Specifications include, but are not limited to: The following requirements are noted in the AWIA Section to be included in the RRA: • The risk to the system from malevolent acts and natural hazards. • The resilience of the pipes and constructed conveyances, physical barriers, source water, water collection and intake, pretreatment, treatment, storage and distribution facilities, electronic, computer, or other automated systems (including the [cyber] security of such systems) that are utilized. • The monitoring practices of the system. • The financial infrastructure of the system. • The use, storage, or handling of various chemicals by the system. • The operation and maintenance of the system • Capital and operational needs for risk and resilience management for the system.