HomeMy WebLinkAbout09 CONS SVC EMERG PLAN 06-16-03AGENDA REPORT
Agenda Item
Reviewed:
City Manager
Finance Director
MEETING DATE: JUNE 16, 2003
TO:
WILLIAM A. HUSTON, CITY MANAGER
FROM:
PUBLIC WORKS DEPARTMENT/WATER SERVICES DIVISION
SUBJECT:
CONSULTANT SERVICES AGREEMENT FOR THE VULNERABILITY
ASSESSMENT, EMERGENCY RESPONSE PLAN, AND EMERGENCY
OPERATIONS PLAN
SUMMARY
A Consultant Services Agreement for the development of the Vulnerability Assessment, Emergency
Response Plan, and Emergency Operations Plan for the Water Services Division is submitted for
consideration by the City Council.
RECOMMENDATION
It is recommended that the City Council approve the submitted Consultant Services Agreement with
Carollo Engineers of Santa Ana, California, in the amount of $72,539.00, and authorize the Mayor
and City Clerk to execute the agreement on behalf of the City, pending approval of the Consultant
Services Agreement by the City Attorney.
FISCAL IMPACT
Adequate funds are available in the Public Works Department Water Division's FY 02/03 Operating
Budget for this project.
BACKGROUND
As a direct result of the terrorist attacks of September 11, 2001, the Safe Drinking Water Act was
amended by the Public Health Security and Bioterrorism Preparedness and Response Act of 2002,
H.R. 3448 ,(Bioterrorism Act). This amendment requires that drinking water utilities conduct an
assessment of their vulnerability to terrorist acts, submit this assessment to the USEPA, and make
appropriate adjustments reflective of the findings to their emergency response plans. For drinking
water systems serving between 50,000 to 100,000 people, the vulnerability assessment is due to the
USEPA by December 31, 2003.
All water system components, including production, transmission, storage, distribution, and treatment
facilities will be subjected to a thorough and systematic evaluation conducted in full compliance with
USEPA guidelines and requirements. The effort will include an evaluation of the existing security
systems, and the physical vulnerabilities and criticality of existing water facilities. This information will
be utilized to quantify the risk posed to each facility, prioritize the most critical systems and/or
facilities, and develop design recommendations and cost estimates for facility-specific improvements
to reduce risks. Within six months of submittal of the vulnerability assessment to the USEPA,
emergency response Plans must be prepared and/or updated to incorporate the results of the
vulnerability assessment.
Consultant Services Agreement for the Vulnerability Assessment,
Emergency Response Plan and Emergency Operations Plan
June 16, 2003
Page 2
The primary focus of the vulnerability assessment and the emergency response plan is to evaluate
and improve facility security and emergency response planning and preparedness. In order to take
advantage of the consultant's emergency planning and operations experience, and to ensure that the
findings and plans generated by this effort are utilized to their fullest extent, the consultant will review
applicable sections of the City's Emergency Plan. As a result of this effort, a water system
emergency response plan/emergency operations plan will be developed. This document will be
incorporated as an appendix into the City's Emergency Plan to address malevolent, accidental, and
other activities/occurrences that could disrupt the ability of the water system to provide a safe and
reliable supply of drinking water, and how responses to these activities should be addressed.
Eight (8) Requests for Proposals were solicited from a select list of consultants who had previously
completed vulnerability assessments for water agencies serving over 100,000 people. On April 30,
2003, proposals were received from seven (7) consultants. Based on the consultant's and
subconsultant's qualifications, project understanding and approach, staff recommends that Carollo
Engineers be selected to prepare the vulnerability assessment, develop the emergency response
plan and emergency operations plan, and incorporate the plans into the City's Emergency Plan for a
not-to-exceed fee of $72,539.00.
The following is the anticipated schedule for the project:
City Council Authorization ................................................................... 06-16-03
Consultant Services Agreement Approval ........................................... 07-07-03
Notice to Proceed ................................................................................ 07-08-03
Completion of Vulnerability Assessment ............................................. 11-30-03
Completion of Emergency Response Plan/
Emergency Operations Plan ...................................................... 04-30-04
Tim D. S~'~Tet
Director of Public Works/City Engineer
Brian A. Ragland
Water Services Manager
TDS: BAR: ccg: Vulnerability Assessment.doc
Attahcments
CONSULTANT SERVICES AGREEMENT
THIS AGREEMENT FOR CONSULTANT SERVICES, is made and entered into
this~ day of ,2003, by and between the CITY OF TUSTIN, a municipal
corporation, hereinafter referred to as "City", and Carollo En.qineers, P.C. an Arizona
corporation, hereinafter referred to as "Consultant".
RECITALS
WHEREAS, City requires the services of a consultant to furnish the necessary
professional consulting services for the Vulnerability Assessment, Emergency
Response Plan, and Emergency Operations Plan hereinafter referred to as "Project";
and
WHEREAS, Consultant has submitted to City a proposal dated April 30, 2003 a
copy of which is attached hereto, marked as Exhibit "A" and is by this reference
incorporated into this Agreement; and
WHEREAS, Consultant is qualified to provide the necessary services for the
Project and desires to provide said services; and
WHEREAS, City desires to retain the services of Consultant for said Project.
NOW, THEREFORE, for the consideration and upon the terms and conditions
hereinafter set forth, the parties agree as follows:
AGREEMENT
Section 1: Scope of Consultant's Services.
Consultant shall perform all work necessary to complete in a manner satisfactory
to City, the services set forth in Exhibit "A". Any "Special Requirements" or additional
terms and conditions of this Agreement are set forth in Exhibits "B", "C" and "D", and are
incorporated herein by this reference.
Section 2: Order of Precedence.
In the event of a conflict between or among any of the documents comprising this
Agreement, the following order of precedence shall govern the provision in question:
1. This Agreement
2. Special Requirements Exhibits "B", "C" and "D"
3. Consultant's Proposal (Exhibit "A")
_]-
Section 3: Time for Completion.
The time for completion of the work to be performed by Consultant is an essential
condition of this Agreement. Consultant shall prosecute regularly and diligently the
work of this Agreement according to reasonable schedules established by the City for
various items described and as outlined within Consultant's proposal. Consultant shall
not be accountable for delays in the progress of its work caused by any condition
beyond its control and without the fault or negligence of Consultant. Delays shall not
entitle Consultant to any additional compensation regardless of the party responsible for
the delay.
Section 4: Compensation.
Ao
The compensation to be paid under this Agreement shall be as set forth in
Exhibit "A", not to exceed a total cost of $72,539.00.
Bo
Consultant shall submit detailed invoices, based upon the actual work performed
accompanied by backup documentation as requested by the City.
Co
Progress payments for work completed shall be paid by City as the work
progresses, within thirty (30) days of the date of Consultant's invoice.
Do
Consultant shall provide City with a monthly itemization of all work performed,
and the fees accrued thereon, in complete and sufficient detail to fully apprise
City thereof.
Section 5: Independent Contractor.
Consultant's relationship to City in the performance of this Agreement is that of
an independent contractor. Consultant's personnel performing services under this
Agreement shall at all times be under Consultant's exclusive direction and control and
shall be employees of Consultant and not employees of City. Consultant shall pay all
wages, salaries and other amounts due its employees in connection with this
Agreement and shall be responsible for all reports and obligations respecting them,
such as social security, income tax withholding, unemployment compensation, workers'
compensation and similar matters.
Section 6: Indemnification.
Consultant agrees to indemnify, defend and hold City, its officers, agents,
employees, successors and assigns harmless from any loss, damage, injury, sickness,
death, or other claim made by any person and from all costs, expenses and charges
including attorney's fees caused by or arising out of Consultant's, its officers', agents',
subcontractors', or employees' negligent acts, negligent errors, or negligent omissions
or willful misconduct, or conduct for which the law imposes strict liability on Consultant
in the performance or failure to perform this Agreement.
-:2-
Section 7: Insurance.
Ao
Consultant shall maintain in full force and effect during the term of this
Agreement policies of comprehensive general liability, personal injury and
automobile liability insurance with limits of at least $1,000,000 combined single
limit coverage per occurrence.
S.
Consultant shall maintain in full force and effect during the term of this
Agreement a policy of professional liability insurance coverage with limits of at
least $1,000,000 combined single limit coverage per claim or per occurrence. If
Consultant provides claims made professional liability insurance, Consultant shall
also agree in writing either (1) to purchase tail insurance in the amount required
by this Agreement or to cover claims made within five (5) years of the completion
of Consultant's service under this Agreement, or (2) to maintain professional
liability insurance coverage with the same carrier in the amount required by this
Agreement for at least five (5) years after completion of Consultant's services
under this Agreement. Consultant shall also provide evidence to the City of the
purchase of the required tail insurance or continuation of the professional liability
policy by executing the attached Letter Agreement on Consultant's letterhead.
C.
Consultant shall carry and pay for such compensation insurance as is necessary
to fully protect Consultant and its employees under California Worker's
Compensation Insurance and Safety Laws, and shall relieve the City from all
responsibility under said laws in connection with the performance of this
Agreement.
D.
All insurance required pursuant to this Section shall be issued by a company
admitted in the State of California and rated A, VII or better by the latest edition
of Best's Key Rating Guide.
Eo
Upon execution of this Agreement, Consultant shall provide to City certificates of
insurance on the City's form evidencing the required insurance. If self-insured for
worker's compensation, Consultant shall submit to City a copy of its certification
of self-insurance issued by the Department of Industrial Relations.
Section 8: Termination of Agreement.
A.
City shall have the right to terminate any or all of the services covered by this
Agreement at any time for any reason by giving written notice to Consultant.
B,
Upon termination of this Agreement, Consultant shall be paid for services
rendered by the effective date of the termination.
C.
Upon termination of this Agreement or completion of the Project, all documents
relating to the Project shall become the sole property of City. Should City
terminate this Agreement pursuant to subparagraph A. of this Section,
Consultant shall, within ten (10) business days of receipt of notice of termination,
-3-
provide City with all documents within Consultant's possession relating to this
Agreement and the Project, including but not limited to all completed documents
and all drafts of uncompleted documents.
Section 9: Notices
Any notice allowed or required to be given shall be effective upon personal
delivery thereof, or upon depositing thereof in the United States Postal Service, certified
mail, return receipt requested, postage prepaid, addressed as follows:
To City:
City of Tustin
Attn.: Director of Public Works/City Engineer
300 Centennial Way
Tustin, CA 92780
To Consultant:
Carollo Engineers, P.C.
Attn: Ms. Mary Clyburn, P.E.
