A Water Security Handbook: Planning for and Responding to Drinking Water Contamination Threats and Incidents

Water

Security Incidents

Threats Printed on Recycled Paper Note to Readers: The U.S. Environmental Protection Agency (EPA) prepared this guide to help you enhance the security of your water system. This document does not impose legally binding requirements on EPA, states, tribes, or the regulated community, and it may or may not apply to a particular situation, depending on the circumstances. EPA and state decision-makers retain the discretion to adopt approaches on a case-by- case basis that may differ from this guide where appropriate. Any decisions regarding a particular community water system should be made based on the applicable statutes and regulations. Therefore, interested parties are free to raise questions and objections about the appropriateness of the application of this guide to a particular situation, and EPA will consider whether the recommendations or interpretations in this guide are appropriate in that situation based on the law and regulations. EPA may change this guide in the future. To determine whether EPA has revised this guide or to obtain additional copies, contact the Safe Drinking Water Hotline at 1-800-426-4791 or visit the EPA’s Water Security website at www.epa.gov/watersecuritywww.epa.gov/watersecurity.

Water Security Handbook i Table of Contents

List of AcronymsAcronyms and AAbbreviationsbbreviations ...... v

Overview ...... 1 What is the Water Security Handbook? ...... 1 Why Is This Handbook Important? ...... 2 How Can This Handbook Help Me? ...... 2 Who Should Read This Handbook? ...... 3

1. Water Utility Planning Guide ...... 4 Introduction ...... 4 Why is Water Security Planning Important? ...... 4 What Are Contamination Threats and Contamination Incidents? ...... 4 Should We Be Concerned About Contamination Threats and Contamination Incidents? ...... 5 Is Intentional Contamination Possible or Probable? ...... 6 How Serious Could Intentional Water Contamination Be? ...... 6 What is Due Diligence? ...... 7 How Do I Prepare For A Contamination Threat or Incident? ...... 7

2. Contamination Threat Management Guide ...... 10 Introduction ...... 10 Roles and Responsibilities ...... 11 Federal Roles: The National Response Plan (NRP) ...... 11 Federal, State and Local Roles: The National Incident Management System (NIMS) ...... 12 Federal, State and Local Roles: The Incident Command System (ICS) ...... 12 Local Role: Incident Command at the Water Utility ...... 13 Federal, State and Local Roles: Unifi ed Command ...... 14 Your Role and Responsibilities ...... 15 A General Plan for Threat Response and Threat Management ...... 18 Step 1: Decide if the Threat is ‘Possible’ ...... 19 Step 2: Determine if the Threat is ‘Credible’ and Protect Public Health ...... 21 Step 3: ‘Confi rm’ the Threat ...... 23 Step 4: Remediate the Affected Water System ...... 24 Step 5: Recovery of the System ...... 25

ii Water Security Handbook 3. Site Characterization and Sampling Guide ...... 26 Introduction ...... 26 Investigating the Site ...... 26 Who Does the Site Characterization and Sampling? ...... 27 Ensuring Safety and Protection for Personnel ...... 27 What Does Site Characterization Involve? ...... 27 Initial Hazard Assessment Before Entering the Site ...... 28 Approaching the Site and Doing a Field Safety Screening ...... 29 Characterizing the Site ...... 30 Collecting Samples ...... 31 Exiting the Site ...... 31

4. Analytical Guide ...... 32 Introduction ...... 32 What Do I Need to Know About Laboratory Analyses? ...... 32 Safety Considerations for Water Utilities and Others ...... 33 Types of Labs and Analyses Performed ...... 33 Non-Utility Laboratories That Perform Chemical Analyses ...... 34 Non-Utility Laboratories That Perform Biological Analyses ...... 35 Obtaining High-Quality Lab Results ...... 35 Approaches to Analytical Screening For Unknown Contaminants ...... 36 Why Analytical Laboratories Should Plan for Threat Response ...... 38

5. Public Health Response Guide ...... 39 Introduction ...... 39 Response Planning for Protection of Public Health ...... 39 Step 1. Plan the Public Health Response Before a Threat Occurs ...... 39 Step 2. When a Threat or Incident Occurs, Determine the Public Health Consequences ...41 Step 3. Carry Out Operational Response Actions ...... 42 Step 4. Notify the Public ...... 43 Step 5. Provide an Alternate Water Supply for the Short Term ...... 44

Water Security Handbook iii 6. Remediation and Recovery Guide ...... 45 Introduction ...... 45 Who is Responsible? ...... 45 Remediation and Recovery ...... 46 Step 1. Find an Alternate Water Supply for the Long Term ...... 46 Step 2. Do a System Characterization and Feasibility Study ...... 46 Step 3. Do a Risk Assessment ...... 46 Step 4. Evaluate Remediation and Rehabilitation Alternatives ...... 46 Step 5. Choose the Right Remediation Technology ...... 47 Step 6. Design the Remediation ...... 47 Step 7. Do the Remediation ...... 47 Step 8. Do Post-Remediation Monitoring ...... 47 Step 9. Communicate With the Public to Restore Confi dence ...... 47 The Final Step – Full Recovery ...... 47

Final Thoughts ...... 48

Glossary of Terms ...... 49

Additional ResourcesResources ...... 54

List of Contacts for States,States, CommonwCommonwealths,ealths, and TTerritorieserritories ...... 58

List of EPAEPA RRegionalegional Contacts ...... 61

iv Water Security Handbook List of Acronyms and Abbreviations

ATSDR Agency for ToxicToxic SubstancesSubstances and DiseaseDisease RegistryRegistry CDC Centers for Disease Control and Prevention CWC Chemical Weapons Convention DHS U.S. Department of Homeland Security DOE U.S. Department of Energy EOC Emergency Operations Center EPA U.S. EnvironmentalEnvironmental ProtectionProtection Agency ERP Emergency Response Plan ETV Environmental Technology Verifi cation Program FBI Federal Bureau of Investigation FEMA FederalFederal EmergencyEmergency ManagementManagement Agency FOIA Freedom of Information Act FRMAC Federal Radiological Monitoring and Assessment Center Handbook this Water Security Handbook HazMat HazardousHazardous materials specialists, including specialists fromfrom governmentgovernment agenciesagencies andand private contractors HHS U.S. Department of Health and Human Services HSIN-CS Homeland Security Information Network for Critical Sectors ICS Incident Command System LEPC Local Emergency Planning Committee LRN Laboratory Response Network MOU Memorandum of Understanding NEMI National Environmental Methods Index NEMI-CBR National Environmental Methods Index for Chemical, Biological and Radiological Contaminants NHSRC National Homeland Security Research Center NIC National Incident Management System (NIMS) Integration Center NIH National Institutes of Health NIMS National Incident Management System NRC National Response Center NRP National Response Plan NRT National Response Team QA/QC Quality Assurance and Quality Control Toolbox Response Protocol Toolbox: Planning For and Responding to Drinking Water Contamination Threats and Incidents TSWG Technical Support Working Group TTEP Technology Testing and Evaluation Program USAMRIID U.S. Army Medical Research Institute for Infectious Diseases USCG United States Coast Guard WaterISAC Water Information Sharing and Analysis Center WaterSC Water Security Channel WCIT Water Contaminant Information Tool WMD Weapons of Mass Destruction WUERM Water Utility Emergency Response Manager

Water Security Handbook v

planning efforts. planning efforts. This Handbook describesthe outyour emergencyresponse and and carry many formsandcheckliststohelpyou organize Guidelines Contamination Threats andIncidents: Response Planning For andResponding toDrinking Water companion toEPA’s The Handbook isalsointendedtobea Protocol Toolbox Threats andIncidents and Responding toDrinking Water Contamination entitled summarizes thecomprehensive document simplifito callsforashort, ed documentthat EPA alsowrote thisHandbook inresponse water system. and contaminationincidentsinvolving your water systemandrespond effectively tothreats help you, thewaterutilityofficial, protect your Handbook is criticallyimportant. This A What istheWater SecurityHandbook? Overview 6 5 4 3 Module 2 1 Toolbox Chapter Handbook in thisHandbook correspond tomodulesinthe Toolbox: You canusethisHandbook asaguidetothe water securityplanningandthreatthr response s awaterutilitymanager,manager your role in Response Protocol Toolbox: Planning For wasdevelopeddev by theU.S.EPA to . The ). Response Guidelines eloped b (alsoknownkno asthe Response Protocol Toolbox: 6.Remediation andRecovery Guide 5.Public Health Response Guide 4.AnalyticalGuide 3.Site CharacterizationandSampling Guide 2.Contamination Threat Management Guide 1. Water Utility Planning Guide y theU.S.EP Water Security , y wn asthe our r providespr eat r ole in o Water Security Handbook vides esponse A to Response Response Protocol Toolbox, primarily atwaterutilitymanagersandstaff. threats andincidents,thisHandbook isaimed may beinvolved inresponding todrinkingwater all utilities,agenciesandotherorganizationsthat While the security planningandresponse actions. succinct recommendations concerningwater the Handbook and security planningandthreat response. Together, basic conceptsandprocedures involved inwater This Handbook shouldhelpyou to: • Learn how tousethe • Learn aboutkeyconceptsofwatersecurity • Plan forresponding towatercontamination • Understand the“basics” ofresponding to • security. available toolstohelpyou provide water Toolbox, covered inthe threats andcontaminationincidents; contamination threats andincidents; Response Protocol Toolbox the Response Guidelines, Response Protocol Toolbox; Response Guidelines Response Protocol becausechapters isaimedat andother providepr o vide and 1

Overview Why Is This Handbook Important? How Can This Handbook Help Me?

Contamination of a drinking water system This Handbook should help you in the following can cause illness, disease, or even death. A ways: water system can be contaminated, damaged or disrupted through intentional terrorist or • Help you to plan for unforeseen emergencies criminal actions or by an accident. Intentional involving your water system; contamination poses one of the most serious • Help you to review and improve your water threats to a water system because of the intent utility’s Emergency Response Plan (ERP) on to harm human health or cause damage. When an ongoing basis to address contamination a contamination threat is received or a threats and intentional incidents. Federal contamination incident happens, it is critical law required that drinking water systems that you act quickly and effectively to protect serving more than 3,300 customers develop public health and the environment. an ERP (see the “Public Health Security and Bioterrorism Preparedness and Response Act This Handbook should help you to develop of 2002”, also known as the Bioterrorism your own utility’s plan for quickly and Act of 2002). Although the deadlines for effectively responding to contamination threats certifying ERPs for approval have passed, or contamination incidents, even in situations all utilities should continue to review and where information may be limited. improve their plans as their water system infrastructure, staff, technology and capabilities change. • Provide pointers on how to respond to contamination threats and incidents; and • Introduces and summarizes the more comprehensive Response Protocol Toolbox.

Please note that this Handbook provides general advice and general procedures for responding to a water system contamination threat or contamination incident. Because every water system and incident will be different, it would be impossible to develop a one-size-fi ts-all emergency response template. The steps described in this Handbook are recommendations, not rules.

Although this Handbook is not a regulatory

Overview document nor is it a template for an Emergency Response Plan, it can help you to review, update and implement your own ERP, because it describes the planning you would do to create such a plan. For example, in your ERP, you should provide answers to the following questions:

2 Water Security Handbook actually occurs. coordination whenanincidentoremergency local response inorder partners toimprove Utilities mayalsowanttoshare theirERPs with to awatercontaminationthreat orincident. you toupdateyour own ERPforresponding Addressing thesekindsofquestionsshouldhelp • Who willmanageremediation andrecovery • Who willmakepublichealthdecisions? • Who willanalyze watersamplestoidentify • Who willcollectsamples? • When andwhere shouldsamplesbe • Who canIcallforhelpandadvice? • What level ofpersonalprotection do • Who willrespond? • a request totheHotline viae-mailat Hotline at1-800-426-4791orby sending copy by callingEPA’s Safe Drinking Water gogov/watersecurity EPA’s watersecuritywebsite at documents canbedownloaded from response planningdocuments. These Plan Outline, Act of2002, and Bioterrorism Preparedness andResponse to ComplywiththePublic Health Security Guidance forSmall andMedium Systems document entitled For more informationonE Emergency ResponsePlans(ERPs): gov/watersecurity epa.gov/safewater/hotline activities? the contaminant(s)? collected? health andsafety? responders needinorder toprotect their v/watersecurity the and otheremergency Emergency Response . You mayalsoobtaina Emergency Response Plan Y ou mayalsoobtaina . RPs, seeEPA’s www.epa. Water Security Handbook www. security resources. of thisHandbook describesmanyuseful water section on“Additional Resources” attheend at by sendingarequest totheHotline viae-mail Drinking Water Hotline at1-800-426-4791or copy ofthesedocumentsby callingEPA’s Safe training opportunities. You canalsorequest a on watersecurityplanning,requirements and website alsocontainsotherusefulinformation epa.goepa.gov/watersecurity from theEPA Water Security website at security documents and otherwater Response Guidelines, Handbook, the entire Toolbox, this download the Toolbox. full please refer tothe on aspecific topic, For more information Where To GetMoreInformation: epa.gov/watersecurity discussed. In thenextchapter, watersecurityplanningis process forthreat andincidentresponse. this Handbook usefulbecauseitdescribesageneral Utility sectormayfi managersinthewastewater nd government officials shouldread thisHandbook. officials, environmental protection officials and other officials, emergencyresponders, lawenforcement concerning drinkingwater, suchaspublichealth who maybeinvolved inanemergencyresponse systems, regardless oftheirsize. In addition,anyone who maintainpublicandprivate drinkingwater andutilitystaff response managers(WUERMs), owners andmanagers,waterutilityemergency This Handbook waswrittenforwatersystem Who ShouldRead This Handbook? www.epa.gov/safewater/hotline Response Protocol v/watersecurity You can . This frequently updated This fr equently updated . Finally, the www. 3

Overview Water Utility Planning Guide

Introduction What Are Contamination Threats and Contamination Incidents? his chapter discusses why you, as a water 1 Tutility manager or offi cer, should know There are two kinds of water contamination about water security planning for effective problems that you may have to deal response to contamination threats and incidents. with: contamination threats and actual This chapter also defi nes water contamination contamination incidents. threats and incidents and describes how water security planning is done. Chapter A contamination threat is a suggestion 1 corresponds to Module 1 of the Response or an indication that water has been or Protocol Toolbox. See EPA’s Water Security will be contaminated, but no conclusive website at www.epa.gov/watersecurity for moremore proof has been collected yet to confi rm that information. contamination has actually occurred. A threat may be written, verbal, or based on The fi rst water security planning step is to observations or other evidence. designate an individual to be the lead emergency response manager for your utility, as well as an alternate. At a small utility, you may be this Here are some examples of contamination individual. The second step is to plan your threats: utility’s response to a contamination threat or contamination incident. In responding, 1) A suspicious empty container with an you should decide if the threat or incident unknown residue is left next to a reservoir. This is ‘possible’, ‘credible’, or ‘confi rmed’. If is a contamination threat. In this case, there is the threat is ‘confi rmed’, then it becomes a physical evidence that suggests something has contamination incident, requiring remediation potentially been added to the water supply, but (cleanup). Following successful remediation, contamination has not yet been ‘confi rmed’ the system is returned to normal safe operations through testing or other conclusive evidence. (recovery). 2) Someone phones to say that they observed Why is Water Security Planning someone adding something to the water Important? reservoir. As before, you have become aware of a threat and there is not yet any proof that the Water security planning is critical because of contamination has actually occurred.

Water Utility Planning Guide Water the increased threat of terrorism and other intentional attacks since 9/11. There are A contamination incident has occurred if you many ways in which water systems can be analyze water from the reservoir, distribution threatened by contamination or be intentionally system or another part of your water system and contaminated. Responding to contamination fi nd that the water contains levels of a harmful threats and contamination incidents requires careful planning and preparation.

