United States                          AQRVA/All
                   Environmental Protection                A\DLAy>V r\ IP
                   Agency                               Association of State Drinking Water Administrators
           State Drinking Water Program All-Hazards
                Preparedness, Mitigation, Response
                         and Recovery Checklist

  The purpose of this document is to provide state drinking water programs (DWP) with a checklist of
  actions that should be considered before, during and after an emergency. Whether your program
  is well advanced in emergency planning and response or does not currently have any protocols
  in place, this document can provide useful internal checklists and best practices across the four
  principal components of emergency response - preparedness, mitigation, response and recovery.

 Primacy Agency Emergency Program Management Checklists
Primacy agencies must consider their own actions within an appropriate context if they are to be well
positioned to support the needs of their water systems in times of crisis. The information provided in the
checklists below contain recommended actions that every state DWP should be able to undertake and
implement (both within their own programs and in support of their utilities) to support and sustain public
health protection.
                                    Preparedness
Preparedness activities are any actions taken prior to the emergency that facilitate the implementation
of a coordinated response.
   Develop a DWP emergency response plan that includes the following elements:
   D  Identify and list clear roles and responsibilities of staff (what are the expectations of staff during
      an emergency incident). Include staff assignments and reporting procedures. Establish pre-
      authorizations to request and provide assistance.
      Develop personnel procedures during emergencies (need for alternate location, reporting to work,
      notifying staff at home, etc.).
   D  Develop an emergency response team that includes enough trained staff to be three deep.
      Develop a Continuity of Operations Plan (COOP) plan to provide detailed information needed to
      facilitate preparation and response actions to disruption of operations.
      Develop lists of activities (see example provided in this document) and prioritize functions.
      Develop tracking sheets to track water system status and DWP actions.
   D  Establish State Emergency Operations Center (EOC) representation.
   D  Train staff on the DWP emergency response plan and corresponding emergency response
      concepts (NIMS - National Incident Management System and ICS - Incident Command System).
   Prepare go-kits (flash drives with key information such as water system contact information; staff
   contact information, important forms, etc.). Save flash drives at alternate locations (like the State EOC
   and homes of key staff).

-------
    State Drinking Water Program All-Hazards Preparedness, Mitigation, Response and Recovery Checklist • page 2
                                         Mitigation
Mitigation activities are any actions taken to prevent or reduce the occurrence of any emergency or risk
to human life and property.
   Become familiar with available hazard mitigation funding opportunities through your state
   emergency management agency and by checking out EPA's Fed FUNDS tool.
   Make sure grant funding and disaster reimbursement announcements are being received by you
   and your water systems.
   Conduct appropriate public education and outreach concerning funding opportunities for mitigation
   projects at your water systems.
                                         Response
Response includes activities to address the immediate and short-term goals to preserve life, property,
the environment and the social, economic and political structure of the community. Response also
includes the execution of emergency response plans and incident mitigation activities.
   Refer to additional information in Incident-Specific Response Checklists (see next page).
   Send  out pre-incident advisories to staff and water systems when possible through email, autodial
   phone message, press release, etc.
EH Activate emergency response plans. Notify staff of response assignments and require check-in and
   check-out procedures with contact information.
   Track water system operational status.
   Provide coordination assistance with WARN and the Emergency Management and Assistance
   Compact (EMAC) processes.
   Coordinate with other partners such as Rural Water, Water Works Associations, Rural Community
   Assistance Partnership (RCAP), etc.
   Activate role at State EOC to provide coordination and other services to support the response to
   water utilities.
[H Document all costs incurred in carrying out emergency  operations including state staff time and
   resources. Include a written log of messages, decisions and directives.
D Ensure safety procedures/protocols for staff in the field.
[H Participate in the release of departmental emergency public information.
[H Assist in assessing and reporting damages.
[H Assist in establishing alternate water supplies and advise on water quality monitoring (if necessary).
                                         Recovery
Recovery involves actions needed to help individuals and communities return to normal. Recovery
programs are designed to assist victims, restore operations and rebuild destroyed property. Recovery
actions often extend long after the incident itself and include mitigation components designed to avoid
damage from future incidents.
   Advocate for/partner with utilities on risk communication and restoration of public confidence.
   Forward announcements of FEMA Public Assistance and other funding assistance to water systems.
   Identify and track system needs and take appropriate mitigation measures.
   Follow up  on damage assessment and debris management.
   Follow up  on necessary permitting, decontamination and sampling determinations.
[H Hold after-action meetings. Determine lessons learned and develop improvement plans to make
   appropriate policy/procedure adjustments.

