In Germany, both the water supply and the sanitation and sewerage systems sector belong to the so-called critical infrastructures. Physical security in these sectors is ensured by several measures, while for cybersecurity, an industry-specific security standard was developed in 2017 that has to be applied by all large utilities. The implementation of this standard is described, and first experiences demonstrate that it is an appropriate tool for creating awareness and increasing cyber security in the water and wastewater sectors. Furthermore, the approaches and procedures chosen in other European countries are briefly exemplified.