| 1.
Have you undertaken a vulnerability assessment? |
| 2.
Does your emergency response plan incorporate the findings
of your vulnerability assessment? |
| 3.
Have you frequently tested your emergency response plan
against “Die Hard” scenarios? Are you evaluating
your security based upon performance during these hypothetical
drills? |
| 4.
Do you know who is responsible for security at your
facility? |
| 5.
Is the same person responsible for collection system
security? If not, are they coordinating with each other? |
| 6.
Have you checked all employees, contractors, subcontractors,
visitors, delivery personnel, landscapers, and persons
digging up sewer distribution system components or accessing
manholes or all other persons with access to the facilities
on-site or off-site (treatment plants, lift stations,
and combined sewer overflow facilities) against the
FBI's “Most Wanted” list? |
| 7.
Are all employees and visitors required to wear identification
badges? |
| 8.
Are all visitors and deliveries accompanied while on
the premises? |
| 9.
Have you completed background checks on all employees? |
| 10.
Are all doors and gates locked? |
| 11.
Are all keys to doors and gates accounted for? |
| 12.
Do you collect all keys and identification badges from
dismissed personnel? |
| 13.
Is your supervisory control and data acquisition system
secure from Internet hacking? |
| 14.
Does it take multiple employees at different terminals
with different passwords to control all security and
supervisory control and data acquisition systems? |
| 15.
Are passwords changed regularly? |
| 16.
Are all facilities (treatment plants, lift stations,
and combined sewer overflow facilities) fenced? |
| 17.
Are these facilities well lighted, and do they have
a perimeter that is monitored by surveillance cameras
(with a minimum of seven tapes to record a week's worth
of activities) and motion detectors? |
| 18.
Is someone watching the gates? |
| 19.
Are surveillance cameras located on-site at key points,
such as chemical storage facilities? |
| 20.
Do employees make surveillance rounds at varying times
on each shift to check for anything out of the ordinary? |
| 21.
Is redundancy built into all systems? |
| 22.
Is there a backup power source or generator available? |
| 23.
Are all portable pumps accounted for and stored far
enough apart that they are not easy targets? |
| 24.
Are you coordinating with other sewer utilities to create
cross-connections? |
| 25.
Are you coordinating with the public to look for suspicious
people or automobiles in sensitive areas? |
| 26.
Are employees taking the keys to their public vehicles
with them? |
| 27.
Have you established a prioritized list of people and
phone numbers to be contacted in an emergency situation?
|
| 28.
Is this phone list located next to all phones? |
| 29.
Do you have a plan to quickly and effectively inform
downstream users in the case of an emergency? |
| 30.
Have you coordinated with the police department to make
sure that they make mandatory stops at important facilities
(treatment plants, lift stations, and CSO facilities)
while on duty? Do they know what chemicals are on-site
and where they are stored? |
| 31.
Are all chemical agents delivered to the plant tested
to make sure that the contents are what are indicated
on the label? |
| 32.
Are you aware of the vulnerable areas in your sewer
network? |
| 33.
Have you geospatially inventoried all of your sewer
and storm sewer lines? |
| 34.
Do you know whether any of these lines run beneath or
close to otherwise secure buildings? |
| 35.
Have you secured manhole covers and placed sensors in
these areas? |
| 36.
Are you observing aquatic wildlife in the outfall's
water body? |
| 37.
Are you monitoring for pH, corrosivity, oxidation-reduction,
and flammability, and air for explosivity within the
collection system? |
| 38.
Are you monitoring for total chlorine residual at the
outfall? |
| 39.
Have you established alarm levels for the various parameters
(pH, corrosivity, oxidation-reduction, flammability,
explosivity, total chlorine residual) that you are monitoring,
and have you established a protocol that will be followed
if the alarm level is triggered? |