3100 So. Harbor Blvd., Suite 200
Santa Ana, CA 92704
Section 10: Miscellaneous Provisions.
Ao
Consultant shall proceed immediately and diligently to perform the services
provided for in this Agreement upon receipt of notice from City to proceed
therewith.
B.
No part of this Agreement may be assigned by Consultant without the prior
written approval of City.
C.
This Agreement shall extend to and be binding upon and inure to the benefit of
heirs, executors, administrators, successors and assigns of the respective parties
hereto.
D.
Consultant shall perform all services required under this Agreement using that
degree of care and skill ordinarily exercised under similar conditions in similar
localities, and shall be responsible for all errors and omissions for services
performed by Consultant under the terms of this Agreement.
E,
Consultant certifies that there shall be no discrimination against any employee
who is employed in the work covered by this Agreement, or against any
application for such employment, because of race, religion, color, sex or national
origin including but not limited to, the following: employment, upgrading,
demotion or transfer, recruitment, or recruitment advertising, lay-off or
termination, rate of pay or other forms of compensation, and selection for
training, including apprenticeship.
-4-
IN WITNESS WHEREOF, this Agreement was executed by the parties on the
day and year first above written.
"CITY"
CITY OF TUSTIN
By
Tracy Wills Worley, Mayor
ATTEST:
Pamela Stoker, City Clerk
APPROVED AS TO FORM:
Lois E. Jeffrey, City Attorney
"CONSULTANT"
CAROLLO ENGINEERS, P.C.
By
Mary Clyburn, P.E.
-5-
EXHIBIT "A"
CONSULTANT'S PROPOSAL
Due to the voluminous size of Consultant's Proposal, it is on file with the City Clerk.
-1-
EXHIBIT "B"
SPECIAL REQUIREMENTS
.
.
.
.
.
.
.
.
The Consultant shall comply with all applicable federal, state and local laws
applicable to its activities.
The Consultant shall not release to the public or press any information
regarding the purpose/scope of services to be accomplished or data specific to
the project required under the Agreement without prior authorization of the
Contract Officer. All such information is considered confidential. All inquiries
made of Consultant shall be immediate referred to the Contract Officer. The
Contract Officer for the prOject shall be the City's Water Services Manager.
Consultant shall present to the City certificates of insurance and endorsement
forms verifying that the Consultant has the insurance as required by this
Agreement. Said form shall be reviewed and approved by the office of the City
Attorney. A certificate of insurance form is attached.
Consultant shall utilize those professional staff members to perform services as
identified in Consultant's proposal. No substitution shall be made without the
advance written approval of the Contract Officer. No increase in compensation
or reimbursable salary rates will be allowed when personnel or firm substitutions
are authorized by the Contract Officer.
The Consultant shall' review and replace project personnel who do not perform
assigned duties in a manner satisfactory to Contract Officer when requested by
Contract Officer.
Monthly progress reports shall be submitted by Consultant with billing requests.
At minimum, these reports shall specify the period reported, tasks completed,
tasks underway, percent of project completed and strategies to solve any timing
delays.
Consultant shall be required to meet with the Contract Officer as determined
necessary or desirable to discuss elements of the Scope of Work and project's
progress.
Field Investigation necessary. The Consultant shall obtain all necessary field
data and make investigations and studies necessary to properly accomplish the
work required under this Agreement.
-1-
EXHIBIT "C"
SCHEDULE OF COMPENSATION
Compensation
1. As compensation for the Consultant's services under this Agreement, the City
shall pay the Consultant a not-to-exceed fixed amount of $72,539.00.
Expense Reimbursement
ao
The Consultant's not-to-exceed compensation for services
Agreement includes reimbursement for. all miscellaneous
Itemized payment statements shall set forth in detail
reimbursement expenses during the preceding month.
under this
expenses.
all actual
Compensation for Additional Services
,
In the event the City requires services in addition to those described in Exhibit A
and B, said services must first be approved in writing by the Contract Officer.
The Consultant shall be compensated at the Consultant's standard hourly rates
for professional services, plus reimbursement of expenses or a fixed amount
agreed to in writing by the City and Consultant.
Method of Payment
,
As a condition of precedent to any payment to Consultant under this
Agreement, Consultant shall submit monthly to the City a statement of account
which clearly sets forth by dates the designated items of work, as well as
reimbursable expenses, for which the billing is submitted. The payment request
shall identify each task required by the Agreement, percent of completion,
amount of actual reimbursable expenses and requested amount to be billed
against each task.
Timing of Payment
o
The City shall review Consultant's monthly statements and pay Consultant for
services rendered and costs incurred hereunder, at the rates and in the
amounts provided hereunder, on a monthly basis in accordance with the
approved monthly statements.
-1-
EXHIBIT "D"
SCHEDULE OF PERFORMANCE
The completion date of the Scope of Services, as described in this Agreement, shall be
forty-three (43) weeks after receipt of a Notice to Proceed.
-1-
VULNERABILITY
ASSESSivi ENT,
AND
Dedic~t. tc(] to creative,
re.s'pon,sive, qua, lily! solzttio'tl.~
those we sert,e.
April 30, 2003
300.20.747
City of Tustin Water Services Division
1472 Service Road
Tustin, CA 92780
Attention: Mr. Brian A. Ragland, P.E., Manager
Subject: Proposal for Professional Engineering Services for Preparation of a
Vulnerability Assessment, Emergency Response Plan, and Emergency
Operations Plan for the City of Tustin's Potable Water System
Dear Mr. Raglan&
Thank you for providing us the opportunity to offer our services to the City of Tustin (Tustin) in this
proposal to provide Professional Engineering Services for the Preparation of a Vulnerability
Assessment, Emergency Response Plan, and Emergency Operations Plan for the City of Tustin's
Potable Water System. In an attempt to make your review of our proposal straightforward and easy to
understand, we have included a locator table in Section of our proposal that identifies where the
Preliminary Scope of Work items in your Request for Proposal (RFP) can be found in our proposal.
For your project, Carollo will work with RMP Corporation and TRC-EASi. Team members from
Carollo include Mary Clyburn as Partner4n-Charge and Brian Powell as Project Manager. Brian has
worked with the City of Tustin on the Rawlings Reservoir Booster Pumping Station and was involved
in the Foothill Reservoir rehabilitation project. Because of this prior experience, Brian is very familiar
with many of your facilities and how they interrelate. Another key member from Carollo is H~l~ne
Baribeau who will address water quality related issues. Steven Melvin of RMP will be the Project
Engineer. TRC-EASI will perform site security and facility protection. This includes James Black and
Keith Kushner.
Several members of our project team are certified by Sandia National Laboratories for performing
Vulnerability Assessments using the RAM.W methodology. In addition, our subconsultant RMP
qualifies as an MBEAVBE for federal projects. Although your RFP indicated that this was not a
requirement, we felt that it was worth noting.
As a side note of interest, Carollo and RMP are sponsoring a seminar on security vulnerability
assessments. A flyer is attached that provides more information. Please consider this an invitation to
attend.
We appreciate the opportunity to provide this proposal to you. Tustin is embarking on a significant
project that has serious implications within the world as we know it today. We would feel privileged to
work with you in this important venture.
Sincerely,
l~EC~JP:jpt
Enclosures
Brian J. Powell, P.E.
Project Manager
V:\Client20\Tustin~Prop\Vulnerability Assessment~Docs~etter.doc
3100 SOUTH HARBOR BOULEVARD, SUITE 200 · SANTA ANA, CALIFORNIA 92704 · (714) 540-4300 · FAX (714) 540-4349
LEGAL NAME AND ADDRE55
Carollo Engineers, P.C.
3100 South Harbor Boulevard, Suite 200
Santa Aha, CA 92704
LEGAL FORM
Carollo is a professional corporation managed by
45 partners.
CONTACT PERSON
Ms. Mary E. Clyburn, P.E., Partner
Telephone: (714) 540-4300
Facsimile: (714) 540-4349
E-mail: mclybum@carollo.com
CONSULTANT SERVICES
AGREEMENT ACKNOWLEDGEMENT
Carollo has reviewed the Consultant Services
Agreement (CSA) and respectfully requests to
include the following in the agreement:
"Engineering Support Services:
It is understood between the parties that
Consultant's performance under this Agreement
is to render engineering support services in
connection with the Project. Consultant will not
render expert security advice nor is Consultant
qualified as an expert relating to City's strategic
security plan. Consultant is fully qualified to
render facilities design or construction services to
City by separate agreement. Consultant assumes
no responsibility for the performance of City,
independent security experts, or Construction
Contractors in connection with the Project."
SUBCONSULTANTS
Carollo intends to use the services of the following
consultants on your project:
Risk Management Professionals, Inc.
28570 Marguerite Parkway, Suite 112
Mission Viejo, CA 92692-3728
TRC-EASi
21 Technology Drive
Irvine, CA 92618
INSURANCE ACKNOWLEDGEMENT
Carollo furnishes and maintains insurance to
protect both our client and our firm from claims
which may arise from the negligent performance
by our employees and in the functions and services
required under this project.
Carollo has continuously maintained errors and
omissions insurance since mid-1960, and currently
has errors and omissions insurance with an A-
rated American insurance company. Carollo will
furnish a certificate of insurance upon request with
necessary endorsements. Carollo also carries a
comprehensive general business liability insurance
policy covering bodily injury, property damage, and
vehicular liability.
The City's insurance requirements and Certificate
of Insurance are acceptable as noted:
On page 14 of the RFP, paragraph 1 states that
if Consultant provides claims-made professional
liability insurance that it either purchase
tail insurance or sign a letter agreement that
Consultant will maintain professional liability
insurance for 5 years after completion of the
project with the same carrier. Paragraph 7.B
of the contract makes the same statement.
However, the letter agreement states "...it shall
maintain insurance coverage with the insurance
company listed on the attachment, or with an
equivalent carrier..." We can comply with the
statement made in the letter agreement, but not
the statement made in the RFP or the contract.
Carollo cannot promise to remain with the same
professional liability carrier, but it can agree to
v:\glient20\Tustin~Prop\Vulnerability Assessment~INDD\Sec0 l-Identification.indd Consultant Identification/Acknowledgements
maintain insurance coverage with an equivalent
carrier.
Also, on page 14 of the RFP, paragraph 1 states
"The City shall be named as additional insured."
No insurance policy is specified in this regard and
so we assume they are referring to every policy.
