AWWA Risk Assessment and Mitigation 4

Question 1

Which of the following is a key element REQUIRED to be included in an AWIA-compliant Emergency Response Plan?

Accepted Answer

Strategies and resources to improve resilience, including alternative water sources

Answer

AWIA 2018 requires ERPs to include strategies and resources to improve resilience and address identified vulnerabilities.

Question 2

What is the primary goal of threat analysis in the AWWA RAM-W methodology?

Accepted Answer

Identifying credible threats and characterizing adversary capabilities

Answer

Threat analysis identifies who might attack the system and what capabilities they possess, enabling realistic scenario development.

Question 3

A utility discovers that its online chlorine analyzer is reporting false readings due to a cyberattack. This incident is best categorized as:

Accepted Answer

A cyber-physical security incident

Answer

Manipulating physical control instruments through cyber means constitutes a cyber-physical attack, blending digital and operational impacts.

Question 4

Which mitigation strategy directly reduces the LIKELIHOOD of an insider threat at a water utility?

Accepted Answer

Implementing personnel security measures such as background checks and dual authorization

Answer

Background checks and dual authorization procedures reduce the probability that a malicious insider can act without detection or assistance.

Question 5

When should a water utility invoke its Emergency Response Plan?

Accepted Answer

When an event threatens the ability to deliver safe water or poses a public health risk

Answer

The ERP should be activated any time an event threatens safe water delivery or poses a significant public health risk, regardless of the cause.

(AWWA) American Water Works Association Practice Test