4 Water Security Handbook incident hasoccurred. and determinewhetheror notacontamination harmed. You shouldalways investigate athreat public healthand/orthewatersystemmightbe and itturnsouttobeacontaminationincident, information. However, ifyou ignore a threat a contaminationincidentuntilyou getmore might notknow whetherathreat constitutes threats andcontaminationincidents. You be ready torespond tobothcontamination To protect your watersystem,you should measure radioactive materialsormetals. or notthere isatoxin present, butitdoesnot a Microtox® analysisshouldtellyou whether contaminant thatmaybepresent; forexample, not becomprehensive enoughtodetectthe the possibilitythatfield orlabtestingmay incident hasalready occurred. to Be alert proven (or acontaminationthreatshort, hasnotyet been but anactualcontaminationincident.In levels. This isnolongeracontaminationthreat, contaminant above baselineorbackground verified. contaminant hasbeen‘confirmed’; thatis, occurs whenthepresence ofaharmful A drinkingwater ‘confirmed’ contamination incident ), whileacontamination Water Security Handbook

following ways: incidents couldimpactthepublicin Contamination threats andcontamination Contamination Incidents? Contamination Threats and Should We BeConcerned About about contaminationthreats andincidents. serious consequences,you shouldbeconcerned Since anyoneoftheseimpactscouldhave • Disrupt businesses and services thatdepend Disrupt businessesandservices • Disrupt thewatersystemor causelong-term • Cause fearorlossof publicconfi• dence; Cause harmtopublic health(illness,disease, • • Impact othercriticalinfrastructures that • Result insignifi• cant costsforremediation or Create aneedtoremediate andreplace • Cause damagetothewatersystem • fighting; or prevent useofthewatersupplyforfire ofclean,safewatertocustomers shortage or death); others). (e.g., foodprocessing andrefineries, among rely onsafewater, duetointerdependencies replacement; and outages; which couldinturncreate or watershortages ofthewatersystemtomakeitsafe, portions interference withtreatment ordelivery; network) resulting incontaminationor system, electricalsystemorcomputer pipes, wells, treatment system,distribution infrastructure (e.g.,waterplant,pumps, on asafewatersupply; 5 1 Water Utility Planning Guide Is Intentional Contamination Possible or Probable?

How likely is intentional contamination of the drinking water system? Could it happen again? How serious would it be? These are the kinds of questions you should consider when planning for water security. How Serious Could Intentional 1 Water Contamination Be? It is possible to intentionally contaminate a water supply in many ways. However, “possible” There are many ways in which water can be and “probable” are two different cases. It is intentionally contaminated, just as there are always possible that intentional contamination many different contaminants. Each contaminant could be carried out, but the probability of this has different effects on humans, animals and the actually happening should be determined at each environment, depending on its concentration individual water system. (level) and toxicity (harmfulness).

Question: Compared with other Examples of Possible Contaminants: possible terrorist targets, how likely is an intentional contamination incident Pathogens are harmful microorganisms that involving a water system? can impact human health, such as E. coli, Cryptosporidium, polio virus, Hanta virus, Answer: The likelihood of an smallpox virus, and the microorganisms intentional contamination incident responsible for anthrax, bubonic plague, occurring may be low, but the likelihood cholera and other illnesses; that a contamination threat will occur is high. In fact, such threats have occurred Toxic metals such as arsenic, cadmium, often and are well documented. mercury, osmium, and others;

Toxic organic compounds such as biotoxins Security experts have warned that terrorist (Ricin), pesticides, chlorinated compounds organizations may be considering water such as dioxin, or volatile organic compounds systems as possible targets for weapons of mass such as mustard gas; and destruction, known as WMD. WMD include some chemical, biological and radiological Radioactive materials such as radioactive contaminants whose purpose is to cause harm. isotopes used in hospitals, research labs, It has always been possible to intentionally universities and nuclear reactor fuels. contaminate a water system, but 9/11 and other

Water Utility Planning Guide Water recent events have suggested that the likelihood that an intentional contamination incident will A few contaminants are so dangerous that very happen has increased. This is why we all should small amounts could sicken or kill many humans plan and prepare to protect our drinking water. or animals. These include certain pathogenic bacteria and viruses, some biotoxins, and some highly toxic chemicals that can persist in water for a long time before they break down into

6 Water Security Handbook system. of drinkingwater, andbeginremediation ofthe protect publichealth,supplyanalternatesource to actions shouldincludeallstepsnecessary with apotentialpublichealthcrisis,andresponse a be needed,suchasrestrictions onwateruse.For ‘credible’ actions andsitecharacterization.If thethreat is could includeimmediateoperationalresponse is is reasonable inathreat situation.If thethreat local authoritiesshoulddecidewhatlevel ofrisk Due diligenceshouldbedeterminedlocally, and diligence. and timelymannershouldhelptoensure due of thesestepsinaresponsible, careful, efficient outeach a threat orincidentoccurs.Carrying this Handbook shows whatstepstotakewhen The response flow onthebackcover chart of appropriate response basedontheevaluation. evaluation ofanycontaminationthreat andan comes in.Due diligenceinvolves acareful threat orincident? This iswhere to evaluate andrespond toacontamination How willyou know whenyou have doneenough What isDueDiligence? would notcauseillnessordeath. confidence inthewatersystem,butwhich normal operationsandcausethepublictolose hundreds ofcontaminantsthatcoulddisrupt others whoare sensitive. particularly There are those whoare already illduetoothercausesor especially atrisk,suchaschildren, theelderly, could causedeathorillnessinpeoplewhoare less harmfulchemicals.Other contaminants and respond appropriately. to evaluate acontaminationthreat orincident suitable,sensibleandresponsible everything Due diligence ‘confirmed’ ‘possible’ , more significant response actionsmay , appropriate responses toathreat incident,authoritiesmaybefaced meansthatyou have done due diligence Water Security Handbook that over-responding toathreat maycause responding toathreat. Keep inmind,however, acceptable. You mayalsowanttoaskforhelpin decision, you shoulddecidehow muchriskis because response capabilitiesvary. ofthis Aspart decide whenduediligencehasbeenexercised, It isuptoyou andyour response to partners ❏ ❏ incidents by takingthesesteps: You canprepare forcontaminationthreats and Contamination Threat orIncident? How DoIPrepareFor A problems too,especiallyifitisafalsealarm. Set upyour Incident Commandstructure Develop your own guidelinesfordealing Incident CommandSystem (ICS),whichis The structure shouldbebased onthe your roles andresponsibilities inadvance. knowseveryone whattodo. Again,know be inchargeduringanemergencyand knowsahead oftimesoeveryone whowill specific threats. of specific responses thatcanbetakento Response Guidelines to keepthisinformationup-to-date. The people.Be sureinformation forimportant forms andchecklists,aswell ascontact and responsibilities. Include allnecessary Emphasize actionitems.Know your roles utility. Make theseguidelineseasytouse. with intentionalcontaminationatyour providepr summaries short o vide shor

t summaries 7 1 Water Utility Planning Guide used throughout the nation for responding ❏ Maintain accurate, up-to-date information, to natural disasters or emergencies. See plans and other records concerning your Chapter 2 for further discussion of ICS. water system. This should help prepare you and your response partners to deal with a threat or incident.

❏ Keep accurate records concerning any contamination threat or incident. See the 1 Response Guidelines for an example of a “Security Incident Report Form”, “Threat Evaluation Worksheet”, and other forms and checklists that can help you to document a threat or incident and track evaluation, remediation, and recovery.

❏ Conduct baseline water quality monitoring ❏ Establish partnerships and clarify roles during “normal”, non-threat times to with local emergency responders, such as monitor the quality of water entering, passing your state drinking water primacy agency, through and leaving the system to customers. law enforcement, public health agencies, Baseline monitoring is done in order to HazMat, fi re and your local emergency establish “normal” water quality values. response network. Coordinate closely with your local fi rst responders as a preparedness step.

❏ Develop a communication plan that includes a communication and notifi cation system for threats and incidents and a plan for public communication and outreach. Keep contact information up-to-date.

❏ Develop contingency plans for alternate water supplies in advance, through such means as mutual aid agreements, ❏ Prepare for contamination threats and Memoranda of Understanding (MOUs) and intentional contamination incidents by intermunicipal agreements, for example. including possible contamination scenarios in your Emergency Response Plan. Discuss ❏ Be familiar with your water system from these scenarios and possible responses with

Water Utility Planning Guide Water top to bottom. Know its construction, your staff. operation, maintenance, hydraulics, chemicals used, distribution system, ❏ Practice emergency response by conducting employees, customers, nearby roads, training workshops, tabletop exercises, drills buildings, and other features. and fi eld exercises.

8 Water Security Handbook The diagrambelow shows theintendedaudienceforeachmoduleof Toolbox. Water Security Handbook

threat orintentionalincident. for managingtheresponse toacontamination The nextchapterdescribesageneralgameplan ❏ ❏ Seek andtrainingby contacting outsupport Information ondrinkingwaterprotection rural waterassociation). rural and technicalassistanceproviders (e.g.,state your statedrinkingwaterprimacyagency of thisHandbook. section on“Additional Resources” attheend contamination threat orincident.See the agencies canhelpyou toprepare fora InfraGard, andfrom otherutilitiesand suchas fromWaterISAC, services WaterSC, 9 1 Water Utility Planning Guide Contamination Threat Management Guide

2

Introduction

f a contamination threat or incident occurs, Chapter 2 covers the following topics: Iyou should act quickly to protect public health and limit the spread of the contaminant, • Roles and responsibilities; based on the best information you have at the • A general plan for responding to time. You should also avoid over-reaction or contamination threats and incidents; false alarms that might inconvenience your • How to evaluate a water contamination Guide customers and harm your credibility. You threat; may not have all the information needed • How to make the right decisions and when; to determine whether the water has been • Types of information needed to evaluate contaminated or not, because this may require threats; water testing, which takes time. As new • Response actions to protect public health; information becomes available, however, you and might change the way in which you are dealing • Exercising care in response actions. with the threat or incident. Management Chapter 2 summarizes Module 2 of the In this chapter, you will learn about a general, Toolbox, which can be obtained at EPA’s Water yet systematic approach for evaluating Security website at www.epa.gov/watersecurity.

Threat contamination threats and managing the overall response to a contamination threat or incident. You will learn how to manage a threat response in a timely manner to protect public health, using due diligence. For effective contamination threat management, this systematic approach or general game plan for threat response is perhaps the most important planning tool covered in this Handbook. Contamination

10 Water Security Handbook medical services, and the private sector)and medical services, recovery worker healthandsafety, emergency public works, publichealth,responder and management, lawenforcement, fire fi ghting, disciplines (e.g.,homelandsecurity, emergency procedures from several incidentmanagement The NRPincludesthebestpracticesand single, comprehensive approach. Radiological Emergency Response Plan intoa Plan, theFederal Response Plan andtheFederal response plans,theConceptofOperations NRP bringstogetherindividualfederalagency approach tomanagedomesticincidents. The establishes acomprehensive all-hazards The The National Response Plan (NRP) Federal Roles: federal level down totheutilitylevel. briefly outlines roles and responsibilities from the a severe hurricane. This sectionofChapter2 or anincidentofnationalsignificance, suchas level, especiallyincidentsinvolving terrorism Some incidentsmaybeelevated tothefederal together withtheirlocalresponder network. likely behandledby individualutilitiesworking The vast majorityofthreats andincidentswill Roles andResponsibilities National Response Plan , or NRP Water Security Handbook , health, socialandeconomicconsequencesof and implementingmeasures tominimize the detecting andresponding todiseaseoutbreaks governments are primarilyresponsible for recognizes, however, thatstate,local,andtribal requiring federalassistance. The NRP result ofintentionalwatercontamination) to adiseaseoutbreak (whichcouldbethe (HHS) astheleadfederalagencyinresponse ofHealthDepartment andHuman Services As anexample,theNRPdesignatesU.S. incidents. governments andtheprivate sectorduring should coordinate withstate,local,andtribal work togetherandhow thefederalgovernment how andagenciesshould federaldepartments combines themintoone. The NRPoutlines website at ofHomelandvisit theDepartment Security water supplies. To learnmore abouttheNRP, policy assistanceinmattersinvolving drinking EPA HHSby providing supports technicaland assistance requirements. to determinecurrent medicalandpublichealth and localauthoritieswouldoccurasnecessary such anoutbreak. Coordination between HHS www.dhs.gov

. 11 2 Contamination Threat Management Guide Federal, State and Local Roles: the management framework to achieve this coordination. The National Incident Management System (NIMS) To ensure further coordination during incidents involving multiple jurisdictions or agencies, the During an incident, the National Incident principle of Unifi ed Command (defi ned below) Management System, or NIMS, further defi nes has also been incorporated into NIMS via the roles and responsibilities. NIMS has established ICS. 2 standardized incident management processes, protocols, and procedures that all responders To learn more about NIMS and training (federal, state, tribal, and local) should use to opportunities, visit the FEMA website at www. coordinate and conduct response actions. The fema.gov/nims/. use of standardized procedures should enable you and other responders to Federal, State and focus on incident management Local Roles: when a water security incident occurs. These standardized The Incident Command System

Guide procedures apply whether the (ICS) incident is related to terrorism, an accident or a natural Under NIMS, the Incident disaster. Command System (ICS) is the national standard for NIMS is maintained by the the command, control, and NIMS Integration Center coordination of a response. The (NIC) that, under the direction fl exible nature of the ICS structure allows for

Management of DHS, provides strategic direction and the numbers and types of people on the response oversight for NIMS. One function of the NIC team to change over time as the need for is to help establish general training requirements resources and skills changes. and to develop national-level training standards

Threat and course materials associated with NIMS. The ICS organization can expand or contract to address a particular incident, but all incidents, The overwhelming majority of emergency regardless of their size or complexity, will incidents will be handled on a daily basis by a initially have a single Incident Commander. single jurisdiction at the local level. However, The Incident Commander is the individual there will be some instances, such as terrorist responsible for managing the overall response attacks, accidents or nationally signifi cant to the crisis. The Incident Commander natural disasters, in which successful incident frequently oversees a group of people, often management requires the involvement from his or her own organization as well as other

Contamination of emergency responders from multiple agencies or organizations, who are responsible jurisdictions, as well as personnel and equipment for responding with due diligence to the from other states and the federal government. contamination threat or incident. These instances require effective and effi cient coordination across many organizations To learn more about NIMS and ICS training and activities. The Incident Command opportunities, visit the FEMA website at www. System (ICS), as described below, provides fema.gov/nims/.

12 Water Security Handbook initially beresponsible forIncident Command. emergency response procedures andmay for managingthewaterutility’s internal individual (whichmaybeyou) isresponsible other titleasdefined by theutility. Response Manager (WUERM) known asthe and analternate. This pointpersoncanbe designate aleademergencyresponse coordinator Water Utility: Commander include: Organizations thatmayprovide anIncident and notifyallstaffofthechangeincommand. incoming Incident Commanderafullbriefing the transferofcommand,you shouldgive the senior orbetterqualified fi rst responder. At control ofthethreat orincidenttoamore authorityforoverallagency thathasprimary notifications, commandmaytransfertoan responders arrive inresponse toyour Commander, atleastinitially. Asadditional designated personshouldbetheIncident water utilitypersonnel,you oranappropriate If athreat orincidentisdiscovered first by Incident Commandatthe Water Utility Local Role: How doestheICSorganizationgroworshrinktofit theincident? demands oftheincidentincr their sectionsasther S for the Commander alsomayassign incident commandandthev and operations)and/ora public), a O other membersofthe I incident, heorshemaybetheonlypersonneededtomanage anincident. The n largerormor ections ffi

cer I ncident Commander O (vitalinassuringthatanaccurate,consistentmessageisgiv . perations, P S The S afety O Water Utility Emergency Every watersystemshould e complexincidents,theI ection Chiefshav ffi

esour cer lanning, Logistics Command S (r Liaison O ce (peopleandequipment) esponsible forthesafetyofincidentpersonnel haso ease ordecr arious r G eneral S v e theauthoritytoexpandorcontract erall contr taff, ffi esponse agencies). orby some

cer taff, includinga ease. This (whocoor and ncident Commandermayassign whoser Water Security Handbook ol o F inance/A v er theincident.I dinates betw v P e as ublic I The I dministration S ection Chiefs scene. Command ifthesiteofanincidentisacrime Local LawEnforcement: act isinvolved oratleastnotinitiallysuspected. if there isapublichealthcrisisandnocriminal agency maytaketheleadinIncident Command Public Health Agency (stateorlocal): during theplanningstage. drinking water primacy agency should be defined water utility. The roles oftheutilityand may taketheleadafterbeingnotified by the the threat, thedrinkingwaterprimacyagency does nothave alltheresources neededtomanage WaterDrinking Primacy Agency: been committed. terrorism oranincidentcrossing statelines)has if theFBIdeterminesthatafederalcrime(e.g., FBI: assume Incident Command. individual from oneoftheseorganizationsmay involves ahazardous materialorspill,an HazMat/Fire Department: nfor ncident een mation The FBImayassumeIncident Command en tothe n asmall May takeonIncident If theincident

If theutility This 13 2 Contamination Threat Management Guide Federal, State and Local Roles:

Unifi ed Command

In most cases, more than one organization or agency has jurisdiction or statutory authority in managing a response, and a Unifi ed Command may be established. UnifiUnifi ed 2 Command is a team effort that allows all agencies with responsibility for the incident, either geographic or functional, to manage an incident together by establishing a common set of incident goals and strategies. Unifi ed Command not only coordinates the efforts of many jurisdictions, but provides for and ensures joint decisions on plans, priorities and public communications. Unifi ed Command does not

Guide have a single Incident Commander; instead, representatives from several responding agencies contribute to the command process. Unifi ed Command does not mean losing or giving up any of your individual agency’s authority, responsibility, or accountability.