Carollo cannot name anyone as an additional
insured on our workers' compensation or
professional liability insurance policies. But, there
is no requirement that the City be named as an
additional insured for any policy in Section 7 of the
contract. However, the City's insurance certificate
form states that the City of Tustin is to be named
as additional insured with the exception of workers'
compensation and professional liability insurance
policies. We can comply with the requirements of
the contract and the insurance certificate form, but
not the RFP.
BUSINESS LICENSE
ACKNOWLEDGEMENT
Carollo and subcontractors will obtain the
required business license(s) if selected to provide
engineering services on this project.
V:\Client20\Tustin\Prop\Vulnerability Assessment~INDD\Sec01-Identification.indd
Consultant Identification/Acknowledgements
EXECUTIVE SUMMARY
Carollo Engineers (Carollo) is pleased to present
this proposal to the City of Tustin (Tustin) to
provide engineering consulting services to prepare
a Security Vulnerability Assessment, Emergency
Response Plan, and optionally, Emergency
Operations Plan, for Tustin's water system. Your
Security Vulnerability Assessment will include an
evaluation of all system components, including
production, storage, transmission, and distribution
facilities, and will be a thorough and systematic
evaluation conducted in compliance with USEPA
requirements.
Carollo is an
environmental
engineering firm
specializing in the
planning, design,
and construction
management of water
and wastewater facilities
for municipal agencies.
Carollo's exceptional
reputation is based on
70 years of outstanding
client service and a
continuous commitment
to quality.
Carollo has completed security vulnerability
assessments for the Cities of Santa Ana, Orange,
and Santa Barbara, Mesa Consolidated Water
District, Long Beach Water Department, and the
Placer County Water Agency. Our experience
allows us to be productive from the first day. We
know the questions to ask. We have developed a
list of preliminary questions that allow us to learn
what we need to know without wasting your time.
We will follow up with additional questions based
on your answers to our preliminary questions. This
allows us to focus in on your specific water system.
We have teamed with RMP, Inc. and TRC-EASi on four
security vulnerability assessments and have included them on
our team for your project. These two firms provide expertise
in vulnerability assessments, emergency planning, and
security systems that enhances our water background.
This experience extends to our' subconSultants.
We have teamed with RMP, Inc. and TRC-EASi
on four security vulnerability assessments and
have included them on our team for your project.
These two firms provide expertise in vulnerability
assessments, emergency planning, and security
systems that enhances our water background.
Since its formation, RMP, Inc. has established an
extensive experience base, serving clients from
a wide spectrum of industries. RMP, Inc. is an
industry leader in risk management for engineered
systems and its Consultants are in the forefront of
their fields of specialization. Recently,
RMP, Inc. personnel have
been directly involved
in the development of
: the methodology for
vulnerability assessment
created by Sandia, as
well as its application at
various facilities.
TRC-EASi provides
consulting, design, and
engineering expertise in
state-of-the-art security,
building automation, and
fire/life-safety systems
to clients in a variety of industries. TRC-EASi
is a secured member of InfraGard, a cooperative
undertaking between the U.S. Government (led by
the FBI and the National Infrastructure Protection
Center) and an association of businesses, academic
institutions, state and local law enforcement
agencies dedicated to increasing the security of the
United States critical infrastructures. InfraGard
also initiates a flow of critical information from
numerous secured sources so the owners and
operators of infrastructure assets can better protect
themselves and the United States government can
better discharge its law enforcement and national
security responsibilities.
V:\Client20\Tustin~Pmp\Vulnerability Assessment~INDD\Sec02-ExecutiveSummary. indd
Executive Summary
We know what to look for when we tour your
facilities. We have developed a checklist that
we use as a starting point to verify that we have
sufficiently investigated your facilities. This allows
us to quickly identify the needed information and/
or pictures while we are in the field. We have also
allocated time at each site to be sure that the list
was complete for that particular facility. In some
cases, we need to record additional information
and/or take additional photographs to complete the
fieldwork. We have determined that it is better to
spend a little more time in the field documenting
our findings while we are there. This actually saves
time later during the workshops when the facilities
are discussed in detail. Since Tustin will also have
a number of people attending the workshops, our
organized field effort helps save Tustin time and
money by reducing the amount of time spent in the
workshops.
Carollo's experience will also benefit Tustin
when recommendations are developed because
we know what recommendations work and
what does not work. We have investigated and
developed hundreds of recommendations. Some
recommendations were pursued while others
needed to be rethought. Our experience working
with security recommendations will minimize the
effort spent during the workshops. This will save
Tustin time and money during the workshops as
recommendations are discussed. In addition, we
understand the confidential nature of this project
and have outlined the procedures that we have in
place to address these concerns.
Carollo has assembled a highly qualified team
with the required experience in delivering similar
projects on time and within budget. Our project
team includes professionals who have been trained
and certified in conducting the RAM-W"=° security
vulnerability assessments for water agencies.
Carollo's project manager will be Brian Powell.
With 15 years of experience in the planning and
design of water distribution systems and facilities,
Brian will be the prime contact throughout the
project. Brian also served as Carollo's project
manager for security vulnerability assessments for the
Mesa Consolidated Water District, Placer County
Water Agency, Long Beach Water Department, and
the cities of Orange and Santa Ana.
Brian will be assisted by specialists including Dr.
H~llne Baribeau, Stephen Melvin, James Black,
and Gene Heyer. Dr. Baribeau has over 13 years
of experience in water quality and drinking water
treatment and distribution. She has worked
closely with the American Water Works Research
Foundation (AwwaRF), as both a principal
investigator and participant on various studies.
Stephen Melvin was instrumental in Sandia's
development of their Chemical Facility Vulnerability
Assessment Methodology and has been reviewing
the anti-terrorism portions
of risk management plans
for chemical facilities for
three years. James Black
has been responsible
for performing field
survey and analysis
of existing security
equipment and
plans, vulnerability
assessments, and
commissioning of
security systems.
Gene Heyer has 32
years experience in
the water industry with
SCADA systems.
The recommendations
that precipitate from
the workshops will be
developed into ranked
recommendations with
descriptions, construction
cost estimates, and
preliminary implementation
schedules. Our level of
effort for this task, the
Security Enhancement
Plan, goes significantly
beyond the minimal effort
outlined by the RAM-WTM
methodology, but will save
Tustin time and money
later when implementation
of the recommended
improvements is pursued.
Using our team of experts,
Carollo will prepare your
Security Vulnerability
Assessment in accordance
with USEPA requirements
using the RAM-Ws~4
methodology and tools
developed by Sandia
National Laboratories
(Sandia). We will follow the
RAM-WTM methodology
to establish your mission
statement, prioritize
your critical facilities,
determine your important
operations, identify
potential adversaries, and field visit your critical
facilities. We will use this information in a
workshop with your staff participating to establish
weaknesses in your existing countermeasures and
V:\Client20\Tustin~Prop~VulneraNlity Assessment\INDD\Sec02-ExecutiveSummary, indd
Executive Summary
brainstorm on potential mitigation measures.
The recommendations that precipitate from
the workshops will be developed into ranked
recommendations with descriptions, construction
cost estimates, and preliminary implementation
schedules. Our level of effort for this task, the
Security Enhancement Plan, goes significantly
beyond the minimal effort outlined by 'the RAM-
Ws~4 methodology, but will save Tustin time
and money later when implementation of the
recommended improvements is pursued.
Another part of our approach that provides
significant benefit to you and your staff involves
how we assemble and submit our work products.
We have divided the overall report into a series
of smaller reports and technical memorandums.
As we complete these documents, we will submit
them to you for review and comment. Each
document will become an appendix to the final
security vulnerability assessment report. The
security vulnerability assessment report itself will
summarize the findings and recommendations in
each of the appendixes. The real benefit to this
approach will be realized when we submit the
draft security vulnerability assessment report for
your review. Initially, the size of our report may
seem overwhelming, but you will quickly see that
you have already seen most of the report. Prior to
this point, it may not be obvious where each of
the individual documents are leading. However,
once the security vulnerability assessment report
comes together, it all begins to make sense. Many
of our clients who had not received the RAM-
WTM training, did not fully understand the overall
goal until they saw the completed report. We
have prepared a sample table of contents for your
security vulnerability assessment report to help
show the level of effort.
Tustin's Emergency Response Plan (and Emergency
Operations Plan, if included) must be completed
within five months of the acceptance and
submittal of the Security Vulnerability Assessment.
This task will include reviewing the Tustin's
existing Emergency Plan and make appropriate
recommendations. In addition, an Emergency
Response Plan (ERP) will be developed for the
Water Division in collaboration with your staff.
The ERP will focus on emergency responsiveness
and efficiency, improve security and minimize
risks. The intent of this document will be to help
guide your staff during an emergency. The ERP
will be developed for consistency with Emergency
Management System (SEMS) specifications.
Finally, we understand that the project must be
completed before the end of 2003. Our proposed
schedule reflects your request to complete your
vulnerability assessment by October 31, 2003, well
before the USEPA deadline. We see no problems
meeting this schedule.
V:\Client20\Tustin\Prop\Vulnerability Assessment\INDD\Sec02.ExecutiveSummary, indd
Executive Summary
CHAPTER I - EXECUTIVE SUMMARY
1.1
1.2
1,3
1.4
t.5
1,6
1,7
1,8
1.9
INTRODUCTION ......................................................................................... ;~:; .......................................................................................
METHODOLOGY ...................................................................................................................................................................................
FACILITY PRIORITIZATION .............................................................................. :;;: ...................................................................................
THREAT ASSESSMENT .................................................................................... ; ...................................................................................
SCENARIO IDENTIFICATION AND ANALYSIS SESSIONS ...................................... ~:.,.; ............................................................................
RISK-RANKED RECOMMENDATIONS ................................................................... ; .................................................
CYBER SECURITY ANALYSIS ................................................................................ ~:~"J!i ............................................................................
REOOMMENDED IMPROVEMENTS ........................................................................ :::ii ............................................................................
EMERGENCY RESPONSE PLAN .............................................................................. ~, ...........................................................................
·
·
4,1
AND
V:\Qient20\Tusdn~Prop\Vulnerability Assessment~INDDLqec02-ExecudveSummary. indd
Executive Summary
CHAPTER 8 - SECURITY ENHANCEMENT PLAN
8.1 INTRODUCTION ........................................................................ 'i:-i~ ......................................................................................................
8.2 METHODOLOGY ..................................................... : ..................... ~.:i~' i. ............................................................................................... ,,.
8.3 IMPROVEMENT RANKINGS ............................................................ i~!:il;;:~. ..............................................................................................
8.4 RECOMMENDED IMPROVEMENTS .................................................... ~'..,;ii, .................................................................................. ,i. .......
