WEST YOST ASSOCIATES (#2026112) - Laserfiche WebLink

David Bruzzone June 5, 2025 Page 2 These AWWA standards represent risk and resilience management as well as emergency preparedness best practices for the Water Sector. Following these standards demonstrates due diligence. In addition to the AWWA standards, standards from outside the water industry will be considered, as appropriate, to provide a more comprehensive review. These standards include, but are not limited to: •Idaho National Laboratory’s Cyber-Informed Engineering Implementation Guide •EPA’s Climate Resilience Evaluation and Awareness Tool (CREAT) These standards are regularly updated. If a more recent version is available, the project team will use it to support project delivery. Workshops Stakeholder engagement is a key part of West Yost’s approach and is consistent with industry standards for building resilience. West Yost’s workshops are designed to be interactive and collaborative. They additionally balance the time demands on City staff with the need for their input. Workshops are integrated into the scope because they 1) educate stakeholders on the assessment process, 2) obtain consensus on key items such as critical assets and relevant threats/hazards, and 3) are a source of recommendations to management on what should change in the organization to reduce risk and increase resilience. The following workshops are included in the scope: •Workshop 1 – Cybersecurity Controls Assessment •Workshop 2 – RRA & RRMS Review •Virtual Workshop 3 – ERP Review In addition, the workshops provide the opportunity for staff to better understand AWIA requirements and the different types of risks to the City’s main water system. This will help continue to integrate resilience and emergency preparedness into the organizational culture and decision making. Changes From Prior Compliance/Related Efforts Since the City last completed AWIA compliance activities, numerous things have changed, including: 1.The AWWA standards have been updated, most prominently J100-21 and the associated Operational Guide. These updates change how the risks associated with specific threats and hazards are evaluated. 2.Changes to the EPA’s approach to ensuring AWIA compliance and consideration of climate change resilience. More specifically: a.The EPA is expected to exercise its audit authority under the Safe Drinking Water Act to confirm that actions meet the associated requirements. b.The EPA has released an internal policy that all compliance actions should explicitly account for climate change resilience. 3.Changes to our operating environment – Our understanding of the threats (e.g., cyber) and hazards (e.g., climate change) that are impacting utility operations around the U.S. are continuously evolving. 4.Changes to the City’s operations and staff – The City’s organizations are continuously evolving as infrastructure investments are made, staff leave, new staff join, and customer demands change. EXHIBIT A Docusign Envelope ID: 0F3360EC-0957-4BAE-961E-506A072901B6