RISK AND RESILIENCE ASSESSMENTS &EPA AND EMERGENCY RESPONSE PLANS: 1 NEW REQUIREMENTS FOR DRINKING WATER UTILITIES Section 2013 of America's Water Infrastructure Act of 2018 (AWIA) requires community water systems1 that serve more than 3,300 people to complete a risk and resilience assessment and develop an emergency response plan. RISK AND RESILIENCE ASSESSMENT Your utility must conduct a risk and resilience assessment and submit certification of its completion to the U.S. EPA by the following dates: EMERGENCY RESPONSE PLAN Your utility must develop or update an emergency response plan and certify completion to the U.S. EPA no later than six months after risk and resilience assessment certification. Each utility deadline is unique; however, the dates below are the due dates for utilities who submit a risk and resilience assessment certification by the final due date according to the population served. Important Dates March 31,2020 if serving >100,000 people. December 31,2020 if serving 50,000 to 99,999 people. June 30,2021 if serving 3,301 to 49,999 people. — September 30,2020 if serving >100,000 people. June 30,2021 if serving 50,000 to 99,999 people. December 30, 2021 if serving 3,301 to 49,999 people. Recertifi cation J Every five years, your utility must review the risk and resilience assessment and submit a recertification to the U.S. EPA that the assessment has been reviewed and, if necessary, revised. Within six months of submitting the recertification for the risk and resilience assessment, your utility must certify it has reviewed and, if necessary, revised, its emergency response plan. Visit the U.S. EPA website to find more information on guidance for developing a risk and resilience assessment at https://www.epa .gov/waterriskassessment/conduct-drinking- water-or-wastewater-utility-risk-assessment. Visit the U.S. EPA website for guidance on developing an Emergency Response Plan at https://www.epa.gov/waterutilityresponse/deve lop-or-update-drinking-water-or-wastewater- utility-emergency-response-plan. TOOLS OR METHODS AWIA does not require the use of any standards, methods or tools for the risk and resilience assessment or emergency response plan. Your utility is responsible for ensuring that the risk and resilience assessment and emergency response plan address all the criteria in AWIA Section 2013(a) and (b), respectively The U.S. EPA recommends the use of standards, including AWWA J100-10 Risk and Resilience Management of Water and Wastewater Systems, along with tools from the U.S. EPA and other organizations, to facilitate sound risk and resilience assessments and emergency response plans. ------- FREQUENTLY ASKED QUESTIONS I need more information about risk and resilience assessments and emergency response plans: Risk and resilience assessments evaluate the vulnerabilities, threats and consequences from potential hazards. What does a risk and resilience assessment include? ¦ Natural hazards and malevolent acts (i.e., all hazards). ¦ Resilience of water facility infrastructure (including pipes, physical barriers, water sources and collection, treatment, storage and distribution, and electronic, computer and other automated systems). ¦ Monitoring practices. ¦ Financial systems (e.g., billing systems). ¦ Chemical storage and handling. ¦ Operation and maintenance. What does an emergency response plan include? ¦ Strategies and resources to improve resilience, including physical security and cybersecurity. ¦ Plans and procedures for responding to a natural hazard or malevolent act that threatens safe drinking water. ¦ Actions and equipment to lessen the impact of a malevolent act or natural hazard, including alternative water sources, relocating intakes and flood protection barriers. ¦ Strategies to detect malevolent acts or natural hazards that threaten the system. Who should I work with when creating my emergency response plan? ¦ Utilities must coordinate the risk and resilience assessments, as well as the emergency response plans with local emergency planning committees. For more information, see www.congress.gov/bill/115th-congress/senate-bill. I need more information on the certification process: What do I need to submit to the U.S. EPA? ¦ Each utility must submit a certification of your risk and resilience assessment and emergency response plan. Each submission must include: utility name, date and a statement that the utility has completed, reviewed or revised the assessment. The U.S. EPA has developed an optional certification template that can be used for email or mail certification. The optional certification form will be available in August 2019. Who can certify my risk and resilience assessment and emergency response plan? ¦ Risk and resilience assessments and emergency response plans can be self-certified by the utility. How do I submit my certification? ¦ Three options will be provided for submittal: regular mail, email and a user-friendly secure online portal. The online submission portal will provide drinking water systems with a receipt of submittal. The U.S. EPA recommends using this method. The certification system will be available in August2019. When can I submit the initial certification? ¦ Utilities should wait to submit the initial certification to the U.S. EPA until the U.S. EPA publishes Baseline Information on Malevolent Acts Relevant to Community Water Systems, which is required under AWIA by August 2019. Do I need to submit my certification to my state or local government? ¦ No. Section 2013 of AWIA does not require utilities to submit the certification to state or local governments. How long do I need to keep a copy of my risk and resilience assessment and emergency response plan? ¦ Utilities need to keep a copy of both documents for five years after certification. What if I do not have a copy of my most recent risk and resilience assessment? ¦ The U.S. EPA intends to destroy vulnerability assessments (V As) submitted in response to the Bio terrorism Act of2002, but if utilities would like to have their VA and certification documents mailed to them, contactWSD-Outreach@epa.gov, and on utility letterhead, include the utility name, PWSID, address and point of contact as an attachment to the email. RESOURCES & TOOLS Conducting a Risk and Resilience Assessment ¦ The U.S. EPA's Risk and Resilience Baseline Threat Document (available August 2019). ¦ The U.S. EPA's Vulnerability Self-Assessment. Developing an Emergency Response Plan ¦ Emergency Response Plan Guidance. ¦ The U.S. EPA's Emergency Response Webpage. ¦ Local Emergency Planning Committees. The U.S. EPA Website ¦ https://www.epa.gov/waterresilience/americas-water-infrastructure-act-2018-risk-assessments-and- emergency-response-plans. Still have questions about the new AWIA requirements? I 0ffice of Water (4608T) Contact the U.S. Environmental Protection Agency (U.S. EPA) at dwresiliencehelp@epa.gov. EPA" Aphi 2019 ------- |