-------
    State Drinking Water Program All-Hazards Preparedness, Mitigation, Response and Recovery Checklist • page 3
                                        Mentoring
The following drinking water primacy agencies have volunteered to be contacts for further information
and guidance:

   NH DES Drinking Water and Groundwater Bureau       Utah Drinking Water Program
   Johnna McKenna                                  Kim  Dyches
   603-271-7017, johnna.mckenna@des.nh.gov            801-536-4202, kdyches@utah.gov

   Maine Drinking Water Program                        MT DEQ Public Water Supply Program
   Sara Flanagan                                      Dusti Lowndes
   207-287-5678, sara.m.flanagan@maine.gov            406-755-8976, dlowndes@mt.gov
                          Value of an Emergency Program
  While states may differ in their public water supply emergency preparedness, response and
  partnerships, a clearly defined emergency program and response plan are key to an effective and
  coordinated response and recovery effort. Drinking water programs and water and wastewater
  systems all across the country continue to improve their resiliency through emergency plans
  and procedures to ensure the protection of public health in the "All-Hazards" arena. Responses
  to emergencies and threats are local with the potential for state and federal support. In an
  emergency that impacts public drinking water facilities, the DWP will be looked upon as a subject
  matter expert and often will be asked to assist local and state officials in resolving drinking water
  issues that are affecting their communities.

  The DWP also has statutory authority and primary enforcement responsibilities to implement and
  oversee some emergency management efforts. Federal regulations and U.S. laws that directly
  involve primacy agencies to act or assist during an emergency include EPA's Water Programs
  National Primary Drinking Water Regulations covering public notification of drinking water
  violations and primary enforcement responsibility as well as U.S. code covering state primary
  enforcement responsibility and tampering with public water systems.
                  Incident Specific Response Checklists
In addition to the above checklists, the following incident specific checklists can be used by DWPs to
help guide their response-related activities and tracking of water system status. They are not meant to
be all-inclusive. The lists of questions cover general response, natural disasters and security events.

                         General Response Questions Checklist
 1.  Record date and time of call, program staff taking the call.
 2.  Record name of water system and caller, address, phone number, email and PWSID.
 3.  Record nature of the problem (e.g., date, time, duration, location).
 4.  Who has been notified (customers, consecutive connections, media, other state agencies, etc.)?
 5.  What equipment/service has been interrupted/affected?
 6.  Has water quality been compromised and samples taken?
 7.  Is alternate water supply needed?
 8.  Any reports of injury or illness?

-------
    State Drinking Water Program All-Hazards Preparedness, Mitigation, Response and Recovery Checklist • page 4

 9. What actions have been taken so far? Have pre- and post-damage photos been taken?
10. Has the problem been corrected?
11. Is the system a WARN member/has WARN been notified?
12. Is follow-up required? What assistance can the DWP provide?
NATURAL DISASTERS
 1. Can the damaged facility be taken offline or system portions isolated?
 2. If the system is groundwater, has the well(s)  been submerged?
 3. Has untreated water (or any contaminant) entered the water system?
 4. Has the system lost pressure or have low pressure?
 5. Can another facility perform the same function?
 6. How long will it take to repair?
 7. Do you have power for all components of the water system? Is it from primary power or generator?
   a. If no power:
       i. Do you have a properly sized generator or quick connect capabilities?
      ii. Are there any critical customers served by the system?
      iii. How long have you been without power?
      iv. Who is your power company?
      v. What is the street address of water system operations, or component out of power?
      vi. What is your restricted use plan and storage capacity?
   Actions to Be Taken:
   • Utilize proper drinking water advisories for immediate public notice.
   D Provide technical assistance and monitoring advice.
   D Coordinate  power outage prioritization for water systems through state EOC.
SECURITY (INTENTIONAL/ACCIDENTAL) INCIDENTS ^^^^^^^^^^^^™
What type of activity has occurred? Is it physical or cyber; intentional or accidental? The separate
checklists below offer targeted questions based on the identified incident type.
                                Physical Security Incident
 1.  Is contamination a possible threat to the water system?
 2.  Is a site characterization being conducted to determine credibility of threat?
 3.  Have water quality samples been collected for analysis and to confirm contamination incident?
 4.  Has law enforcement been notified?
 5.  If site is safe, has the water system and/or law enforcement investigated the facilities and have/can
    affected components been/be isolated?
 6.  If the  site is not safe, has local hazmat assistance been requested?
 7.  Has the site and evidence been protected?

