Agmt20 AARC Consultants LLC - Laserfiche WebLink

Browse Search

Risk = Consequences x Vulnerability x Threat Likelihood. The Resilience Analysis shall be performed to calculate how resilient the utility is systemically and how resilient select assets are to specified threats. 1) Asset CharactBYlzatien i---4 What aea.ta do t have andwhich are critical? 2) Throat Characterization " Whatthreets andhazards should i .anslder? S) Consequence AnalysisI'. What JI -PP --a to my -seats its thneat.r hazard. h, I—� Much money lost, how many Civets last, how, many R) VCi7.,.nerabflity Analysis _... whet are my yumarannhisa that wavid auaw, a. threat or hazard to oadse these cansaquences? m - 5) 'threat Analysis What is the likelihood that a terrorist, natural hazard,. or dapantlency/proximity hazard wall strike my facility? Risk/Resilience Ce AnalysFs What is my risk and mail[ enc.? Risk=Gonsaguanc. x. Vulnerability x. Threat Likelihood Resilience = saryic¢ Outa9. Vumembuity x x Threat Likeli{good T) Risk/Resilience Management What options do 1 have to reduce .risks and Increase resilience? How much will each benefit in reduced risks and mcreased resilience? How much will it cost? What is the benefit -cast ratio ar my options? lo -Deliverables: List of Critical Assets; Threat -Asset Workshop; Consequence - Vulnerability Workshop; Management Out -Briefing. 1_3 — Perform Risk and Resilience Assessment The RRA shall address all elements required by the AWIA, including: Risk to the system from malevolent acts, including physical and cyber intrusion. Risk to the system from natural hazards. Dependency hazards, including utility interruptions (power outages, communications outages), supply chain, employee staffing issues (illness, strike), customers, transportation, proximity, etc. • Risk to the system from unintentional . human -caused risks, (hazardous chemical spills, incorrect system - operation, network security gaps or failures, critical component failure)' • The resilience of the SCADA system and all automated systems ,(including cyber security). REV: 06-04-2020 MI • Resilience of the pipes and constructed conveyances, physical barriers, source water, water collection and intake, pretreatment, treatment, storage and distribution facilities, electronic, computer, or other automated systems (including system security). • Monitoring practices of the potable water system. • Financial infrastructure assessment. • The use, storage, or handling of various chemicals by the system. • Operation and maintenance of the systems. • Sufficiency of Monitoring practices. ATTY/AGR.2020.088/AARC Consultants, LLC (Page 16 of 20)