13.4 Security, Vulnerability Assessment & Emergency Response Planning

13.4 Security, Vulnerability Assessment & Emergency Response Planning

Drinking water and wastewater systems are formally designated critical infrastructure. An operator's security responsibilities are real and testable, and they sit inside the Security, Safety and Administrative Procedures content area.

---

1. The Federal Requirement

America's Water Infrastructure Act (AWIA) requires community water systems serving more than 3,300 people to:

1. Conduct a Risk and Resilience Assessment (RRA) and certify its completion to EPA.
2. Prepare or revise an Emergency Response Plan (ERP) within six months of certifying the RRA.
3. Review and recertify both on a recurring cycle — at least every five years.

What the Risk and Resilience Assessment must cover

• Risk to the system from malevolent acts and natural hazards
• Resilience of the physical infrastructure — pipes, source water, treatment, storage, distribution, and electronic/computer/automated systems
• Monitoring practices
• Financial infrastructure
• Use, storage, and handling of chemicals
• Operation and maintenance of the system

What the Emergency Response Plan must include

• Strategies and resources to improve resilience, including physical and cyber security
• Plans and procedures for responding to a malevolent act or natural hazard that threatens safe drinking water
• Actions and equipment to lessen the impact of an event, including alternative source water, relocation of intakes, and flushing
• Strategies to detect malevolent acts or natural hazards

The exam anchors: the 3,300 population threshold, the six-month ERP deadline after RRA certification, and the five-year recertification cycle.

---

2. Physical Security — Layers, Not Fences

Security is built as concentric layers, each performing one of four functions:

$\textbf{Deter} \rightarrow \textbf{Detect} \rightarrow \textbf{Delay} \rightarrow \textbf{Respond}$

Assets that deserve the most attention

• Finished water storage — an open or unlocked hatch is the highest-consequence, lowest-effort target in the system, which is why the locked, curbed, overlapping hatch described in Section 6.5 is both a sanitary and a security requirement.
• Chemical storage — particularly chlorine, which is a hazard in its own right.
• Source water intakes and wellheads
• SCADA and control systems (Section 12.6)
• Backflow-vulnerable connections into the distribution system

Personnel practices

• Background checks commensurate with access.
• Immediate access termination for departing employees — badges, keys, SCADA accounts, remote access.
• Visitor and contractor control — sign-in, escort, identification.
• Verify identity of anyone claiming to be a utility worker, inspector, or delivery driver. Impersonation is a standard technique.
• Train every operator to report anomalies: unusual water quality, unexplained equipment operation, forced locks, vehicles loitering near facilities.

---

3. Contamination Warning and Response

Operators are the detection system. Indicators that warrant escalation:

Immediate actions on a credible contamination threat: isolate the affected portion of the system, stop distribution if warranted, notify SC DES and public health, sample before flushing so evidence is preserved, and prepare public notification — a confirmed contamination event is a Tier 1 notice (Section 10.4).

---

4. Emergency Response Planning

Hazards a South Carolina utility plans for

Power — the single most important contingency

• Standby generation sized for the loads that must run, with automatic transfer switches.
• Fuel — quantity on hand, refueling contracts, and fuel polishing for long-stored diesel.
• Exercise generators under load on a regular schedule. A generator that has only ever been run unloaded for ten minutes a month is not a proven asset.
• Priority restoration agreements with the electric utility.

Plan elements

1. Notification chain — who calls whom, with current 24-hour contact numbers for staff, SC DES, public health, law enforcement, and key customers such as hospitals and dialysis centers.
2. Roles and responsibilities, aligned to an incident command structure.
3. Action checklists by scenario, written so someone tired at 3 a.m. can follow them.
4. Alternative water supply — interconnections with neighboring systems, tanker sources, bottled water.
5. Public communication — pre-drafted notices, spokesperson, media and social channels.
6. Vendor and contractor list with after-hours numbers.
7. Critical spare parts and equipment locations.
8. Recovery and return-to-service procedures, including disinfection and bacteriological clearance (Sections 6.5 and 6.7).

Mutual aid

Water/Wastewater Agency Response Networks (WARN) are utility-to-utility mutual aid agreements operating in most states. They provide pre-negotiated terms so a utility can request personnel, equipment, and materials from peer utilities immediately rather than negotiating during a crisis. Membership costs little and is one of the highest-value preparedness steps a small system can take.

---

5. Exercising the Plan

A plan that has never been drilled is an untested assumption.

After every exercise and every real event, conduct an after-action review and update the plan. The recurring findings are always the same: contact lists were out of date, nobody could find the drawings, the generator would not carry the load, and the person named in the plan no longer works there. Those are exactly the failures that exercises exist to surface before the hurricane.