Laserfiche WebLink
v/ <br />MMoe. <br />V <br />V/ <br />MrA <br />Vulnerability Assessment and Emergency Response Plan SOQ page 14 <br />Eight major elements <br />and processes <br />FREESE AND <br />4. Assessment of the likelihood (qualitative prob- <br />ability) of such malevolent acts from defined <br />NICHOLS: <br />threat sources (e.g. terrorist, insider, determined <br />vandal, casual vandal, etc.) <br />5. Systematic site characterization of the water <br />HELPING YOU <br />system to include the collection of performance <br />data on: <br />• Important facilities, processes and assets <br />PROTECT YOUR <br />' Physical protection system features of deter- <br />rence, detection, delay and response <br />WATER SUPPLY <br />• Cyber protection system features <br />• . Security policies and procedures and compli- <br />ance with same <br />6. The approach to the VA is "performance- based," <br />meaning that it evaluates the risk to the water <br />system based on the effectiveness of the security <br />system against the specific malevolent acts <br />determined in the initial step. <br />7. The VA determines the most critical assets <br />(targets) in a water system, details their inter- <br />relationships within other assets in the system, <br />identifies the consequences of malevolent acts <br />that could be directed against them, and evalu- <br />ates the effectiveness of both existing and pro- <br />posed protection systems. <br />8. The VA identifies a system's vulnerabilities and <br />provides a prioritized plan for security upgrades, <br />modifications of operational procedures, and /or <br />Innovative approaches .. <br />policy changes to mitigate identified risks to <br />critical assets. The VA also provides a basis for <br />comparing the cost of protection against the risks <br />posed. <br />practical results <br />v/ <br />MMoe. <br />V <br />V/ <br />MrA <br />Vulnerability Assessment and Emergency Response Plan SOQ page 14 <br />