Critical Infrastructure Security and Resilience Month – Make Actionable Plans

As part of Critical Infrastructure Security and Resilience Month, WaterISAC is highlighting CISA’s four recommended best practices/strategies that infrastructure organizations can implement to help make them more secure and resilient. Today’s best practice is Make Actionable Plans.

Water and wastewater utilities face an increasingly complex set of threats, both natural and man-made, that can disrupt or even incapacitate utility services. One of the primary ways to be able to prepare for and respond to threats across the all-hazards landscape is to create security plans, emergency response plans, and other hazard mitigation plans. Organizations are encouraged to develop both a strategic risk management plan to reduce the risks and vulnerabilities identified and an actionable incident response and recovery plan to help withstand and rapidly restore operations within minimal downtime. To help critical infrastructure organizations with this effort, EPA, CISA, and FEMA have produced a collection of free resources.

Make Actionable Plans

• EPA – Emergency Response Plan Template and Instructions: This resource can be used to develop a step-by-step plan to respond when an emergency strikes.
• EPA – Incident Action Checklists for Water Utilities: Utilities can use these twelve “rip & run” style checklists to help with emergency preparedness, response and recovery activities. 
• CISA – Security Planning Workbook: A comprehensive resource that can assist critical infrastructure owners and operators with the development of a foundational security plan. 
• FEMA – Hazard Mitigation Planning: Hazard mitigation planning reduces loss of life and property by minimizing the impact of disasters.
• FEMA – Climate Adaptation Planning Guidance for Emergency Managers: The guide helps emergency managers incorporate climate adaptation into emergency management planning.

For more information on CISA’s Critical Infrastructure Security and Resilience Month, visit CISA’s dedicated website.