2003-200 - Laserfiche WebLink

Home Browse Search

TASK 2. 0 - CRITICAL FACILITIES IDENTIFICATION AND EVALUATION 2. 1 Facility Identification. CONSULTANT will work with IRCUD staff to identify the utility' s critical facilities. The facilities will include, but may not be limited to, the following: All Existing Wells Water Treatment Plants Ground and Elevated Storage Tanks Distribution System SCADA System Computer Networks 2 . 2 Prioritization of Facilities . CONSULTANT will evaluate and prioritize the facilities utilizing the pair-wise comparison methodology in accordance with RAM- WsM The pair- wise comparison will then be evaluated based on the goals established by CONSULTANT (Task 1 ) to develop a weighted score for each facility. Using this information, CONSULTANT will develop a table of ranked critical facilities . TASK 3. 0 - THREAT IDENTIFICATION AND ASSESSMENT 3 . 1 Threat Identification. CONSULTANT will conduct a threat workshop to consider three categories of threats - insider, outsider, and cyber. Threat levels will be established for insider, outsider, and cyber threats . This will determine the Design Basis Threat for the remainder of the analysis . 3 .2 Threat Assessment. The information produced in Task 3 . 1 will be assembled, and an assessment of the likelihood of that threat will be assessed . A table will be developed for each type of threat that provides historical information, motivation, tactics, numbers, equipment, weapons intelligence, technical skills, financial resources, and any other critical information concerning a potential threat. The assessment will include working with local law enforcement, state law enforcement, and federal agencies (if necessary) to evaluate: The history of threats to the facilities Capabilities of those involved Methods of attack Access to critical assets TASK 4.0 - FAULT TREE ANALYSIS OF CRITICAL ASSETS 4. 1 Fault Tree Analysis . CONSULTANT will conduct a fault tree analysis on IRCUD' s critical facilities, identified in Task 2, to determine the critical assets. The consequences of the undesirable events will be identified and CONSULTANT will develop a table of those consequences, ranked according to their impact on the mission statement objectives . The preliminary fault tree analysis will be reviewed with IRCUD in a one-day meeting to gain consensus on the most critical assets that need to be protected and numerical values in the consequence table. B-2 mh1244