; or (B) a treatment works (as defined in section 212 of the Federal Water Pollution Control Act ( 33 U.S.C. 1292 )) that serves a population of 3,300 or more persons. (4) Cyber resilient The term cyber resilient means the ability of a covered water or wastewater system to withstand or reduce the magnitude or duration of cybersecurity incidents that disrupt the covered system’s ability to function normally and which includes the capability to anticipate, absorb, adapt to, or rapidly recover from cybersecurity incidents. (5) Cybersecurity incident The term cybersecurity incident means a malicious act or suspicious event that disrupts, or attempts to disrupt, the operation of programmable electronic devices and communication networks including hardware, software, and data that are essential to the cyber resilient operation of a covered water system. (6) Cybersecurity risk and resilience requirement The term cybersecurity risk and resilience requirement means a cybersecurity requirement approved by the Administrator under subsection (d) to provide for the cyber resilient operation of a covered water system and the cyber resilient design of planned additions or modifications to such system. (7) Water risk and resilience organization The terms Water Risk and Resilience Organization and WRRO mean the organization certified by the Agency under subsection (c). (b) Jurisdiction and applicability (1) Jurisdiction The Administrator shall have jurisdiction, within the United States, over the WRRO certified by the Agency under subsection (c). (2) Regulations Not later than 270 days after the date of enactment of this Act, the Administrator shall issue a final rule to implement this section to certify the WRRO. (c) Certification (1) In general Following the issuance of a rule under subsection (b)(2), any person may submit an application to the Administrator for certification as a Water Risk and Resilience Organization. (2) Requirements The Administrator shall certify one Water Risk and Resilience Organization if the