1.3 License Renewal, Continuing Education & Facility Security

1.3 License Renewal, Continuing Education & Facility Security

[!NOTE] Professional Maintenance & Defense-in-Depth: Operator certification in Pennsylvania is not a one-time achievement; it requires active maintenance across a continuous three-year (triennial) cycle governed by 25 Pa. Code Chapter 302. Certified operators must fulfill mandatory continuing education (CE) contact hours tailored to their license classification. Concurrently, certified operators and facility managers bear the legal responsibility of safeguarding critical public infrastructure against chemical accidents, natural hazards, physical intrusion, and cyber warfare under federal and state frameworks including America's Water Infrastructure Act (AWIA) and the Pennsylvania Water/Wastewater Agency Response Network (PaWARN).

Modern environmental operations demand continuous technical currency. Treatment technologies, telemetry systems, and regulatory standards evolve rapidly, requiring operators to participate in structured professional training throughout their careers. Concurrently, heightened geopolitical threats, extreme weather events, and cyber vulnerabilities targeting industrial control systems have elevated utility physical and electronic security into a primary operational discipline.

---

The Triennial License Renewal Cycle

Under 25 Pa. Code § 302.801, all water and wastewater operator certificates issued by the Commonwealth of Pennsylvania expire every three years (a 36-month triennial renewal cycle). The expiration date is tied directly to the operator's certificate issuance date.

Renewal Process and Documentation

To renew an active certificate, an operator must submit an official renewal application to the Department of Environmental Protection prior to the certificate's expiration date, accompanied by:

1. Proof of completion of the required number of DEP-approved continuing education contact hours earned during the active 3-year cycle.
2. The non-refundable triennial certificate renewal fee established under Chapter 302.
3. An official affirmation confirming that the operator has complied with all state environmental laws and has not had a license suspended or revoked in another jurisdiction.

License Statuses and Reinstatement Rules

• Active Status: The operator has satisfied all continuing education and fee requirements; fully authorized to make process control decisions.
• Inactive Status: An operator may voluntarily request inactive status if they are not actively operating a facility. Inactive operators do not need to earn continuing education hours but are legally prohibited from making process control decisions. Reactivation requires completing the required continuing education contact hours prior to returning to active duty.
• Lapsed (Expired) Status: If an operator fails to renew their certificate before the expiration date, the certificate lapses. The operator is immediately disqualified from making process control decisions or serving as an OIRC. Chapter 302 provides a grace period of up to one year to reinstate a lapsed certificate by completing required contact hours and paying late fees. If a certificate remains lapsed for more than one year (or beyond the board-prescribed re-testing deadline), it becomes completely void, and the individual must re-take and pass all required general and subclass examinations as an initial applicant.

---

Continuing Education (CE) Contact Hour Requirements by Class

Pennsylvania enforces class-tiered continuing education contact hour requirements codified in 25 Pa. Code § 302.802. The mandated contact hours correspond directly to the technical complexity and public health risk associated with each facility capacity tier.

+---------------------------------------------------------------------------------------+
|                   Triennial Continuing Education Contact Hour Mandates                |
+---------------------------------------------------------------------------------------+
| Class A  | 30 DEP-Approved Contact Hours per 3-Year Cycle                             |
| Class B  | 30 DEP-Approved Contact Hours per 3-Year Cycle                             |
| Class C  | 30 DEP-Approved Contact Hours per 3-Year Cycle                             |
| Class D  | 15 DEP-Approved Contact Hours per 3-Year Cycle                             |
| Class E  | 15 DEP-Approved Contact Hours per 3-Year Cycle                             |
| Class Dc |  9 DEP-Approved Contact Hours per 3-Year Cycle                             |
| Class Dn |  6 DEP-Approved Contact Hours per 3-Year Cycle                             |
+---------------------------------------------------------------------------------------+

Course Approval and Subject Categorization

All continuing education contact hours must be pre-approved by the DEP to count toward renewal. Training providers (such as the Pennsylvania Rural Water Association, the Water Works Operators' Association of Pennsylvania, or accredited universities) submit course curricula to DEP for course ID assignment. Allowable training categories include:

• Environmental regulations, permitting, and Chapter 109 / Chapter 92a compliance.
• Advanced water purification and wastewater treatment process optimization.
• Applied chemical dosing, mathematics, and hydraulic calculations.
• Laboratory analytics, sampling methodology, and QA/QC protocols.
• Industrial electrical troubleshooting, pump mechanical maintenance, and instrumentation.
• Occupational safety, OSHA standards, HazCom, and confined space entry.
• Utility risk management, emergency response planning, and cybersecurity.

