AWIA Risk and Resilience Assessment: Introduction to VSAT ...
41
AWIA Risk and Resilience Assessment: Introduction to VSAT 2.0 and Risk Assessments
Transcript of AWIA Risk and Resilience Assessment: Introduction to VSAT ...
AWIA Risk and Resilience Assessment: Introduction to VSAT 2.0 and Risk Assessments
Covering the Basics• Discuss the importance of conducting a
risk assessment
• Tools to assist in the completion of a Risk and Resilience assessment
• Facilitating a risk assessment at your utility
Risk Defined
Risk = Threat x Vulnerability x Consequences
Threat – likelihood or frequency that the incident will occur over a specified period of time, typically 1 year.
Risk Defined
Risk = Threat x Vulnerability x Consequences
Vulnerability - The conditional probability that a specific threat, given that it occurs, will cause the specific estimated consequences to the asset.
For malevolent threats, it may be interpreted as the likelihood of the an adversary’s success.
Risk Defined
Consequences - human, financial and property losses, and lifeline service interruptions for the immediate, short- and long-term effects of a threat on an asset (threat-asset pair).
These effects include losses suffered by the owner of the asset and losses suffered by the community served by that asset, respectively.
Risk = Threat x Vulnerability x Consequences
Risk and Resilience Assessment
• Assesses threats, vulnerabilities, and consequences
Risk and Resilience Assessment
• Identify ways to reduce or eliminate risk
• Increase Resilience
Resilience
Risk
Risk and Resilience Assessment
• Determine: Are the remaining risks acceptable?
Risk and Resilience Assessment Getting Started
• Select your team • Knowledgeable stakeholders • Assessment Team Leader• Determine informational needs• Establish Assessment parameters
AWWA J-100 Standard Risk Assessment Process
Asset Characterization
Mission• Amount or Level of Service• External and Internal Standards
Evaluation
• Evaluate Major Assets focusing on those Critical to Mission• Evaluate Processes/Personnel• Review Utilities Asset Management Plan
Document
• Inventory of Critical Assets/Processes/Personnel• Development of Monetary Values for Critical Assets• Update Utility Asset Management Plan
Threat Characterization
Identify• Malevolent, Natural• Dependency, Proximity
Selection
• Reasonable Worst Case Scenario• Relevant to Area• Always Include Cybersecurity
Document
• Threat Determination Process• Decision
Consequence Analysis
Categories
• Fatalities, Serious Injuries• Serious Injuries• Loss of Utility Revenue: Repair Costs and Replacement Costs,
Liability• Regional Economic Impact from Loss of Service
Document
• Consequence Determination Process• Decision• Reasonable Worst Case Scenario
Vulnerability Analysis
Identify
• Physical Evaluation of Assets • Existing Countermeasure Evaluation
Document
• Method used in Vulnerability Determination Process
• Reasonable Worst Case Scenario
Select • Malevolent, Natural• Dependency, Proximity
Analyze
• Input from Law Enforcement, Federal, State and Local Agencies
• Historical Records
Document
• Methods – Target attractiveness, Proximity to high profile targets
• Decision
Threat Analysis
Select • Asset-Threat Pairs
Analyze
• Combine Values:• Consequences x Threats x Vulnerabilities
Document
• Asset-Threat Pairs selected• Values determined for Risk Equation
Risk and Resilience Analysis
Identify • Acceptable Level of Risk• Asset-Threat Pairs with Unacceptable Risk
Analyze
• Existing and Potential Countermeasures• Net-Benefit and Benefit Cost Ratio of
Improvements
Document
• Improvements in Risk• Process for Subsequent Review
Risk and Resilience Management
List of EPA Resources
https://www.epa.gov/waterresilience/
Start by Providing Basic Water System Information
Select the Asset groups that are determined to be critical in the initial screening.
Enter specific utility assets for the quantitative risk assessment.
Assign one of the threats to the asset to start the analysis.
Select the Flood event intensity.
Use of the WHEAT CALCULATOR is available in VSAT to assist in developing the consequence numbers for health and financial impacts.
The Countermeasure Analysis is optional for AWIA compliance but is recommended.
Program to Assist Risk & Resilience Examination (PARRE) © 2019 AEM Corporationhttps://www.aemcorp.com/riskassessments
Used to supplement the Risk and Resilience Assessment and Emergency Response Plan Development
• List of Common Utility Hazards and Associated Consequences
• Identify Specific Actions that will Eliminate or Mitigate Consequences
Elston Johnson, ChairTexas Section [email protected]
