water systems and landfill leachate.
  • Installation of filtered drinking water stations in schools.
  • Several fish tissue sampling efforts.
  • Over $3.5 million to identify and assess PFAS in drinking water, source water, and groundwater. 
  • ~$12 million used to implement PFAS treatment for clean drinking water.

A full list of awarded projects can be found on the PFAS Grant Summaries webpage.  In addition, our annual legislative reports on the program progress can be found on the PFAS Laws webpage.

Any questions may be directed towards the cdphe_wqcd_pfas_grant@state.co.us email. Please use the subject line “Grant Program Questions.”

➽ Sierra Mitchell, PFAS Program Coordinator


Wednesday, September 17, 2025

Equipping Operators with Skills to Manage and Overcome Testing Anxiety!


As coaches, one thing we often hear is that sitting for water and wastewater operator certification exams is a dreaded experience. While this apprehension is completely understandable, it is not insurmountable. We are re-publishing the below article that will help you understand where this anxiety comes from, steps you can take to overcome your testing anxiety, and tangible tools to help you succeed when you take your next operator certification exam. Thank you for all the work you do to protect the environment and public health of your communities. Keep calm and test on! 

➽ Kyra Gregory, Drinking Water Training Specialist 

Note: This article has been reposted with permission from the author, Tom Healy, Director of Certification Services for The Association of Boards of Certification. Original article published Summer 2021 Arkansas Drinking Water Update

                                                                                                                                         

We have all experienced it, that feeling of dread and foreboding before taking an exam; a myriad of scenarios running through your head outlining the worst possible outcomes.

These feelings of testing anxiety are very real and can have detrimental effects on an operator’s exam performance. In fact, a recent survey of operators conducted by the Ohio Water Environment Association found that nearly 30 percent of respondents cited testing anxiety as a main cause for not passing the exam.

To examine why testing anxiety is such a prevalent phenomenon, especially in high stakes vocational testing such as an operator certification exam, I spoke with Dr. Ian MacFarlane of Elizabethtown College. Dr. MacFarlane is an Assistant Professor of Psychology, as well as a clinical psychologist. With more than 1,000 hours of therapy work with college students and adults, he has helped countless individuals recognize and overcome testing anxiety.

Why do Operators worry?

Taking a certification exam is different from a high school biology or chemistry final: the stakes are exponentially higher. Psychologically, operators may feel that taking an exam related to their everyday job duties raises a question about their professional competence. This spark of anxiety will be fanned further if a passing score on the exam is mandated for their current job or required for promotion potential.

When asked how test anxiety manifests, Dr. MacFarlane pointed to both cognitive and physical (or somatic) symptoms stating, “The most detrimental effects of anxiety are cognitive. The human brain is limited to a certain amount of processing power at one time. The more your brain is occupied with the anxiety of the exam, the less ability it has to process the exam content. It would be akin to going into a wrestling match with one hand tied behind your back. Anxiety is a ‘mental suck’ or leech draining your brain power and limiting your ability to recall information or facts that might be as familiar to you as the names of your parents.”

One particularly common manifestation of testing anxiety Dr. MacFarlane cited is detachment–an operator is likely to avoid the discomfort of test anxiety by simply not thinking about the exam. Just as your body will pass out instead of coping with a lack of oxygen, you are likely to avoid the discomfort of test anxiety by simply not thinking about the exam.  He noted, “This can be quite detrimental as this avoidance loop can cause you to disengage from exam preparatory practices which can seriously hinder performance on the exam.”

Other effects of anxiety can be seen as physiological symptoms such as nausea, stomach cramps, or lightheadedness. To explain this, Dr. MacFarlane offered, “Our bodies lack the ability to differentiate between real life and mental simulations. So, if we are extremely worried or anxious about something, our minds can create physiological manifestations that are directly associated with the negative mental simulations.”

Why do some operators who excel in their jobs perform poorly on the exam?

Even though the exam is measuring the knowledge and application of tasks that an operator performs daily, while in the testing environment, they lose the contextual cues that would normally assist them in everyday operations.

