R2019-192 Resolution Approving an Agreement with CDM Smith for Professional Engineering Services for the Water Utility Long-Term Sustainability Plan, City Project 2018-34

Home Browse Search

Smith ■ Cyber threats In preparation for the workshop,CDM Smith will conduct an initial threat characterization to identify threats to the water system from a comprehensive hazards list of malicious acts and natural hazards from the J100 Appendix E guidance, EPA,and additional threats as identified by the Utility.The J100 guidance is selective in order to produce high net benefit options for reducing risk and improving resilience.During the initial asset characterization stage,the following will be performed: ■ Identification and evaluation of critical assets,mission-critical functions,and supporting infrastructure and evaluation if there have been changes to the system that warrant an update to the critical asset list. ■ Identification of the critical internal and external supporting infrastructure which will likely include the following: Operations&Maintenance, Monitoring Practices (new),and Financial Infrastructure (new).This includes identifying any existing protective countermeasures and mitigation measures/features. CDM Smith will then conduct the formal Risk and Resilience Assessment.This may be conducted within the GIS/asset management database where possible or as a desktop exercise within Microsoft Excel.The final product will include a report with an executive summary of the methods and results.This process will follow the RAMCAP method in the AWWA J100 guidance.The specific tasks to conduct the assessment are as follows: 1. Finalize the asset and threat characterizations based on the Utility's priorities and the findings from previous tasks to identify,rank,and record the Utility's critical assets.The goal of this is to determine the critical and high-consequence facilities/assets and the high threat-likelihoods.These determine the"threat-asset pairs"which are the focus of the risk and resilience assessment.CDM Smith will use input from the workshops (conducted as part of previous tasks) and data review to ensure that medium-consequence or likelihood threat-asset pairs are also included,as appropriate.The high-priority threat-asset pairs will move on to the consequence analysis,Vulnerability Assessment,and Threat Analysis stages described below. 2. In order to conduct the Consequence,Vulnerability,and Threat Calculations for high- priority threat-asset pairs,the following will be performed: ■ Consequence Analysis: Develop and refine consequence metrics or criteria(such as financial,casualties,loss of revenue,or regional economic impact).The RAMCAP methodology is used to define ranges of consequence and analyze based on the consequence metrics for each threat-asset following the RAMCAP process and are measured in dollars. ■ Vulnerability assessment: For each critical threat-asset pair the vulnerability is determined by estimating the likelihood of an occurrence to the"all-hazards"threat.The output of a vulnerability analysis to malevolent incidents is the likelihood of success of the adversary for each specified attack scenario on each threat-asset pair,given that the attack is carried out. The parallel concept for natural hazards is the likelihood that the hazard will produce the consequences already estimated,given that the hazard occurs.This is expressed in a 11 � Page