the path towards security and resilience in the water sector
TRANSCRIPT
![Page 1: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/1.jpg)
The Path towards Security and Resilience in the Water Sector
Perry Gayle, PhD, PE, LEED APNC Water Business Line Leader
October 18, 2016
![Page 2: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/2.jpg)
2
Agenda
–Historical perspective of security and resilience in the Water Sector
–Evolution of risk assessment methodologies and guidance
–Trends in the industry
–Threats and hazards
–Attributes of a secure and resilient water system
–Path forward
![Page 3: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/3.jpg)
3
Bioterrorism Act of 2002
–Amendment to the Safe Drinking Water Act
–Developed in response to 9/11 attacks
–Required water utilities that served greater than 3,300 customers to:• Perform water vulnerability assessments (VAs)
• Submit VAs to EPA
• Develop emergency response plans (ERPs)
–Provided funding to achieve compliance
![Page 4: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/4.jpg)
4
Evolution of Water Sector Guidance
– American Water Works Association (AWWA), “Emergency Planning for Water Utilities,” Manual of Water Supply Practices M-19, Third Edition, 1994 and Fourth Edition, 2001
– Risk Assessment Methodology for Water (RAM-W), 2002
– Vulnerability Self Assessment Tool (VSAT), 2004/2007/2014
– Risk Analysis and Management for Critical Asset Protection (RAMCAP) J100 Standard for Risk and Resilience Management of Water and Wastewater Systems, July 2010
![Page 5: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/5.jpg)
5
J100 RAMCAP Methodology
– Developed by AWWA and ASME Innovative Technologies Institute
– Adopted as a Standard byANSI/ASME-ITI/AWWA in 2010
– Takes an all-hazards approach
– Semi-quantitative
– Intended to allow comparisons of risk across critical infrastructure sectors
– R = C*V*T
• R = Risk ($)
• C = Consequence ($)
• V = Vulnerability
• T = Threat likelihood
![Page 6: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/6.jpg)
6
J100 RAMCAP Methodology
– Identify critical assets
– Select appropriate reference threats
– Calculate consequences for each threat-asset pair
– Estimate effectiveness of existing mitigation measures
– Calculate threat likelihood
– Calculate baseline risk
– Apply mitigation measures and re-calculate risk
![Page 7: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/7.jpg)
7
Evolution of All-Hazards Perspective
–Strong security / terrorism focus after 9/11
–Evolution to all-hazards perspective after Hurricane Katrina and Superstorm Sandy• Natural hazards
• Malicious threats
• Dependency hazards
• Proximity hazards
–All-hazards concept leads to “Resilience”
![Page 8: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/8.jpg)
8
Resilience
–The ability to adapt to changing conditions and withstand or rapidly recover from disruptive events
–Elements of resilience include:• Preparedness
• Mitigation
• Response
• Recovery
–Must consider interdependencies
![Page 9: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/9.jpg)
9
Threats and Hazards
–Natural
–Malicious
–Dependency
–Proximity
–Degraded infrastructure
![Page 10: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/10.jpg)
10
Natural Hazards
–Climate change• Sea level rise
• Changes in flood recurrence intervals
• Drought
• Extreme weather events
![Page 11: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/11.jpg)
11
Extreme Weather Events
–October 2015, Columbia, SC
![Page 12: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/12.jpg)
12
Malicious Threats
–Cyber
–Intentional contamination
–Insider threats
295 reported cyber incidents
involving critical infrastructure
in the United States in 2015
![Page 13: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/13.jpg)
13
Dependency Hazards
–Electrical power
–Chemical suppliers
–Communication
–Transportation
![Page 14: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/14.jpg)
14
Proximity Hazards
–Jan 2014, Charleston, WV
![Page 15: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/15.jpg)
15
Degraded Infrastructure
– Over $1trillion dollars of degraded water and wastewater infrastructure in the US
2013 ASCE Report Card for America’s Infrastructure
![Page 16: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/16.jpg)
16
Attributes of Secure and Resilient PWSs
– Culture
– Leadership
– Engagement
– Continuous improvement
![Page 17: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/17.jpg)
17
Attributes of Secure and Resilient PWSs
– Reliable source
– Asset management program
– Redundancy
![Page 18: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/18.jpg)
18
Attributes of Secure and Resilient PWSs
– Recently updated assessments and plans
• Vulnerability assessments
• Emergency response plans
• Business continuity plans
• Cyber disaster response plans
• Security design standards
– Understands the nature of evolving threats and hazards
![Page 19: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/19.jpg)
19
Attributes of Secure and Resilient PWSs
– Critical customer program
– Uses NIMS and ICS
– Participates in mutual aid programs – WARN
– Conducts training and exercises
![Page 20: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/20.jpg)
20
Path Forward
– The path to security and resilience in the Water Sector is a journey, not a destination
– Threats and hazards continue to evolve
– New guidance and tools are continually being developed by AWWA, EPA, DHS, ICS-CERT
– Water Sector must be agile to adapt to these changes
– Water systems should strive for continuous improvement in a phased manner
– Critical customers must understand the security and resiliency of their suppliers and plan accordingly
![Page 21: The Path towards Security and Resilience in the Water Sector](https://reader034.vdocuments.us/reader034/viewer/2022042117/6257ac5d4c9d20490b7083f1/html5/thumbnails/21.jpg)
Thank You
Perry Gayle, PhD, PE, LEED APNC Water Business Line Leader
October 18, 2016