Without those additional sources of information, operators must work harder to draw parallels between the tasks on the exam and the tasks they perform in their job. In other words, because an operator is not being tested in the environment in which he/she normally performs a task (a water or wastewater system), it can be difficult to recognize and solve the same problem in a test environment.

What can operators do to help with testing anxiety?

1. Practice, Practice, Practice

There is no better way of reducing test anxiety than to spend an adequate amount of time preparing and practicing. Test-taking is a skill—one that must be practiced and honed. Dr. MacFarlane noted that in many cases, due to inefficient study techniques, people have a tendency to work on areas in which they are already proficient and to avoid areas that could use improvement. Operators should make better use of their study time by taking periodic practice tests to help gauge the areas they need to work on. As an added benefit, the practice tests will train them to work under the pressure of a time constraint. Because the time limit on most certification exams can create a state of panic, it is important that operators learn to perform under these stressors and to control the feelings of unease.

2. Don’t “cram”

Countless studies have been done over the years on the ineffectiveness of “cramming,” or waiting until the last available opportunity to study for an exam. Say an operator spends the last six hours before the exam reviewing material. It is easy for them to think that they have everything committed to memory; the material is “fresh” in their mind. The reality is that nothing could be further from the truth. Reviewing this way gives an operator a familiarity with the material, meaning he/she will be able to recognize it when they see it on paper. Unfortunately, the ability to recognize concepts is not the same as being able to recall it. The ability to recall or reconstruct information accurately when an operator needs it requires exposure to the information over a long period of time.

The best course of action is to build a study plan that spans the course of several weeks prior to the exam. The more time an operator spends reorganizing the material so it has a structure, the more likely they are to commit the information to long term memory. Operators should aim for 45-60 minutes per day with their study material for at least six weeks prior to the exam.

3. How can an operator cope with anxiety on test day?

Even the most prepared test-takers can feel anxiety on test day, but there are proven methods to counteract the effects. Operators should start with getting adequate sleep the night before. Studies have shown that people perform better on memory tasks when they are well-rested. Some people will suffer from interrupted sleep when particularly worried about something. To help with this, operators can try exercising for 30 minutes before bed. Doing so will help their bodies release excess cortisol (stress hormone) in their systems caused by anxiety and will allow them to sleep better.

An operator should ensure their body is well nourished the day of the exam. This means do not skip breakfast and eat healthy foods such as grains or fruit and avoid foods with high fat content. The goal here is to eliminate as many distractors as possible so an operator can dedicate all their attention to the exam. If an operator is tired or his/her body does not have enough fuel, it can drastically hinder their performance.

4. Breathing – The 5-5-7 Method

During the exam, it can be extremely beneficial to stop at regular intervals (perhaps every five questions) and take deep breaths. The 5-5-7 is a breathing exercise performed by inhaling for five seconds, holding your breath for another five seconds, then exhaling for seven seconds. Dr. MacFarlane suggested that completing this exercise at regular intervals during a test session can physiologically stimulate the central nervous system, which can heighten an operator’s awareness and push anxiety from their mind. He also stressed the importance of practicing this technique for several weeks prior to the exam during their preparation, saying “The more practiced you are in this technique, the more effective it will be during exam time. Your body and mind will have a Pavlovian response to the exercise which increases its effectiveness.”

5. Muscle Relaxation

Another proven technique outlined during our discussion was progressive muscle relaxation, or PMR. This is done by deliberately applying tension (by clenching) to certain muscle groups and then releasing the induced tension. During this process, all of an operator’s attention should be focused on how their muscles feel as the tension is released. As operators learn to distinguish the feelings of a tense muscle as compared to a completely relaxed one, they are able to recognize the physical effects anxiety has on their bodies and can quickly alleviate it with this technique. Operators should be encouraged to practice PMR both when preparing for the exam and on the day of testing. They should spend 15-20 minutes at a time performing this technique on their major muscle groups (feet, legs, hands, arms, neck, and shoulders) and it will help mitigate anxiety.