8.5 ESTIMATED COSTS OF IMPROVEMENTS ............................................. .51!.,: ..........................................................................................
CHAPTER 9 - EMERGENCY RESPONSE ~iLAN
9.2 EMERGENCY RESPONSE PLAN RECOMMENDATIONS .................................... i~i2!~:! .............................................................................
APPENDICES
use in a Malevolent Act Technical Memorandum
Identification and Analysis (SIA), and
V:\Client20\Tustin\PropWulnembility Assessment\INDD\Sec02.ExecutiveSummary, indd
Executive Summary
INTRODUCTION
Carollo Engineers (Carollo) is pleased to present
this proposal to the City of Tusdn (Tustin)
to provide engineering consulting services
to prepare a Security
Vulnerability
Assessment,
Emergency Response
Plan, and optionally,
Emergency
based on 70 years of outstanding client service and
a continuous commitment to quality.
The threat of terrorist attack bas changed the way we
think about security and the need to protect our nation's
infrastructure. We will prepare a Security Vulnerability
Assessment that addresses the security of Tustin's
facilities and safety of your drinking water.
Operations Plan, for Tustin's
water system. The Security
Vulnerability Assessment
will include an evaluation
of all system components,
including production,
storage, transmission, and
distribution facilities, and will
be a thorough and systematic
evaluation conducted in
compliance with USEPA
requirements. This proposal
was prepared in response to
the "Request for Proposal for
the Preparation of a Vulnerability Assessment,
Emergency Response Plan, and Emergency
Operations Plan for the City
of Tustin's Potable Water
System".
Water and
Wastewater Experts
Since 1933 when John Carollo started the
firm, Carollo has successfully completed more
than 15,000 projects for
public sector clients.
Nevertheless, we
treat each client and
every project as if it
is our most important
concern. Since most of
our work is repeat work
with existing clients, every project is important to
us to make sure that our clients want us back. Our
firm takes pride in the large number of clients with
whom we have maintained continuing working
relationships. We have worked with some clients
for more than 60 years--a clear indication of the
quality of our work, our control of costs, and our
ability to meet schedules. Our goal is to meet or
exceed your expectations on every project.
Unlike our competitors, Carollo only provides
water resources engineering services, and we only
work for municipal agencies. This allows us to
focus on what we do best, water and wastewater.
Carollo is currently ranked within Engineering
News Record's (ENR's) top 100 design firms.
Carollo is an environmental
engineering firm specializing
in the planning, design, and
construction management
of water and wastewater
facilities for municipal
agencies. Carollo's
exceptional reputation is
~an~a Aha
0 Carollo O~ice Locations
V:\Qient20\Tustin~PropWulnerability Assessment~INDD\Sec03-IntroExperience.indd
Introduction/Experience
More importantly, ENR's annual Source Book
ranks Carollo in the top firms for water supply and
water and wastewater treatment plant design. We
recruit nationwide and hire technical staff who
have extensive background and training specific
to this field. For that reason, the quality and
professional standing of our core group of water
and wastewater professionals equals or exceeds
that provided by some of the largest engineering
firms in the country. This is especially true in the
western United States, where Carollo is
regarded as one of the most prominent
water resources firms due to the
regional expertise we can bring to local
public works projects.
Local Knowledge
In Southern California, we have
offices in Santa Ana, San Bernardino,
Pasadena, and San Diego. Our
Santa Ana office is a regional office
that has provided quality consulting
engineering services to municipal water and
wastewater agencies in Southern California since
1971. Carollo has completed several recent security
vulnerability assessments for Southern California
clients including Mesa Consolidated Water District
(Mesa) and the cities of Orange, Santa Ana,
and Santa Barbara. In Northern California, we
completed a Security Vulnerability Assessment
for the Placer County Water Agency. Our general
engineering clients include:
· Inland Empire Utilities Agency.
· Metropolitan Water District of Southern
California.
· Los Angeles County Public Works Department.
· City of Riverside.
· San Bernardino Municipal Water Department.
· City of Redlands.
· Eastern Municipal Water District.
· City of Pasadena.
· United Water Conservation District.
· Atascadero Mutual Water Company.
· Yucaipa Valley Water District.
· Crestline Sanitation District.
· City of Placentia.
· City of Anaheim.
· Orange County Sanitation District.
· Orange County Water District.
· Irvine Ranch Water District.
· E1 Toro Water District.
· Santa Margarita Water District.
· City of San Clemente.
· Aliso Water Management Agency.
· City of Oceanside.
· City of Carlsbad.
· Vallecitos Water District.
· City of Escondido.
· City of San Diego.
· Padre Dam Municipal Water District.
Firm Resources
Carollo's staff numbers over 600 employees
including over 250 registered engineers. We are
a full-service company with the experience and
qualified professionals to successfully manage
Carollo's state-of-the.art computer network
allows us to effectively communicate and
efficiently share our workload between offices.
projects of any size. Our staff includes civil,
sanitary, environmental, electrical, mechanical,
chemical, structural, control systems, and corrosion
V:\Client20\Tustin~PropWulnerability Assessment\lNDD\Sec03 -IntroExperience.indd Introduction/Experience
control engineers, as well as architects, planners,
and specialists in other areas. Consultants are
retained as needed in specialized fields depending
on the specific needs of the project. Carollo also
has total computer resources to complete any
engineering effort including an expanded local
area network (LAN) within each office, as well as
a wide area network (WAN) between our offices
to better facilitate communication, document
transmittal, and workload sharing.
Focus On Service
Carollo knows the value of listening to our clients
and recognizes that successful projects result from
the combined expertise of
our staff and the client's
staff. This commitment
of listening to and
valuing client
input is one of the
cornerstones of
Carollo's success.
We solicit client
input before, during,
and after design and
construction, as well
as years after a facility
has been operational.
This allows us to retain
designs that work and refine those that need
improvement without reinventing the wheel
on every project. Construction and operational
experience are the ultimate judge of a
successful design.
Management Philosophy
Carollo's management philosophy and the success
of our company are founded on simple precepts:
Seek out, hire, and hold onto the best people
in the business. We recognize that the most
critical element for a successful project is the
project team. Carollo aggressively recruits the
top candidates from the leading engineering
schools across the country. We train and mentor
these engineers to become the next generation
of leaders for Carollo and the industry. This
long-term commitment to developing excellent
engineers has resulted in a depth of talent
unmatched by other consulting firms.
Specialize in the planning, design, and
construction management of water and
wastewater projects. This is our business. Our
success hinges solely upon our ability to provide
responsive service to our municipal clients.
Commit our partners to an active role in every
project. This provides our clients with top
management interest, clear accountability,
responsiveness, and talent-and helps to ensure
that the necessary staff and resources are
committed to each assignment.
Our whole-hearted dedication to quality
results in tangible benefits to our clients and is
demonstrated by our record of Iow change orders
during construction. For 25 recent projects with a
construction total of over $225 million, our change
orders totaled less than 1.5 percent (including
owner-initiated changes).
Capabilities and Experience
Carollo has successfully provided planning, design,
and construction management services for water
and wastewater agencies serving populations
ranging from less than 10,000 to more than 2
million. An overview of Carollo's infrastructure
capabilities and experience follows:
Water Infrastructure Design
Carollo has provided engineering services for
the pre-design, design, and construction
management of.'
· More than 700 miles of water pipeline ranging
from 6 to 108 inches in diameter.
· Over 100 water pumping stations with
capacities as high as 600 mgd.
· More than 150 water storage reservoirs with
capacities ranging from less than 1 million
gallons to 60 million gallons.
· Water pipeline rehabilitation projects using a
variety of construction techniques.
· More than 50 water wells including potable
production wells, ASR wells, and wellhead
treatment projects.
· Design of disinfection facilities using bulk-
V:\Client2 0~Tustin~Prop\Vulnerability Assessment\INDD\Sec03-IntroExperience.indd
Introduction/Experience I~
purchased sodium hypochlorite, on-site
generation, calcium hypochlorite, and
gaseous chlorine.
Wastewater Infrastructure Design
Carollo has provided engineering services
for the pre design, design, and construction
management of:
· More than 2 million lineal feet of wastewater
pipeline ranging from 6 to 120 inches in
diameter.
· Pumping facilities capable of handling flows
ranging from less than 1 million gallons per day
to over 600 million gallons per day.
· Wastewater pipeline rehabilitation projects
using a variety of construction techniques.
Combined Sewer Overflow/Sanitary Sewer
Overflow Facilities
· Carollo has been involved in planning,
permitting, design, and construction of
combined sewer overflow (CSO) and sanitary
sewer overflow (SSO) facilities to handle peak
flows up to 300 mgd.
· We have planned and designed sewer separation
and rehabilitation projects using a variety of
construction techniques.
Master Planning/GIS
Carollo has provided water master planning,
recycled water master planning, computer
modeling and/or geographical information systems:
· For more than 70 municipal clients with service
area populations ranging from 5,000 to over
1 million.
· Using the following computer models:
H2ONET, H2OMAP Water, CYBERNET,
WaterCAD, KYPIPE, WATSYS, EPANET and
many others.
Carollo has provided wastewater master planning
and computer modeling:
· For municipal agencies with flows from 1 to 300
million gallons per day.
· Using the following computer models:
Hydra/Hydragraphics, H2OMAP Sewer, and
many others.
Carollo has provided geographical information
systems solutions that involve:
· Development of new GIS systems for various
water and wastewater municipal agencies.
· Importing water system facilities, land use,
elevations, ground topology, etc. from existing
GIS databases.
· Exporting water system facilities, modeling
results, historical and future projections to client
GIS systems using Arclnfo, the Internet, and
other platforms.
Construction Management
· Carollo has provided construction management
services for over $1 billion in municipal water
and wastewater facilities in the last 10 years.
· Nearly one-third of our revenues are
attributable to construction-related services.
· We have provided construction management
services for both Carollo-designed facilities and
facilities designed by others.
Additional Caroilo Qualifications
Carollo is also a leader in water treatment,
wastewater treatment, biosolids management, and
applied research projects:
Water Treatment
· Carollo has provided planning
and design services for
over 100 water treatment
plants with a total capacity
of more than 3.5 billion
gallons per day.
· Water treatment plants
designed by Carollo range
in size from less than 1 mgd to
more than 600 mgd in capacity.
Wastewater Treatment
· Carollo has designed new or improved facilities
for over 200 wastewater treatment plants.
· We have performed major projects for 10 of the
14 wastewater treatment plants in the western
U.S. treating greater than 100 mgd.
