WEST YOST ASSOCIATES (#2027082) - Laserfiche WebLink

Todd Yamello May 26, 2026 Page 3 Tool. West Yost will then compare findings to the 2020 AWIA cybersecurity assessment to identify progress made on previous controls, and persistent or unresolved gaps. • SCADA Management Plan Crosswalk – West Yost will perform a crosswalk between AWIA assessment findings and the cybersecurity-related gaps, recommendations, and projects identified in the SCADA Management Plan. This includes alignment with previously identified deficiencies such as access control, remote access security, monitoring, and policy development. • Prioritization and Planning Alignment – West Yost will evaluate the relative priority of identified gaps (e.g., AWIA Priority 1 and 2 controls) and map them to relevant standards development efforts and planned projects (e.g., P1-3 Remote Access, P1-4 OT Monitoring) to promote alignment with the broader SCADA program. • Technical Memorandum Preparation – West Yost will prepare a concise technical memorandum summarizing the crosswalk results, key findings, and recommended focus areas for subsequent tasks in this scope. Task 2 Assumptions • The City will provide the latest AWIA Cyber-RRA results and documentation from the 2020 assessment. • The SCADA Management Plan will be used as the baseline reference for previously identified cybersecurity gaps and recommendations. • This task is limited to evaluation and planning alignment and does not include implementation of cybersecurity improvements. Task 2 Deliverables • Technical Memorandum summarizing crosswalk between AWIA assessments, status of previously identified gaps and newly identified cybersecurity gaps Task 3. SCADA Standards Development The objective of this task is to review existing SCADA and control system documentation and develop formal Instrumentation and SCADA Standards to provide consistency and standardization across the City’s water, wastewater, storm drain, and recycled water systems. The standards will address instrumentation, SCADA hardware, PLC programming practices and standard objects, tagging conventions, graphical standards, alarm management, HMI database conventions, reporting, and version control. Work activities under this task include: • As-Built Documentation Review – West Yost will review existing control strategies, panel drawings, I/O lists, PLC programs, and related documentation to identify gaps and inconsistencies. Limited site verification will be conducted as needed. • Instrumentation Standards Development – West Yost will develop formal Instrumentation Standards to provide consistency in the selection, procurement, installation, and maintenance of field instrumentation. This will include review of representative existing field instrumentation, coordination with City staff to establish preferred manufacturers and acceptable alternatives for commonly used instrumentation (analyzers, flowmeters, level Docusign Envelope ID: C46F6467-48FC-8755-8247-09E863327CA7Docusign Envelope ID: A1F306CD-3D85-8219-8045-1E730ABF3862