The Bottom Line

While these methods have been shown to help with anxiety, they may not work for everyone. There are many more techniques that may offer relief, and operators can use these tips as a starting point to find what works best for them. Above all, operators should make sure they spend adequate time studying and reviewing the material. The better command they have of the content, the less anxious they will be about the exam, and the better they will perform.

➽ Tom Healy, Director of Certification Services for The Association of Boards of Certification


Thursday, September 4, 2025

REMINDER - Walter A. Weers Outstanding Achievement Award

In the past, the Water and Wastewater Facility Operators Certification Board (board) annually issued the Walter A. Weers Outstanding Achievement Award to honor individuals who have made outstanding contributions to the Colorado Water and Wastewater Facility Operators Certification Program (program) and to the water professionals operating facilities under the program.     

The award is named after Walter A. Weers, who devoted a half-century of outstanding volunteer service to the advancement of the certification of professionals in the Colorado water and wastewater industry. The award is intended to honor truly exceptional contributions and may not be presented each year or may be awarded to more than one recipient per year (at the discretion of the board). The award was last presented in 2019, and the program would like to raise awareness of this award in hopes of honoring an individual in 2026. 

This outstanding achievement award recognizes those individuals who:

  • Have given their time unselfishly to educate operators,
  • Have provided their expertise to the examination of operators, or
  • Have used their creativity and tenacity to build Colorado’s certification program into one of the premier programs in the country. 

Anyone who has had a direct impact on the program and the water professionals operating Colorado facilities under this program can be nominated for this award. Nominations must be submitted before October 15th of each year to be considered and acted on by the board at its November meeting. If the board decides to honor an individual, the award will be presented in conjunction with the Colorado Rural Water Association (CRWA) annual conference in March of the following year. 

Consider taking a few minutes of your time to submit an award nomination that can inspire others to continue providing outstanding service to the program and to highlight the importance of the profession and its impact on Colorado communities. Anyone can submit a nomination form, and nominations can be as short as one to two paragraphs. You never know what great acts of service and kindness you may inspire!   

You can find more information about this award on the board’s website, as well as a link to the nomination form, submission instructions, and previous recipients. 

If you have any questions about this award or the nomination process, feel free to contact Jessica Morgan cdphe.facilityoperator@state.co.us.

➽Jessica Morgan, Liaison to the Water & Wastewater Facility Operators Certification Board


Wednesday, August 27, 2025

WQCD wants your input! - What does Excellence mean to the water sector?


Click here to take the survey!

Providing safe drinking water to the public has never been a simple task. While there are thousands of water systems, and operators that are working to install backflow devices to prevent contamination, maintaining and adjusting chlorine levels, sampling and managing all the documents to prove that the work is being done and safe water is being provided, seldom is there recognition for the work.

Continually improving a water system has never been so hard. As our scientific knowledge and discoveries of contaminants expand, so do the regulations and standards operators need to uphold. This increases the work and the amount of pressure that comes with operating an entire community drinking water system. While we are not physically present on a daily basis to observe and acknowledge the effort it takes to maintain such standards, we do appreciate and rely on the knowledge and passion it takes to maintain a culture of health - that is we look at our daily routines and emergencies through a lens of protecting people’s health. One way of showing our appreciation is through the Excellence Program Awards formerly known as the Pursuing Excellence Program. We intend on continuing and revitalizing the tradition of recognizing the wonderful public water systems that have been supplying safe and clean water by showing our gratitude and how much we value the work being done.

The Excellence Awards Program will distribute two recognition awards, the Outstanding Compliance Award and the Commitment Award. The Commitment Award will focus on recognizing entities that have been proactive in enhancing their water system by submitting a project they have done that embraces a continuous improvement approach. 

We understand that "excellence" is subjective and what is considered excellent in one system's circumstances may not be the same for another system in different circumstances.  Our aim is to understand what “excellence” means to you and ensure it reflects the achievements of water professionals who are delivering exceptional performance in our water systems. One entity might be putting in maximum effort in educational outreach for exposure of the industry to recruit new operators, while a different entity might find it more rewarding to assist smaller systems in bettering their water supply and process. 

