S-B>A
WATER SECURITY DIVISION
Building Security and Resilience in the Water Sector
The Water and Wastewater Systems Sector Critical Infrastructure Partnership Advisory
Council (CIPAC), which is comprised of the Water Government Coordinating Council (WGCC)
and Water Sector Coordinating Council (WSCC), works to plan, coordinate and implement
programs to support security and resilience within the sector.
The WSCC consists of Water Sector associations who develop security and resilience policy
and strategy in coordination with the federal and state agencies who comprise the WGCC.
To learn how the Water and Wastewater Systems Sector CIPAC supports Water and Wastewater Systems
visit www.dhs.gov/cisa/water-and-wastewater-svstems-sector
This document describes the collaborative role each organization within the Water Sector
CIPAC plays in supporting water security and resilience and outlines the key materials and
resources they have developed in support of their missions. These materials and resources
educate the drinking water and wastewater sector about preparedness, response and recovery
activities and equip the sector with tools for enabling and improving its efforts in these areas.
55* Web & Mobile Tool
Federal Program
TO" Education & Training
Technical Assistance
i
Publication
» Conferences and Meetings

U.S. Environmental Protection Agency (EPA)
Water Security Division
Enhances the security and resilience of the water sector
by providing innovative tools and exercises.
Route to Resilience uses videos and a user-friendlv
interface to guide the user through the process of
building their resilience to all hazards.
^ VSAT Web 2.0 enables water utilities to assess risk
and resilience from natural hazards and malevolent
threats to improve security and resiliency and to
comply with America's Water Infrastructure Act
(AWIA).
Emergency Response Plan Template and Guidance
assists water utilities with developing an Emergency
Response Plan in accordance with AWIA and outlines
strategies, resources, plans and procedures that
utilities can use to prepare for and respond to an
emergency, natural or man-made.
8
Office of Research and Development
Conducts applied, stakeholder-driven research and
responsive technical support to help solve the nation's
environmental challenges.
^ Environmental Sampling and Analytical Methods
~ (ESAM) Program is a comprehensive program
to facilitate a coordinated response following an
intentional or accidental homeland security-related
contamination incident.
Water Security Test Bed (WSTB) is a full-scale
representation of a drinking water distribution
system designed to support evaluations of water
infrastructure decontamination, water treatment,
cybersecurity and resiliency.
Water Infrastructure Modeling Tools focus on
modeling of threats to water systems and detection
of contamination events using EPANET, CANARY
TEVA-SPOT and more.
iKi
l

-------
*\\
American Water Works
Association
American Water
Works Association
(AWWA)
Provides multiple resources that build the foundation for
a water utility's development of an all-hazards risk and
resilience management strategy.
Utility Risk & Resilience Certificate Program
provides 10hr/1.0 CEU on water sector standards
that represent minimum best practice, including
G430, G440, J100 and Cybersecurity.
Water Sector Cvbersecuritv Risk Management
Guidance & Assessment Tool provides a critical
baseline for determining which cybersecurity
controls are most applicable to a utility's information
and operations technology functions.
Water Sector Resource Typing Guidance
facilitates the development of resource types for
water sector personnel, teams and equipment,
enabling the development of mission-ready
packages and expedited mutual aid requests
and responses.
§
§l
'WATER
r isac
Water Information
Sharing and Analysis
Center (WaterlSAC)
Enhances the security of water and wastewater utilities
by providing information and tools for prevention,
protection, mitigation, response and recovery for all
hazards,
<5* Online library provides members with 24/7 access
to approximately 10,000 resources covering a range
of water security and resilience topics,
<=> Semiweekly Security and Resilience Updates,
semiannual Threat Analyses for the Water and
Wastewater Sector and ad hoc Alerts offer
tailored information about threats to the sector and
advice on protective and mitigating measures,
|j Cybersecurity Resources include monthly Water
Sector Threat Briefings and the 15 Cybersecurity
Fundamentals for Water and Wastewater
Utilities.
ASDWA
Association of
State Drinking Water
Administrators (ASDWA)
Coordinates with EPA and other organizations to share
water security information and conduct trainings and
workshops targeted toward state primacy agencies,
Newsroom is an online resource that can be
filtered to view the most current information and
opportunities related to drinking water security.
1^- Video Library can also be filtered to view ASDWA's
most recent webinars related to drinking water
security.
t
4
ASSOCIATION OF
" METROPOLITAN
| WATER AGENCIES
Association of
Metropolitan Water
Agencies (AMWA)
Works with federal agencies and the private sector
to address security and -sustainability challenges and
informs its members about policies, initiatives and
strategies to support resilient, sustainable utilities.
fj)| Insurance, Bond Ratings and Climate Risk
^ Primer explores how climate change is affecting the
Insurance industry's perception of water utilities' risk
portfolios and how utilities can respond.
[j)i Sustainability & Security Report is a monthly
members-only newsletter that includes security and
sustainability news relevant to the water sector.