Management Free Online Training in NIMS, NRP and ICS: FEMA offers freefree online training courses to help yyouou become familiar with NIMS, the NRPNRP,, ICS, and the duties of being an Incident Commander. Examples of courses include: Threat National Incident Management System: NIMS is now the nationwide standard for incident management, and NIMS certifi cation (by September 30, 2006) is required in order to be eligible for federal preparedness grants. FEMA’s online courses include IS-700 National Incident Management System and others.

National Response Plan: The NRP is based on NIMS; together, they provide a template for effective threat prevention and response. FEMA’s online courses include IS-800 National Response Plan and others. Contamination Incident Command System: Use of ICS is recommended under NIMS. FEMA’s online courses on ICS include IS-100 (Introduction to the Incident Command System), and IS-200 (Basic Incident Command System). There is also IS-100.PW (Introduction to the Incident Command System for Public Works).

To enroll in these courses, visit FEMA’s website at http://training.fema.gov/EMIWeb/IS.

14 Water Security Handbook Command decision-makingprocess. oftheUnifiinput maybeincludedaspart ed outaresponse. Incarry anotherincident,your Incident Commanderfrom anotheragencyto incident, you mayprovide informationtothe unique, your role in the ICS may change. In one of Incident Commander. Aseachincidentis the situation,you mayalsoassumetherole for responding toanincident.Depending on outyour utility’sand carry pre-existing plans utility manager, you shouldmakedecisions As theutilityemergencyresponse manageror Your RoleandResponsibilities Figure 1.How Your Role May Change Water Security Handbook evaluation andresponse. may changethroughout theprocess ofthreat provides anexamplethatshows how your role The textbox onthefollowing twopages role. Command orinasupporting Unified Command,andyou maybeinUnifi ed if terrorism related) willbemanagedby a ‘confirmed’ about thesituation.It ishighlylikelythatany command mayshiftasmore becomesknown will bedictatedby thesituationandthat stage, thefigure shows thatIncident Command Incident Commander. At the ‘possible’ at various stagesduringanincident.At the Figure 1shows how your role maychange threat stage, you will most likely be the contaminationthreat (especially ‘credible’

threat 15 2 Contamination Threat Management Guide Example of How Your Role May Change As the situation unfolds, you might receive a During Threat Evaluation and Response: call from the local public health agency, which You have just received a phone call from informs you that people in the area of the an unknown individual claiming to have water tank are reporting to the local hospital contaminated one of your water tanks. Once complaining of similar illness symptoms. You you decide that this threat is ‘possible’ based should instruct the public health agency to on the details of the threat warning and your notify the Incident Commander via the Liaison 2 knowledge of the water tank in question, you Offi cer. should next determine if the threat is ‘credible’. You may also consider initiating operational Meanwhile, the Incident Commander has response actions, such as isolating the suspect already called the National Response Center, a water tank, if feasible. You may wish to single point of contact for all pollution incident consult with outside resources, such as your reporting, and a regional HazMat team to do a state primacy agency or police, to help you more intensive site characterization that includes determine if the threat is ‘credible’. rapid fi eld screening of the white powder. Preliminary indications are that the powder is Next, you or one of your staff and another some form of poison. Although you or Incident Guide employee may drive to the water tank to begin Command do not yet have any lab results from an initial site characterization to see if there water samples to ‘confi rm’ that this potential is anything unusual (see Figure 2 on page 18 poison is in the water, the Incident Commander describing threat evaluation and response). decides that a preponderance of evidence now Other employees may be sent to collect water exists to determine that the threat is ‘credible’. samples from the distribution system. On arrival at the water tank, you discover that the At this point, having determined that the threat is fence is cut, ripped-open bags with a white ‘credible’, the Incident Commander notifi es the Management powdery residue are scattered about, protective public, through the Public Information Offi cer, suits and latex gloves are piled in a heap, and the that they should not drink the water. The tank hatch is open. Incident Commander also informs the public of what is being done to provide an alternate supply Threat Recognizing that this is potentially a crime of safe drinking water. He or she may also notify scene and not knowing how dangerous the the FBI and activate the Emergency Operations powder is, you may decide to call the police Center (EOC) to support the response. to the scene of what now appears to be a ‘credible’ threat. Once the police arrive, What is an Emergency Operations Center? you may decide to relinquish incident command to the responding law enforcement The Emergency Operations Center, or offi cer, who is probably better qualifi ed to EOC, is a pre-designated facility established address the potential criminal and HazMat by an agency or jurisdiction to coordinate the Contamination issues. However, you should assist law overall agency or jurisdictional response to an enforcement offi cials in the ensuing response emergency. It is not a part of on-scene incident and investigation. You should also continue management, but rather supports the on-scene to direct your own staff within your utility’s Incident Commander or Unifi ed Command by internal ICS structure. arranging for needed resources.

16 Water Security Handbook point, you mayreport totheEOC jurisdiction over theincident.At this state, EPA andotheragencieshaving members from thepolice,FBI,HazMat, situation, Unified Commandmayhave be formedtoleadtheresponse. In this the EOC,andaUnified Commandmay notified by theIncident Commanderor By now, manymore agencieshave been preponderance ofevidence. into thewatersystem,basedona that thecontaminantwasintroduced with publichealth,maystilldetermine Unified Command, inconsultation positively identified inthewater, Even if the contaminantisnever your utility. remediation and recovery undertake appropriate operational and Command will most likely direct you to their public notifications. Unified Unified Command will update or revise or incident has been in the water system and the threat been positively identified and detected incident. Once the white powder has FBI, to accessible by federal agencies such as the laboratories, including laboratories only will continue to work with appropriate In this example, Unified Command Unified Command. responses of atyour utilityinsupport operational who willundertake utility’s internalIncident Commander, someone shouldbedesignatedasthe assist intheirresponse However, efforts. ‘confirm’ the contamination ‘confirmed’, activities at a c t i v i t i e s

a Water Security Handbook t

procedures mayrequire different actionsthan incident. Your localandstatepolicies be usedtoeffectively manageawatersupply only oneofthemanywaysinwhichICSmay for eachincident. The examplegiven above is from anotheragency)orUnified Command Commander (whichmaybeyou orsomeone will beuniquelyestablishedby theIncident Keep inmindthatICSisaflexible systemand response planningefforts. and stateprimacyagenciesinyour emergency planning committee(LEPC),publichealth your localfirst responders, localemergency foryou toinclude This iswhyitimportant those describedintheexamplegiven above. system andensuringwaterquality. issues related totheoperationofwater Commander orUnified Commandfor asatechnicaladvisortotheIncidentserve utility hasanongoingresponsibility to responsible forincidentcommand,the Remember: “fit in” invarious emergencyscenarios. area so that you will understand where you to talkwithotherfirst responders inyour foryou important This iswhyitvery differ from theexamplepresented here. Tip:

Your localemergencyplansmay

Regardless oftheorganization 17 2 Contamination Threat Management Guide A General Plan for Threat Response and Threat Management

The goals of threat response and threat management are to: 1) evaluate the threat, 2) take necessary steps to protect public health while the threat is being evaluated, 3) ‘confi rm’ the threat, 4) remediate the 2 water system if necessary, and 5) return the system to safe, normal operation as soon as possible.

To achieve these goals, the response to a contamination threat or incident should be effi ciently managed. Threat response and management involves a number of steps, actions and decision points. The most important lesson of this chapter Guide is to understand these key elements and how to proceed from one decision point to the next to achieve these goals. The key elements of threat response are summarized below and in Figure 2, with key terms in bold:

Step 1. Decide if a threat is ‘possible’, Management take appropriate preliminary response actions to protect public health, and proceed to Step 2. Threat Step 2. Determine if a ‘possible’ threat is ‘credible’ through consultation with other utilities, the drinking water primacy Figure 2. Process of Threat Evaluation and agency, public health and other agencies. If it Response is ‘credible’, notify the necessary agencies and the public, take appropriate response actions to Step 5. Return the water system to normal, safe further protect public health, and proceed to operation (recovery). Step 3.

Contamination Each of these steps is described in more detail Step 3. ‘Confi rm’ a ‘credible’ threat (which below and in Module 2 of the Toolbox. results in a ‘confi rmed’ contamination incident), take appropriate public health and other Please note that your responsibility, as the response actions, and proceed to Step 4. water utility manager (or emergency response manager), is to operate and maintain a safe Step 4. Remediate the water system; and water system, ensure a safe water supply

18 Water Security Handbook ‘possible’ contamination threats willbeclassified as investigation isneeded.It islikelythatmost contamination threat is are returned tonormal.However, ifthe the incidentisdocumented,andoperations be impossible,thentheinvestigation isclosed, could have occurred. If thethreat isfoundto the circumstances suggestthatcontamination A watercontaminationthreat is decision-point andthelowest threat level. decide ifthethreat is After receiving athreat, thefirst stepisto Step 1:Decide ifthe Threat is‘Possible’ or Unified Command. your watersystemtotheIncident Commander role byimportant providing technicaladviceon 5, asexplainedpreviously. You an canserve structure maybeinchargeofSteps 2through Incident CommanderorUnified Command situation orcontaminationincident,adifferent impaired drinkingwaterquality. In athreat and provide publicnotification regarding in Module 2ofthe contamination threat orincidentisavailable A detailed . Decision Tree the time. make adecisionbasedon thelimitedinformationavailable at the timeyou receive thethreat warning. You mayhave to contamination threat is to managethethreat. You shoulddecide quicklyifa warning isreceived, you shouldactwithduediligence Speed iscriticalforprotecting publichealth.Once athreat ‘possible’ ornot? How muchtimedoIhavetodecideifathreat is Response Protocol Toolbox. ‘possible’ ‘possible’, forresponding toa . This isthefirst ‘possible’ then further thenfurther Water Security Handbook ‘possible’ if withinone(1)hourfrom operations. the reasons forthedecisiontoreturn tonormal response actionsare tonotetheincidentand the threat warningisnot decide thatcontaminationisnot lend itselftosuchcontamination,you may an unreliable source orthesituationdoesnot warning isnotbelievable becauseitcomesfrom to Step 2(seebelow). However, ifthethreat If thethreat warningis warning itselfcanprovide muchinformation. you have tomakeadecision.Often, thethreat you needreliable informationintheonehour To decidewhetherathreat is ‘possible’ ‘possible’ ‘possible’ , thengoon ‘possible’

, thenyour

ornot, . If 19 2 Contamination Threat Management Guide A threat warning is an indication that something may be Who Do I Notify wrong. Examples of different threat warnings that may be Once A Threat is classifi ed as ‘possible’ are: ‘Possible’?

• Security breach – evidence of an unauthorized entry into a Once you decide that secured facility, such as an alarm, cut fence, etc. a threat is ‘possible’, • Witness account – someone directlydirectly witnesses suspicious you should notify other 2 activity and notifi es the utility. utility staff. You may • Direct notifi cation by perpetrator – the perpetrator sends a also want to consult verbal or written threat to the utility. with or notify your • Notifi cation by news media – a threat is sent to the media, local law enforcement or the media may learn of a threat and pass it on to the agency and drinking utility. water primacy agency, • Notifi cation by law enforcement – a law enforcement depending on the nature agency may pass along information about a threat to a utility. of the threat. Be aware • Unusual water quality – on-line monitoring, grab sampling of your state’s reporting or an early warning system indicate unusual water quality requirements. Guide results. • Consumer complaints – an unusual or unexplained increase in consumer complaints may indicate contamination. • Notifi cation by public health agencies – health agencies or health care providers observe increased illness, disease or death rates, which may indicate a contaminated water supply.

Management Remember:

• Use due diligence at all times. • Encourage staff to immediately Threat report any and all threat warnings to you, 24 hours a day, 7 days a week, 365 days a year. • Within one (1) hour of receiving the threat warning, you should decide whether the incident is ‘possible’ or not. • Practice notifi cation and reporting procedures ahead of time to be Contamination prepared for a real emergency. • Most threats will end up being ‘possible’, unless you are able to absolutely rule out the possibility of contamination.

20 Water Security Handbook if athreat is Here are someactionsyou cantaketodetermine ‘credible’, because ifthethreat doesturnouttobe It tomakethisassessmentquickly, iscrucial threat. a muchhigherthreat level thana‘possible’ contamination islikely. believe thatthethreat warningisreal andthat information shows thatthere isreason to if thethreat isboth or reliable. Acontaminationthreat is The word not. quickly todetermineifthethreat is is toprotect publichealth,soyou shouldmove together, becauseyour first andhighestpriority These twoactionsshouldbecarriedout things: ‘possible’, Once you have decidedthatthethreat is and Protect Public Health Step 2:Determine ifthe Threat is‘Credible’ • Protect publichealththrough operational • Determine ifthethreat is • information. the circumstances andotherreliable information, thenature ofthethreat, the threat isalso determine within2to8hourswhether that thethreat is onceyou haveAs ageneralrule, decided threat is‘credible’ ornot? How muchtimedoIhavetodecideifa and ifitis responses.

publichealthandsafetyare atstake. you shouldimmediatelydotwo ‘credible’ ‘credible’ ‘credible’, ‘credible’, ‘possible’, ‘possible’ meansbelievable, plausible ornot: A ‘credible’ threat is then andotherreliable basedonsite you should ‘credible’ ‘credible’ ‘credible’ Water Security Handbook ornot; or ) Conducta 1) ) Consultearlywithotheragenciesand 3) Checktoseeifthere have beenprevious 2) help decideifthe site ofthe collecting more informationaboutthe or incidentunderinvestigation): depending onyour localityandthethreat (Note thatnotallofthesemayberelevant, sources ofinformationare listedbelow you evaluate thethreat. Some useful organizations togetinformationhelp incidents atyour utilityand/orelsewhere. ‘possible’ security incidentssimilartothecurrent characterization. of thisHandbook tolearnmore aboutsite in protecting acrimescene.See Chapter3 the siteaswell, andyou shouldassistthem enforcement agenciesmaybeinvestigating lab analysesprovide useabledata.Law collection shouldhelptoensure that help out ifcontaminantsare present andto probably involve samplecollectiontofind also a ‘confirm’ ‘credible’ threat, includingprevious ‘possible’ site characterization thethreat. Proper sample threat. This stepshould ‘possible’ contaminationto

threat is

by 21 2 Contamination Threat Management Guide • Your state drinking water primacy agency; • EPA Regional Offi ce; Collecting and Organizing Information • The National Response Center; For Threat Evaluation: • Law enforcement agencies and your regional “Contamination Threat Management FBI Joint Terrorism Task Force; Matrices” • Neighboring utilities; • Public health agencies (local, state, and To help you collect and organize the federal – the latter includes the CDC, information to help determine if a threat 2 ATSDR, and NIH); is ‘possible’, ‘credible’, or ‘confi rmed’, • 911 call centers; see Module 2 of the Toolbox for the • Homeland Security Warnings and Alerts (see “Contamination Threat Management the DHS website at www.dhs.gov); Matrices”. Each matrix covers: • Water Information Sharing and Analysis Center, or WaterISAC, which can assist in • Information and factors considered in threat evaluation (see the WaterISAC website assessing a threat; at www.waterisac.org); • Possible notifi cations; and • Contaminant information from EPA’s Water • Possible response actions. Contaminant Information Tool (WCIT) at Guide www.epa.gov/wcit; These generalized matrices can be customized • Use the Contamination Threat Management to your utility or to specifi c incidents. Matrices (see Module 2, p.54 of the Toolbox) Customized matrices can be used in your and the Response Guidelines to help youyou utility’s Emergency Response Plan. collect and organize information and evaluate the threat; and Response Guidelines • Other resources listed in the “Additional

Management Resources” section of this Handbook. The Response Guidelines is a companion to this Handbook and contains emergency You should now decide if the threat warning is response planning checklists, standard report ‘credible’ or not. However, because of the types forms and other forms to help you manage

Threat of information needed, the determination of and organize your emergency response. Visit credibility of the threat will most likely involve www.epa.gov/watersecurity to downloaddownload this more parties than your utility alone. document. If the threat warning is not ‘credible’, then the investigation is closed, the incident is documented exposure to the (potentially) contaminated and water system operations are returned to normal. water. See Chapter 5 for examples of operational responses that may include isolating suspect If you determine that the threat warning is water or increasing levels of disinfection. For a

Contamination ‘credible’, then you should notify appropriate ‘credible’ threat warning, the public health goal agencies and the public, undertake suitable is to minimize public exposure to the suspected response actions to protect public health and contaminated water. If it is not possible to provide ‘confi rm’ the threat (see below). an operational response that effectively reduces the possibility that the public will be exposed to the To protect public health, provide immediate suspected contaminant, then you should speed up operational responses to prevent or limit public your assessment of the credibility of the threat.

