18 - Laserfiche WebLink

Scope of Services for Preparation of !HE Cl/Y OF AWIA-Compliance Documents PIIIMIIMPA City of Pleasanton pL£ASANTON. Task 6.2. Vulnerability Analysis The vulnerability analysis determines the ability of each critical asset and its protective systems to withstand each specified threat. Under this task, the West Yost team will analyze existing protective systems such as: physical security systems, City security procedures, relocate water intakes, flood protection, backup generators, and existing emergency response capabilities, plans, and protocols. The West Yost team will conduct additional site visits, if needed, to collect information and document protective systems to support the vulnerability analysis. For example: we may decide to visit some of the assets after dark for the best understanding of security issues. Based on our detailed review of facility construction, protective systems, layout, countermeasures, and mitigation measures we will then evaluate vulnerabilities for each threat-asset pair. Task 6.3. Threat Likelihood Analysis West Yost will estimate the threat likelihood (also known as annualized probability or frequency) that a specific threat or hazard will occur. We will utilize standard information on frequency and severity of natural hazards from sources such as NOAA, FEMA and local hazard mitigation plans. This will also account for the City-specific information gathered in previous tasks. Task 6.4. Review Results The West Yost team will present and discuss the findings from the consequence workshop, the vulnerability analysis, and the threat likelihood analysis to the City project manager via teleconference prior to moving on to Task 7. Task 6 Deliverables: • Consequence analysis summary tables • Vulnerability analysis summary table • Threat likelihood analysis summary table Task 7. Risk & Resilience Assessment Summary Report With the consequences, vulnerabilities, and threat likelihoods determined, the overall risk and resilience (financial and operational) of the City will be calculated. The results and the work conducted in this project will be presented in the RRA report. This task also includes preparation of the draft RRA certification letter to submit to the EPA. There are three steps involved in this calculating risk and resiliency. First is to calculate risk for each threat-asset pair as the product of the results from the consequence analysis, vulnerability analysis, and threat likelihood analysis, using the following equation from J100: Risk= Consequences x Vulnerability x Threat Likelihood (C x V x T) West Yost will prepare a RRA Report that summarizes the tasks conducted, the results of the workshops and analyses, and the risk and resilience calculations. The cyber-RRA results will also be incorporated into this report. The report will be of sufficient depth and breadth to document that the City used an all-hazards approach and is in compliance with the AWIA. WEST Y O S T ASSOCIATES 8 City of Pleasanton n\m\s\cityp\\2019 AWIA Scope and Budget November 2019