Agmt25 AARC Consultants, LLC - Laserfiche WebLink

Browse Search

REV: 05-27-25 LF •A comprehensive evaluation based on NIST, NERC–CIP, DHS–CISA, and AWWA standards. •Identifies gaps in cybersecurity for: o IT/SCADA access controls o Network architecture and firewall vulnerabilities o Social engineering risks o Wireless/mobile communication and SCADA–enterprise network interactions. This assessment will provide actionable insights into cybersecurity weaknesses, offering mitigation strategies and prioritized recommendations to enhance the City’s cybersecurity resilience. •Utility Resilience Index (URI): Measure the reliability, redundancy, and adaptability of critical utilities, such as power, water, and communication systems. The Utility Resilience Index (URI), as part of the J100 Standard, will be used as a decision–support tool to assess resilience based on operational and financial indicators. 2.3 – Hold Review Meeting and Presentation Consultant shall evaluate potential threats (natural, human-made, and cyber-related), assess vulnerabilities, and determine the resilience of essential assets. The assessment covers physical security, cybersecurity, and utility resilience, providing a comprehensive understanding of risks. The assessment covers physical security, cybersecurity, and utility resilience, providing a comprehensive understanding of risks. It incorporates scenario-based analysis, stakeholder engagement, and compliance with industry regulations. The final RRA delivers actionable recommendations to enhance preparedness, response, and recovery capabilities, ensuring long-term operational continuity and resilience. Consultant shall conduct a review meeting to examine the draft RRA, ensuring alignment with objectives and stakeholder and City’s expectations. During the meeting, Consultant shall present an overview of the draft RRA. Participants will provide feedback, discuss concerns, and suggest improvements. 2.4 – Address Review Comments Consultant shall respond to comments, address questions and feedback, and make necessary revisions to refine the final product. This iterative approach enhances accuracy, clarity, and effectiveness, ensuring that all stakeholders and City’s input is considered before final approval. 2.5 – Finalize RRA Consultant shall develop a final RRA after incorporating City’s feedback, refining risk evaluations, and validating resilience strategies. This document will provide a comprehensive analysis of critical assets, potential threats, vulnerabilities, and mitigation ATTY/AGR.2025.124/AARC Consultants, LLC(RRA and Update to ERP 2025) (Page 13 of 20)