22 Water Security Handbook confirming thethreat: to health agenciesandlawenforcement agencies agency, public water primacy your drinking should work with ‘credible’, warning is that athreat Once you decide Step 3.‘Confirm’ the Threat 1) Once you decidethatthethreat is ‘Credible’? Who DoINotifyOncetheThreatis aware ofyour state’s reporting requirements. You mayalsoneedtonotifythepublic.Be threat, incidentorevent, anditslocation. contact information,adescriptionofthe some basicinformation,suchasyour name, have notdonesoalready. They will need law enforcement agenciesandothers,ifyou water primacy agency, public health agencies, you shouldreport thethreat toyour drinking ‘confirm’ in thewater. unknown orsuspectedcontaminants for analysisandidentification of site characterizationtoalaboratory Send watersamplescollectedduring every laboratory (seeChapter 4ofthis laboratory every can beidentified and/or to keepinmindthatnot all contaminants contaminants(s), although itisimportant can potentiallyidentifyand/or analysis of watersamples.Laboratory analyses contaminants through laboratory evidence ofcontaminationby measuring contamination istoprovide factual you thethreat. Here are somestepsin The bestwayto ‘confirmed’ ‘confirm’ ‘confirm’ ‘credible,’ Water Security Handbook by 2) 3) site characterizationandsamplingmay incident. For example,your initial site characterizationto need more informationafteryour initial a contaminationincident. and samplingifneededto‘confirm’ Conduct additionalsitecharacterization available pointsinthisdirection. evidence means that most of the evidence confirm anincident. a “preponderance ofevidenceexists” to ‘confirming’ possible forsomereason, thestandard for analysisofsamplesisnot if laboratory activities (seeChapter6).However, planning andimplementingremediation Handbook). Labdatacanalsobeusefulin occurred ornot. contamination ‘confirm’ could helpto evidence that agencies toobtain law enforcement work togetherwith water supplyand help ensure asafe should continueto or notcriminalactivityoccurred. You evidence andsamplestodeterminewhether enforcement agenciesmayneedtocollect if you have notdonesoalready. event thatcriminalactivityisinvolved, Notify lawenforcement agenciesinthe operations). thedecisiontoreturnsupport tonormal done tomakesure thewaterissafeandto characterization andwatersamplingis be ‘credible’ where you first sampled.(Note: If the introduced somewhere outsidethearea indicate thatthecontaminantwas ‘confirmed’, whether contaminationthreat cannot a ‘credible’ thentheadditionalsite A preponderance of ‘confirm’

threat isthat You may

the Law 23 2 Contamination Threat Management Guide Once you have lab results and other information, Why should I ‘confi rm’ a ‘credible’ threat? you should decide whether the threat can be ‘confi rmed’ or not. When a threat is ‘confi rmed’, You should ‘confi rm’ a ‘credible’ threat you should immediately notify appropriate public because responding to a ‘credible’‘credible’ threat is an health agencies (if you have not done so already). important decision that could affect public This sets the stage for public health agencies to health, affect your water system, involve make public health recommendations. Review different agencies and require resources. To 2 the public health protection measures that may ‘confi rm’ a ‘credible’ threat, you should be already have been provided (when the threat was certain, based on defi nitive lab results or a found to be ‘credible’), and provide additional “preponderance of evidence” that the threat protection measures if needed. You may also be is plausible and believable. Once a threat is required to notify the public. See Chapter 5 of ‘confi rmed’, it becomes a contamination this Handbook for more information on public incident. health.

Public notifi cation may be required at any collecting information should be continued until stage of the threat evaluation process under the Guide a preponderance of evidence indicates that the National Primary Drinking Water Regulations: threat either can be ‘confi rmed’ or, alternatively, Public Notifi cation Rule, which says that the threat cannot be ‘confi rmed’ because it is an the public should be notifi ed when there is a empty threat. “situation with signifi cant potential to have serious side effects on human health as a result of short term Step 4. Remediate the Affected Water System exposure.” (see(see www.epa.gov/safewater/pn.html). In this step, the goal is to remediate the

Management Public health advisories may be issued, such as: contaminated water system to remove or inactivate the contaminant and test the water • “Boil water”; to make sure that the remediation has worked. • “Do not drink the water”; Remediation is discussed in more detail in

Threat • “Do not use water” (including no fl ushing of Chapter 6. toilets and no use of water for fi re fi ghting). By this time, if the threat has been ‘confi rmed’ Remember, ‘confi rming’ a ‘credible’ threat to be a contamination incident, a Unifi ed represents an important and necessary decision- Command structure will probably be established making step. Once a threat is ‘confi rmed’ and other agencies and organizations will be and it becomes a contamination incident, responsible for overseeing the response and decisions should be made concerning public remediation. During remediation, your role health responses, and remediation and recovery. as water utility manager will most likely be to

Contamination Keep in mind that it may take several rounds work with the remediation team and Unifi ed of information collection and evaluation to Command to help ensure recovery of the water ‘confi rm’ a threat. system. If the threat cannot be ‘confi rmed’ because there is not enough information, the process of

24 Water Security Handbook recovery inmore detail. the publichealthresponse, andremediation and describe sitecharacterization,sampleanalysis, has beendescribed,thefollowing chapterswill Now thatthegeneralprocess ofthreat response Recovery isdiscussedinmore detailinChapter6. to keepyour waterutilitycustomersinformed. remediated andreturned tonormal,itisimportant or businessplumbing.Asthewatersystemis residual contaminationfrom withintheirhome that your customersmaystillbeexperiencing ofthesystem.Keep inmind other affectedparts provided thatitdoesnotaffectremediation of able toresume normaloperationofthatportion of your watersystemisremediated, you maybe as soonremediation iscomplete.If aportion recovery. Recovery ofyour watersystemcanbegin to safe,normaloperation,whichisalsocalled In thisstep, thegoalistoreturn your watersystem Step 5.Recovery oftheSystem Water Security Handbook

involves: Remember, successfulresponse • Returning thesystemtonormal, • Choosing therightremediation in • Basing your decisionsona • Identifying thecontaminant; • Investigating anddocumentingthe • Protecting publichealth; • Responding inatimelymannerand • Planning before anincidentoccurs; • safe operation(recovery). collaboration withothers;and sample analysesare notconclusive; “preponderance ofevidence” if incident; using duediligence; 25 2 Contamination Threat Management Guide Site Characterization And Sampling Guide

Introduction

n this chapter, you will learn about site Icharacterization and sampling to obtain 3 the information needed to decide whether a threat is ‘credible’ and/or ‘confi rmed’. Site characterization involves investigating the site to fi nd out the what, where, when, who, why and how of the contamination threat.threat. A site could be your entire water system or a component of it, such as the distribution system, source water, treatment facility, storage tanks or some other area that may have been contaminated.

Guide Site characterization activities include site investigation, fi eld safety screening, rapid fi eld testing of the water and sampling.

Chapter 3 summarizes Module 3 of the Toolbox, decide ahead of time what you can and cannot which can be obtained at EPA’s Water Security do and whether you may need help from other website at www.epa.gov/watersecurity. organizations or agencies. For example, you may be able to do visual inspections and test basic Investigating the Site water quality at low hazard sites, but you may not have the equipment and/or training to test To determine if a threat is ‘credible’ and to for more hazardous substances. You may need ‘confi rm’ a ‘credible’ threat, you will need to call a HazMat team which has the equipment ation and Sampling factual evidence concerning the nature of the and training to safely deal with hazardous threat, what the contaminant is, and how serious materials. the contaminant may be in terms of public health. Site characterization and sampling are Good planning calls for your utility to make done to help you get this factual information. prior arrangements with a laboratory to provide sample kits with appropriate, clean sample Site characterization results are important to get, containers, before any threat or incident occurs. but it is just as important to make sure that the Utilities should keep pre-staged sample kits on site is safe to enter. You should decide if it is safe hand. Refer to Chapter 4 for more information.

Site Characteriz to proceed with site characterization, whether You should then be better prepared if a threat other equipment or specially trained personnel warning is received or an emergency occurs. are needed, whether another approach is needed Arrangements with other organizations and many other issues. should be made ahead of time to respond effectively to a threat. The best way to Because a utility probably will not have staff prepare is to communicate, plan, and practice. trained to deal with all hazards, you should

26 Water Security Handbook equipment canbeobtained. should stopuntiltheproper gear, personnel,or If there isathreat tosafety, thentheteam needed tosafelyinspectandsamplethesite. protective gear, clothingandotherequipment Team membersmusthave theproper training, Team duringsitecharacterizationiscritical. Protecting thesafetyofSite Characterization Personnel Ensuring SafetyandProtectionfor teamsandotheragencies. civil support officials, FBIandEPA criminalinvestigators, teams from government agencies,publichealth HazMat specialists,environmental response people from thewaterutility, policeandfire, sampling activities. This teammayinclude sitecharacterizationand that actuallyperforms The site characterizationandsampling. may oversee thethreat response, beginningwith an Incident Commanderfrom anotheragency steps ofsitecharacterizationandsampling.Or, outthefiemergency response leadmaycarry rst you are in. You oranotherdesignatedutility stage ofsitecharacterizationandsampling The answer tothisquestiondependsonwhat Characterization andSampling? Who DoestheSite particular investigation progresses.particular at alltimes,butitsrole maychangeasa investigation. The utilityremains involved characterization teamcarriesoutthe characterization andsampling. The site the WUERM managesthesite The Site Characterization Team Incident Commander or isthegroup Water Security Handbook

Involve? What DoesSiteCharacterization Each oftheseelementsisdescribedbelow. following five elements: characterization planwhichshouldcontainthe common. You mayalready have agenericsite However, allplanswillshare features certain in sitecharacterizationplanwillbedifferent. every Each threat orincidentwillbedifferent, so as asetofguidelinesforinvestigating thethreat. and usesacustomized sitecharacterizationplan First, theSite Characterization Team develops

) Leavingthesite. 5) Collecting samples;and 4) Characterizing(investigating) thesite; 3) Approaching thesiteanddoing afield 2) Hazard evaluation (includinganinitial 1) safety screening; you collectmore information); and ongoingreassessment ofthehazard as hazard assessmentbefore enteringthesite 27 3 Site Characterization and Sampling Guide Initial Hazard Assessment Before Entering the Site

The fi rst step in developing Possible hazard categories: a specifi c site characterization Low Hazard – therethere araree no obobviousvious plan is to decide signs of radiological, chemical, or 3 if the site is safe biological contaminants at the site, in to enter and the air, or on surfaces. Contaminants investigate further. that may be present in the water are This is done by making an initial hazard assumed to be dilute and confi ned to assessment beforebefore the team is sent to the site. the water. You or the Incident Commander (which may be you) should make this initial hazard assessment, Radiological Hazard – radiological based on the available data and initial threat isotopes or emitters are identifi ed at the evaluation. A decision is made regarding the site or in the water (i.e., through the use

Guide potential need for special hazardous material of a fi eld radiation detector). handling techniques or equipment. This is a very important step that protects the safety of Chemical Hazard – presencepresence of highly anyone who enters the site. People should not toxic chemicals (e.g., chemical weapons be sent into a dangerous area without protection. or biotoxins) or volatile toxic industrial Response plans should document who would be chemicals is potentially identifi ed at called to respond to contamination threats under the site or in the water, with a possible different hazard conditions. risk of exposure through dermal or inhalation routes. Some possible hazard categories are described in the textbox. Although these hazard categories Biological Hazard – presencepresence of are based upon tentative identifi cation of the pathogens is potentially identifi ed at ation and Sampling particular type of contaminant at the site, the site, with a possible risk of exposure there may be enough information in a threat through dermal or inhalation routes. warning to allow you to judge that a particular hazard category may apply to the situation, thus helping you to make an initial hazard assessment. As you get more information from the site characterization and sampling, you may want to revise your initial hazard assessment (and take appropriate precautions). Hazard evaluation is

Site Characteriz an ongoing and iterative process.

28 Water Security Handbook threat orincidentismostlikelyintentional. investigation. If thisoccurs,thecontamination be misleadingcluesdesignedtoconfusethe a different hazard. Anotherexamplewould one typeofhazard, yet thesiteactuallycontains herrings”, where thethreat warningsuggests hazard tothepossibilityof“red is.Be alert The threat warningitselfmaysuggestwhatthe below: site. Some suggestionsforpossiblestaffare given to dealwiththehazards thatmayexistonthe have theskills,experienceandequipmentneeded Characterization Team, becausetheteamshould for decidingwhoshouldbeontheSite The initialhazard assessmentisalsoimportant • The HazMat teammaydotheinitialhazard • If there are clearsignsofgreater hazard • If thesiteappearstobea“Low Hazard” • site, thewaterutilitystaffmaydosite continue thesitecharacterization. staff orotheragencytoenterthesite for otherstoenter, andallow theutility assessment, find thatthesiteissafeenough characterization aswell. initial hazard assessmentandtheentire site handling techniquesmayneedtodothe trained inhazardous materialssafetyand hazard), thenHazMat professionals (radiological, chemical,orbiological characterization. Water Security Handbook assessment, theSite Characterization Team In thisstepfollowing theinitialhazard Field SafetyScreening Approaching theSiteandDoinga containers, or other indicators. include dead or sick animals, discarded chemical out of the ordinary. Signs of contamination could field monitoring equipment and notes anything appropriate personal protective equipment and carefully proceeds towards the site perimeter with site perimeter, the Site Characterization Team safety. Beginning at some distance outside the area of the incident as well as a buffer zone for The site perimeter should include the immediate the perimeter of the site before approaching it. The first step in a field safety screening is to define decisions andactions. screening. Considerduediligenceinallofyour proper equipmentandtrainingtoconductsuch have tocallinaHazMat specialistwiththe such equipmentcanbeexpensive, you may use ofsafetyscreening equipment.Because team shouldalready have beentrainedinthe and biologicalagents. The sitecharacterization include field testingforradioactivity, chemical Fieldor onsurfaces. safetyscreening might team from contaminantsintheatmosphere detect anyimmediatethreats totheresponse siteconditionsand,inparticular,observe to screening approaches thesiteandconductsa . Field safetyscreening isdoneto

field safety 29 3 Site Characterization and Sampling Guide Characterizing the Site Minimize risks by following common- sense safety practices, such as: After the fi eld safety screening has been completed and if it appears safe to proceed, the • Approach the site from upwind; team may continue the site characterization. • Do not eat, drink or smoke at the site; The team should also do a detailed visual • Do not drink, smell, touch or taste the inspection of the site. They should perform suspect water; rapid fi eld testing of the water suspected of • Use appropriate personal protective 3 being contaminated. Recommended core fi eld gear (e.g., splash-proof goggles, testing consists of monitoring for radiation, respirator, disposable gloves, cyanide, chlorine residual, conductivity and pH disposable shoe covers, and a of the suspect water. disposable lab coat); • Avoid skin contact with suspect water; • Fill sample containers slowly to Rapid Field Testing and EPA’s avoid splashing or creating spray or Technology Testing and Evaluation droplets of water that could spread the Program (TTEP) contamination; and Guide • Do not spend any more time than Rapid fi eld testing of water suspected of needed to characterize the site and get being contaminated is done to try to identify samples. the type of contaminant, so that the right laboratory analyses can be done. Equipment and instruments for rapid fi eld testing are described on pages 27-30 of Module 3 of the If there are signs of hazards, the team should Toolbox. stop their investigation and immediately contact the Incident Commander (who may be you). Information on fi eld testing technologies You should then decide how to proceed. It is also available from the EPA’s National is recommended that the site be evacuated Homeland Security Research Center ation and Sampling immediately and that a properly trained and (NHSRC), through its Technology equipped HazMat team be brought in to Testing and Evaluation Program (TTEP). investigate. The TTEP is an outgrowth of EPA’s successful and internationally recognized If there are no obvious signs of hazards, the team Environmental Technology Verifi cation should still contact the Incident Commander (ETV) Program. TTEP rigorously tests (who may be you) before crossing the site technologies for detection, monitoring, perimeter and entering the site. In most cases, treatment, decontamination, computer you should be able to tell the team to enter the modeling, and other tools for protecting water infrastructure and decontaminating

Site Characteriz site and proceed with site characterization and collection of water samples to determine the structures and the environment. nature of the threat or incident. For more information on TTEP, visit the NHSRC website at www.epa.gov/nhsrc/tte. htm.