-------
t
NRWA
National Rural Water
Association (NRWA)
The national and state rural water association
emergency response network provides personnel,
equipment and management services to the nation's
46,000 small and rural communities.
NRWA Emergency Response Training is designed
for small and rural water system personnel to assist
utilities in response to emergencies and includes
classroom and in-field training.
Workforce Resiliency: NRWA Apprenticeship
Program certifies water worker proficiency with
an industry-led, nationally recognized, federally
sanctioned credential with 4,000 hours of on-the-
job training and 280 hours of classroom instruction.
Cvber Security Data Breach Insurance is an
innovative and unique service designed to protect
the customers of utilities that have suffered a
cybersecurity data breach.
NfllDC
National Association
of Water Companies
National Association of
Water Companies (NAWC)
To effectively convey the leadership, proven compliance
record and performance of regulated water and
wastewater utilities in preparedness, resilience and
security-related standards.
The NAWC Cybersecurity Symposium brings
industry, regulators and federal partners together
to discuss emerging threats, best practices and
innovative solutions in the complex cybersecurity
landscape.
The NAWC Safety, Security & Environmental
Committee is an essential mechanism for educating
regulated utilities about the development and
implementation of forward-thinking methods to
advance resilience.
The NAWC Safety/Security Survey measures
the performance of regulated utilities against key
safety and security metrics and allows for voluntary
benchmarking.
P
National Association
of Regulatory Utility
Commissioners (NARUC)
NARUC members regulate investor-owned water
utilities services, working with DHS and others on
cyber, infrastructure and interdependency issues.
Critical Infrastructure Security & Resiliency:
Resiliency Through a Black Sky Event provides
resources focused on water utility response to a
Black Sky event.
Resilience in Regulated Utilities is a paper that
serves as a conversation-starter for policy-makers
working throughout the utility sectors - particularly
State commissions surrounding investments in
utility resilience.
m WaterlSAC Presentation to NARUC on
Maintaining Security of our Water Utilities.
UC/4P Rural Community Assistance
Jlr V !V Partnership (RCAP)
A national network of non-profit partners assisting rural
and tribal communities with access to safe drinking
water; sanitary wastewater; economic development and
technical, financial and managerial capacity to improve
quality of life.
E-learning training modules and in-person
training educate utilities on topics including
Compliance with AWIA, Security Practices, Risk and
Resilience, Emergency Planning and Cybersecurity.
Technical Assistance in addressing risk and
resilience assessments and emergency response
plans, maintaining secure water infrastructure and
minimizing service interruptions.
[j)j Emergency Response Planning Guide for Public
u Drinking Water Systems.
£

-------
IHI^f Water Environment
^VWtJI Federation (WEF)
Connects and enriches the expertise of water
professionals, increases the awareness of the impact and
value of water and provides a platform for water sector
innovation.
Qi Emergency Planning. Response and Recovery
U e-book helps utilities develop an emergency
response plan to recover from events such as
infrastructure failure, natural disasters and man-
made incidents.
Ijl| Safety. Health and Security in Wastewater
U Systems serves as an injury-reduction tool,
providing procedures and guidelines for creating
programs and ensuring the ultimate safety of
employees,
^ AccessWater.org is a library for online technical
content including proceedings from WEFTEC and
WEF Specialty Conferences, publications, e-books,
technical reports, fact sheets and more.
Sk v	Association of Public Health
^ p H |_ Laboratories (APHL)
Strengthens laboratory systems serving the public's
health in the United States and globally.
[jji A Freshwater Algal Toxin Guide for Public
U Health Laboratories provides resources for
environmental public health laboratories considering
implementation of freshwater algal toxin testing.
[jji Private Well Sampling and Testing - A Guide For
U Public Health Laboratories provides information
on private well testing and protection measures
along with federal, state and local resources for well
owners and laboratories.
6 THE
Research The Water Research
FOUNDATION Foundation (WRF)
Advancing the science of water to improve the quality
of life.
(flj WRF Synthesis Report on Resilience Topic.
[jji WRF Project 4519 - Business Continuity Plans for
U Water Utilities.
[jji WRF Project 4842 - Enhancement of Resilience to
Extreme Weather and Climate Events: Proactive
Flood Management.
This document was created in collaboration with EPA's partners who are
working to build a more secure and resilient water sector.
To learn more about LPA's role in water sector resilience,
visit www.eDa.qov/waterresilience.
Office of Water (4608-T) EPA817-F-20002 March 2Q20
4

-------