Presented At Southeast Chapter of TAWWA

August Meeting08/21/03

ByBuck Henderson

ManagerPublic Drinking Water Section

Water Supply Division

2002 Bioterrorism Act (Public Law 107-188)

< VA’s for CWS >3,300 population ServedÍ Between 50,000 & <100,000 due 12/31/03Í Between 3,300 & <50,000 due 06/30/04 * Note: ERPs are due 6 months after submittal of VAs

< FOIA Protection

< Increased Penalties

Texas HB 9

< State Protection from open records & openmeetings for security sensitive information

< Protection of VAs, ERPs, security systems& location of security cameras

< Developed a Critical InfrastructureProtection (CIP) Council to advise theGovernor

Critical Infrastructure Protection Council

<Dept of Agriculture<Office of Att. General<General Land Office<Public Utility Commission<TCEQ<Tx Dept of Health <Dept of Information Services<Dept of Public Safety<Division of Emergency Management<Tx National Guard<Railroad Commission<Tx Strategic Military Planning Commission<Tx Dept of Transportation

Critical Infrastructure Protection CouncilDuties

<Develop a statewide CIP Strategy <Develop an annual report to the Governor to:Í Update progress on CIP StrategyÍ Provide status & funding of state security

programsÍ Recommend actions to reduce threats to

Homeland SecurityÍ Recommend ways to improve alert, response

and recovery capabilities of state & localauthorities

A “Vulnerability Assessment” (VA) is an evaluationof a water system that identifies the system’s security

weaknesses and focuses on possible threats to itsability to provide safe and adequate drinking water.

"Security Vulnerability Self Assessment Guide ForSmall Drinking Water Systems Serving Populations

Between 3,300 and 10,000" - (Handout Outline)

TCEQ Home Web site :http://www.tceq.state.tx.us/AC/comm_exec/homelands

ecurity.html#water

A Vulnerability Assessment addresses risksfor all components of a Water System

<Wellhead or Surface Water Intake<Treatment Plant<Storage Tank(s)<Pumps<Distribution System

Six Common Elements of a VulnerabilityAssessment

<Description of the Water System

< Identification & prioritization of possible emergencysituations

<Determination of Critical Components that might besubject to attack

<Assessments of the Likelihood of such an attack

<Evaluation of existing response measures

<Analysis of current risk & development of a prioritizedplan for risk reduction

An “Emergency Response Plan” (ERP) is a wellthought-out series of planned actions designed to

allow operators to effectively respond to natural andman-made emergencies.

Events That May Trigger A Response

< Security Breach < Direct Utility Notification/Threat< Media Notification< Law Enforcement/National Alert< Early Warning System< Consumer Complaint< Public Health Notification

Who To Contact For A Possible Event

<InternalÍ ERPÍ Communication Tree <ExternalÍ Local Law Enforcement (911) & ERsÍ TCEQ Region Office (24-hour Hotline # 1-800-255-3924)Í Civic Government<Incident CommandÍ Criminal InvestigationÍ Public Health InvestigationÍ Environmental Response & Remediation

Who Determines Threat Credibility ?

< Role of Law Enforcement

< Role of The Utility

< Role of The TCEQ PDW Program

< Role of the State Health Department

< Role of Local & Other State Governments

Immediate Operational Response

< Isolation & Containment

< Backflow / Purging

< Elevated Disinfection

Contengencies For Public HealthResponse

< Alternate Water Supply

< Bottled Water

< Fire Protection

< Sanitation

Information Used For A ThreatAssessment

<Previous security events @ the utility<National trends for security events (ISAC)<Details of the circumstances that triggered the

event<Warnings & Alerts<Intelligence Information<National/Sector/DEM Threat Level<Site Characterization<Field Screening Results<Analytical Results<Distribution System Modeling<Additional Resources

Site Characterization

The process of collecting information from the site ofa suspected contamination event at a DW System

<Site Investigation<Field Safety Screening<Rapid Field Water Testing<Sample Collection<Maintain Crime Scene Integrity Í Avoid disturbing physical evidence<Photos/videos may likely be helpful

General Evidence of PotentialContamination

<Discarded gloves, masks, goggles & protectiveouterwear

<Discarded equipment - tubing, hoses, pumps,sprayers, etc.

<Unusual empty containers (caution !)

<Unusual residual material around the site-powders, granules, oily liquids, metallic debris,etc. (caution !)

Signs of Possible ChemicalContamination

<Unexplained dead/sick wildlife<Unusual dead, discolored or withered vegetation<Oily liquid on surfaces or oily film on water

surface<Unusual odors Í Almonds, peach, fruity/flowery,

sharp/pungent, garlic/horseradish, sulfur,new mown hay, irritating

<Unexplained low lying fog

Typical Public Health ResponseMeasures

< Boil Water Advisory

< Don’t Drink Advisory

< Don’t Use Advisory

< Seek Medical Attention

Who Is Involved In RemediationEfforts ?

< Role of The Utility

< Role of The TCEQ

< Role of Remediation Teams

< Role of the State Health Department

Remediation, Disinfection &Decontamination

<Characterization of Contaminated Area

<Containment of Contaminated Water

<Treatment, Disinfection & Decontamination

<Disposal of Decontamination Residuals

<Return to Normal Operation

How Can A Water System Prepare ?

< Conduct a VA< Develop an ERP < Develop Response Guidelines< Establish & Maintain a Communication

Tree< Familiarize First Responders to your WS< Training & Desk/Field exercises< Enhance Physical Security< Implement An Early Warning System

Effective Communication WithStakeholders

<Let Public know you have Identified yourweaknesses thru VAs & ERPsÍ But do not provide details of weaknesses

and corrective actions you will take<Being too free with your system’s security

information is a vulnerability itself<Your goal should be to provide enough

information so the public is reassured & keyplayers are prepared, but limit access to sensitiveinfo by the “need to know” rule

VA & ERP Communication Targets

< Internal Staff (most important)< State Drinking Water Agencies< First Responders< Priority Customers & community

Organizations< General customers< Others (Public Health Sector & other

systems)

Common Questions

< Who performs/pays for responsesampling?

< Who performs/pays for analyses of watersamples suspected of contamination?

< Who determines what to test for?

“He is best secure from dangers who is on hisguard even when he seems safe” -Syrus Publilius