After reports of systematic hacks of small utilities elsewhere, Garden Ridge staff described SCADA protections, VPN/third-party verifications for remote access, annual cybersecurity training for employees, and emphasized that chlorine dosing remains manual, limiting that attack vector.

At the Billington Cybersecurity Summit, CIA deputy director and industry speakers described AI's potential to speed analysis and operations, while warning about risks including data poisoning and the need for "human-in-the-loop" safeguards.

New legislation updates trust regulations to incorporate electronic processes and signatures.

Senate Bill 506 would allow county commissions to lease county-owned wireless towers to entities beyond nonprofits, require cybersecurity safeguards, exclude certain foreign adversaries, and was reported to the full Senate as amended after the committee added hold-harmless language for counties.