30 Water Security Handbook contaminants can vary widely.contaminants canvary times forradiological,biologicalandchemical them. Keep inmindthatsampleholding toanalyze in caseitlaterbecomesnecessary stored inasafeplaceforspecific periodoftime is not‘credible’, thenthesamplesshouldbe foranalysis. But ifthethreatto alaboratory then thesamplesshouldbesentimmediately ornot.If thethreat is a laboratory may beyou) maydecidetosendthesamples evaluation, theIncident Commander(who Depending ontheoutcomeofthreat responder maybeneededtocollectsamples). that ifaserioushazard isapparent, aHazMat analysis.(Noteare neededforlaterlaboratory the suspectwatermaybecollectedincasethey After rapidfield testingofthewater, samplesof Collecting Samples contaminantthatispresent.particular contaminant orwasnotdesignedtomeasure the screening kitisnotsensitive enoughtodetectthe no contaminant,oritmaymeanthatyour field result duringfield testingmaymeanthatthere is as aguide,notthefinal answer. Anegative fifor everything, eld testingshouldbeusedonly contaminants. Because there isnowaytotest all possibleradiological,chemicalorbiological There isnosinglefield testingkitthattestsfor can beanalyzed laterby alaboratory. water mightbecontaminated. These samples be collectedifthere isanyquestionthatthe do suchtesting. Water samplesshouldalways thatisqualifianalyzed by alaboratory ed to contaminated, you musthave watersamples (or ‘confirm’) thatwateriseithersafeor Remember:

To conclusively prove ‘credible’ Water Security Handbook ,

the teamshouldmakesure thattheyhave: should prepare toleave thesite.Before leaving, After finishing thesitecharacterization,team Exiting theSite laboratories. of contaminants,andtypesanalytical analyzing samplesforcontaminants,types In thenextchapter, you will learnabout their equipment. todecontaminatetheentire teamand necessary the sitecontainshazardous materials,itmaybe to protect anyevidencefrom disturbance.If agencies torestrict orblockaccesstothesiteand scene, follow guidelinesfrom lawenforcement leaving thesite.If thesiteisapossiblecrime There maybeotheractionstotakebefore • Re-secured thesite(lockdoors,hatches, • Collected allequipment;and • Collected allsamples needed; • Documented theirfi• ndings; on pages 20-27 of Module 3 of the Toolbox. canbefound packaging andtransporting More informationonsamplecollection, gates, etc.). 31 3 Site Characterization and Sampling Guide Analytical Guide

Introduction What Do I Need to Know About Laboratory Analyses? hapter 4 is aimed at water utility staff who Cwill plan, order and interpret laboratory To plan effectively for threat response, you 4 analyses of water samples collected from the site need to be familiar with the general types of of a suspected incident. In this chapter, you will contaminants, how samples are analyzed, what learn how to plan for sample analyses before a laboratories can perform such analyses, what to contamination threat or incident happens, what look for in the data and how to use the results to ask the lab to analyze for, how to set data in decision-making. It is not enough for you to quality goals and what precautions to take when simply “leave it up to the lab to decide what to handling or shipping samples. The following analyze” because: topics are covered: • The threat warning, the circumstances 1) What you should know about laboratory surrounding the threat, or information analyses and testing; collected during site characterization or fi eld 2) Safety considerations for handling safety screening may provide clues to the suspected contaminated water samples; nature of the contaminant or compound. 3) Types of laboratories, the analyses they You should pass on such information to perform and how to access labs; the laboratory so the right analyses can be 4) Making sure that analyses are conducted in performed. a manner that ensures high-quality, useable results; • Different contaminants may need different 5) Screening approaches to determine if sampling, preservation, handling or shipping contaminants are present in a sample; and methods, otherwise the samples may be 6) Threat response planning for analytical compromised, resulting in poor quality laboratories. data or useless data. You should be familiar with these differences so that your samples Chapter 4 summarizes Module 4 of the Toolbox, arrive at the laboratory in useable condition. which can be obtained at EPA’s Water Security Guide Refer to Module 4 of the Response Protocol website at www.epa.gov/watersecurity. Toolbox for moremore information on sampling, preserving samples and shipping.

• In response planning and decision-making, you should take into account the time

Analytical needed by a laboratory to analyze the sample for contaminants. This time will vary depending on the analyses and the nature of the contaminant and other factors.

32 Water Security Handbook precautions. aware ofthepotentialdangerandtakesadequate ensure handlingsuspect samplesis thateveryone have aninternalhazard communicationplanto safety measures. shouldalso The laboratory water toallow totakeappropriate allparties any potentialrisksassociatedwiththesuspect should discussandclearlyidentify the laboratory time. You, theSite Characterization Team and routinely useHealth andSafety plansaheadof Utilities andlaboratoriesshoulddevelop and of theirstaff. ahead oftimetoensure theirown safetyandthat contain unknown contaminantsshouldplan samples thatmay or analyzing collecting, handling who maybe others. Anyone staffor laboratory staff,transport Team members, Characterization responders, Site staff, emergency other waterutility or safetyandthatof materials mayposeseriousthreats toyour health Contact withcontaminatedwater, soilorother Utilities andOthers Safety Considerations forWater data. analytical results meanandthelimitationsof tounderstandwhatthe with thelaboratory Most importantly, you shouldwork together • You to shouldwork withthelaboratory • range). data qualitygoals(e.g.,accuracy, precision, the labcandoanalysesandspecify choose theanalysestobedone,determineif Water Security Handbook classified by sector, suchas: testing laboratoriesintheU.S.Labscanbe There are several waystoclassifyanalytical Performed Types ofLabsand Analyses hazardous samples. utility labthatiscertified tohandleand analyze lab butshouldinsteadbeanalyzed by anon- samples shouldnotbeanalyzed by your utility Chapter 3. You maytherefore decidethatthe fall inthe“Low Hazard” describedin category characterization suggeststhatthesamplesdonot to analyze thesamples,especiallyifsite Sometimes your utilitylabmaynotbeable able toperform. analysesthatyour labmaynotbe performing by confisupport rming your lab’s analysisorby • • analyses; and university labsthatdohighlyspecialized labs in water, tissue,soilorair; that cananalyze manykindsofcontaminants Non-utility labs most contaminationthreats; lab, whichmaybethefirst torespond to Utility labs suchascommercial, government or , suchasyour waterutility’s own government labs , suchas counties, states,theEPA, utility labscanprovide contaminated. Other non- samples suspectedofbeing be thefirst labtoanalyze then your labwillprobably for testingwaterquality, If your utilityhasalab agencies. (CDC) andotherpublic Control andPrevention FBI, CentersforDisease

commercial labs

specialized run by cities, run 33 4 Analytical Guide 4

Figure 3. Non-Utility Laboratories by Contaminant Class. From Module 4, Response Protocol Toolbox.

You should also keep in mind that certain Non-Utility Laboratories That contaminants may potentially contaminate lab Perform Chemical Analyses equipment, which could cause contamination of future tests. For this reason, it is important Radiological Labs: Radiological labs analyze to get as much information concerning the and identify radioactive substances and possible contaminant as is feasible from the contaminants such as radioactive isotopes threat warning, the fi eld safety screening and site (also known as radioisotopes), radionuclides, characterization. This information should be radiochemical compounds and radiological shared with the laboratory staff in order to plan weapons. The EPA, Department of Energy for analyses and to ensure both safety and good (DOE), states and some commercial fi rms have results. labs that can analyze radioactive materials. The Federal Radiological Monitoring and Assessment Non-utility analytical laboratories can be Center (FRMAC), maintained by DOE, can classifi ed according to the kinds of analyses provide information on analyzing radioactive Guide they perform (Figure 3). Different analytical materials. capabilities are briefl y described below. Environmental Chemistry Labs: This group includes many EPA, state and commercial labs that test water samples to see if they meet federal and state drinking water standards under the Analytical Safe Drinking Water Act, Clean Water Act or other relevant environmental laws. Under these regulations, government-certifi ed labs should use certain analytical methods that have been standardized and approved for use.

34 Water Security Handbook Environmental Microbiology Labs: during anactualincident. access labservices response; thisshouldmakeiteasiertoquickly labs inorder tojointlyplanforthreat orincident withsuch planning stage,autilityshouldpartner dangerous pathogens.Duringparticularly the pathogens, somebiotoxins anda“Select List” of analysesof that are oftheLRNcanperform part state andfederalpublichealthlabs.Some labs city,the FBI.LRNlabsincludecertain county, Association ofPublic Health Laboratoriesand threats. The LRNwassetupby theCDC, specifically developed toaddress bioterrorism Response NetworkThe Laboratory (LRN)was Response NetworkLaboratory (LRN)Labs: Perform Biological Analyses Non-Utility Laboratories That biotoxin analyses. certain also beabletoperform labsmay commercial environmental chemistry governmentby certain oruniversity labs.Some produced by animalsorplants,canbeanalyzed chemicalweapons analyses.Biotoxins,perform Few laboratoriescurrently existwhichcan otherfederalagencies. such astheFBIorcertain usually bearrangedby theproper authorities, are oftheselabs,andanalysesshould onlyafew capability andlegalauthority. Nationwide, there analyzed by labsthathave theappropriate Weapons Convention (CWC), canonlybe Chemical weapons, defined by theChemical chemical weapons labsandbiotoxin labs. Specialty Labs: depending onwhatthecontaminant is. contaminants resulting from bioterrorism, not alloftheselabsmaybe abletoanalyze analyze pathogensinwatersamples. However, belongs totheLRNwillprobably beableto lab, medicallab, publichealthlaborathat microbiology lab, statewaterqualitylab, hospital and othermicroorganisms. Anenvironmental protozoans, fungi causing bacteria,certain viruses, test formicrobiological pathogenssuchasdisease- Specialty labsincludeboth These labs Water Security Handbook

decision-making. the results are ofsufficient qualitytobeusefulfor that iscredible, accurateandrepeatable andthat inamanner thatthe analysesbeperformed crucial decisions whichcanaffectmanypeople.It is information isneededtomakeimportant samples are contaminatedornot. This factual to getaccuratefactualinformationonwhether analysesof samplesare performed Laboratory Obtaining High-QualityLabResults Laboratory ResponseNetwork Diagrammatic Representationofthe M most hazar defi or USAMRIID),whichar R as theCDCandU.S.ArmyM of thepyramidar testing b sample tothenextlev contaminant, r into “S The LRNmembershipisorganiz esear odule 4,

nitiv ch I entinel Labs e characterizationofev y “R nstitute forI dous biologicalagents.S R esponse P efer ule itoutand/orr ence Labs e “N ” whichr r el forconfi ational Labs otocol nfectious D e capableof ”. A T ecogniz oolbo

t thetop en the

rmator efer the ed ” (such x. edical iseases,

e a ee y 35 4 Analytical Guide (If the data will be used for a criminal investigation, refer to Section 3.5 of Module 4 of EPA’s Compendium of Environmental the Toolbox for further information). Testing Laboratories

Some steps to obtain high-quality analytical This database of laboratories describes results include the following: lab analytical capacities and capabilities. The database is designed to assist EPA and • Plan for analyses before a threat or incident other users to identify qualifi ed and appro- 4 occurs. Some labs may be able to run certain priate laboratories that analyze chemical, analyses with little or no advance notice. biological, and radiological agents. Users However, many labs should be contacted must be registered to access the database. well before the analysis is done so they can To log on, visit the website at www.epa. prepare for the analysis; gov/compendium or contact your regional • Choose a reputable, experienced and certifi ed EPA laboratory. laboratory; • Maintain communication with the Incident Commander, public health offi cials and the laboratory to ensure that the right analyses are performed; • Use standard protocols for sample collection, storage, transport and processing; • Use analytical methods which have been standardized to the greatest extent possible (e.g., EPA methods and other standardized methods); • Work with the lab and drinking water primacy agency to defi ne both data quality goals to ensure good, accurate results and Approaches to Analytical suitable detection limits that can measure Screening For Unknown both background and harmful, elevated Contaminants concentrations of the compound; • Collect enough samples from appropriate What should you ask the lab to analyze for when locations to obtain meaningful, the contaminant is not known? Screening Guide representative results; and is a systematic scientifi c approach to try to • Maintain good records, such as the chain- identify unknown contaminants that may of-custody, sample locations, date and be present in a sample. Screening involves time of sampling, who sampled, shipping progressively analyzing a sample to try to information, lab contact information, types identify an unknown contaminant(s) through

Analytical of analyses requested and any observations. skilled, systematic laboratory analysis. This can be very diffi cult when there may be thousands of possible contaminants. Contaminant identifi cation may be even more diffi cult if there is no information from the threat warning, site characterization or fi eld safety screening to indicate the nature of the contaminant, if any.

36 Water Security Handbook screening before abasicscreen. itundertakes hasalltheinformationfrom filaboratory eld all biotoxins inwater. Make sure thatthe for example,there are nostandard testsfor may potentiallybeusedtocontaminatewater; methods donotcover allcontaminantsthat of contaminantsconcern.However, these methods toanalyze thesampleforavariety suspects”). The Basic Screen useswidely-used for commonchemicalcontaminants(“the usual The the secondstepis two steps. The first stepisthe suspected contaminants.Screening isdonein to narrow thelistofunknowns down toafew contaminants involves siftingthrough evidence Screening asamplethatmaycontain analysesofsamples. the basicsoflaboratory planning andresponse shouldunderstandatleast reason involved whyeveryone inemergency contaminant(s) present, ifany. This isanother approach thatwillresult inidentifyingthe to planand/orimplementtherightscreening can beextremely inhelpingthelab important Incident Commanderorpublichealthofficial of anindividualemergencyresponse planner, screening. Thus, thejudgmentandexperience may have slightlydifferent approaches to compounds. In addition,different laboratories that candetectallknown contaminantsor Unfortunately, there isnoonescreening process Basic Screen is a broad-spectrum screen isabroad-spectrum Expanded Screen Basic Screen Water Security Handbook . and Microbiological screening issimilartoscreening missed. contaminants thattheBasic Screen mayhave might beinthewatersampleandlooksfor Expanded Screen “explores” tofind outwhat chemical orbiologicalcontaminants. The the To cover oftheBasic theshortfalls Screen, analysis. determined through further chemical identityoftheradionuclideshouldbe used inthelab. If radioactivityisdetected,the can beusedasafield screening tool,oritcanbe by usingaGeiger counter. AGeiger counter done by measuringradioactivity;forexample, Basic screening forradiologicalcontaminantsis involves foursteps: that ittargetspathogenicmicroorganisms. It for chemicalcontaminantsorbiotoxins, except ) Testing ata“Reference Laboratory”, 4) Testing ata“Sentinel Laboratory”, whichis 3) Sample concentrationandrecovery inthe 2) Rapidfield testing. 1) The sampleistestedin Expanded Screen kept in a library). kept inalibrary). collections” (much asreference booksare to known pathogenskeptin“reference if necessary, tocompare thepathogen pathogens; and certifia laboratory ed foranalysisofcertain chances offinding apathogen; down toasmallervolume toimprove the collected andthesampleisconcentrated field. Largevolumes ofsuspectwaterare equipment forpathogensmaybelimited. Keep inmindthatrapidfield testing the field toseeifthepathogenispresent.

testsformore unusual 37 4 Analytical Guide Although laboratory analyses may seem complex, it is crucial for threat response managers to be aware of analytical capabilities and limitations so that you can use the information to make important decisions. If laboratory testing ‘confi rms’ the presence of a contaminant in the water system, public health response actions should be initiated. These are discussed in the 4 next chapter.

Why Analytical Laboratories Should Plan for Threat Response

Laboratories are a key part of our nation’s response to water contamination threats and incidents. Like water utilities and public agencies, laboratories should be ready to respond to an emergency by quickly and accurately analyzing samples suspected of being contaminated and producing reliable results. These results should be used by you, the Incident Commander, Unifi ed Command, public health agencies and others to make important decisions that could have far-ranging effects.

Labs that may someday be involved in analyzing samples during a water contamination threat emergency should develop their own Laboratory Response Plans. A Laboratory Response Plan is a plan prepared by a laboratory detailing their approach and capabilities for the 24/7 processing of emergency water samples. Such a plan should

Guide always be tailored to local needs, facilities and skills, and it should be reviewed and accepted before use. Module 4 of the Toolbox describes laboratory response planning in detail. The “model screening procedure”, for example, can help labs plan for screening samples. Analytical In the next chapter, public health response activities are described.

38 Water Security Handbook website at which canbeobtainedatEPA’s Water Security Chapter 5summarizes Module 5ofthe Toolbox, threat orincident. health andsafetyintheevent ofacontamination that you understandhow tohelpprotect public manager, you shouldread thischaptertoensure As a water utility manager or emergency response threat orincident. This chapterdiscusses: notification intheevent ofacontamination public healthresponse planningandpublic greatest extentpossible. This chapterdescribes A Introduction Public Health Response Guide • The needforcooperationandinteraction • The role ofthewaterutility;and • Who isresponsible public forundertaking • information tothepublic. to protect publichealthanddeliver good drinking waterprimacyagenciesandothers between publichealthofficials, utilities, health response actions; to protectpr publichealthandsafetytothe goalofthreat responseprimary primar planningis otect publichealthandsafetytothe www.epa.gov/watersecurit y goalofthr eat r esponse planningis y . Water Security Handbook

effective publichealthresponse: There are five stepstoconsiderinplanningfor planning iscrucial. for protection ofpublichealth.Such mutual threat response managersshouldplantogether Water utilities,publichealthagenciesandother of PublicHealth Response PlanningforProtection below, modified forwaterutilities. Examples ofresponse planningare provided emergencies, includingwater emergencies. that cover responses toallkindsofpublichealth typically develop Public Health Response Plans response. State andlocalpublichealthagencies should planandcoordinate thepublichealth together withlocalpublichealthagencies, Long before athreat isreceived, your utility, Before A Threat Occurs Step 1.Plan thePublic Health Response Each ofthesestepsissummarized below.

