Specifications include, but are not limited to: Risk and Resilience Assessment: Conduct a Risk and Resilience Assessment by March 31, 2020 to assess the utility’s risks to and resilience of its system; develop and present a report of those findings including a plan for implementation; and assist the utility with the certification letter. The assessment should consider: o malevolent acts and natural hazards; o resilience of the pipes and constructed conveyances, physical barriers, source water, water collection and intake, pretreatment, treatment, storage and distribution facilities, electronic, computer, or other automated systems; o the monitoring practices of the system; o the financial infrastructure of the system (not as it relates to bond ratings but rather utility billing and accounts); o the use, storage, or handling of various chemicals by the system; o the operation and maintenance of the system; o an evaluation of capital and operational needs for risk and resilience management