This white paper presents a practical approach to managing cyber-physical system risks in water and wastewater utilities, where digital issues can quickly impact physical operations and public health. It outlines a CPS Exposure Management model that combines visibility, risk prioritization and coordinated response to protect critical services and infrastructure.