) Plan thepublichealthresponse toa 1) ) Provide water analternateshort-term 5) Communicateeffectively withother 4) outoperationalresponse actions to Carry 3) Whenathreat orincidentoccurs, 2) threat orincidentoccurs; contamination threat orincidentbefore a options foranalternatewatersupply). supply (your utility’s ERPshouldprovide communication andnotification plan;and agencies, utilitiesandthepublicthrough a health; contain thecontaminantandprotect public determine thepublichealthconsequences; 39 5 Public Health Response Guide Use public health planning in your own Develop a communication and notifi cation utility’s Emergency Response Plan (ERP): plan for your utility: Fast, reliable Each utility should examine how public health communication is the key to success in response plans of local and state health agencies coordinating the public health response. Before address water contamination. Utilities should an incident occurs, water utilities should use relevant parts of the public health response develop a communication and notifi cation plans in their own ERPs. plan. Communication and notifi cation plans should include other agencies, utility staff, utility 5 Know which agencies will be involved in customers and the public. For example, you the public health response: Water utility should report a contamination threat to the emergency response planners should know appropriate drinking water primacy agency and which agencies will be involved in the public public health agencies. Public health agencies health response and what these agencies will be may in turn alert doctors, clinics and hospitals doing. The appropriate responsible agencies to be on the lookout for public health symptoms can vary signifi cantly by locality. You should and to report these to the public health agency. coordinate your emergency response planning Public health agencies should report symptoms with appropriate agencies and take advantage of of contaminated drinking water to utilities. training offered by others. Your utility’s communication and notifi cation plan should specify: Agencies that may be involved in the public health response to a water • Agencies, organizations and contamination incident include: individuals to contact or notify; • Who will send and receive

Guide • Water and wastewater utilities; information; • Drinking water primacy agency; • Contact information; • Local, state and federal public health • The kinds of information to be and environmental agencies; communicated; • Hospitals, clinics, doctors and poison • When and how to notify your staff, control centers; drinking water primacy agency and • Local, state and federal emergency other agencies and organizations; services; • When and how to notify the public; • U.S. Environmental Protection and Agency; • A backup communication and • Centers for Disease Control and notifi cation system. Prevention; • Agency for Toxic Substances and Disease Registry; Identify possible operational response actions

Public Health Response • Federal Emergency Management during the planning process: During the Agency; and planning process, your utility should identify • U.S. Army Corps of Engineers, possible operational response actions to respond National Guard and/or other military to possible public health threats. During an organizations. actual contamination threat or incident, you should act quickly to protect public health and prevent the contaminant from spreading.

40 Water Security Handbook information tohelpyou makethesedecisions. Information Tool canprovide (WCIT) useful public health.EPA’s Water Contaminant contaminant from spreading andtoprotect to choosetherightcourseofactionkeep the contaminantanditshealtheffectsinorder ‘confirmed’ Once acontaminationincidenthasbeen Determine thePublic Health Consequences Step 2. When a Threat orIncident Occurs, in Step 3. Operational response actionsare describedbelow epa.gov/safewater/watersecurity/tools. database iscontrolled. www.epa.gov/wci cf security publicationswebsite at the WCIT Fact Sheet from EPA’s water To learnmore about WCIT, download useful information. response activitiesforutilitiesandother indicators, samplingandanalysis,helpful potential water quality and environmental drinking watertreatment effectiveness, and toxicity, medicalinformation, healtheffects names, fateandtransport, water contaminants,suchascontaminant most up-to-date,reliable informationon for watersecurity. WCIT containsthe information oncontaminantsofconcern developed by theU.S.EPA thatprovides Tool The (WCIT) Water ContaminantInformation Tool m ,orconnecttothe WCIT website at Water ContaminantInformation isasecure, on-linedatabase , you shouldfind outmore about t . Access tothe WCIT cfpub. Water Security Handbook precautions apply. precautions totake,andwhenwhere these how dangerous thisamountis,whathealth remains afteragiven periodoftimehaspassed, toestimatehow muchcontaminant also try If itispossible,thepublichealthagencyshould improved abilitytoprotect publichealth. be challenging,butthebenefit shouldbean this informationandkeepingituptodatemay the event ofacontaminationincident.Getting how fastcontaminatedwatermightspread in so on,thatyou candeterminewhere and locations ofshutoffvalves andaccesspoints such aswaterflow volumes andflow rates, information onyour waterdistributionsystem, take. For example,you shouldhave up-to-date and whatpublichealthresponse actionsto the spread ofcontaminantscanbestopped water system,whetherthere are pointsatwhich the contaminantcanspread throughout the public healthagenciestodeterminehow fast As theutilitymanager, you shouldwork with Right Public Health Decision: What You Need To Know To Make The • How longthecontaminantwill • Exposure pathways(ingestion, • Contaminant concentrations thatcan • Potential chronic (lesssevere but • Potential acute(severe short-term) • this breakdown product iscompared breakdown product isandhow toxic contaminant tobreak down, whatthe remain inwater, whatcausesthe inhalation orskincontact);and cause theseeffects; contaminant; longer-lasting) healtheffectsofthe health effectsofthecontaminant; to theoriginalsubstance.

41 5 Public Health Response Guide Estimating Terrorist Impacts on Water Containment of suspect water should be done Systems: as soon as possible, ideally during the fi rst stage of threat evaluation when you are determining EPA and others have developed tools, such if the threat is ‘possible’ or not. If you cannot as hydraulic models, to help utilities estimate contain the suspect water quickly, then you the effects of a terrorist incident on drinking should accelerate the determination of whether water systems. If your utility decides to use or not the contamination threat is ‘credible’. 5 such tools, you should be aware that such models may involve costs and require training Deciding on operational responses can be tricky, and time to apply them. Practice using such because there could be unforeseen consequences tools before an incident occurs so that you of the action taken. For example, restricting can act quickly and with due diligence when water use or water delivery could result in a real incident occurs. portions of the service area, including hospitals and schools, being deprived of water. This could Step 3. Carry Out Operational Response lead to poor sanitation or a host of other effects. Actions To deal with these other effects, you should plan well in advance of a contamination threat or Operational response actions are actions that incident. protect public health by reducing exposure to the suspect water. Operational response actions For Water Utilities: Possible Operational are often carried out while more information Response Actions to Protect Public Health is being collected to determine whether or not the threat is ‘credible’. It is critical to work ❏ Isolate and contain the suspect water so

Guide with local agencies and elected offi cials when it doesn’t spread and contaminate other initiating operational response actions. parts of the water system;

Example: The Mayor receives a call that a water ❏ Increase levels of disinfection; for tank has been contaminated. The Mayor then example, by using a mobile disinfection phones you at the water utility and you decide, as unit to treat a part of the water system or the water utility manager, that contamination of by adding more chlorine to the system; a particular water tank is ‘possible’ because that tank is on-line and the fence around the tank is ❏ Notify the public to take precautions, old and decrepit. Your immediate operational such as “Boil water”, “Do not drink”, response is to shut the valves on pipes leading or “Do not use” in coordination with into and out of the water tank to isolate the your state primacy agency, public water tank from the rest of the water system (if health offi cials and other offi cials, as feasible), thus preventing any contaminant from appropriate.

Public Health Response spreading to the rest of the system. You may need to notify your state drinking water primacy ❏ Distribute bottled water or water from agency immediately. Also, in addition to the neighboring utilities as a safe alternative federal Public Notifi cation Rule, local notifi cation to the contaminated or suspect water. rules can vary by locality and all other appropriate parties should be notifi ed (e.g., public health agency, law enforcement, and others).

42 Water Security Handbook described inthetableonpage44. involved. Examples ofpublicnoticesare or incidentandthecontaminantpotentially type ofnotification toissue,basedonthethreat reduce theirexposure, you shoulddecidewhat Once you have decidedtonotifythepublic result exposure” term of short have seriousadverse effectsonhumanhealthasa there isa Regulations requires publicnotification when under theNational Primary Drinking Water water. The Federal Public Notification Rule public noticetoavoid drinkingorusingthe exposure tocontaminatedwaterisissuea One waytohelpthepublicminimize their officials whenplanningpublicnotifi cation. is criticaltowork withlocalagenciesandelected decide whethertoissueapublicnoticeornot.It primacy agencyandpublichealthagenciesto you shouldcoordinate withyour drinkingwater If thecontaminationthreat is Step 4.Notify thePublic “situation withsignificant potentialto (40 CFR § 141.202). ‘credible’ Water Security Handbook , then 141.202): Notification Rule (Tier 1,40CFR Water Regulations, Federal Public the National Primary Drinking Public Notification Procedure under ❏ ❏ ❏ Discuss thethreat withyour Notify thepublicassoon Provide anyadditionalpublic gov/safewater/pn.htm situation, inorder tofind outif 24 hoursafteryou learnofthe soon aspractical,butnolaterthan drinking waterprimacyagencyas contamination threat; quality violationorcredible hours afteryou learnofthewater practical, butnolaterthan24 may vary by state.(seemay vary water systemusers.Requirements and otheractionstoreach allyour form andtimingofpublicnotices, the noticesare tobeissued,the the noticesare ineffect,how often providing direction onhow long Examples mightberepeat notices, drinking waterprimacyagency. notification asrequired by your is required; and any additionalpublicnotification

l ). www.epa. 43 5 Public Health Response Guide Examples of Public Notices About Drinking Water

Type of Notice When To Use This Notice Relative Burden on Public

Use if boiling will make the water safe to drink and boiling does not create other health problems, Least burden. Facilities which use large Boil Water 5 particularly through routes of amounts of water for drinking or food Before Use exposure other than drinking (e.g., preparation will be most affected. inhalation or skin contact with water vapor).

Use if boiling is not an option and if More burden – an alternate water Do Not Drink water vapor and skin contact do not supply for drinking and food pose risks. preparation will be needed.

Use if the contaminant is unknown, if treatment is not possible at the Greatest burden – an alternate water moment or if the contaminant poses supply for all uses, including fi re Do Not Use a health risk through inhalation of fi ghting and fl ushing toilets, will be water vapor or through skin contact needed. Guide with affected water.

Because water use restrictions can have that providing an alternate water supply can pose unintended health consequences, you should a signifi cant logistical challenge and should be weigh the potential public health consequences planned in advance. Consider the use of mutual of restricting water use against the public health aid agreements to provide backup water from threat posed by the contaminant. other municipalities or sources, a memorandum of understanding (MOU) with other water Step 5. Provide an Alternate Water Supply for suppliers, and/or contracted services to provide the Short Term alternate water.

If the decision is made to issue a “Do Not In the next Drink” or “Do Not Use” order, utilities should chapter, you Public Health Response be prepared to provide alternate safe sources will learn about of water such as bottled water, potable water the key issues trucked to distribution points, or water provided involved in by an interconnection. You may need assistance remediation and from federal, state and/or local emergency recovery of a responders to distribute water. Keep in mind water system.

44 Water Security Handbook website at which canbeobtainedatEPA’s Water Security Chapter 6summarizes Module 6ofthe Toolbox, normal operationsafterremediation. as possible. system tonormal,safeoperationasquickly responsibility shouldbetoreturn thewater water systemisdemonstratedtobesafe,your When theremediation iscompletedandthe contaminant. shouldbeonhandtocleanupthe experts contaminant. actions thatreduce oreliminatethe Remedial response actionsare must becleanedup, orremediated. has been Once acontaminationthreat orincident work ofcontaminantcleanup. specialists whowillconductthetechnical and theremediation, andremediation agencies thatwillmonitorwaterquality public healthagenciesanddrinkingwater involved inremediation shouldinclude remediation isongoing.Other parties seeking waystoprovide safewaterwhile for overseeing remediation, you shouldbe you maynotnecessarilyberesponsible because,although process isimportant operation. Understanding theremediation how toreturn thesystemtonormal,safe of acontaminatedwatersystemand I Introduction Remediation and Recovery Guide the keyissuesinvolved inremediation n thischapter, you willlearnabout ‘confirmed’ www.epa.gov/watersecurit Recovery refers tothereturn to By thistime,remediation , thecontamination y . Water Security Handbook when itissafetoreturn tonormaloperations. involved. Specialists shouldbeable totellyou how toremediate contaminant theparticular different agenciesandorganizationswhoknow Command will manage a team of specialists from remediation andrecovery actions.Unified that aUnified Commandstructure willoversee the contaminationhasbeencontained,itislikely Once acontaminationthreat is Who isResponsible? ‘confirmed’

and 45 6 Remediation and Recovery Guide Refer to Chapter 2 for information on the Step 2. Do a System Characterization and National Response Plan, National Incident Feasibility Study Management System, Incident Command and Unifi ed Command. After the contamination has been contained, Unifi ed Command will most likely need more You should be working to support Unifi ed information to choose the right remediation Command to provide technical assistance and method, such as the identity of the contaminant to help in recovery. It is possible that your involved and how much of the water system is 6 utility may be more involved in protecting the contaminated. Command should also identify remaining unaffected water system and ensuring possible remediation options and fi nd out how safe water from another source than in the actual effective and feasible those options are. Doing remediation activities. a System Characterization and Feasibility Study should provide this information. Because no Remediation and Recovery single agency is likely to have all the resources needed to carry out remediation and recovery, There are nine steps in the remediation and it is likely that several agencies will be involved recovery process. Each of these steps is briefl y in remediation and recovery. Under Unifi ed described below. Keep in mind that it is Command, the utility should coordinate with critically important to keep the public informed their drinking water primacy agency, public throughout the entire remediation and recovery health agencies and other agencies involved in process. protecting public health and drinking water.

Guide Step 1. Find an Alternate Water Supply for Step 3. Do a Risk Assessment the Long Term It is important to fi nd out how risky If remediation the incident site is to workers and the and recovery public. Unifi ed Command should do a actions are quick risk assessment. This quick risk going to take assessment should also be useful for some time, safe deciding what response actions to take water should and setting remediation goals. Any risk, be provided for together with risk reduction measures, the public in should be communicated by the Incident the meantime. Commander or Unifi ed Command to your An alternate safe water supply should be utility, public health agencies, drinking water identifi ed during the planning process, before primacy agency and the public. a contamination incident happens. If your utility, working with local agencies, cannot Step 4. Evaluate Remediation and

Remediation and Recovery provide a long-term alternate water supply, then Rehabilitation Alternatives you should request help from state and federal emergency planning agencies such as EPA, Once a System Characterization and Feasibility FEMA, or the Army Corps of Engineers. Be Study (Step 2 above) has been carried out, aware of the challenges and planning details that Unifi ed Command can begin to evaluate and may be involved. compare possible remedial actions, remediation technologies and rehabilitation methods to

46 Water Security Handbook impacts onthewatersystem. step toavoid unforeseen will beessentialduringthis operation ofthewatersystem inthenormal expertise in theseprocedures. Your out. Contractorsmayassist the watersystemare carried of of thecontaminatedparts remediation andrehabilitation Once theremedial designhasbeenapproved, the Step 7.Do theRemediation remaining unaffectedwatersystem. to helpprevent unforeseen impactsonthe assistance inthedesignofremediation staff shouldbeinvolved inproviding technical Your waterutilityandothertechnicalsupport documentation oftheremediation begins. selected, theengineeringdesign,planningand After remediation actionsandtechnologyare Step 6.Design theRemediation technology thatwill: Unified Commandshouldselectaremediation Technology Step 5.ChoosetheRightRemediation remaining low levels ofthecontaminant. by long-termremediation toremove any levels ofacontaminanttosaferlevel, followed remediationshort-term toreduce dangerous can alsobedoneinstages,suchasemergency restore thewatersystemtonormal.Remediation • Be feasible,affordable andcost-effective to • Comply withallapplicableregulations (such • Protect humanhealthandtheenvironment; • the extentpossible. as theSafe Drinking Water Act); and Water Security Handbook Restore Confidence Step 9.CommunicatewiththePublic to again. the problem shouldbefixed andthewatertested effective. If theremediation wasnoteffective, monitored toensure thattheremediation was quality andthewatersystemshouldbe After remediation iscompleted,bothwater Step 8.Do Post-Remediation Monitoring interfere withremediation. that couldcauseunforeseen problems andeven unsafe water, hoard water, oractinotherways thepublicmaycontinuetouse Otherwise, when thingsare expectedtoreturn tonormal. what isbeingdonetorestore safewater, and is incharge,how itcouldaffecthumanhealth, informed abouttheremediation process, who Unified Commandshouldkeepthecommunity During allstagesofremediation, you and

goal ofeffective response. system, you have achieved akey full recovery ofyour water safe watertothepublic. With operations andtheprovision of of safe,normalsystem The final stepistheresumption Recovery The FinalStep–Full 47 6 Remediation and Recovery Guide Final Thoughts

lanning for water security and emergency 5) Plan and practice emergency response Presponse may seem overwhelmingly complex. procedures ahead of time to ensure that However, several key points can help you deal an actual emergency response will go as effectively with a contamination threat or quickly and smoothly as possible; incident: 6) You should make decisions in a timely 1) Your fi rst priority is protecting public manner, based on the best information health and safety; available to you at the time; and

