2024-214 - Laserfiche WebLink

Home Browse Search

Exhibit A AARCADIS Malevolent Threat Guidance, cybersecurity tool and guidance, and USEPA Large System ERP template. In recent months, the USEPA has prioritized enforcement of all aspects of a compliant RRA and ERP, including onsite inspections of documents and mitigation measure progress and tracking. As part of this project, Arcadis will ensure the Department's RRA and ERP incorporate new and existing elements in detail as part of a robust program to ensure USEPA compliance and inspection success. In addition, as the project progresses, Arcadis will note and convey recommended mitigation measures, including those that are inexpensive and can be completed by the Department prior to completion of RRA risk estimates, that can either reduce risks and/or increase resilience. Arcadis proposes to complete this project as outlined in the tasks below. Scope of Work Task 1- Project Management and Kickoff Meeting Project management effort includes Arcadis team staffing, health & safety plan, project management plan, invoicing, progress reports, budget control, and schedule management. The Arcadis team will issue monthly invoices with progress and schedule reports in accordance with the terms of the Agreement for the duration of the project. The Arcadis team will schedule and facilitate up to fourteen, one-hour virtual monthly project status meetings with the Department. Meeting summaries will be issued after each meeting, documenting progress, discussions and decisions, next steps, and action items. Arcadis will conduct a one-hour kickoff meeting via Microsoft Teams within two weeks from notice to proceed (NTP) to review project scope, schedule, key coordination requirements with the Department and associated stakeholders, and next steps. Arcadis understands and recognizes the importance of maintaining a strict level of confidentiality in these services for development of the RRA and ERP. We will implement the necessary project management controls, such as secure data/information storage/transfer protocols to staff acknowledgement of confidentiality requirements. Deliverables: • Monthly Invoices • Monthly Progress and Schedule Reports • Fourteen Project Status Meeting Summaries • Detailed baseline project schedule Gnatt Chart • Kickoff Meeting PowerPoint Slides Task 2 - Risk and Resilience Assessment Task 2.1 — J100 Steps, Gap Analysis, and Data Needs Workshop Arcadis will facilitate an in-person/remote hybrid, three-hour RRA Gap Analysis and Data Needs Workshop in collaboration with Department staff and select stakeholders. A preliminary list of needs required to complete the review and update (including new elements, hazard types, and mitigation measures based on updated methodology and guidelines) of the RRA will be provided to the Department prior to this workshop. The Gap Analysis and Data Needs Workshop will be designed to accomplish the following: www.arcadis.com