We notice and value all the different ways operators are advancing the industry and want to make sure this Commitment Award is tailored to include the opinions of water systems. In order to take into account opinions of those working first-hand in the field, we have created a two-question excellence survey that includes different ways we believe a system can achieve excellence in the industry. There are various aspects of maintaining a water system included in this survey and we want to know which ones are valued the most within this community.

To customize this Commitment Award and reward projects that resonate with the survey results, we ask that you please take a couple seconds of your day to complete the survey. The link for the survey will be below. We appreciate every response and will make sure to take them into account when discussing what projects to award.

➽ Priscila Lopez, Drinking water coach- Excellence Program Manager 

Wednesday, August 20, 2025

Wildfire Planning and Recovery Playbook - 2025 Updates!

After a wet spring and variable monsoon season, wildfire season is again upon us in Colorado. As many of you are aware, our public water systems and local communities face a diverse and significant array of challenges when planning, responding, and recovering from wildfires. The best time to start planning for wildfires is right now, in advance of fires.

The Water Quality Control Division (WQCD), along with many state, federal, and local partners, have released a revised and updated version of our Wildfire Planning and Recovery Playbook, available on our Source Water Assessment and Protection website.  Several authors also hosted a webinar on July 25th, with the slide presentation and a recording available.

Pre-fire planning, response, and recovery is a team effort, and requires coordination across multiple jurisdictions, and administrative and physical boundaries. Each community wildfire event may present a unique set of circumstances that must be understood and conveyed to effectively navigate wildfire incidents. The centerpiece of the playbook is the comprehensive critical contacts list, outlining necessary points of contact along with each representative’s roles and responsibilities within the planning, response, and recovery process. Below is an example of the critical contacts list contained in the playbook.



The playbook also provides various actionable steps through each phase of the fire cycle, from planning through recovery.  Examples include identifying your values at risk, forming a recovery group and identifying partners, understanding prefire actions and resources, and roles and responsibilities of partners throughout the different phases of a wildfire incident. The playbook also includes 2 full pages of links to additional resources, including a list of funding programs and technical assistance partners.

The playbook is concise, usable, and accessible. The target audience for this playbook is public water systems, municipalities, counties, and tribes. The updated version reflects lessons learned from recent urban and suburban wildfires and the new Wildfire Ready Watersheds framework from the Colorado Water Conservation Board. Please contact the source water protection team at cdphe.wqswap@state.co.us with any questions or for more information.

➽ Robert Murphy, CPSS, Source Water Protection Program Coordinator

➽ Kristen Hughes, Source Water Protection Specialist

➽ John Duggan, Source Water & Emerging Contaminants Unit Manager

Thursday, August 14, 2025

Upcoming EPA Cyber/Resilience Funding Cycle

EPA Announces Availability of $9 Million to Protect Drinking Water from Natural Hazards and Cybersecurity Threats

The U.S. Environmental Protection Agency (EPA) has announced over $9 million in grant funding through the new competitive Midsize and Large Drinking Water System Infrastructure Resilience and Sustainability grant program, which will assist medium and large size public water systems with protecting drinking water sources from natural hazards, extreme weather events, and cybersecurity threats. The application period is open until October 6, 2025, and can be found on www.grants.gov under opportunity number EPA-OW-OGWDW-25-01, assistance listing number 66.488.

Learn More About The Grant Opportunity on EPA's Website

EPA will host a webinar on the Midsize and Large Drinking Water System Infrastructure Resilience and Sustainability Grant Program on August 19th, from 2:00 to 3:00 PM ET. Please join us to learn more.