· Wastewater treatment plants designed by
V:\Client20\Tustin~Prop\Vulnerability Assessment~INDD\Sec03-IntroExperience,indd Introduction/Experience
the U.S. Federal Government organizational
structure and response capabilities.
· Demonstrated experience in drinking water
utility operations including source water
management, facilities, IT systems including
SCADA and process systems, distribution
system operations, and water quality functions.
· Through formal training and through the
long list of projects conducted for the water
agencies, the project team has gained an acute
understanding of the operational aspects of
all types of water treatment and wastewater
treatment system operations.
· Carollo includes certified plant operators of
various grade levels and facility management.
· Carollo has extensive experience in SCADA
system design and implementation for water and
wastewater facilities and operations.
· Members of the project team include experts
who are conducting research in water quality
and provide their expertise to governmental
agencies.
· Demonstrated experience in drinking water
quality risk and monitoring/detection issues.
· As part of Carollo's vast experience in water
treatment plant designs for potable systems, the
project team members have designed systems
to monitor disinfection residuals and physical
parameters (such as turbidity, pH, conductivity,
and temperature).
· The project team has experience in designing
monitoring systems for pathogen (microbial) and
chemical detection.
· Carollo team members have developed methods
for several clients for monitoring water quality
risk using physical parameters as a surrogate to
detecting other contaminates.
· Demonstrated methods and procedures for
ensuring the confidentiality of all work materials.
· Carollo and all member companies of the project
team have established and strictly implement
written procedures for controlling employee
project assignment, confidential electronic
information, and confidential client documents.
· Specific procedures for controlling confidential
documents and information will be presented to
City management for review and approval.
· Experience with scenario planning and
emergency response exercises.
· Demonstrated experience with the Standardized
Emergency Management System and emergency
operations planning concepts, training, and
implementation.
· The project team experience includes over
50 projects involving the development of
comprehensive Emergency Response Plans
(ERPs) for companies and agencies. Since
the inception of providing such services, all
of our ERPs have been compatible with the
Standardized Emergency Management System
(SEMS).
· Assisted a major water district in Southern
California in updating their District Level ERP
using the recent update to SEMS guidelines.
· Developed the ERP for the Irvine Ranch Water
District, addressing all their facilities in one
general plan.
· Developed the ERP for the
Western Municipal Water
District Wastewater
Treatment Plant.
· Authored Chapter
8 of the document
entitled "Emergency
Response Program" of
the California Region I
LEPC California Accidental
Release Program (CalARP)
Implementation Guide. These
guidelines are consistent with
SEMS specifications.
· Had primary involvement in the Orange County
Fire Authority Hazardous Materials Area Plan.
· Provided Emergency Response Team training
and ERP deployment for a number of facilities.
· Experience with scenario planning and
emergency response exercises.
· In parallel with the development of ERPs, we
V:\Qient20~Tustin~Prop\Vulnerability Assessment~INDD\Sec03 -IntroExperience.indd
Introduction/Experience
have also assisted with the implementation of
ERPs. The project team has direct experience
in assisting clients in developing emergency
drill plans in terms of scenario planning, in
participating in the drills and in evaluating
the outcome of the drills. For example, we
have developed and implemented tabletop
exercises for client facility personnel. We have
participated in the planning and preparation for
and later direct involvement in major emergency
exercises conducted at either large facilities or a
jurisdictional region of a fire department. Many
clients have used our expertise in ERP training.
Acting as court appointed safety advisor,
we have assisted in the development of the
specifications for and later advisory observation
of emergency response drills.
V:\Qient20\Tustin~Prop\Vulnerability Assessment~lNDD\Sec03 -IntroExperience.indd Introduction/Experience
MESA CONSOLIDATED WATER DISTRICT, CALIFORNIA
Security Vulnerability Assessment
Team members prepared
a USEPA mandated
Security Vulnerability
Assessment for
MCWD's treatment
and distribution system.
Mesa Consolidated
Water District (Mesa)
provides potable and recycled water service to
more than 100,000 residents primarily in the
City of Costa Mesa, California. Mesa serves high
profile customers such as John Wayne Airport,
South Coast Plaza, Orange County Center for the
Performing Arts, and Orange County Fairgrounds.
Mesa selected the team of Carollo, RMP, and TRC-
EASi to prepare a United States Environmental
Protection Agency (USEPA) mandated Security
Vulnerability Assessment for their treatment
and distribution systems. The project involved
identifying Mesa's mission statement, prioritizing
facilities, and conducting a field trip to
each facility. Workshops with Mesa's staff
were held to identify security deficiencies,
potential vulnerabilities, and possible targets
of attack. The security of the SCADA system
was also reviewed. A thorough review of
possible chemical, biological, and radiological
contaminants was prepared. A fault tree of the
system was developed and adversary sequence
diagrams were prepared. Recommendations were
developed to mitigate the identified security
vulnerabilities, provide redundancies, and improve
administrative procedures. Estimated capital and
Operations and Maintenance (O&M) costs were
developed for the recommended improvements.
A confidential report summarized the findings,
observations, and recommendations of the Security
Vulnerability Assessment project. The project also
included updating Mesa's ERP.
V:\Client20\Tustin\Prop\Vulnerability Assessment~lNDD\Sec03 -IntroExperience.indd
Introduction/Experience
CITY OF ORANGE, CALIFORNIA
Security Vulnerability Assessment
The City of Orange
selected Carollo's Team
to prepare a Security
Vulnerability Assessment
for their water distribution
sYstem in accordance with
USEPA requirements.
developed. Using the results of the analysis
and fault tree, recommendations were
developed. Capital cost estimates were
prepared and the City's ERP was updated. A
confidential report was prepared summarizing
the results of the Vulnerability Assessment.
The City of Orange (Orange) selected the team
of Carollo, RMP, and TRC-EASi to prepare a
Security Vulnerability Assessment as required
by the USEPA. Orange serves approximately
129,000 persons. The project involved preparation
of a preliminary screening of Orange's facilities,
prioritization of these facilities, and site visits to
all critical facilities. Checklist forms (based on
Sandia's methodology document) were developed
and used to identify areas of concern at each site.
A workshop was used to refine the vulnerability
analysis for each site and then a fault tree was
V:\Client20\TustinhUropWulne rahility Assessment~INDD\Sec03-IntroExperience.indd Introduction/Experience
CITY OF SANTA ANA, CALIFORNIA
Security Vulnerability Assessment
The project team
prepared a USEPA
mandated Security
Vulnerability Assessment
for the City of Santa
Ana, California.
The City of Santa Ana (Santa Ana) selected the
team of Carollo, RMP, and TRC-EASi to prepare
their USEPA mandated Security Vulnerability
Assessment. Santa Ana serves approximately
338,000 persons. The project involved preparation
of preliminary screening of the Santa Ana's
facilities, prioritization of these facilities, and
site visits to all critical facilities. Checklist forms
(based on Sandia's methodology document) were
developed and used to identify areas of concern
at each site. A workshop was used to refine the
vulnerability analysis for each site and then a
fault tree was developed. Using the results of the
analysis and fault tree, recommendations were
developed. Capital cost estimates were prepared
and the City's ERP was updated. A confidential
report was prepared summarizing the results of the
Security Vulnerability Assessment.
V:\Client20\Tustin~Prop\Vulnera Nlity Assessment~INOD\Sec03-IntroExperience.indd Introduction/Experience
PLACER COUNTY WATER AGENCY, CALIFORNIA
Vulnerability Assessment
The team of Carollo, RMP, NWTC, Inc., and
Westin Engineering prepared a Vulnerability
Assessment for the Placer County Water Agency
(PCWA) in accordance with the USEP~s
requirements. PCWA serves more than 150,000
people within the 1,500 square mile area between
the Sacramento Valley and the Sierra Nevada
and Lake Tahoe. The Security Assessment
project involved identifying and prioritizing
PCWA2s facilities. Site visits were performed
and potential security concerns at each
facility were identified. A fault tree was
developed to assist with the identification
of potential system vulnerabilities. The
vulnerability analysis was conducted in a
workshop setting, and recommendations
were developed as part of the workshop to
mitigate potential vulnerabilities. Capital cost
estimates were prepared for the recommended
improvements. A confidential report, which
included a thorough review of possible chemical,
biological, and radiological contaminants, was
prepared to summarize the results of the Security
Assessment.
V:\Client20\Tusting)rop~Vulnerability Assessment~INDD\Sec03-lntroExperience.indd Introduction/Experience
ADDITIONAL FIRM EXPERIENCE
City of Santa Barbara, California
Vulnerability Analysis and Emergency Response Plan
A Vulnerability
Assessment for the
City of Santa Barbara
analyzed the water system
infrastructure including
the Cater Water Treatment
Plant, finished water
reservoirs, pump stations,
pressure reducing stations,
and distribution piping.
Carollo was selected to prepare a Vulnerability
Assessment in accordance with the USEPA's
requirements for water systems serving over
100,000 persons. Preliminary screening of
the City of Santa Barbara's water facilities
was prepared and then refined after field
visits to the facility sites. Carollo analyzed the
water system infrastructure including the Cater
Water Treatment Plant, finished water reservoirs,
pump stations, pressure reducing stations, and
distribution piping. A prioritized list of security
counter measures was also developed and served
as the basis for the Capital Improvements Plan for
the Vulnerability Assessment. The Vulnerability
Assessment followed the Sandia RAM-W(sm)
methodology. An ERP was prepared. All results
were documented in a confidential report.
V:\ClientZ0\Tustin\Prop\Vulnerabiiity Assessment~INDD\Sec03-IntroExperience.indd Introduction/Experience ~
Unnamed City Due to Confidentiality Agreement
Security Master Plan and Vulnerability Assessments
Carollo was selected two years ago to
perform a Security Master Plan that
includes a vulnerability analysis
similar to the work proposed herein
for a water agency in the western
United States that serves more than
1 million people. The Vulnerability
Assessment follows the Sandia Risk
Assessment Methodology for Water
Utilities (RAM-W(~°) methodology
and is complete.
V:\Qient2 0~Tustin~Prop\Vulnerability Assessment~NOD\Sec03 -IntroExperience.indd Introduction/Experience
City of Chandler, Arizona
Vulnerability Assessment
Carollo prepared a
USEPA mandated
vulnerability assessment
for the City of Chandler,
Arizona.
The City of Chandler (Chandler) selected
Carollo to prepare their USEPA mandated
Vulnerability Assessment. Chandler serves
approximately 180,000 persons. The project
involved preparation of a preliminary
screening of the Chandler's facilities with
adjustments being made after visiting
the facility sites in the field. A Security
Counter Measures Plan was also developed. A
confidential report was prepared summarizing the
results of the Vulnerability Assessment.
