AWWA Risk Assessment and Mitigation 2

Question 1

Which framework is most commonly used by water utilities to assess and prioritize security risks?

Accepted Answer

AWWA Risk and Resilience Management standard (ANSI/AWWA J100)

Answer

ISO 9001 Quality Management

Answer

OSHA 1910.119 Process Safety

Answer

EPA RCRA Hazardous Waste Rules

Question 2

In a consequence analysis for a water system attack, which outcome is ranked MOST severe?

Accepted Answer

Public health impact causing mass casualties

Answer

Loss of revenue for one billing cycle

Answer

Increased customer complaints

Answer

Minor equipment damage under $10,000

Question 3

What is the purpose of a Vulnerability Assessment (VA) under America's Water Infrastructure Act (AWIA) 2018?

Accepted Answer

To identify and evaluate vulnerabilities and resilience of the water system

Answer

To certify operator training hours

Answer

To audit financial records of the utility

Answer

To establish water quality monitoring schedules

Question 4

A water utility identifies that its SCADA system uses default vendor passwords. This is classified as what type of risk factor?

Accepted Answer

Vulnerability

Answer

Natural hazard

Answer

Residual risk

Answer

Threat agent

Question 5

When evaluating likelihood of a threat scenario, which factor primarily drives the probability estimate for an intentional attack?

Accepted Answer

Adversary capability and intent

Answer

Rainfall patterns in the service area

Answer

Pipe age and material

Answer

Treatment chemical costs

Question 6

Which mitigation measure best addresses the risk of unauthorized physical access to a water treatment facility?

Accepted Answer

Implementing layered perimeter security with access control systems

Answer

Installing advanced oxidation treatment

Answer

Increasing chemical dosing redundancy

Answer

Expanding the distribution pressure zone

Question 7

Under AWIA 2018, how frequently must community water systems serving more than 50,000 people certify completion of their updated risk and resilience assessments?

Accepted Answer

Every 5 years

Answer

Every year

Answer

Every 3 years

Answer

Every 10 years