Register for EPA's August 19th Webinar


Cyber Alert EPA: Active Exploitation of Microsoft SharePoint Vulnerabilities

The U.S. EPA is issuing this alert to inform water and wastewater system owners and operators about the active exploitation of security vulnerabilities in Microsoft SharePoint that allows attackers to mislead the system into thinking they are a trusted user, also known as network spoofing, and remotely run malicious code, known as a remote code execution (RCE). This exploit enables unauthorized access specifically to Microsoft SharePoint servers, which are hosted and operated on-site. The Cybersecurity and Infrastructure Security Agency (CISA) has issued a cybersecurity alert on this malicious activity, publicly reported as “ToolShell.” 

Mitigations

All drinking water and wastewater systems with Microsoft SharePoint servers are strongly encouraged to implement the following mitigations immediately to enhance resilience against this compromise:

  • Apply the necessary security updates released by Microsoft.
  • Configure Antimalware Scan Interface (AMSI) in SharePoint and deploy Microsoft Defender Antivirus on all SharePoint servers.
  • Rotate ASP.NET machine keys, then after applying Microsoft’s security update, rotate ASP.NET machine keys again, and restart the Internet Information Services (IIS) web server.
  • Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) from the internet.
  • Conduct scanning for IPs 107.191.58[.]76, 104.238.159[.]149, and 96.9.125[.]147, particularly between July 18-19, 2025.
  • Monitor for malicious POST requests to /_layouts/15/ToolPane.aspx?DisplayMode=Edit
  • Update intrusion prevention system and web application firewall rules to block exploit patterns and anomalous behavior.
  • Implement comprehensive logging to identify exploitation activity.
  • Audit and minimize layout and admin privileges

For additional information on detection, prevention, and advanced threat hunting measures, drinking water and wastewater systems owners and operators are encouraged to visit Microsoft’s Disrupting active exploitation of on-premises SharePoint vulnerabilities and advisory as well as CISA’s cybersecurity alert.

Conclusion

The U.S. EPA requests that the Water Sector Coordinating Council (WSCC)/Government Coordinating Council (GCC) review this advisory and pass it along to all water & wastewater entities that may be susceptible to this threat. Additionally, we encourage the EPA Regions share the advisory with the state primacy agencies and direct implementation utilities.

Wednesday, August 6, 2025

Cybersecurity: NIST's Updated Password Guidelines & Sector Resources

The water and wastewater sectors are essential to daily life, and safeguarding them from cyber threats is crucial. The newly updated National Institute of Standards and Technology’s (NIST) password guidelines, along with the range of resources offered by the EPA and CISA, provide a strong foundation for improving cybersecurity across the industry. We encourage you and your colleagues to implement these new password guidelines and general cyber hygiene. Here’s a breakdown of the key updates and additional cybersecurity resources that can help strengthen your system's defenses.

NIST’s Updated Password Guidelines: What’s New?

In September 2024, NIST introduced new password management guidelines aimed at improving both security and user experience. The changes reflect a shift towards longer, more memorable passwords, and away from overly complex password requirements.

Key Updates:

  1. Password Length: NIST now recommends using passwords or passphrases that are at least 15 characters long. The focus has shifted from enforcing complexity (e.g., mixing uppercase, numbers, and symbols) to prioritizing longer passwords that are easier to remember.
  2. Password Composition: Gone are the days of forcing users to include specific character types. The new focus is on allowing longer, memorable passwords, which reduces the chances of people creating easily guessable passwords. 
  3. Fewer Password Changes: Unless there’s evidence of a security breach, mandatory password changes are no longer required. This policy change helps users avoid creating predictable patterns due to frequent password resets.
  4. Password Managers: NIST now strongly encourages the use of password manager software, which can generate and store strong, unique passwords for each account. It’s a vital tool to prevent the risk of password reuse across different accounts.
  5. Avoid Password Hints & Security Questions: To minimize the risk of social engineering attacks, NIST advises against using password hints or security questions that could easily be guessed.
  6. Multi-Factor Authentication (MFA): MFA is a non-negotiable security measure. By requiring more than just a password to access sensitive systems, MFA adds an additional layer of protection.

These updated guidelines emphasize simplicity and practicality, reducing user frustration while enhancing security. In an industry like water and wastewater, where systems are critical to public health, these updates offer a crucial balance of usability and protection.

