Federal officials highlight cybersecurity risk for water