V:\Client20\Tustin~Pmp\Vulnerability Assessmen6INDD\Sec03-lntroExperience.indd
Introduction/Experience I~~
Town of Gilbert, Arizona
'Vulnerability Assessment
Carollo prepared a
Vulnerability Assessment
for the Town of Gilbert,
Arizona.
Carollo was selected to prepare a
Vulnerability Assessment in accordance
with the USEP,~s requirements for water
systems serving over 100,000 persons. The
Town of Gilbert serves about 130,000 persons.
Preliminary screening of the Town's water
facilities was prepared and then refined after
field visits to the facility sites. A prioritized list of
security counter measures was also developed and
served as the basis for the Capital Improvements
Plan for the Vulnerability Assessment. All results
were documented in a confidential report.
V:\Client20\Tustin~Prop\Vulnerability Assessment~INDD\Sec03-IntroExpenence.indd Introduction/Experience
MAJOR WATER DEPARTMENT IN THE COUNTY OF LOS ANGELES
RAM-W(sm) Vui nera bi lity Assessment
The Risk Management Professionals Team
used Sandia RAM-W(sm) Methodology for the
Vulnerability Assessment performed for this Water
Department. The Water Department serves
about 446,000 customers. The team prioritized
the facilities, characterized the high priority
facilities and developed scenarios based upon a
Threat Assessment. Recommendations were
developed to provide a prioritized list of
security counter measures to serve as the basis
for the Capital Improvements Plan for the
Vulnerability Assessment. All results have
been documented in a confidential report.
The project was completed on time and
within budget.
V:\ClientZ0\Tustin~Prop\Vulnerability Assessment~INDD\Sec03-IntroExperience.indd Introduction/Experience
CITY OF SANTA ANA, CALIFORNIA
RAM-W(sm) Vulnerability Assessment
The Risk Management Professionals Team
used Sandia RAM-W(sm) Methodology for the
Vulnerability Assessment being performed for the
City of Santa Aha Public Works Agency. The City
of Santa Ana serves about 338,000 customers.
The team prioritized the facilities, characterized
the high priority facilities and developed attack
scenarios. Recommendations were developed
to provide a prioritized list of security counter
measures to serve as the basis for the Capital
Improvements Plan for the Vulnerability
Assessment. Sandia's generic fault trees
were developed to determine critical paths
and critical equipment. All results are being
documented in a confidential report.
V:\Client20\Tustin~Prop\Vulnera bilit¥ Assessment~INDD\Sec03-IntroExperience.indd Introduction/Experience
THREE VALLEYS MUNICIPAL WATER DISTRICT, CALIFORNIA
RAM-W~sm~ Vulnerability Assessment
The Risk Management Professionals Team is
currently using Sandia RAM-W(sm) Methodology
for the Vulnerability Assessment being performed
for the Three Valleys Water District. The Water
District serves about 475,000 customers. A
ranked list will be provided (based on Sandia
RAM.W('"') Methodology) for potential
sources of threat to critical facilities. The
team will create a summary report on the
characteristics of potential hazards. The
group will use this summary to provide a
list of recommendations and their risk-based
justification allowing Agency Management
to prioritize recommendations and develop
a cost-effective plan for improving security.
This information will be provided to District
Management via a formal closing presentation that
will further include presentation notes.
V:\Client20\Tustin\Prop\Vulnerability Assessment~lNDD\Sec03olntroExperience.indd
Introduction/Experience
PLACER COUNTY WATER AGENCY, CALIFORNIA
RAM-W(sm) Vulnerability Assessment
The Risk Management Professionals Team is
currently using Sandia RAM-W(sm) Methodology
for the Vulnerability Assessment being performed
for the Placer County Water Agency located in
Auburn, California. The water district serves
more than 150,000 homes. The project entails
the creation of a Vulnerability Assessment
report. This must be developed by creating
a comprehensive list of scenarios and an
assessment of the likelihood and severity for
each scenario. The team will further author
a summary report on the characteristics of
chemical, biological and other hazards. A
list of recommendations and their risk-based
justification will be provided. The team will create
a formal presentation at 90 percent, including
presentation notes that will be presented to Agency
Staff. At project close, a formal presentation will be
presented to the Board of Directors.
V:\Client20\TustinWrop\Vulnerabi[ity Assessment~INDD\Sec03-1ntroExperience.indd Introduction/Experience
CITY OF LOS ANGELES DEPARTMENT OF PUBLIC WORKS,
HYPERION WATER TREATMENT PLANT, PLAYA DEL REY, CALIFORNIA
Vulnerability Assessments
RAM-W(sm) methodology Vulnerability
Assessments, Security System Design and
Construction Administration services were
performed. Providing a complete Vulnerability
Assessment, Security Design with detailed
site surveys for main treatment facility and
associated sites (Glendale, Terminal Island
and Tillman), associated tanks, and pumping
stations, located throughout Los Angeles.
Recommend changes and update ERP, policies,
training practices and commissioning.
V:\Client20\Tus tin, Prop\Vulnerability Assessment\lNDD\Sec03-lntroExperience.indd Introduction/Experience
MOULTON NIGUEL WATER DISTRICT, LAGUNA HILLS, CALIFORNIA
Vulnerability Assessment
RAM-W(sm) Vulnerability Assessment (Team
Member) District personnel are performing in-
house RAM-W(s"° vulnerability Assessment.
TRC-EASi is participating as integral
part of the process by participating in
the Vulnerability Assessment, Cyber
Security Assessment, Threat Analysis and
updating the ERE. TRC-EASi is issuing
the recommendations for Security and
Administrative Improvements.
V:\Client20\Tustin\Prop\VulneraNlity Assessment~INDD~Sec03-1ntroExperience.indd Introduction/Experience
DEPARTMENT OF GENERAL SERVICES: CITY OF LOS ANGELES, CALIFORNIA
City-Wide Security Assessment & Technology Upgrade -Numerous Sites
The City of Los Angeles (Los Angeles) has
embarked on developing a Wide Area Integrated
Security System for 31 critical Los Angeles
properties, including City Hall, City Hall East,
the LA Mall, Piper Technical Center, various
Municipal Buildings and Courthouses, Constituent
Services Centers, Maintenance Yards and other
Los Angeles properties. Provided Vulnerability
Assessments for each site to determine the
criticality and probability of the security
measures. Develop countermeasures to
augment security threats. These will be
served by alarm, access control, CCTV and
2-way voice communications systems that
will be linked to a newly designed central
monitbfing center at City Hall East which will
be manned 24 hours per day by Department
of General Services Security personnel. The
system will incorporate existing security systems
into the new technology and will permit the real-
time monitoring, and eventually all Los Angeles
properties over fiber, telephone and DSL lines,
allowing the reporting of alarms and assessment of
events via video and audio as events unfold.
V:\Qient20\Tustin\Prop\Vulnerability Assessment~INDD\Sec03'IntroExperience.indd Introduction/Experience
WESTERN MUNICIPAL WATER DISTRICT, RIVERSIDE COUNTY~ CALIFORNIA
Security Vulnerability Assessment
RAM-W('m) Security Vulnerability Assessment
were performed. Assess the critical areas of
each site, review existing physical security,
make recommendation to upgrade security
technology, policies/procedures. Provide
specifications and construction drawings,
administer the bidding process and provide
construction management for security
technology upgrade. Provide a Vulnerability
Assessment for 11 pumping stations/tanks
servicing Riverside County.
V:\Client20\Tustin~PropWu[nerability Assessment~INDD\Sec03 -IntroExperience.indd Introduction/Experience
Successful completion of the City's Security
Vulnerability Assessment will require a team of
experienced individuals who have successfully
completed similar projects involving the various
technical, regulatory, and institutional issues
associated with your project. Carollo has assembled
a highly qualified team
with the required
experience in delivering
similar projects on time
and within budget. Every
one of our previous
security vulnerability
assessment projects
has been completed on
The project team of Caroilo, RMP, Inc. and
TRC-EASi has successfully completed Security
Vulnerability Assessments for the Long Beach
Water Department, Mesa Consolidated Water
District, Placer County Water Agency, and the
cities of Orange and Santa Ana, California.
time and on budget. Our project team includes
professionals who have been trained in conducting
the RAM-W(~m) security vulnerability assessments
by Sandia and other federal agencies.
Key members of the project team have been
specifically trained and certified in the Sandia
RAM-W(sm) Methodology, including our project
manager, Brian Powell. Copies of the Sandia
RAM.W('`") certificates are included in the
Appendix.
Stephen Melvin, assisted Sandia in the
development of their vulnerability assessment
methodology for chemical facilities.
Members of the project team have written
several guidebooks for the application of
Sandia's root methodologies such as fault tree
analysis, and taught courses covering a wide
range of risk assessment approaches.
As project manager, Brian Powell will be the prime
contact throughout the project. Brian has 15 years
of experience in the planning and design of water
distribution systems. He has served as project
manager for the design of water infrastructure
facilities and for the preparation of water master
plans and computer models for numerous water
purveyors throughout Southern California. He
served as Carollo's project manager for security
vulnerability assessments for the Long Beach Water
Department, Mesa Consolidated Water District,
Placer County Water Agency and the cities of
Orange and Santa Ana, California.
Dr. H~l~ne Baribeau has over 13 years of
experience in water
quality and drinking
water treatment and
distribution. Her unique
combination of an
education in engineering
with a specialization in
chemistry, followed by
post-doctoral studies in
microbiology, allows Dr. Baribeau to have a broad
perspective of the various parameters that affect
water quality in drinking water and how they
relate. She has worked closely with the AwwaRF,
as both a principal investigator and participant
on various studies. AwwaRF is the agency that
contracted with Sandia to develop the current
Security Vulnerability Assessment methodology.
To enhance our team we have selected two
subconsultants, RMP and TRC-EASi to provide
their expertise in vulnerability assessments and
security systems.
Stephen Melvin will serve as project engineer.
A risk and safety expert with RMP, he has been
active in the risk and safety field for over 10 years.
He was instrumental in Sandia's development of
their Chemical Facility Vulnerability Assessment
Methodology and has been reviewing the anti-
terrorism portions of risk management plans for
chemical facilities for three years.
A principal with RMP, Steven Maher, will assist in
the security vulnerability assessment. Over the past
23 years, he has been responsible for the project
management and technical performance of a broad
spectrum of process safety, risk management,
V:\Client20\Tustin~Prop\Vulnerability Assessment~INDD\Sec04-KeyStaff. indd Key $][x~e ~
security vulnerability assessment, and loss
prevention projects.
