Public
utility systems face new challenges as a result of the tragedies
of September 11, 2001. The pictures of the events that occurred
on that day are etched in our nation's collective memory and have
forever changed the way we look at security issues on national,
state, and local levels. We can no longer take for granted the security
of our infrastructure systems. To ensure that each utility provider
carefully assesses its unique risks and vulnerabilities, the Public
Health, Security and Bioterrorism Preparedness and Response Act
was signed by the President in June of 2002. The Act requires, in
part, the completion of detailed evaluations of water systems including
vulnerability assessments, emergency response plans, and security
enhancements.
There is still much discussion ongoing in Washington about how
these assessments will be conducted, who will review them, and what
security measures will be placed into effect to ensure their confidentiality.
What is definitely known at this time is that the assessments will
be required and the approved methodology for conducting them is
called the Risk Assessment Methodology for Water Utilities. This
methodology was developed by Sandia National Laboratories and the
AWWARF to reduce vulnerability of water systems to attack and improve
security as well as their ability to respond to emergency situations.
Hobbs, Upchurch & Associates, P.A. is prepared to assist you
and your staff with the completion of these important vulnerability
assessments. We have members of our professional staff that have
been trained in the RAM-WSM Methodology. At this time, only water
systems are required to complete vulnerability assessments; however,
many utility providers are opting for doing the assessments on their
wastewater systems because it is expected that these assessments
will soon be a requirement for wastewater infrastructure as well.
Upon completion of the vulnerability assessment, utility providers
are then required to update their Emergency Response Plans accordingly
within 6 months. The following chart provides the deadlines for
all community water systems serving populations of less than 100,000:
| Vulnerability Assessment and
Emergency Response Plan Deadlines |
| System Population |
Vulnerability Assessment Deadline |
Emergency Response Deadline |
| 25 to 3,300 |
NA |
NA |
| 3,301 to 49,999 |
June 30, 2004 |
December 31, 2004 |
| 50,000 to 99,999 |
December 31, 2003 |
June 30, 2004 |
As a part of the process to complete these assessments, you should
expect several planning meetings with your utility staff and key
decision makers that will be conducted at the beginning and the
end of the assessment. Our trained staff will facilitate these meetings
and will perform the overall assessment of the system and prepare
the final report that will meet all of the federal requirements.
We will work as an extension of your utility staff to fully evaluate
your systems so that you will be prepared to make the proper decisions
if and when emergency situations occur. The vulnerability assessment
will include evaluations and discussions of specific topics such
as:
- Decision and Risk Analysis
- Planning for a Security Risk Assessment
- Threat Analysis
- Cyber Threat Analysis
- Facility Characterization
- Consequence Assessment
- Existing Physical Protection System
- SCADA Assessment Methodology
- Physical Protection Systems
- Physical Protection Technologies
- Security System Effectiveness
- Risk Analysis
- Risk Reduction
- Emergency Operations Plans
Hobbs, Upchurch & Associates, P.A. welcomes the opportunity
to provide our services to you in all facets of civil engineering
and utility system planning. We feel that training our staff to
assist you with the preparation of these vulnerability assessments
is an important step in continuing to provide you with the services
that you need. Please contact us at any of our division offices
of at our main headquarters if you have questions, need further
information, or would like to make an appointment to discuss a water
system vulnerability assessment.
|