2) There are many resources for assistance. 7) You can help to ensure legally defensible These should be identifi ed as part of decisions through organization, timeliness, the planning process, before a threat or quality control and good record-keeping. incident occurs; Remember, if you manage a utility or its 3) Always use due diligence in planning for emergency response program, you are and responding to a threat; responsible for protecting public health and the environment. However, you are not alone in 4) For a successful response, it is critical to this mission. Establish communications now have cooperation and good communication with the agencies that can help you during an between your utility and other agencies and emergency, and begin to plan and train for response organizations; contamination threats and incidents. Final Thoughts

www.epa.gov/watersecurity

48 Water Security Handbook Glossary of Terms

Basic Screen - A broad-spectrum screen to Contamination Threat Management Matrices identify common chemical contaminants that - Module 2 of the Response Protocol Toolbox may be present in a suspect water sample. The contains these matrices to assist in collecting Basic Screen employs widely-used methods to and organizing the information needed to help analyze the sample for a variety of contaminants determine if a threat is ‘possible’, ‘credible’ or of concern. See Chapter 4. ‘confi rmed’. Each matrix covers: 1) Information and factors to be considered in assessing a threat; Commercial labs - Labs that perform 2) Possible notifi cations to make; and 3) Possible testing and analyses of samples as a business. response actions. These generalized matrices can Commercial labs may be able to analyze many be customized to a specifi c utility or incident. kinds of contaminants in water, tissue, soil and See Chapter 2. air. See Chapter 4. Core fi eld testing - The minimal rrecommendedecommended ‘Confi rmed’ - A ‘confi rmed’ threat is a monitoring activities to perform when ‘credible’ threat that has been verifi ed through conducting a site characterization, including sample analyses that prove that the water monitoring for radiation, cyanide, chlorine is contaminated with a harmful substance. residual, conductivity and pH of the suspect Alternatively, in the absence of analytical data, water. See Chapter 3. a threat is ‘confi rmed’ when a preponderance of evidence indicates that a contamination incident ‘Credible’ - A ‘credible’ threat is a ‘possible’ has occurred. A ‘confi rmed’ threat becomes a threat that is believable and plausible, based on contamination incident. See Chapter 2. reliable information that shows there is reason to believe that the threat warning is real and Contamination threat - A suggestion or that contamination is likely to have happened. an indication that water has been or will be A ‘credible’ threat is a much higher threat level contaminated, but no conclusive proof has been than a ‘possible’ threat. See Chapter 2. collected yet to confi rm that contamination has actually occurred. A threat may be written, Due diligence - Due diligence has been verbal, or based on observations or other exercised when all suitable, sensible and evidence. See Chapters 1 and 2. responsible actions have been taken to evaluate a contamination threat or incident and respond Contamination incident - A contamination appropriately. See Chapter 1. incident has occurred when the presence of a harmful contaminant or other substance in Emergency Operations Center (EOC) - A drinking water has been ‘confi rmed’ (i.e., verifi ed pre-designated facility established by an agency Glossary of Terms through sample testing or by a preponderance of or jurisdiction to coordinate the overall agency evidence). See defi nition of ‘confi rmed’ (above) or jurisdictional response to an emergency. It and Chapters 1 and 2. is not a part of on-scene incident management, but supports the on-scene Incident Commander or Unifi ed Command by arranging for needed resources. See Chapter 2.

Water Security Handbook 49 Emergency Response Plans (ERPs) - The contaminants. It may include fi eld testing for 2002 Public Health Security and Bioterrorism radioactivity, chemical agents and/or biological Preparedness and Response Act required water agents. See Chapter 3. systems serving more than 3,300 customers to develop and maintain Emergency Response Government labs - Laboratories that are Plans (ERPs) to prepare for responding operated by government agencies at the city, to contamination threats and intentional county, state or federal level. Examples of the contamination incidents. See Overview. latter include labs operated by the EPA, FBI, and Centers for Disease Control and Prevention Environmental chemistry labs - Labs that (CDC). A common role of government labs analyze environmental samples to see if they is to test samples to determine if regulatory contain chemical contaminants of concern or standards are met. See Chapter 4. meet federal and state regulations for quality and safety. Many EPA, state and commercial labs Hazard categories (Low Hazard, Radiological perform environmental chemistry analyses. Labs Hazard, Chemical Hazard, Biological Hazard) performing such analyses should be government- - The hazard posed by a contamination threat or certifi ed to use standardized, pre-approved incident may be classifi ed according to the type analytical procedures. See Chapter 4. of hazard, the cause of the hazard, and the risks posed. Examples of hazard categories include Environmental microbiology labs - Labs Low Hazard (no obvious signs of contaminants; that analyze environmental samples (usually contaminants are probably diluted and not water, soil or food) to determine if pathogenic widespread), Radiological Hazard (radiation is microorganisms are present, such as disease- tentatively identifi ed at the site or in the water, causing bacteria, protozoans, fungi, viruses or posing potential risk), Chemical Hazard (highly others. See Chapter 4. toxic chemicals such as WMD or volatile toxic industrial chemicals are tentatively identifi ed Expanded Screen - To address the limitations of at the site or in the water, posing potential the Basic Screen (see above), an Expanded Screen risk), and Biological Hazard (pathogenic tests for more unusual chemical or biological microorganisms are tentatively identifi ed, posing contaminants or contaminants that may have potential risk). See Chapter 3. been missed by the Basic Screen. See Chapter 4. Incident Command System (ICS) - This is FEMA (Federal Emergency Management the national standard for the command, control Agency) - The national agency that coordinates and coordination of a response to a threat, emergency and disaster relief responses. incident or emergency of any kind. It requires FEMA is one of several agencies included in that an individual Incident Commander, from the Department of Homeland Security. See an agency that is responsible for responding to “Additional Resources”. the emergency or threat, manage the response

Glossary of Terms activities. See Chapter 2. Field safety screening - A safety screeningscreening procedure that is performed by the Site Incident Commander - InIn the IIncidentncident Characterization Team in the fi eld, before Command System, the Incident Commander is entering the site of a possible threat or the individual who is responsible for managing contamination incident. The fi eld safety the overall response to the emergency. See screening is done to observe site conditions and Chapter 2. to detect any immediate threats to the team from

50 Water Security Handbook Initial hazard assessment - BeforeBefore the SSiteite National Incident Management System Characterization Team is sent to investigate the (NIMS) - NIMS provides a comprehensive site of a threat or contamination incident, the national framework and standard for incident Incident Commander should make an initial management. NIMS incorporates the Incident hazard assessment to evaluate potential risks and Command System as the management system to the need for special protective gear or equipment deal with threats, emergencies and incidents. See for handling hazardous materials or sampling. Chapter 2 and “Additional Resources”. This initial assessment should be based on available information and an initial evaluation Operational response actions (also known as of the threat (i.e., is the threat ‘possible’ or immediate operational responses) - Actions ‘credible’, or not). See Chapter 3. that protect public health by reducing exposure to the suspect water. Operational response Laboratory Response Network (LRN) Labs actions are often carried out while a threat is - A network of labs that was specifi cally set up being evaluated in order to protect public health to address bioterrorism threats. The LRN was in the event that the threat is confi rmed to created by the Centers for Disease Control be an incident. Examples include preventing and Prevention (CDC), the Association of the spread of suspected contaminated water, Public Health Laboratories, and the FBI. LRN increasing disinfection, notifying the public to labs include certain city, county, state and take precautions, or distributing bottled water. federal public health labs that can perform See Chapters 2 and 5. analyses of pathogens, some biotoxins, and other particularly dangerous pathogens. In ‘Possible’ - After a threat is received, the fi rst step order to have samples analyzed by an LRN in evaluating the credibility of a threat is to decide lab, arrangements should be made during the if it is ‘possible’. A ‘possible’ threat is one where response planning stage. See Chapter 4. the circumstances suggest that contamination could have occurred and that further investigation Non-utility labs - Laboratories that are not is needed. If the threat is found to be not run by water or wastewater utilities. Examples ‘possible’, then the investigation is closed, the include government labs, commercial labs, threat is documented, and operations are returned university or research labs, specialty labs and to normal. See Chapter 2. other types of labs. See Chapter 4. Preponderance of evidence - Most of the National Response Plan (NRP) - The NRP available evidence points in a certain direction. provides a comprehensive, all-hazards approach See Chapter 2. to managing the response to domestic incidents or emergencies. It provides the basis for federal Public notifi cation procedures - Procedures agency coordination with state, local and tribal for notifying the public in the event that a governments and with the private sector to water contamination threat or incident has

address incidents or emergencies. The NRP is occurred where there is “signifi cant potential Glossary of Terms based on the National Incident Management to have serious adverse effects on human System (NIMS) for managing incident response health as a result of short-term exposure” (see below); together they provide a template for (40 CFR § 141.202, known as the Federal effective threat prevention and response. See Public Notifi cation Rule under the National Chapter 2 and “Additional Resources”. Primary Drinking Water Regulations). Public notifi cation procedures include issuing a public

Water Security Handbook 51 notice identifying the potential contaminant and and Incidents. The Response Guidelines and providing directions for avoiding drinking or this Handbook were designed as companion using the water. See Chapter 5. documents to be used together for response planning. See “Overview” and “Additional Radiological labs - Labs that analyze and Resources”. identify radioactive substances and contaminants such as radioactive isotopes, radionuclides, Response Protocol Toolbox: Planning For and radiochemical compounds and radiological Responding to Drinking Water Contamination weapons. The EPA, Department of Energy Threats and Incidents (Toolbox,(Toolbox, or RPTB) - A (DOE), states and some commercial fi rms have comprehensive guidance document developed radiological labs. FEMA operates the Federal by the EPA for the water sector, the Toolbox Radiological Management Center (FRMAC) describes planning measures to prepare for and which can provide information on analyzing respond to drinking water contamination threats samples for radioactive materials. See Chapter 4. and incidents. The chapters in this Handbook correspond to modules in the Toolbox. See Rapid fi eld testing - TTestingesting that is done in the “Overview” and “Additional Resources”. fi eld by the Site Characterization Team to try to identify the type of contaminant that may Site characterization - Site characterization be present so that the right laboratory analyses involves the investigation of the site of a threat can be done. Field testing is done to obtain or incident to fi nd out the “what, where, preliminary information, and should be followed when, who, why and how” of the threat or up by laboratory testing to ‘confi rm’ whether incident. After the initial hazard assessment, contamination is present or not. See Chapter 3 site characterization activities include fi eld safety and the EPA’s Technology Testing and Evaluation screening, site investigation, rapid fi eld testing Program (TTEP) in “Additional Resources” of the water, and sampling. A site could be an (under EPA NHSRC) to learn about equipment entire water system or a component, such as for rapid fi eld testing. the distribution system, source water, treatment facility, storage tanks or some other area that Recovery - The returnreturn to normal operations after may have been contaminated. See Chapter 3. remediation of a contaminated water system or site has been completed. See Chapter 6. Site characterization team - The group of individuals that performs site characterization Remediation, remedial response actions and sampling activities following receipt of - Response actions that reduce or eliminate the a threat or incident report. The team may contaminant from the affected water system include people from the water utility, police, or site. Remediation is usually performed by fi re, HazMat specialists, environmental response remedial specialists overseen by agencies with teams from government agencies, public health remediation oversight responsibilities. See offi cials, FBI and EPA criminal investigators,

Glossary of Terms Chapter 6. civil support teams and representatives of other agencies. See Chapter 3. Response Guidelines - An EPAEPA document that contains all of the forms, checklists, and Specialized or specialty labs - Commercial, report formats from the comprehensive Response government or university labs that perform Protocol Toolbox: Planning For and Responding highly specialized analyses that are not to Drinking Water Contamination Threats commonly performed by other labs. Examples

52 Water Security Handbook include chemical weapons labs and biotoxin labs. Nationwide, there are only a few chemical weapons or biotoxin labs, and analyses should usually be arranged by the proper authorities, such as the FBI or certain other federal agencies. See Chapter 4.

Threat warning - An indication that something may be wrong with water quality or the drinking water system. Threat warnings may include any, some or all of the following: security breach, witness account, direct notifi cation by the perpetrator, notifi cation by the news media, notifi cation by law enforcement, unusual water quality, consumer complaints, and/or notifi cation by public health agencies. See Chapter 2.

Unifi ed Command - InIn ICS, UUnifinifi ed Command is a unifi ed team effort which allows all agencies with responsibility for the incident, either geographic or functional, to manage the incident by establishing a common set of goals and strategies. This is accomplished without losing or giving up agency authority, responsibility, or accountability. See Chapter 2.

Utility labs - Labs that are run by water utilities. Utility labs routinely perform water quality monitoring to ensure that drinking water is safe for customers. See Chapter 4.

Water Utility Emergency Response Manager (WUERM) - An individual who is responsible for managing the water utility’s internal emergency response procedures (also known as the water utility’s emergency response coordinator). This individual may also serve

as the utility’s Incident Commander during Glossary of Terms emergencies. See Chapter 2.

Water Security Handbook 53 Additional Resources

This section provides information on resources Critical Sectors or HSIN-CS, and information that may help you in planning and responding regarding the Freedom of Information Act to contamination threats and incidents. (FOIA). Information was current at the time of publication of this Handbook. EPA National Homeland Security Research Center (NHSRC): The NHSRC provides Agency for Toxic Substances and Disease technical information on methods, tools and Registry (ATSDR): ATSDR is a national public technologies to assist in protecting public health agency which compiles information on health and safety in the event of a terrorist contaminants and disease-causing agents. See attack. Examples include the EPA’s Technology their website at www.atsdr.cdc.gov/. Testing and Evaluation Program (TTEP), the Standardized Analytical Methods for Use During Centers for Disease Control and Prevention Homeland Security Events and the Security (CDC): See the CDC website at www.cdc.gov/ Information Collaborative – A Guide for Water or call the CDC Hotline at 1-800-CDC-INFO. Utilities, described elsewhere in this section. CDC compiles and tracks information on See the EPA NHSRC website at www.epa.gov/ diseases, illness, outbreaks, contaminants, health nhsrc/. effects, emergency preparedness and response, the national Laboratory Response Network EPA Safe Drinking Water Hotline: This (LRN), bioterrorism agents and other topics. hotline is a service of the Offi ce of Ground Water and Drinking Water. It provides the Compendium of Environmental Testing general public, regulators, medical and water Laboratories: This laboratory compendium is a professionals, academia and media with database of laboratories, developed by the EPA, information about drinking water and ground which describes the analytical capabilities and water programs authorized under the Safe capacities of labs nationwide. The database was Drinking Water Act. You can reach the hotline designed to assist EPA and other users to identify at 1-800-426-4791 or ask a question at the qualifi ed and appropriate laboratories to analyze Hotline’s website at www.epa.gov/safewater/ chemical, biological and radiological agents. hotline. To register on-line or to obtain additional information, visit www.epa.gov/compendium. EPA Water Security Division: See EPA’s Access to the laboratory compendium is website at www.epa.gov/watersecurity for controlled. information on emergency response planning, training workshops, tools and useful links.