Rules for Dual Certificate Holders

Many certified professionals hold dual credentials—maintaining both a Drinking Water certificate and a Wastewater certificate. Pennsylvania enforces specific rules regarding how continuing education contact hours are credited for dual operators:

• General Coursework: Courses covering general utility topics (such as personnel safety, hazardous materials handling, utility management, electrical safety, basic hydraulics, or general environmental math) are credited toward both the water and wastewater licenses simultaneously.
• Discipline-Specific Coursework: Specialized technical courses (such as drinking water membrane filtration, coagulation chemistry, surface water pathogen log removal, activated sludge microbiology, or anaerobic digester operations) may only be credited toward the specific discipline to which they apply.

The Reduced First Renewal Cycle

DEP does not prorate contact hours by month. It publishes a separate, lower requirement for an operator's first three-year renewal cycle, roughly half the ongoing requirement, and the full requirement applies from the second cycle onward.

Two rules commonly missed on the examination:

• Passing an examination earns no contact hours. The credential is awarded for the exam; continuing education is a separate obligation.
• Courses taken to prepare for an examination while not yet certified do not count toward renewal. They may, however, be credited toward the operating experience requirement. Once an operator is certified, DEP-approved exam-preparation coursework for the type of certificate held does count toward renewal.

Grandparented certificates carry the Class D and E requirement of 8 hours in the first cycle and 15 thereafter. Contact hours cannot be banked or carried into a later cycle.

---

Utility Security & Infrastructure Resilience: AWIA Section 2013

Under federal and state environmental mandates, water and wastewater utilities are recognized as critical lifelines whose disruption would incapacitate economic and public health systems. The primary federal statutory driver is America's Water Infrastructure Act of 2018 (AWIA), Public Law 115-270, specifically Section 2013, which amended Section 1433 of the Safe Drinking Water Act.

Risk and Resilience Assessments (RRAs)

AWIA Section 2013 mandates that all community water systems serving populations greater than 3,300 persons conduct a comprehensive Risk and Resilience Assessment (RRA) and submit official certification of completion to the U.S. Environmental Protection Agency (EPA) every 5 years. The RRA must evaluate:

1. Malevolent Acts: Active shooter threats, physical vandalism, explosive devices, chemical contamination of raw sources or storage reservoirs, and insider sabotage.
2. Cybersecurity Vulnerabilities: Cyber attacks targeting SCADA systems, remote terminal units (RTUs), programmable logic controllers (PLCs), electronic laboratory information systems, and billing networks.
3. Natural Hazards: Severe weather events, 100-year and 500-year flooding, seismic events, severe droughts, winter freezing conditions, and lightning strikes.
4. Critical Asset Vulnerabilities: Piping networks, pump stations, treatment chemical storage facilities, clearwells, and elevated water storage tanks.
5. Supply Chain Disruptions: Interruptions in treatment chemical deliveries (chlorine, coagulants), critical electrical equipment, or spare pump parts.

Emergency Response Plans (ERPs)

Within 6 months of completing the RRA, systems must prepare, update, and certify an Emergency Response Plan (ERP). The ERP details:

• Specific operational protocols, alternative power generation capabilities, and backup disinfection systems.
• Physical and cybersecurity response strategies to secure assets during active threats.
• Coordination protocols with local first responders, county Emergency Management Agencies (EMAs), the Pennsylvania Emergency Management Agency (PEMA), and the Pennsylvania State Police.
• Emergency public notification pathways, including boil water advisory procedures and reverse-911 notification templates.

---

Multi-Layered Physical Security & Hazardous Chemical Protection

Facility protection employs the military principle of defense-in-depth—constructing concentric physical and electronic barriers to deter, detect, delay, and respond to unauthorized intrusion.

+---------------------------------------------------------------------------------------+
|                   Concentric Defense-in-Depth Security Framework                      |
+---------------------------------------------------------------------------------------+
| Layer 1: Perimeter  | 8-foot chain-link fence, 3-strand barbed wire, locked gates     |
| Layer 2: Grounds    | Motion lighting, CCTV surveillance, clear sightlines, no brush  |
| Layer 3: Enclosure  | Solid core doors, magnetic contacts, window bars, badge access  |
| Layer 4: Asset      | Locked chemical rooms, tank hatch switches, vent fine screens   |
+---------------------------------------------------------------------------------------+

Physical Barrier Architecture

• Perimeter Security: Enclosing critical infrastructure with minimum 8-foot industrial chain-link fencing topped with 3-strand barbed wire angled outward at 45 degrees. Vehicular and pedestrian access gates must be padlocked or controlled via electronic card-access systems.
• Electronic Detection & Surveillance: Implementing closed-circuit television (CCTV) cameras with infrared night illumination covering perimeter gates, treatment buildings, finished water storage tanks, and chemical delivery bays. Intrusion detection sensors (magnetic reed door contacts, infrared motion sensors, and glass-break detectors) must be tied to automated dialers or central monitoring dispatch.
• Storage Tank Protection: Elevated storage tanks and ground-level finished reservoirs represent high-vulnerability targets. Access ladders must feature locked climbing guards or locked ladder cages. Tank roof inspection hatches must be padlocked and equipped with tamper switches tied into SCADA alarms. Tank air vents must be protected with fine 24-mesh corrosion-resistant insect screens to prevent biological or chemical tampering.