-------
   State Drinking Water Program All-Hazards Preparedness, Mitigation, Response and Recovery Checklist • page 5

  Actions to Be Taken:
  (Refer to EPA "Water Security Initiative: Interim Guidance on Developing Consequence Management Plans for
  Drinking Water Utilities" EPA 817-R-08-001, July 2008)
  D Immediately notify appropriate senior management.
  D Assist in notifying local law enforcement and the Federal Bureau of Investigation (FBI) for their
     assistance in investigating the incident.
  D Coordinate with the DWP's Public Information Officer and water system in issuing a "Water
     Advisory" notice.
  D Report incident to the Water Information Sharing and Analysis Center (WaterlSAC).
  D Provide technical assistance and monitoring advice.
                                 Cyber Security Incident
1. What computer systems have been affected and what is the concern?
2. Do you know if the threat is internal (disgruntled employee) or external (computer hacker)?
3. Have computers been disconnected from the internet and staff notified?
4. Has your IT service provider been contacted? Are they analyzing the threat?
5. Is customer information at risk?
6. Does your water system have a SCADA system?
  a. Have any unauthorized changes been made to the  SCADA system?
  b. Are water system components and water quality data normal?
  c. Can the SCADA system be taken offline and the water system run manually?
  Actions to Be Taken:
  D Encourage water system to contact their IT service provider for assistance in identifying the threat.
  • Advise water system to contact law enforcement if a cyber security threat is confirmed.
  D Assist in reporting the incident to the Industrial Control Systems Cyber Emergency Response
     Team (ICS-CERT) ics-cert@hq.dhs.gov,
  D If appropriate, utilize proper drinking water advisories for immediate public notice.
                                 'Chemical Spill Incident'
1.  Is spill incident accidental or intentional? If intentional, see physical security incident questions as well.
2.  When did the spill occur? (date, time, duration, location)
3.  What material and how much was spilled?
4.  Has the material been contained or what action is being taken?
5.  Did any of the materials enter a body of water or source protection area?
6.  Who is the primary contact for this spill incident?
  Actions to Be Taken:
  D Make sure appropriate State Spill Response Agency and the National Response Center has
     been contacted.
  D Assist in notification of critical infrastructure and customers in the area.
  D If deemed appropriate, issue proper drinking water advisories for immediate public notice.

-------
    State Drinking Water Program All-Hazards Preparedness, Mitigation, Response and Recovery Checklist • page 6


                        Additional Information and Resources
   EPA Water Security: http://water.epa.gov/infrastructure/watersecuritv/
   EPA's Water Security Initiative Consequence Management Plans Development Guidance:
       http://water.epa.gov/infrastructure/watersecuritv/upload/2008 10 24 watersecuritv guide
       interim  cmpwsi.pdf
   EPA's FedFUNDS tool: http:www.epa.gov/fedfunds
   FEMA NIMS: http://www.fema.gov/national-incident-management-svstem
   ASDWA Security Information:
       http://www.asdwa.org/index.cfm ?fuseaction=Page.viewPage&pageld=496
   ASDWA and EPA's Bridging the Gap fact sheet:
       http://water.epa.gov/infrastructure/watersecuritv/emerplan/upload/epa817f12006.pdf
   WARN: www.nationalwarn.org
    Example Response Activities List: Drinking Water Program
  Actions during a Possible Intentional Contamination Incident

This following figure is provided as an example and is intended to be used by state programs as a starting
point when developing their response actions to an intentional contamination incident. The figure shows
response actions for each phase of an intentional contamination incident including possible, credible and
confirmed. The figure is not intended to serve as a detailed methodology.  It can be tailored to reflect the
more specific policies, protocols and procedures for any state program. Depending on the incident, some
items in this chart may occur simultaneously.

       Upon initial notification of a possible intentional contamination incident at a water utility...
         Drinking Water Program activities:
              DWP activates internal Incident Management Team
              Support utility and appropriate response partner agencies (e.g., law enforcement,
              emergency management, HazMat) with threat assessment and site investigation
              Request support from EPA response team, if needed

              Provide technical support for operational responses (isolation or flushing)

              Provide sampling and/or analysis support
              Assist the utility ICS communications staff to develop public notifications, if needed
              Assist utility with notifications to public health and emergency management agencies
              Assist utility with sampling, decontamination and clearance activities
              Provide technical assistance for operational response and alternate water sources
              Assist utility with After Action Review
              Update public notifications with new information
                         Office of Water (4608-T)  EPA 817-F-13-004 July 2013

-------