Specifications include, but are not limited to: The selected and experienced and qualified firms will be tasked to affirm that the District has met the requirements of Section 2013 of the American Water Infrastructure Act (AWIA) S.3021 for completing a risk and resiliency assessment (RRA) and emergency response plan (ERP). The Consultant will assess existing District documents and will identify which existing reports meet the requirements of the AWIA S.3021 for RRAs and ERPs. Reports on District cybersecurity and physical security will remain confidential and the consultant will be required to interview District staff rather than review reports to ensure AWIA requirements are met through existing cybersecurity and security reports. The consultant will identify any gaps in meeting AWIA requirements to complete an RRA and ERP. As supplemental services, the consultant may perform specific risk and resiliency assessments, such as an assessment of malevolent acts; or may develop specific emergency response plans (ERPs), such as a water treatment plant ERP. The consultant will document how the District has met the Section 2013 of AWIA S.3021 requirements in a report and will draft a certification statement for the District to submit to the EPA documenting that the District has completed an RRA and ERP in accordance with the AWIA requirements.