Additional Cybersecurity Resources for the Water & Wastewater Sector

Alongside these password updates, there are also significant resources available to bolster cybersecurity across water and wastewater systems.

On March 13, 2025, the EPA will host a cybersecurity briefing for the water and wastewater sector. The session will cover unclassified threats, along with available funding and technical resources from the Environmental Protection Agency (EPA) and the Cybersecurity and Infrastructure Security Agency (CISA). Here are a few resources to explore:

By staying informed and adopting the latest cybersecurity practices, water and wastewater utilities can ensure a secure future, protecting critical infrastructure from evolving threats.

➽ Kyra Gregory, Drinking Water Training Specialists 

Wednesday, July 30, 2025

EPA PFAS Rule Update: What Colorado Water Systems Need to Know

The division is closely monitoring recent developments from the EPA regarding its 2024 drinking water PFAS Rule. While the EPA has signaled potential changes to the regulation, the official rulemaking timeline remains unchanged, with Colorado’s adoption scheduled for August 11, 2025. The division is committed to maintaining clarity for water systems and intends to highlight this federal uncertainty in its Statement of Basis and Purpose that is part of the rulemaking. The division is committed to communicating with water systems when federal action occurs and proposing revisions to Colorado’s PFAS rule to align with federal requirements before the Water Quality Control Commission.

Resources: 

EPA’s Announced Changes

In May 2025, the EPA announced that it may significantly revise the 2024 PFAS Rule. Proposed changes include:

  • Removing and reconsidering regulations for four PFAS compounds: PFNA, PFHxS, HFPO-DA (GenX), and PFBS.
  • Retaining Maximum Contaminant Levels (MCLs) and monitoring requirements for PFOA and PFOS only.
  • Eliminating the Hazard Index concept and its associated MCL for PFAS mixtures.
  • Extending the compliance deadline for PFOA and PFOS MCLs from 2029 to 2031.

These changes are planned to occur via a revised PFAS Rule proposal in Fall 2025, and anticipated finalization in Spring 2026.

It’s important to note that, so far, EPA’s announcement has not indicated changes to the requirements for initial monitoring of six PFAS compounds by the April 2027 compliance deadline.

Colorado’s Approach

Colorado is moving forward with adopting the PFAS rule this summer to retain full Safe Drinking Water Act primacy. This ensures that the division, not EPA, will continue to oversee PFAS compliance, monitoring, and enforcement across Colorado systems.

To account for the evolving federal landscape, the division has included a “federal flexibility provision” in its rule language. This provision allows for the automatic extension or stay of any deadlines or requirements altered by the final federal PFAS Rule, minimizing disruption for water systems.

Why Primacy Matters

Colorado’s decision to adopt the rule in 2025 avoids a primacy extension agreement with EPA. Under such an agreement, EPA would have authority over PFAS compliance while the state catches up. This would fragment regulatory oversight, complicate compliance for Colorado’s water systems, and limit our decision-making authority during this period. We believe that the division can provide the best decisions for water systems and their customers in Colorado.

The division’s experience with the Lead and Copper Rule Revisions (LCRR) demonstrated the benefit of timely rule adoption. Being one of the few states to implement LCRR on schedule allowed the division to retain control and better support systems through technical and operational challenges. The same advantages apply here.

Operational Implications for Water Systems

Drinking water data across Colorado shows that PFOA and PFOS are the primary PFAS compounds detected in public water supplies in Colorado. The removal of other compounds from the federal rule should not change which systems require PFAS treatment in Colorado. However, there may be impacts to treatment plant design and operation, which the division will work to consider during rule implementation.

In the meantime, systems are encouraged to stay engaged and continue monitoring for PFAS to meet initial monitoring requirements. The division will provide ongoing updates and technical assistance throughout this evolving process.

Stay Informed

The division is committed to supporting Colorado’s water systems during this transition. As the revised federal rule develops, Colorado will adapt, but always with the goal of maintaining clarity, consistency, and strong public health protections.

➽ Haley Orahood, Regulatory Development and Implementation Specialist