Dr. Mardy Kazarians (RMP) will prepare the
emergency response plan. He is a recognized expert
in risk and safety. He has contributed to, or has
been the principal investigator for, vulnerability
studies for projects including water treatment
facilities.
James Black (TRC-EASi) is trained and certified
in the Sandia RAM-W(sm) methodology. He has
over 10 years of experience in the security and
automation industry. He has been responsible for
performing field survey and analysis of existing
security equipment and plans, vulnerability
assessment, project management, master planning,
design development, construction documentation,
construction administration and commissioning of
security systems, monitoring, access control, video
surveillance, network fiber optic infrastructures and
communication systems projects.
Our team is illustrated in the organization chart
on the following page. The tables following the
organization chart summarize the experience and
qualifications of our team members. Subconsultant
information follows the tables. Detailed resumes
for project team members are included in the
Appendix.
CITY OF TUSTIH
Vulnefabilil¥ A~es~men~, Emergency ReGponse Plan,
and Emergency Opefaflon~ ~lan
Mary CNbum, ~E.
Stephen Melvin, RE., CSP
Stephen Melvin, P.E., CSP - Lead
Steven Maher, RE., CSP
Brian Powell, P.E.
James Black, CPP
Karen Hermack
Threat AnalYsis --
James Black, CPP ~ Lead
Keith KUshner
,,.,
:LIENT20/TUSIN/PR OP/VUL.NERABILrffASS ES SMENT/GRAPHIC$/ORG. CDR
HdlSne Baflbeau, RE., Ph.D.- Lead
Nicki Giese
Karen Hermack -Lead
Brian powell, RE.
Stephen Melvin, RE., CSP
Gene HeY~r' P.E. - Lead
Harold Dahlstrom
james BlaCk CPP
I---L Security
Enhancement Plan
Brian Powell, P.E.. Lead
James Meyerholer, P.E.
Karen Hermack
L
Mandy Kazarians, Ph.D.- Lead
Thelma YoosephianCe
James BlaCk, cPP- Lead
Keith KLishner
V:\Client20\Tustin\Prop\Vulnerability Assessment\INDD\Sec04.KeyStaff. indd
Key Staff
Team Member/Role/
Education/Years of Experience
Relevant Experience
Brian Powell, P.E.
Project Manager/
Information Security
Manager
Carollo Engineers
BS Civil
15 Years of Expenence
Sandia RAM-W(=) certified.
Brian will be responsible for
maintaining communication
with the City, lead
discipline engineers, and
subconsultants. Responsible
for schedule, budget, and
total project delivery.
· Project manager for Security Vulnerability Assessments for the Long Beach
Water Department, Mesa Consolidated Water District, Placer County Water
Agency, and the cities of Orange and Santa Aha.
· Mesa: Performed computer modeling and evaluated water supplies for an
Emergency Supply Plan for Mesa. As part of the Water System Master Plan
for the District, analyzed the distribution system with respect to its ability
to provide water supplies to address potential vulnerabilities associated with
naturally-, accidentally-, or deliberately-induced events, such as earthquake,
power outages, water quality problems, pipeline failures, etc.
· Orange: Developed a water system computer model for Orange. Developed the
Cybernet model for the City's distribution facilities. Field tested and calibrated
the model. Modeled various scenarios.
· City of Brea: Prepared a Water Master Plan for the City of Brea. As part of
the plan, developed a computer model of the distribution system and analyzed
various vulnerability scenarios that involved the loss of selected supply
scenarios.
· Walnut Valley Water District: Prepared the computer model for the District's
Water Master Plan. Field calibrated the computer model using flow and
pressure data collected from flowing fire hydrants.
· City of Chula Vista: Prepared a water system analysis and computer model for the
domestic water'delivery system the' U.S. Olympic Training Center in Chula Vista.
Reliable water supply was critical to this facility. Analyzed various water supply
vulnerability scenarios and demand conditions for the facility.
~ V:\Client20\Tustin~Prop\Vulnerability Assessment~INDD\Sec04-Ke¥Staff. indd Key St~ff ~
Team Member/Role/
Education/Years of Experience
Relevant Experience
Stephen Melvin,
P.E., CSP
Project Engineer,
Security Vulnerability
Assessment
Risk Management
Professionals, Inc.
BS Mechanical
11 Years of Experience
Sanclia RAM-W('m) certified.
Stephen will assist in the security
vulnerability assessment and
managing the workshops. He will
lead the Facility Prioritization
and Scenario Identification and
Analysis Workshops.
· Major Water Department in the County of Los Angeles: Served as project
manager and the ERP task leader for the RAM-W('m) Vulnerability Assessment.
Team developed an ERP and Capital Improvements Plan for the Vulnerability
Assessment. The ERP developed was exemplary and addressed several ancillary
vulnerability issues.
· City of Santa Ana: Plaved a key support role on the RAM-WIsm) Vulnerability
Assessment Project Team. Team developed a Capital Improvements Plan for
the Vulnerability Assessment. Results were documented and presented in a
confidential report.
· City of Orange: Currently serving as the project engineer and ERT leader for
the RAM-W(sm) Vulnerability Assessment Project Team. Responsible for the
day-to-day project management, scheduling, and communication with the City.
The project entails creating an efficient approach to a highly distributed water
system that spans through five pressure zones.
· Mesa Consolidated Water District: Serving as the project engineer and as the
ER[' task leader for the RAM-W(~) Vulnerability Assessment. Project involves
a state of the art color water treatment facility.
· Three Valleys Municipal Water District: Serving as the project manager and
ERP task leader for RAM-W(sm) Vulnerability Assessment. The team will create
a report of potential hazards used to develop a plan for improving security.
This will serve as the basis for the EP~,, Capital Improvements Plan aM the
Vulnerability Assessment.
;P
V:\Client20\TustinkProp\Vulnerability Assessment~INDDXSec04-KeyStaff. indd Key S~i~ff
Team Member/Role/
Education/Years of Experience
H~l~ne Baribeau,
Ph.D., P.E.
Water Quality Threats
Carollo Engineers
BS/MS/Ph.D. Civil, MS/
Ph.D. Environmental Water
Treatment Plant Operator
- G3, California No. 21876
13 Years of Experience
H~line will develop a list of
possible water contaminants and
analyze how these might impact
the water quality within the
distribution system.
fllCKI ~ ese
Karen Hermack
Engineering
Recommendations
Carollo Engineers
BS Civil Engineering, MS
Environmental Engineering
3 Years of Experience
Karen will assist Brian during
the site visits, workshops, in
preparing the engineering
recommendations, and
administrative procedures.
Relevant Experience
· Responsible for evaluating water quality threats for Security Vulnerability
Assessments for Mesa Consolidated Water District, Long Beach Water
Department, Placer County, and cities of Orange and Santa Aha, California.
· Participant in a study conducted by the Metropolitan Water District of
Southern California on the impact of biological and conventional treatments
on simulated distribution systems.
· Doctoral (Ph.D.) thesis work on the changes in disinfectants and disinfection
byproducts in the distribution systems of the City of Laval, Quebec, Canada.
· Principal investigator for the AwwaRF Project 2770, Formation and Decay of
Disinfection Byproducts in the Distribution System.
· Principal investigator for AwwaRF Project 2771, Changes in Distribution
System Water Quality on Disinfection Efficiency.
· Served as
· Project engineer for the Mesa Consolidated Water District, USEPA mandated
Security Vulnerability Assessments. Participated in site Visits to identify
security concerns at Mesa's facilities and participated in workshops to develop
recommended improvements for each facility.
· Project engineer for the City of Orange, USEPA..mandated Security
Vulnerability Assessment. Participated in site visits to identify security concerns
at Orange's facilities and participated in workshops to develop recommended
improvements for each facility.
· Project engineer for the City of Santa Aha, USEPA. mandated Security
Vulnerability Assessment. Developed estimated costs of implementing
engineering improvementS, prepared technica1 memorandum summarizing
recommended engineering and security improvements.
· Project engineer for the Long BeaCh Water'Department, USEPA-mandated
Security Vulnerability Assessment. Developed estimated costs of implementing
engineering improvements.
· Project engineer for the Placer County, California, USEPA-mandated Security
engmeenng improvements.
V:\Client20\Tustin~Prop\Vulnerabilitv Assessment~INDD\Sec04-Ke¥Staff. indd Key Staff
Team Member/Role/
Education/Years of Experience
Jim
En
c~n
Trea
J~
and
Plants
Gene Heyer, RE.
Cyber Security
Assessment
CarOllo Engineers
BA Business Management
32 Years of Experience
Gene will be responsible for
developing a plan to address
Cyber Security concerns.
Water
sy~
Relevant Experience
Cater Water Treatment Plant
:hlorite
,regon.
alternativeS for thc
· Responsible for conducting cyber seCurity evaluations for Security Vulnerability
Assessments for Mesa Consolidated Water District, Long Beach Water
Department, cities of Orange and Santa Ana.
~, Valley Center Municipal Water District (VCMWD): Prepared design of water
pump station rehabilitation. Removed and replaced existing control system
with programmable logic control (PLC) system communicating over radio
to personal computer :(PC) based central control. One .feature of the new
system includes site, building, and enclosure intrusion monitoring. In addition,
the design includes Capability for video surveillance through Ethernet site
network. Current efforts are in security of the Ethernet RF system and firewall
coordination with the existing :network.
~. City of Loml
of the cirywide SCADA sysre
The system includes intrusion alarms for sites and enclosures. In addition,
the system monitors critical pressures, flows, and levelS to provide continuous
supply of safe drinking water and storage for fire protection. The fire protection
is very important in this system because of the hospitals located within the City
of Loma Linda.
~ City of Tustin: Managed the design and supervision of the installation of
citywide SCADA system for water distribution. The system includes intrusion
alarms for sites and enclosures, critical pressures, flows and levels, as well as
chlorine residual for the wells.
), Similar SCADA system projects include Park Water Company, Leucadia
County Water District, Three Valleys MuniciPal Water District, TriCities
Municipal Water District, and Santa Margarita Water District,
V:\Client20\TustinXProp\Vulnerability Assessment\INDD\Sec04-KeyStaff. indd Kt~y Staff
Team Member/Role/
Education/Years of Experience
Assessment
· More than 15
· Informati°n ~
and technica
Relevant Experience
network,
>ervices
BS
1:
Harold
Gene in
Cyber Security concerns.
and availability of
· Carollo's N security
measures to safeguard ,.ntal or unauthorized
access, modification ~
· : Panic IT
James Black, CPP
Security Vulnerability
Assessment, Cyber
Security Assessment,
Threat Analysis, and
Security Enhancement
Plan
TRC-EASi
BS Business Administration
22 Years of Experience
Sandia RAM-W{~m) certified.