Hazardous Chemical Safety & Gaseous Chlorine Controls

Facilities utilizing gaseous chlorine (Subclass 11) manage extreme toxic inhalation hazards (TIH) requiring dedicated physical and engineering controls:

• Vacuum Regulator Mounting: Vacuum regulators must be mounted directly to the cylinder or container valve, ensuring that all piping downstream operates under negative pressure (vacuum). If a pipe or fitting ruptures, atmospheric air is drawn into the system rather than toxic chlorine gas leaking out.
• Emergency Automatic Shutoff Valves: Motorized or pneumatic actuator valves mounted on cylinder valves that automatically slam shut within seconds of receiving a high-level gas leak alarm.
• Emergency Gas Scrubbers: Packed-tower caustic soda (sodium hydroxide) wet scrubbers capable of neutralizing an entire 1-ton cylinder rupture (2,000 lbs of gas) under emergency ventilation.
• Gas Leak Detection: Continuous dual-stage electrochemical chlorine detectors installed near floor level (chlorine gas is 2.5 times heavier than air). Alarm setpoints trigger an audible siren and flashing amber strobe outside the room at 1.0 ppm, and initiate emergency scrubber exhaust and building isolation at 3.0 ppm.
• Personal Protective Equipment (PPE): Self-Contained Breathing Apparatus (SCBA) units must be stationed immediately outside the chlorine storage enclosure in an accessible, clean-air staging area. SCBA units must never be stored inside the chemical feed room itself.

---

Industrial Control System (SCADA) Cybersecurity

Modern water and wastewater infrastructure relies heavily on Supervisory Control and Data Acquisition (SCADA) systems, programmable logic controllers (PLCs), and human-machine interfaces (HMIs). Modern cyber threats require utilities to enforce rigorous electronic boundaries:

• Network Segmentation & Air Gapping: Complete isolation between the administrative business network (corporate email, billing, public internet) and the industrial operational technology (OT) SCADA network using hardware firewalls, demilitarized zones (DMZs), or physical air gaps.
• Multi-Factor Authentication (MFA): Enforcing mandatory MFA and encrypted virtual private networks (VPNs) for any remote telemetry access, diagnostics, or off-site operator dial-in.
• Credential Hygiene: Eliminating all factory-default vendor usernames and passwords on PLCs, network routers, and RTUs; enforcing role-based access control (RBAC) with unique logins for every certified operator.
• Removable Media Disablement: Disabling USB ports on operational control workstations to prevent the introduction of industrial malware or unauthorized data extraction.
• Offline Immutable Backups: Maintaining frequent, isolated offline system image backups of PLC logic configurations and SCADA database programming stored in a separate physical location.

---

Emergency Mutual Aid Networks: PaWARN

During major catastrophic disruptions—such as severe hurricanes, river flooding, regional power grid collapse, or severe winter freezes—individual municipal authorities can quickly become overwhelmed. To address resource exhaustion, Pennsylvania utilities formed the Pennsylvania Water/Wastewater Agency Response Network (PaWARN).

Statutory and Legal Foundation of PaWARN

PaWARN operates as a statewide mutual aid network of utilities helping utilities. It is governed by a legally vetted, pre-scripted Master Mutual Aid Agreement. This standard legal agreement overcomes bureaucratic paralysis during an emergency by pre-negotiating:

• Legal liability shields and indemnification agreements between donor and recipient utilities.
• Workers' compensation and insurance coverage for personnel dispatched to disaster sites.
• Transparent, pre-established financial reimbursement mechanisms covering equipment depreciation, fuel, materials, and labor.

Operational Deployments and Capabilities

When a member utility declares an emergency, PaWARN provides rapid access to an online emergency matching portal and 24/7 disaster coordination, enabling rapid dispatch of:

• Licensed replacement operators to maintain mandatory 24/7 process control shifts when local personnel are incapacitated or exhausted.
• High-capacity mobile diesel generators and fuel supply units to restore pumping stations during long-term electric grid outages.
• Portable emergency water purification trailers and mobile reverse osmosis units.
• High-capacity bypass pumps, pipe repair clamps, hydraulic excavators, and critical water treatment chemicals.

PaWARN coordinates directly with the Pennsylvania Emergency Management Agency (PEMA) and aligns with the National Incident Management System (NIMS) and the Incident Command System (ICS), ensuring seamless integration with state and federal emergency responders.