To establish a Water Risk and Resilience Organization to develop risk and resilience requirements for the water sector.

HR 2594 establishes a Water Risk and Resilience Organization (WRRO), certified by the EPA Administrator, to develop and enforce cybersecurity standards for large water systems. It directly affects community water systems serving 3,300+ people or similar treatment works, requiring them to meet WRRO-developed cybersecurity risk and resilience requirements. The WRRO proposes these standards, which the EPA must approve within 90 days if deemed reasonable, and monitors compliance through annual self-attestations and 5-year third-party assessments. The bill creates a process for penalties (up to $25,000/day) for noncompliance, with appeals to the EPA, while ensuring state authority remains intact.