rss

WaterOperator.org Blog

Resources to Complete Your Risk & Resilience Assessment and Emergency Response Plan

Specify Alternate Text

Drinking water utilities should be aware of the risk and resilience assessment (RRA) and emergency response plan (ERP) requirements mandated by section 2013 of the America’s Water and Infrastructure Act (AWIA) of 2018. Under section 2013, community water systems (CWS) serving populations of 3,300 people or more are required to perform a risk assessment using the results to develop or update their ERP. The due date to certify the completion of these requirements is dependent on the population served by the system. If a CWS provides water to a consecutive system, they must include the population of the consecutive system in the total population served. 

Table1

*After submitting the RRA, the ERP must be submitted and certified within six months. Community water systems will be required to review and revise, as necessary, their RRA and ERP every five years after the initial certification dates. 

These new AWIA requirements amend section 1433 of the Safe Drinking Water Act (SDWA), originally created from the Bioterrorism Act of 2002. The Act focused on incidents of terrorism and required CWS’s serving more than 3,300 people to conduct a vulnerability assessment (VA) and develop an ERP. The new AWIA requirements place an emphasis on the risks of malevolent acts, natural disasters, and cybersecurity. Since the vulnerability assessments from the Bioterrorism Act are now more than 10 years old, AWIA approved the destruction of these assessments. Utilities that want their VA returned instead can submit a request letter to the EPA before the due date of their risk assessment.

To assist in meeting the new requirements, the EPA has developed several resources designed specifically for AWIA. Resources and tools are uploaded on this EPA web page as they become available. The risk and resilience assessment is the first requirement due under section 2013 and necessary to develop your ERP. The assessment must include six criteria. Following the assessment, the ERP must include four criteria in addition to any state requirements. In this blog we will provide information about these AWIA resources in addition to other documents that can be useful to complete your RRA and ERP. 

EPA's AWIA Resources:

Resiliency and Risk Assessment:

Emergency Response Plans:

Other Helpful Resources to Get Started:

Resiliency and Risk Assessment:

Emergency Response Plans:

To certify the completion of your RRA or ERP, the EPA has developed guidelines for certification submittals via their secure online portal, email, or mail. If your system needs any additional help to meet these requirements, the EPA will be hosting in-person and online training sessions for each region. If these document suggestions don’t meet your system needs, check out our document library to find a variety of resources on risk assessment and emergency response.