Specifications include, but are not limited to: 1. Phase I: Update Assessment The Consultant shall conduct an updated Assessment of the System. The Assessment must comply with all of the requirements of America’s Water Infrastructure Act of 2018, 42 U.S.C.A. (United States Code Annotated) §300i-2. The Assessment must consider possible risks to SAWS and the System from malevolent acts and natural hazards, must assess the resilience of treatment and distribution infrastructure, as well as intakes pipes, pipelines and constructed conveyances, and source water, physical barriers, water collection and intake, pretreatment, treatment, storage and distribution facilities, electronic, computer, SCADA (Supervisory Control and Data Acquisition) and other automated systems (including the security of such systems), which are utilized in the System or by SAWS. The Assessment will include an assessment of SAWS’ monitoring practices, SAWS’ financial infrastructure, the use, storage, or handling of various chemicals used by SAWS, and the operation and maintenance of the System. The Assessment shall provide SAWS with a clear definition of risks, resulting from malevolent acts, natural causes, or cyber threats, which may disrupt SAWS’ ability to provide a safe and reliable supply of drinking water, or that otherwise present significant public health, or economic concerns to the community served bySAWS. The Assessment must be completed by February 28, 2025. No additional time for preparation of the Assessment will be allowed. 2. Phase II: Update an Emergency Response The Consultant will prepare and deliver to SAWS an updated ERP. The ERP must be delivered to SAWS not later than five (5) months after completion of the Assessment. No additional time for preparation of the ERP will be allowed. In addition, the Consultant will develop a Security Master Plan outlining the organization’s security strategies, goals, programs, and processes. The Security Master Plan must be delivered to SAWS not later than five (5) months after completion of the Assessment. The selected Consultant will utilize the Environmental Protect Agency’s Large Water System Emergency Response Plan Outline (refer to attachment I for plan outline). The ERP must comply with all of the requirements of America’s Water Infrastructure Act of 2018, 42 U.S.C.A. §300i-2. TheERP shall incorporate the findings of the Assessment and shall describe all risks to the System and/or SAWS and all impacts to the resiliency of the System that were identified in the Assessment. The ERP shall include strategies and resources to improve the resilience of the System, including physical security and cybersecurity of SAWS and the System, plans and procedures that can be implemented, and identification of equipment that can be utilized in the event of a malevolent act or natural hazard that threatens SAWS’ ability to deliver safe drinking water; actions, procedures, and equipment that can obviate or significantly lessen the impact of a malevolent act or natural hazard on the public health and safety and supply of drinking water provided by SAWS, including the development of alternative source water options, relocation of water intakes, and construction of flood protection barriers; and strategies that can be used to aid in the detection of malevolent acts or natural hazards that threaten the security or resilience of the System. 3. Phase III: Implementation After completion of the Assessment and the delivery of the ERP to SAWS, the Consultant shall assist SAWS in the implementation of the ERP and a Security Master Plan. The selected Consultant agrees to provide a signed non-disclosure Agreement to SAWS and the Consultant agrees that it, its employees, and any subcontractors will never discuss in any manner or disclose to any other by any means any of the content of the Assessment, the ERP, the nature or scope of Consultant’s work for SAWS, or the Consultant’s findings or recommendations as to the SAWS Security Program. The Consultant’s notes, written observations, or their written documents prepared or maintained for this project, the ERP and the Assessment, and any drafts of any of them will be the sole property of SAWS. All such documents and materials shall be delivered to SAWS upon request by SAWS. The selected Consultant will not retain any copies of any of these materials or documents in any form or media.