United States
Environmental Protection
Agency
Using Technical, Managerial, and Financial
Capacity to Improve System Security —
Suggestions for States
Security at Systems is Just Common Sense
The nation's water systems are vulnerable to a variety of threats including natural disasters (e.g., floods, tornados,
wildfires, and drought); contamination from biological, chemical, or radiological agents; power outages; and deliberate
acts of vandalism or terrorism. Small public water systems need to be prepared to deal with these types of threats.
Public safety and confidence in drinking water may be seriously threatened, regardless of whether a breach of security
was accidental, intentional, or due to a natural disaster. Being prepared just makes common sense. For this reason, it is
important for small systems to evaluate their susceptibility to potential threats; to identify actions they can take to help
reduce the risk of serious consequences; and be able to quickly recover from any type of emergency. There are many
ways that states and water systems can work together to be ready to detect, protect against, respond to, and recover
from threats and emergencies. Conducting a vulnerability assessment, developing an emergency response plan, and
incorporating security into capacity development programs can be important steps in that direction.
Capacity Development is Security is Capacity Development...
... is more than just a catchy phrase.
Long after the technical, managerial, and financial (IMF) elements and activities were defined, the
water sector has come together to identify four principal security goals:
• Sustain protection of the public health and environment;
• Recognize and reduce risks in the water sector;
• Maintain a resilient infrastructure; and
• Increase communication, outreach, and public confidence.
Each of these goals can be met through an effective Capacity Development program.
Capacity Development Makes Security Feasible for Small Systems
States and water systems don't need to undertake extensive new security initiatives to be better prepared. Many
capacity development activities can help systems assess their potential vulnerabilities, take steps to reduce the risk
of serious consequences from a security breach or other emergency, enhance their resiliency, and otherwise address
system security issues. By integrating capacity development programs and security-related activities, states and water
systems can build upon already established programs which helps avoid duplication of effort, increase efficiency,
and reduce costs. For example, operator certification training programs and sanitary surveys can be modified to
include security-related components. Cross-connection programs can be encouraged in order to prevent chemical
and microbiological contamination. Communication and information systems (e.g., hotlines or emergency response
systems) can help water systems respond to threats or emergencies. Participation in mutual aid and assistance
networks can complement and enhance a system's ability to prevent, detect, respond to and recover from a broad
range of threats. Building on additional existing relationships (such as those between the state and water systems or
between water systems and local law enforcement) can enhance the effect that the capacity development program
has on improving security at small water systems by leveraging additional knowledge, expertise, and resources.
-------
Good Capacity Development is Good Security
Capacity development focuses on a system's ability to fulfill its mission to provide a safe and reliable supply of water.
Security is an integral part of that mission. By using successful capacity development programs and tools to help small
systems identify and implement new security measures and strengthen existing ones, states can ensure that systems
will continue to maintain capacity while improving their security protection. Carrying out security-related measures
through existing capacity development activities will enable states and systems to realize multiple benefits.
These benefits include: I) additional training opportunities for water system operators and managers; 2) improved
source water protection plans; 3) incorporation of security-related resource needs into the budget planning process;
4) better educated and prepared customers, and 5) successful capacity development programs and tools, enhanced
with security-related measures. These activities can improve states' and systems' ability to continue to provide a safe
and reliable supply of water.
Resources for Systems
EPA Small Systems Web site www.epa.gov/safewater/smallsys.html
EPA Security Web site cfpub.epa.gov/safewater/watersecurity
EPA Drinking Water Academy www.epa.gov/safewater/dwa.html
EPA Homeland Security Research www.epa.gov/ordnhsrc
EPA Emergency Preparedness www.epa.gov/ebtpages/emeremergencypreparedness.html
EPA Lab Compendium www.epa.gov/compendium
EPA Water Contaminant Information Tool www.epa.gov/wcit
Water Security Channel www.watersc.org
Center for Disease Control www.bt.cdc.gov
Department of Homeland Security www.dhs.gov
FEMA Emergency Management Institute www.training.fema.gov/IS/ceus.asp
FEMA National Incident Management System Integration Center ... www.fema.gov/emergency/nims/index.shtm
US National Response Team www.nrt.org
Water Health Connection www.waterhealthconnection.org
Office of Water (4606M)
EPA 8I6-F-07-OIO
www.epa.gov/safewater
November 2007
United States
Environmental Protection Agency
(4606 M)
Washington, DC 20460
Official Business
Penalty for Private Use $300
-------
CAPACITY DEVELOPMENT IS SECURITY IS CAPACITY DEVELOPMENT IS SECURITY IS CAPACITY DEVELOPMENT IS SECURITY
D
U
LJJ
Q_
o
_ I
LJJ
>
LJJ
Q
U
<
Q_
<
U
u~>
>~
h-
aL
D
U
LJJ
^n
u~>
r-
Q_
O
_ I
LJJ
>
LJJ
Q
U
<
Q_
<
U
Host Security Training and Exercises
Maintain 24/7 Emergency Notification
System
Coordinate with State Law
Enforcement and Emergency
Management Activities
Provide Security Expert (In-house or Third
Party)
Support Mutual Aid and Assistance
Networks
Develop Case Studies of Successful
Security Strategies or Emergency
Responses
Mentor Programs
Advisory Groups
Partnerships
Design Risk Communication Strategies
Create Model Policies on Information
Sharing, Media Inquiries, Public
Information
m
n
h-
aL
D
U
LJJ
• CD Assessments
• Permitting
• Certified Operators
• Technical Assistance
Provider Support
Rate-Setting
Training
Board Member
Training
Model Business
Plans
Effective
External
Linkages
Conduct Security Inspections
Consider a Security Component for
New Systems
Add Security Component to Sanitary
Surveys, CPE's, and Inspections
Encourage Cross Connection Control
and Backflow Prevention Programs
CD Assessments
Sanitary Surveys,
CPEs, Inspections
Technical Assistance
(In-house or Third
Party)
Engineering Services
Permitting/Licensing
Staffing and
Organization
Ownership
Accountability
Coordinate DWSRF and Security
Activities
Develop Suggested Approaches to
Include Security in Funding
Requests
Encourage NI MS/I CS Training
DWSRF
Other Loan and
Grant Programs
-<
Credit
Worthiness
System
Operations
Technical Assistance^
Provider Support
Plan Review (O&M, Plans'
& Specs, Capital
Improvement, etc.)
Operator Training
Develop Model
Chemical Delivery Procedures
Create a Security Checklist
Conduct Disaster Scenario Training
Add Security Component to Operator
Training
Source
Water
Protection
• Monitoring and
Analysis
• Source Water
Assessments
• Source Water
Protection Plans
Fiscal/Mgt
Controls
• Budget Review
• Rate Review
Encourage Emergency Reserve
Funds
Explore Other Funding Sources
(USDA, DHS, HHS)
Q_
O
_ I
LJJ
>
LJJ
Q
U
<
Q_
<
U
l/l
>-
h-
aL
D
U
LJJ
Permitting
Financial Training
Requirements
Asset Management
Training
Identify Appropriate Incentives for Security
Enhancement
Encourage Security Awareness in Building
Financial Capacity
• Develop Early Warning Monitoring
System Guidance
• Design Model Emergency Response
Protocols
SI !N3NdO13A3Q AllDVdVD SI A1 I )d n 0 3 S SI !N3NdO13A3Q AllDVdVD SI A1 I )d n 0 3 S SI !N3NdO13A3Q AllDVdVD
Q_
O
I
LJJ
>
LJJ
Q
>-
h-
U
<
Q_
<
U
------- |