09-28-2020-R - Laserfiche WebLink

Home Browse Search

Professional Services Agreement Risk and Resilience Assessment Page 4 of 12 Version2.1 02212019 i. The threat analysis will be developed in-house after obtaining some additional information on threat likelihood factors from the CLIENT during the workshop discussed in 2.2.1.iii. 2.2.5 Consequence Analysis Consequence analysis is the identification and estimation of reasonable consequences generated by each specific threat-asset combination. Consequences that are quantified include utility financial consequences (asset replacement costs, remediation costs and revenue lost), regional economic consequences (regional economy impacts due to service outages), and public health impacts (injuries and fatalities). The consequence analysis will be completed in-house. i. If data is available, CLIENT will provide COMPANY with original construction costs associated with all critical assets. COMPANY will calculate the present worth of the provided construction cost data to estimate an asset replacement cost. ii. If CLIENT, does not have original construction cost data, COMPANY will provide approximate cost estimates for critical asset replacement. COMPANY will develop the cost estimates as an additional service. iii. COMPANY will develop a consequence matrix, which will include the assumptions made to quantify consequences. 2.2.6 Risk and Resilience Analysis Once the above steps are completed, the risk and resilience analysis is conducted. The risk and resilience analysis will calculate a baseline risk for each asset/threat pair, quantified as a monetary value. Risk and Resilience analysis creates the foundation for selecting strategies and tactics to counter or mitigate disabling events by establishing priorities based on the levels of risk and resilience and the extent they can be improved. The risk and resilience analysis will be completed in-house. 2.2.7 Submit Draft RRA to CLIENT Upon completion of an internal quality control review, COMPANY will submit two hard copies of the draft RRA to CLIENT for review. A meeting will be held to discuss the results of the RRA and obtain CLIENT comments. 2.2.8 Finalize RRA and Submittal of Certification to U.S. EPA The CLIENT review comments on the draft RRA will be incorporated and final RRA will be submitted to CLIENT. Two hard copies will be submitted to the CLIENT. CLIENT to submit certification to U.S. EPA per Agency guidelines that the RRA has been completed.