VSATTM A Software Product For Vulnerability Assessment and Security Planning for Water

1
VSATTM A Software Product For Vulnerability
Assessment and Security Planning for Water
Wastewater Utilities

• June, 2003

2
What Is VSATTM?
Designed by security experts, VSATTM is now the
benchmark in the water and wastewater utility
industry to assess vulnerability and plan for
security improvements

• Customized risk- and cost-managed security
  planning software for water and wastewater
  utilities
• Based on qualitative risk assessment techniques
• Scalable to accommodate any
  size utility
• Complete with data and reference
  libraries
• Documents all assumptions and decisions
• Standard and customized report generation

3
Open-Architecture Interface
VSATTM is a flexible tool that organizes,
analyzes, and presents complex information in
easy-to-understand formats

• Uses standard asset templates that can be
  customized to your water, wastewater, or combined
  utility
• Interfaces with Maximo and other asset databases
• Default or user-defined risk levels
  and definitions
• Supports wide range of analytical
  and decision techniques
• Color-coded user interface that
  tracks and displays progress

4
VSATTMs Analytical Core
VSATTM follows an intuitive, 11-step process
leading to management choices that reduce risks
from design-basis threats
5
VSATTMs Primary Interface Three Areas of
Operation
6
Asset Mapping
VSATTM templates help managers customize asset
maps that underpin downstream analyses
Site Raw Sewage Pumping Headworks Primary
Treatment Biological Treatment Advanced
Treatment Biosolids Management Control
Room Laboratory Equipment Management Reclaimed
Water System Disinfection Outfall
Chemical Storage Electrical Instrumentation Mechan
ical Structures
Collection System Treatment Plant Administration
7
VSATTMs Asset Hierarchy
8
Threat Assessment
VSATTM leads management through a threat
hierarchy to identify those natural and man-made
threats most significant to each utility
9
VSATTMs Threat Hierarchy
10
Identifying Criticality of Assets
VSATTM helps you identify business-critical
assets and single points of failure that could
take you down or help you recover
Failure of Mission Significant Loss of
Life Massive, Irreversible Environmental
Damage Widespread Destruction of Property Serious
Erosion of Community Well-Being
11
VSATTMs
Criticality Evaluation Table
12
Countermeasures to Reduce Risk
VSATTM provides suggestions to guide you through
selection of countermeasures to strengthen
security
Procedural Changes Communication Plans Response
Plans Linkage to Local Law Enforcement,
Others Detection Delay Systems IT
Security Training Testing
People, Processes Technology
IN THAT ORDER!
To Reduce Risk Either by Reducing Consequences or
by Reducing Vulnerability
13
Risk and Cost Screening of Potential
Countermeasures
VSATTM guides managers through alternative
decision processes to reduce risk while balancing
capital and operating budgets
14
VSATTMs Countermeasure Library
15
Assessing Vulnerability
VSATTM gives you several tools to assess the
vulnerability of your most critical assets to
design basis threats
16
VSATTMs Vulnerability
Decision Tool
17
VSATTM Tracks Updates
Automatically
Updated Results
18
Formulating Your
Security Improvement Plan
VSAT leads you through a structured plan of risk-
and cost-managed capital investments, operating
procedures, personnel assignments, communications
protocols, and other activities to ensure utility

• Readiness - What do we need to do to be prepared
  for human and natural extreme events?
• Response - What do we need to do to respond to
  human or natural extreme events, should they
  occur?
• Recovery - What do we need to do to restore
  utility operations to normal after response
  actions are complete?

19
VSATTMs Cost / Risk Analysis
Histograms of results
20
Comparison of Four
Improvement Scenarios
21
Cost and Risk Reduced Over Four-Year
Implementation
22
VSAT Project Activities vs. EPA Guidance for
Water VAs
1January 3, 2003 Memo
23
Contact Us
Paula Dannenfeldt 202-833-4654 pdannenfeldt_at_amsa-c
leanwater.org
Ken Rubin 202-442-2377 Ken.Rubin_at_PAConsulting.com
Dan Rees 253-852-9070 DRees_at_Scientech.com