Laserfiche WebLink
Reserve Policies <br />rsecurity Assessment of Operations <br />Networks <br />Finapclal AudltFln,>ngs_ <br />Gybersecurity;Assessment of SCADA Networks <br />Procurement PoliciesDivision <br />of Drinking Water Emergency Notification <br />Plan <br />During this period, Consultant shall elicit preliminary input from local emergency planning <br />agencies, as appropriate, to gain their perspectives on key issues for assessment. <br />Consultant shall interview City staff and conduct several meetings and workshops. This <br />task can be performed online if necessary, depending upon current COVID-19 social <br />distancing requirements. <br />In-person field assessments of City facilities shall observe health guidelines <br />implemented by the Centers for Disease Control and Prevention (CDC) and local <br />health departments. It is anticipated that a maximum of one City employee and a <br />maximum of two Consultant representatives, arriving in separate vehicles, shall attend <br />the assessments. Appropriate personal hygiene, social distancing, and other <br />recommendations of the City, the local health departments, and the CDC shall be <br />observed. <br />Consultant and City staff shall discuss and confirm, by consensus, critical assets and a <br />representative subset of assets selected for the system RRA. Consultant shall also lead <br />a Threat -Asset and Consequence -Vulnerability Workshop during this period as part of the <br />J100 process and will provide an Out -Brief to management to present a summary of <br />findings from the site visit and discuss next steps. Workshops shall be held remotely if <br />necessary. <br />Seven -Step RAMCAP Process <br />Consultant shall closely follow the American National Standards Institute (ANSI) and <br />American Water Works Association (AWWA) J100-10 (R13) Methodology for Risk <br />Analysis and Management for Critical Asset Protection (RAMCAP) Standard for Risk and <br />Resilience Management of Water and Wastewater Systems. The seven -step RAMCAP <br />process is designed to efficiently focus on what is most important for the utility to manage. <br />After initial steps to understand the utilities' assets, Consultant shall identify those most <br />critical, and characterize the threats faced by these most critical assets. The process shall <br />undertake a screening whereby the City and Consultant shall rank and screen the highest <br />priority threat -asset pairs to focus the RRA on the most significant threat -asset <br />combinations. <br />Consultant shall work with City to identify and quantify the worst reasonable <br />consequences that can be caused by specific threats on the assets identified and carried <br />forward for analysis. In the Vulnerability Analysis, Consultant shall evaluate how well each <br />critical asset (and its protective systems) withstands each specified threat. In the Threat <br />Analysis, Consultant shall perform an estimate of the likelihood (and frequency) that the <br />hazards, whether human or natural, will occur. The Risk Analysis shall be performed to <br />calculate the level of risk in clearly quantified terms where <br />REV: 06-04-2020 MI <br />ATTYIAGR.2020.0881AARC Consultants, LLC (Page 15 of 20) <br />