Experts' Views on How Future Federal Funding Can Best Be Spent to Improve Security
GAO-04-29: Published: Oct 31, 2003. Publicly Released: Dec 1, 2003.
After the events of September 11, 2001, Congress appropriated over $100 million to help drinking water systems assess their vulnerabilities to terrorist threats and develop response plans. As the Environmental Protection Agency has suggested, however, significant additional funds may be needed to support the implementation of security upgrades. Therefore, GAO sought experts' views on (1) the key security-related vulnerabilities of drinking water systems; (2) the criteria for determining how federal funds should be allocated among drinking water systems to improve their security, and the methods for distributing those funds; and (3) specific activities the federal government should support to improve drinking water security. GAO conducted a systematic Webbased survey of 43 nationally recognized experts to seek consensus on these key drinking water security issues.
GAO's expert panel cited distribution systems as among the most vulnerable physical components of a drinking water utility, a conclusion also reached by key research organizations. Also cited were the computer systems that manage critical utility functions, treatment chemicals stored on site, and source water supplies. Experts further identified two overarching vulnerabilities: (1) a lack of information individual utilities need to identify their most serious threats; and (2) a lack of redundancy in vital system components, which increases the likelihood that an attack could render an entire utility inoperable. According to over 90 percent of the experts, utilities serving high-density areas deserve at least a high priority for federal funding. Also warranting priority are utilities serving critical assets, such as military bases, national icons, and key academic institutions. Direct federal grants were clearly the most preferred funding mechanism, with over half the experts indicating that such grants would be very effective in distributing funds to recipients. Substantially fewer experts recommended using the Drinking Water State Revolving Fund for security upgrades. When experts were asked to identify specific security-enhancing activities most deserving of federal support, their responses generally fell into three categories: (1) physical and technological upgrades to improve security and research to develop technologies to prevent, detect, or respond to an attack (experts most strongly supported developing near realtime monitoring technologies to quickly detect contaminants in treated drinking water on its way to consumers); (2) education and training to support, among other things, simulation exercises to provide responders with experience in carrying out emergency response plans; specialized training of utility security staff; and multidisciplinary consulting teams to assess utilities' security preparedness and recommend improvements; and (3) strengthening key relationships between water utilities and other agencies that may have key roles in an emergency response, such as public health agencies, law enforcement agencies, and neighboring drinking water systems; this category also includes developing protocols to encourage consistent approaches to detecting and diagnosing threats.
Recommendation for Executive Action
Status: Closed - Implemented
Comments: EPA's Acting Director, Water Security Division, told GAO in January 2004, that the report provided needed support for actions they are now taking to develop tools, training, and technical assistance for water systems. EPA funded a number of activities that enhance physical security and support technological improvements, as well as improve education and training, such as developing the emergency response toolbox, security product guidance, and laboratory compendium, as well as training on emergency response and vulnerability assessments. These specific security-enhancing activities are consistent with those discussed in the GAO report.
Recommendation: As EPA refines its efforts to help drinking water utilities reduce their vulnerability to terrorist attacks, the Administrator of the EPA should consider the information in this report to help determine: how best to allocate security-related federal funds among drinking water utilities; which methods should be used to distribute the funds; and what specific security-enhancing activities should be supported.
Agency Affected: Environmental Protection Agency