On July 1, 2011, the Underground Storage Tank (UST) Management Division implemented a Quality Assurance Program Plan (QAPP). The goal of the QAPP is to formalize procedures that will provide accountability and quality control for the data collected at UST sites. Contractors must complete and submit Appendix B of the QAPP (Contractor Addendum) when requested for site-specific scopes of work (e.g.…, Audit Forms, AFVR Audit Form (pdf) Groundwater Sampling Audit Form (pdf) Drilling/Soil Boring Audit Form (pdf), Contact, Debra Thoma , Manager, 803-898-0643
Abandoned and derelict vessels (ADVs) are a chronic problem along the South Carolina coast. In addition to direct impact on fragile marsh and benthic habitat, ADVs diminish the safe recreational use of our waterways and are a visual blight on the landscape. Check out the tools and information below to learn more about SCDES BCM efforts to address ADV in coastal South Carolina.
FOR IMMEDIATE RELEASE: March 30, 2026 COLUMBIA, S.C. — From April 1 through September 30, the South Carolina Department of Environmental Services (SCDES) provides a daily forecast for ground-level ozone concentrations across the state. These forecasts help South Carolinians take simple steps to protect their health on days when ozone levels are expected to be elevated. Ozone is a colorless gas…, said Rhonda Thompson, chief of SCDES’s Bureau of Air Quality, . “Our daily forecasts give South Carolinians a simple way to stay informed and make small adjustments that can help protect their health, especially during the warmer months when ozone impacts are more likely.” SCDES reports its air quality data to the U.S. Environmental Protection Agency (EPA), which provides ZIP code-level information for all of South Carolina through the AirNow.gov website.…, @SouthCarolinaDES on Facebook and Instagram, and @SC_EnvServices on X , On days with elevated ozone levels, individuals can reduce exposure by: Planning outdoor activities for the morning or evening, when ozone levels are typically lower Reducing the intensity or duration of outdoor exercise Schools modifying outdoor activities such as recess, lunch and physical education “During ozone season, we also encourage South Carolinians to take small steps that can…, said Greg Quina, Air Quality Modeling Section Manager with SCDES’s Bureau of Air Quality., “Everyday actions — like reducing vehicle use or avoiding unnecessary idling — can make a meaningful difference in improving air quality across our communities.” People can help reduce ozone pollution by: Driving less by carpooling, walking, biking or using public transportation Avoiding idling by turning off engines when stopped for more than 30 seconds (except in traffic) Keeping vehicles…
FOR IMMEDIATE RELEASE: March 31, 2026 CHARLESTON, S.C. — The South Carolina Department of Environmental Services’s Bureau of Coastal Management (BCM) has announced the launch of new and improved tools to address abandoned and derelict vessels (ADVs) across coastal South Carolina. Abandoned and derelict vessels remain a persistent issue in the state’s coastal environment. These vessels can…, said SCDES Director Myra Reece., “These new tools will make it easier for the public to report problem vessels and strengthen coordination between SCDES, the South Carolina Department of Natural Resources, and local partners — helping agencies respond more efficiently and protect South Carolina’s coastal resources.” As part of these updates, public boat reports submitted through MyCoast now route directly to appropriate South…
Adams Scrap Recycling LLC has applied to the Department for a state air construction permit to authorize construction and operation of metal shredding equipment and associated control devices. Adams Scrap Recycling LLC is a recycler of metals and other materials such as glass, paper, plastics, and electronics. This project is for the installation of several pieces of equipment for auto and metal…, SCDES will hold a public hearing on Thursday, April 23, 2026, at 6:00 P.M. to accept written and verbal comments on the proposed project. The hearing will be held at West Greenville Community Center (8 Rochester St.). Doors will open at 5:30 P.M. to facilitate the sign-in process and provide an opportunity to meet SCDES staff., The public hearing is formal and provides an opportunity to make oral comments that will be heard by SCDES staff and recorded by a court reporter. There will be no questions and answers during the public hearing. SCDES values each participant’s involvement in the public hearing and will conduct it in a respectful, orderly manner with reasonable limits on the length of comments, if necessary.…
Cybersecurity Vulnerabilities in Drinking Water and Wastewater Utilities and Immediate Protective Measures, Executive Summary Despite the current moratorium on mandatory cybersecurity compliance for Drinking Water and Wastewater utilities, the threat landscape remains critical and actively evolving. This information clarifies the roles of NIST and CISA, outlines current vulnerabilities facing drinking water and wastewater systems, and recommends practical, cost-effective measures utilities can implement…, National Institute of Standards and Technology (NIST), Role:, Standards development organization, Function:, Creates voluntary cybersecurity frameworks, guidelines, and technical standards, Key Products:, Cybersecurity Framework (CSF), SP 800-53 (security controls), SP 800-82 (industrial control systems), Authority:, Provides technical guidance; no regulatory enforcement power, Focus:, Prescriptive "how-to" frameworks for implementing security controls , Cybersecurity and Infrastructure Security