Strengthening Cybersecurity for Your AWIA Risk and Resilience Assessment
The Environmental Protection Agency (EPA) has been auditing the Risk and Resilience Assessments and Emergency Response Plans of water systems across the United States. Due to the increased number of attacks on water utilities, cybersecurity is a key area being reviewed.
This is part of the process of making sure water systems are meeting requirements of the America’s Water Infrastructure Act (AWIA) of 2018, which is designed to keep water systems safe from natural and man-made disasters.
During an audit, EPA evaluators conduct a site walk-through and thorough document review, ask questions and provide suggestions.
Deadlines are approaching in 2025 and 2026 for systems of all sizes to recertify the Risk and Resilience Assessment (RRA) and Emergency Response Plan (ERP) they submitted in 2020-21. Small systems must certify both types of plans in 2026.
How Freese and Nichols Can Help
Whatever your system’s size, Freese and Nichols’ nationwide team of water and wastewater engineers can help complete updates to your RRA and ERP. We can support systems in planning solutions for needs highlighted by your risk assessment and help new or newly qualified systems create an RRA and ERP.
We’ve also assisted large water utilities to prepare for EPA audits and can help if an audit is scheduled for your system.
Our dedicated cybersecurity team can help in a variety of other ways:
- Conducting a SCADA cybersecurity assessment and gap analysis
- Developing customized improvements to address needs identified in the assessment
- Creating a customized Incident Response Plan, policies and procedures
- Conducting table-top exercises for staff
- Developing and implementing training and awareness materials
Learn more about our capabilities here: Helping Our Clients With AWIA Risk and Emergency Updates
Contact: Julie Huerta, julie.huerta@freese.com or Nick Claudio, nicholas.claudio@freese.com