Additional Resources Department of Homeland Security (DHS): The website includes links to information on See the DHS website at www.dhs.gov/. The Emergency Response Plans (ERPs), the Response website provides extensive information Protocol Toolbox, this Handbook, and many other concerning threats and posts threat levels and water security resources. other bulletins. It also contains links to the National Incident Management System (NIMS), Homeland Security Information Networks for

54 Water Security Handbook gov/watersecurit and intelligence to prevent hostile acts against the participants dedicated to sharing information and local law enforcement agencies and other of businesses, academic institutions, state and the private sector. InfraGard is an association level, InfraGard is a partnership between the FBI of a wide range of members. At its most basic the interests and combining the knowledge base information sharing and analysis effort serving InfraGard: many otherusefulemergencyresponse links. Radiological Emergency Response Plan and Management System (NIMS),theFederal National Response Plan, theNational Incident response. Their website containslinkstothe agency coordinates emergencyanddisasterrelief (FEMA): Federal Emergency Management Agency their own needs.Explore theCDat officials). Users canalsoadaptthematerialsfor andlocal,statefederal medical services, officials, laboratories,fi re, police,emergency and theiremergencyresponse team(e.g.,health strengthen relationships between awatersupplier The exercises provided ontheCDcanhelp outemergencyresponse plans. and carrying utilityworkersand wastewater inpreparing contains tabletopexercises tohelptrainwater CD: WaterDrinking andWastewater Systems Emergency Response Tabletop Exercises for an e-mailviatheHotline’s website at Water Hotline at1-800-426-4791orby sending watersecurit EPA’s watersecuritywebsite at planning documentscanbedownloaded from Plan Outline, and Medium Systems, Emergency Response Emergency Response Plan Guidance forSmall gov gov/safewater/hotlin / orcall1-800-621-FEMA. This national This CD,developed by theEPA, See theFEMAwebsite at This is an FBI-sponsored y orbyb callingEPA’s Safe Drinking andotheremergencyresponse y . y callingEP e . A www.epa.gov/ ’ s S afe D www.fema. www.epa. www.epa. Water Security Handbook rinking dhs.gov/interweb/assetlibrary/NIMS-90-web.pdf www.nrt.or or 1-202-267-2675seetheNRT’s website at respectively. CalltheNRC at1-800-424-8802 Guard asChairand (USCG)serve Vice Chair, Protection Agency(EPA) andtheU.S.Coast pollution incidents. The Environmental and response tooilandhazardous substance for coordinating emergencypreparedness Federal andagenciesresponsible departments States. The NRT isanorganizationof16 breaches orterrorism occurringintheUnited discharges, suspiciousactivity, security incidents related tooil,hazardous material is thefederalpointofcontactforreporting National Response Team (NRT): National Response Center(NRC) and United States. Learn more at xm be downloaded from DHS’s website at private sectorduringincidents. The NRPcan state, localandtribalgovernments andthe basis forfederalgovernment coordination with manage domesticincidents.It provides the to enhancetheabilityofUnited States to establishes acomprehensive all-hazards approach National Response Plan (NRP): for thefullNIMSdocument. complexity. See theDHSwebsite at incidents nomatterwhatthecause,size or together more effectively tomanagedomestic NIMS willenableresponders atalllevels towork framework forincidentmanagement. The response intoacomprehensive national practices inemergencypreparedness and (NIMS): National Incident Management System gov/dhspublic/interapp/editorial/editorial_0566. l . The NIMSintegrateseffective g . www.infragard.ne The NRP The NRC http://www. www.dhs. 55 t .

Additional Resources National Environmental Methods Index document is a companion to this Handbook for Chemical, Biological and Radiological and contains many forms, checklists and Contaminants (NEMI-CBR): NEMI and report formats to help a water system organize CBR Methods Advisor are two tools which will information for emergency response planning. provide information on chemical, biological These documents can be downloaded from and radiological contaminants and analytical EPA’s Water Security website at www.epa.gov/ methods of detection, analysis and identifi cation. watersecurity. These tools are being developed by the U.S. EPA. The National Environmental Methods Response Protocol Toolbox: Planning For and Index (NEMI) is a free, searchable Internet- Responding to Drinking Water Contamination based database of environmental methods that Threats and Incidents: The EPA developed and allows comparison of methods, performance, wrote the Toolbox, building on the experience cost and other information. NEMI is already and expertise of several drinking water utilities, available on the Internet at www.nemi.gov. particularly the Metropolitan Water District of NEMI-CBR incorporates the CBR Methods Southern California. Organized in modular Advisor, which can help a user to quickly assess format, the Toolbox assists with emergency a threat, evaluate the site of the incident, collect response preparedness and will be of value to samples and choose the best method for a given drinking water utilities, laboratories, emergency situation when there is limited information responders, state drinking water programs, available regarding the possible identity of a technical assistance providers and public contaminant. health and law enforcement offi cials. It can be downloaded at www.epa.gov/watersecurity. Physician On-Line Reference Guide for Waterborne Disease: This on-line reference Security Information Collaborative – A Guide provides information on water-related diseases for Water Utilities: ThisThis sshorthort ((40-page)40-page) and other medical and health emergency booklet, developed by the EPA, describes how response information. See the website at www. water and wastewater utilities can form benefi cial WaterHealthConnection.org/index.asp. collaboratives to share information on water security. Case studies are combined with step-by- Public Health Security and Bioterrorism step suggestions for utilities to coordinate with Preparedness and Response Act of 2002 (also key water security partners. The booklet may be known as the Bioterrorism Act of 2002): Title downloaded from the EPA’s National Homeland IV of the Act addresses drinking water security Security Research Center’s publications website at and safety, and required drinking water systems www.epa.gov/nhsrc/pubs.htm. serving more than 3,300 persons to develop response measures to incidents that could disrupt Standardized Analytical Methods for Use safe water supplies. To learn more, visit the During Homeland Security Events: This EPA website on water security legislation and comprehensive compendium of analytical

Additional Resources directives at http://cfpub.epa.gov/safewater/ methods was developed by the EPA for watersecurity/legislation.cfm. use during an intentional contamination event. The document, EPA Publication No. Response Guidelines (Response Protocol EPA/600/R-04/126, is available from the EPA Toolbox: Planning For and Responding to NHSRC website at: www.epa.gov/nhsrc/pubs/ Drinking Water Contamination Threats and reportSAM092904.pdf. Incidents: Response Guidelines): This EPA

56 Water Security Handbook sign up, visit government, viae-mailandasecure website. To information, asdeveloped by thefederal was designedtodisseminate basicsecurity ofthe is afreeWaterISAC service which Water Security Channel(WaterSC): utilities. related informationamongwaterandwastewater receiving incidentreports andsharingwater- and warnings, designed fordisseminatingalerts subscribing utilitypersonnel. WaterISAC is a secure available to membership-onlyportion WaterISAC and website hasapublicportion via awebsite at information-sharing systemwhichisaccessible Center (WaterISAC): Water Information Sharing andAnalysis to the WCIT databaseiscontrolled. the WCIT website at safewater/watersecurity/tools.cf publications website at WCIT Fact Sheet from EPA’s watersecurity To learnmore about WCIT, download the on contaminantsofconcernforwatersecurity. secure on-line database that provides information (WCIT): Water ContaminantInformation Tool TSWG’s website at useful products canbedownloaded from the SCADA Networks. of Energy’s products andtools,suchastheU.S.Department group thatprovides informationonsecurity (TSWG): U.S. Technical Support Working Group 21702-5011. USAMRIID, 1425Porter Street, Frederick, MD more information,visittheirwebsite at lab conductsresearch oninfectiousdiseases.For Infectious Diseases (USAMRIID): U.S. Army Medical Research Institute of usamriid.army.mil The TSWG isafederalworking EPA developed WCIT, whichisa 21 Steps toImprove Cyber Security of www.watersc.or www.waterisac.or This documentandother / orwriteto:Commander, www.tswg.gov/tsw www.epa.gov/wci This isawatersecurity http://cfpub.epa.gov/ g . m g orconnectto . The This Army WaterSC g Water Security Handbook t . www. . Access 57

Additional Resources List of Contacts for States, Commonwealths, and Territories

Phone State Drinking Water Program Website Number Alabama Department of Environmental Management: Water Supply Branch (334) 271-7700 http://www.adem.state.al.us/WaterDivision/Drinking/DWMainInfo.htm Department of Environmental Conservation: Drinking Water Program Alaska (907) 269-7647 http://www.state.ak.us/dec/eh/dw/ American Environmental Protection Agency (684) 633-2304 Samoa http://www.epa.gov/Region9/cross_pr/islands/samoa.html Department of Environmental Quality: Safe Drinking Water Program (602) 771-2300 Arizona http://www.azdeq.gov/environ/water/dw/index.html (800) 234-5677 Department of Health: Division of Engineering Arkansas (501) 661-2623 http://www.healthyarkansas.com/eng/ Department of Health Services: Division of Drinking Water and California Environmental Managementhttp://www.dhs.ca.gov/ps/ddwem/ (916) 449-5577 technical/dwp/dwpindex.htm Department of Public Health and Environment: Drinking Water Program Colorado http://www.cdphe.state.co.us/wq/Drinking_Water/Drinking_Water_ (303) 692-3500 Program_Home.htm Department of Public Health: Drinking Water Section Connecticut (860) 509-7333 http://www.dph.state.ct.us/BRS/Water/DWD.htm Department of Health and Social Services: Division of Public Health (888) 459-2943 Delaware http://www.dhss.delaware.gov/dhss/dph/about.html (302) 744-4700 District of Environmental Protection Agency, Region 3 (215) 814-5781 Columbia http://www.epa.gov/reg3wapd/drinkingwater/DCdrinking/index.htm Department of Environmental Protection: Drinking Water Program (850) 245-8336 Florida http://www.dep.state.fl .us/water/drinkingwater/index.htm Department of Natural Resources: Water Resources Branch (404) 657-5947 Georgia http://www.gaepd.org/Documents/index_water_wrb.html (888) 373-5947 Environmental Protection Agency: Water Programs Division Guam (671) 475-1638 http://www.guamepa.govguam.net/programs/water/sdw.html Department of Health: Environmental Health Division, Safe Drinking (808) 586-4258 Hawaii Water Branch http://www.hawaii.gov/health/environmental/water/ sdwb/index.html Department of Environmental Quality: Drinking Water Program, Water Idaho Quality Division http://www.deq.state.id.us/water/prog_issues/ (208) 373-0289 drinking_water/overview.cfm Environmental Protection Agency: Bureau of Water, Division of Public Illinois (217) 785-8653 Water Supplies http://www.epa.state.il.us/water/index.html Department of Environmental Management: Drinking Water Branch (317) 232-8603 Indiana (800) 451-6027

Contacts http://www.in.gov/idem/water/dwb/ Department of Natural Resources: Water Supply Program Iowa (515) 725-0282 http://www.iowadnr.com/water/drinking/index.html Department of Health and Environment: Bureau of Water, Public Water Kansas (785) 296-5503 Supply Section http://www.kdhe.state.ks.us/pws/ Department for Environmental Protection: Division of Water Kentucky (502) 564-3410 http://www.water.ky.gov/dw/

58 Water Security Handbook Rhode Island Rico Puerto Pennsylvania Oregon Oklahoma Ohio Dakota North Carolina North New York New Mexico New Jersey Hampshire New Nevada Nebraska Montana Missouri Mississippi Minnesota Michigan Massachusetts Maryland Maine Louisiana State Water Program MunicipalFacilities, Drinking Health:Division of of Department Section Supply Environment andNaturalResources: PublicWater of Department Program Health:DrinkingWater Protection New York of StateDepartment http://www.nmenv.state.nm.us/dwb/dwbtop.htm DrinkingWaterEnvironment Department: Bureau: http://www.state.nj.us/dep/watersupply Water Environmental Protection: Administration Supply of Department http://www.des.state.nh.us/wseb Water Environmental Services: Division of Department http://ndep.nv.gov/bsdw/index.ht State HealthDivision: SafeDrinkingWater Program Program PublicWater HealthandHumanServices: Supply of Department http://www.deq.state.mt.us/wqinfo/Index.as Environmental Quality:PublicWater Program Supply of Department http://www.dnr.mo.gov/wpscd/wpcp/index.htm NaturalResources: Water Program Protection of Department http://www.msdh.state.ms.us/msdhsite/_static/44,0,76.html Health:Water Division Supply of Department http://www.health.state.mn.us/divs/eh/water/index.htm Health:DrinkingWater Section Protection of Department http://www.michigan.gov/deq/0,1607,7-135-3313_3675---,00.htm Environmental Quality:Water Bureau of Department http://www.mass.gov/dep/water/drinking.ht DrinkingWater Environmental Protection: Program of Department Supply/index.as http://www.mde.state.md.us/Programs/WaterPrograms/Water_ theEnvironment: Water Program Supply of Department Program DrinkingWater HealthandHumanServices: of Maine Department http://www.oph.dhh.louisiana.gov/engineerservice/safewater Offi PublicHealth:SafeDrinkingWater Program ce of http://www.health.ri.gov/environment/dwq/index.ph Health:Offi DrinkingWater of Quality Department ce of http://www.epa.gov/safewater/dwinfo/pr.ht Health:PublicWater Program Supervision Supply of Department http://www.depweb.state.pa.us/watermgmt/site/default.asp Offi Environmental Protection: Water of Management Department ce of http://oregon.gov/DHS/ph/dwp/index.shtm DrinkingWater HumanServices: Program of Department http://www.deq.state.ok.us/WQDnew/index.ht Environmental Quality:Water QualityDivision of Department Water DrinkingandGround Agency:DivisionEnvironmental Protection of http://www.epa.state.oh.us/ddagw http://www.health.state.ny.us/nysdoh/water/main.ht http://www.hhs.state.ne.us/enh/pwsindex.ht http://www.state.me.us/dhs/eng/water http://www.deh.enr.state.nc.us/pws http://www.health.state.nd.us/MF/index.htm p Drinking Water ProgramWebsite Water Security Handbook / m / / m p m l m l / l / p m l l / m l (517) 335-4176 (800) 361-4827 (573) 751-1300 (601) 576-7518 (651) 201-4700 (617) 292-5500 (800) 633-6101 (410) 537-3000 (207) 287-2070 (225) 765-5038 (401) 222-6867 (787) 754-6010 (717) 772-4018 (971) 673-0405 (405) 702-8100 (614) 644-2752 (701) 328-5257 (919) 733-2321 (518) 402-7650 (877) 654-8720 (505) 476-8625 (609) 292-5550 (603) 271-2513 (775) 687-9515 (402) 471-2541 (402) 471-0521 (406) 444-4071 Number Phone 59

Contacts Phone State Drinking Water Program Website Number

South Department of Health and Environmental Control: Drinking Water (803) 898-4300 Carolina Program http://www.scdhec.net/eqc/water/ (888) 481-0125

South Department of Environment and Natural Resources: Drinking Water (605) 773-3754 Dakota Program http://www.state.sd.us/denr/des/drinking/dwprg.htm

Department of Environment and Conservation: Division of Water Supply (615) 532-0191 Tennessee http://www.state.tn.us/environment/dws/

Texas Commission on Environmental Quality (512) 239-4691 Texas http://www.tceq.state.tx.us/nav/util_water/

Department of Environmental Quality: Division of Drinking Water Utah (801) 536-4200 http://www.drinkingwater.utah.gov/

Vermont Agency of Natural Resources, Water Supply Division (802) 241-3400 Vermont http://www.anr.state.vt.us/dec/watersup/wsd.htm (800) 823-6500

Department of Health: Offi ce of Drinking Water Virginia (804) 864-7500 http://www.vdh.state.va.us/dw/ Virgin Department of Planning and Natural Resources: Division of (340) 774-3320 Islands Environmental Protection http://dpnr.gov.vi/dep/PublicWaterSup.htm (340) 773-1082 (U.S.) Division of Environmental Health: Offi ce of Drinking Water (360) 236-3100 Washington http://www.doh.wa.gov/ehp/dw/

Bureau for Public Health: Department of Health and Human Resources West Virginia (304) 558-6715 http://www.wvdhhr.org/oehs/eed/

Department of Natural Resources: Bureau of Drinking Water and Wisconsin (608) 266-0821 Ground Water http://www.dnr.state.wi.us/org/water/dwg/index.htm

EPA Region 8: Wyoming Drinking Water Program Wyoming (307) 777-7072 http://www.epa.gov/region08/water/dwhome/wycon/wycon.html Contacts

60 Water Security Handbook List of EPA RegionalList of Contacts EPA Region 2 EPA Region 1 EPA Region 10 EPA Region 9 EPA Region 8 EPA Region 7 EPA Region 6 EPA Region 5 EPA Region 4 EPA Region 3 EPA Region http://www.epa.gov/region2/water http://www.epa.gov/NE/eco/drinkwater/dw-security.htm s+in+Region+1 http://yosemite.epa.gov/R10/WATER.NSF/webpage/Water+Issue http://www.epa.gov/region9/water http://www.epa.gov/region8/compliance/security/secure.htm http://www.epa.gov/region7/security/index.ht http://www.epa.gov/Arkansas/6wq/swp/security http://www.epa.gov/region5/water http://www.epa.gov/region4/water http://www.epa.gov/reg3wapd 0 Water Security Handbook EPA RegionWebsite / / / / / m / l l (212) 637-3879 (617) 918-1694 (312) 886-0190 (404) 562-9446 (215) 814-5668 (206) 553-1389 (415) 947-8707 (303) 312-7021 (913) 551-7585 (214) 665-2776 Number Phone 61

Contacts

U.S. Environmental Protection Agency Offi ce of Ground Water and Drinking Water Washington, D.C. 20460

EPA Publication No. 817-B-06-001 www.epa.gov/watersecurity April, 2006