Agency (CISA), Role:, Operational federal agency within DHS, Function:, Threat intelligence, incident response, vulnerability assessments, and coordination, Key Services:, Alerts, advisories, free assessments, incident response support, Authority:, Coordination and support; limited regulatory authority (primarily for federal systems), Focus:, Real-time threat awareness and practical assistance, In Practice:, NIST provides the blueprint; CISA provides threat intelligence and operational support. Drinking Water and Wastewater utilities benefit most by using NIST frameworks as their foundation while leveraging CISA resources for current threat information and free technical assistance. Current Threat Landscape for Drinking Water and Wastewater Utilities Drinking Water and Wastewater systems face…, Nation-State Actors, Recent activity from Iranian, Chinese, and Russian threat groups specifically targeting U.S. water infrastructure. These actors seek to pre-position for potential disruption during geopolitical conflicts., Ransomware Groups, Drinking Water and Wastewater utilities represent attractive targets due to critical service nature and historically limited cybersecurity investments. Average ransom demands now exceed $500,000., Insider Threats, Disgruntled employees or contractors with system knowledge pose significant risks, particularly in smaller utilities with limited access controls., Supply Chain Vulnerabilities, Compromised equipment, software, or vendor access creates backdoors into operational technology (OT) networks. Critical Vulnerabilities in Drinking Water and Wastewater Systems, Legacy SCADA/ICS Systems, Designed for reliability, not security Often running outdated, unsupported operating systems Limited or no authentication mechanisms Difficult to patch without operational disruption , IT/OT Convergence, Remote access for operational efficiency creates attack vectors Internet-connected systems without adequate segmentation Cloud-based monitoring and control platforms , Human Factors, Limited cybersecurity training among operations staff Phishing susceptibility Weak password practices Lack of security awareness culture, , Resource Constraints, Small utilities lack dedicated IT/cybersecurity staff Budget limitations prevent security investments Competing priorities (compliance, infrastructure, operations) Immediate Proactive Measures Utilities can significantly improve security posture with these practical, low-cost actions: , 1. Network Segmentation (High Priority), Action:, Physically or logically separate OT networks from IT networks and the internet. , Implementation:, Use firewalls, VLANs, or air-gapping to isolate SCADA systems. , Benefit, : Prevents lateral movement from IT compromises to operational systems. , Cost:, Low to moderate; often achievable with existing equipment reconfiguration. , 2. Access Control Hardening, Actions:, Implement multi-factor authentication (MFA) for all remote access Disable default credentials on all devices Establish role-based access controls Remove unnecessary user accounts Require strong, unique passwords (minimum 12 characters), Benefit:, Prevents 80%+ of common attack vectors., Cost:, Minimal; primarily administrative effort. , 3. Vulnerability Management, Actions:, Inventory all connected devices and software Disable unnecessary services and ports Patch critical vulnerabilities within 30 days Establish change management procedures, Benefit:, Reduces exploitable attack surface., Cost:, Low; requires process discipline. , 4. Backup and Recovery, Actions:, Implement offline, encrypted backups of critical systems Test restoration procedures quarterly Maintain offline copies of HMI configurations and PLC logic, Benefit:, Ensures operational continuity during ransomware or destructive attacks., Cost:, Low to moderate; primarily storage and staff time. , 5. Security Awareness Training, Actions:, Conduct quarterly phishing awareness training Establish incident reporting procedures Create security culture through regular communications, Benefit:, Reduces human-factor vulnerabilities., Cost:, Minimal; free resources available from CISA and WaterISAC. , 6. Incident Response Planning, Actions:, Develop written incident response plan Identify key contacts (IT, management, law enforcement, regulators) Conduct annual tabletop exercises Establish communication protocols, Benefit:, Reduces response time and impact during incidents., Cost:, Minimal; primarily planning time. , 7. Leverage Free Resources, Actions:, Enroll in CISA's free cybersecurity assessments Join WaterISAC for threat intelligence sharing Utilize CISA's Cyber Hygiene Services (vulnerability scanning) Review AWWA cybersecurity guidance documents, Benefit:, Expert assistance without budget impact., Cost:, None; staff time only. Regulatory Considerations While the current moratorium delays mandatory compliance, utilities should recognize: 1., Voluntary adoption demonstrates due diligence, and may provide liability protection 2., Cyber incidents trigger reporting requirements, under existing state and federal laws 3., Insurance requirements, increasingly mandate baseline cybersecurity controls 4., Future regulations are likely;, proactive measures ease eventual compliance 5., AWIA Risk and Resilience Assessments, (required for systems >3,300 people) must address cybersecurity Conclusion The cybersecurity threat to Drinking Water and Wastewater utilities is immediate and consequential, regardless of regulatory status. The measures outlined above require minimal financial investment but deliver substantial risk reduction. By focusing on network segmentation, access controls, and leveraging free federal…