Jim is TRC-EASi's "security
cleared" designated
representative for InfraGard
through the Los Angeles FBI
field office.
Jim will address vulnerability
assessment sources of
threat, security System
improvements, and programs
and procedures.
· Ontario Intemational Airport, Los Angeles World Airports. Security services
for investigation and evaluation, design and construction supervision for
physical security systems improvements and compliance of FAA 107.14
Requirements at existing and new airport terminals. Provided Access Control
and Alarm Monitoring System (ACAMS), Alarm Access Control, Closed
Circuit Video & Intercommunication for two existing domestic terminal
buildings, one Federal Inspection Facility (International terminal), Command
Center, US Post Office, fuel farm area and a major expansion with three new
terminal buildings.
· City of Mesa Police Department. Provided a complete Security System design
for the City, of Mesa Properties including City Hall, Police Facility, City Plaza
and ISD buildings. Currently providing planning, design of security .system for
the Police Facility and the Evidence and Identification Laboratory Addition.
Integrated access control and secUrity system with the City of Mesa central
monitoring control. Currently working on City of Mesa, Jail Facility controls
project upgrade.
· Griffith Observatory. Provided preliminary Engineering Phase and Basis
for Design. Currently providing construction documents and Construction
Administration for security systems upgrade project.
~. Community Hospital of Monterey, CA. Provided security evaluation, planning,
design, specification and constrUCtion administration services for completely
integrated security Systems during' the extensive renovation and expansion
of the hospital and parking strUCture. System includes access control, photo
identification badging, closed circuit video, infant security, asset protection,
intercom systems and emergency telephone systems. TRC-EASi also provided
budget development, construction coordination and system commissioning.
V:\Client20\Tustin~Prop\Vulnerability Assessment~INDDkSec04-Ke¥Staff. indd Key S]~ff ~
Team Member/Role/
Education/Years of Experience
Sources of Threat,
Lead ~
TRC-EASi
State
~arth
26 Years 'of Experience
certified.
planning.
Steven Maher,
RE., CSP,
Security Vulnerability
Assessment
Risk Management
Professionals, Inc.
BS/MS Mechanical
23 Years of Experience
Sandia RAM-W(~m) certified.
Steve wilI assist Brian Powell
and Stephen Melvin during
preparation of the security
vulnerability assessment.
· Western Municipal
to
Relevant Experience
mt
center
General
eventUally all
l
the
unfold.
wide
central
· Major Water Department in the County of Los Angeles: Served as project
manager and the ERP task leader for the RAM-WIsm) Vulnerability Assessment.
Created ERP and Capital Improvements Plan for the Vulnerability Assessment.
The ERP developed addressed se'eeral ancillary vulnerability issues.
· City of Santa Ana: Played a key support role on the RAM-W(sm) Vulnerability
Assessment Project Team. SecuritY counter measures were developed serving as
the basis for the Capital Improvements Plan for the Vulnerability Assessment.
All results were documented and :presented in a confidential report.
· City of Orange: Serving as the project engineer and emergency response task
leader for the RAM-W°m) Vulnerability Assessment Project Team. Responsible
for the day-to-day project management, scheduling, and communication
with the City. The project entails Creating an efficient approach to a highly
distributed water system that spans five pressure zones.
state.of, the .art color water .treatment facility. In addition, the site contains
liquid L ozone generators.
Three ~
and the ERP task leader for the RAM-W(*m) Vulnerability Assessment.
V:\Client20\Tustin~Prop\Vulnera bility Assessment~INDD\Sec04-KeyStaff. indd
Key Staff
RISK MANAGEMENT
PROFESSIONALS, INC.
RMP, Inc. established in 1995, is a women-
owned and minority-owned consulting company
specializing in vulnerability assessment and
mitigative programs and procedures development
for industry and government. Since its formation,
RMP, Inc. has established an extensive experience
base, serving clients from a wide spectrum of
industries. RMP, Inc. is an industry leader in
risk management for engineered systems and its
consultants are in the forefront of their fields of
specialization. Recently, RMP, Inc. personnel have
been directly involved in the development of the
methodology for vulnerability assessment created by
Sandia as well as its application at various facilities.
Services in vulnerability assessment include
application of systematic methods for identification
of potential accident and hazardous material release
scenarios based on a thorough understanding of
the engineering and administrative aspects of
systems and facilities. As part of their vulnerability
assessment services, RMP, Inc. also conducts
technical studies for establishing severity of
consequences of postulated hazard scenarios,
specialized studies for fire and explosion impact,
and effects of external forces (e.g., wind and
earthquake) on equipment structures.
Based on the results of vulnerability assessments,
facility audits, and experience in operations and
management, RMP, Inc. develops administrative
programs and procedures for safe system operation
and work practices. A few relevant examples are:
development of comprehensive safety programs
for plant operation, individual procedures for
injury and illness prevention, ERPs, and training
programs. Related to this service area, RMP,
Inc. develops standard operating procedures,
maintenance programs, and operation and
maintenance manuals for engineered systems.
RMP is dedicated to using its experiences and
capabilities to provide products and services of
uncompromising quality and value in the arenas of
facility security, process safety, and risk management.
TRC-EASi
TRC-EASi was founded in 1980 to provide
consulting, design, and engineering expertise in
state-of-the-art security, building automation, and
fire/life-safety systems to their clients. TRC-EASi
has a wide range of project management, planning,
engineering and consulting capabilities required for
today's modern, sophisticated facilities. TRC-EASi
has grown steadily since its founding in 1980, and is
recognized within the security industry for excellence
in design and professionalism in approach.
TRC-EASi clients are people and organizations
with a stake in the functional performance of
their building systems. TRC-EASi is committed
to innovation in system technologies; innovations
specifically designed to meet today's critical facilities
operational and safety criteria in the most complete
and cost-effective manner possible. Projects designed
are at the forefront of proven state-of-the-art system
technologies. Internal operating processes are
constantly monitored to keep work competitively
priced while providing superior service for clients.
Lastly, the dedication and tenacity applied to
assignments result in systems that work.
TRC-EASi is a secured member of InfraGard,
a cooperative undertaking between the U.S.
Govemment (led by the FBI and the National
Infrastructure Protection Center) and an association
of businesses, academic institutions, state and local
law enforcement agencies dedicated to increasing the
security of the United States critical infrastructures.
InfraGard also initiates a flow of critical
information from numerous secured sources so
the owners and operators of infrastructure assets
can better protect themselves and the United
States government can better discharge its law
enforcement and national security responsibilities.
Encryption software is used for secured VPN and
secured e-mail communications.
An exchange of information about threats to and
actual attacks on critical infrastructures is an
important element for successful infrastructure
protection efforts.
James Black, CPP is TRC-EASi's "security cleared"
designated representative for InfraGard through
the Los Angeles FBI field office.
V:\Client20~Tustin~Prop~Vulnerability Assessment~lNDD\Sec04-KeyStaff. indd Key Staff
We understand that Tustin has requested
professional engineering services for the
preparation of a water system Security
Vulnerability Assessment, Emergency Response
Plan, and possibly Emergency Operations Plan.
Tustin requests that the Vulnerability Assessment
be performed in accordance with the USEPA
Security Vulnerability Assessment
requirements.
Carollo will prepare your
Security Vulnerability
Assessment in accordance
with USEPA requirements
using the RAM-WTM
methodology and tools
developed by Sandia
National Laboratories.
SECURITY
VULNERABILITY
ASSESSMENT
The proposed Vulnerability
Assessment will include
prioritizing Tustin's existing
water facilities in order of
importance to meeting Tustin's
objectives. The facilities will be
evaluated to identify potential
security vulnerabilities and
methods that adversaries may use
to defeat the system. In addition, the
Vulnerability Assessment will identify
potential physical, cyber, and bacterial,
chemical, and radiological threats to
Tustin's water system. The analysis
of the existing system and potential
threats will result in a prioritized list of
recommended improvements and the
estimated costs of implementing the
improvements.
Carollo will prepare your Security Vulnerability
Assessment in accordance with USEPA
requirements using the RAM-WTM methodology
and tools developed by Sandia National
Laboratories. In addition, we understand the
confidential nature of this project and have
outlined the procedures 'that we have in place to
address these concerns. Finally, we understand that
the project must be completed before the end of
2003. Our proposed schedule reflects your request
to complete the vulnerability assessment well
before this deadline. We see no problems meeting
this schedule.
USEPA Requirements
Important aspects of the USEPA requirements
include the following issues:
· Completion of the Security Vulnerability
Assessment by the deadline (December 31, 2003).
· The use of persons certified by Sandia for the
Security Vulnerability Assessment.
Even though this is not required by Tustin,
participation of Disadvantaged Business
Enterprise (DBE) businesses has been
encouraged by the USEPA.
In our proposal, we address each of these areas and
comply with all.
We intend to complete your Security Vulnerability
Assessment on time and on budget by using an
experienced team of professionals who have
experience in the fields in which they will be
required to perform. In addition, we will closely
manage the project using time tested management
techniques that Carollo has refined over the years.
We have a team of Sandia Certified professionals
on the project team from Carollo and from our
subconsultants. Copies of their certification forms
are included in the Appendix.
We have on our team a DBE business, RMP, which
qualifies them for federal programs as an MBE/
WBE. RMP has a significant role on this project
that should exceed your target goals for minority
participation.
V:~Client20\Tustin~Prop\Vulnerabiliw Assessment~INDDkSec05 -ProjectUnderstandirtg.indd Project Understanding
EMERGENCY RESPONSE PLAN
We understand that the Emergency Response Plan
(and Emergency Operations Plan, if included) must
be completed within five months of the acceptance
and submittal of the Security Vulnerability
Assessment. This task will include reviewing
the City of Tustin's existing Emergency Plan and
making appropriate recommendations. In addition,
an Emergency Response Plan (ERP) will be
developed for the Water Division in collaboration
with your staff. The ERP will focus on emergency
responsiveness and efficiency, improve security and
minimize risks. The intent of this document will be
to help guide your staff during an emergency.
The ERP will be developed for consistency
with Emergency Management System (SEMS)
specifications. SEMS specifications were originally
developed to apply to state and local emergency
response agencies and to standardize response to
emergencies involving multiple jurisdictions or
multiple agencies. However, a good quality facility
emergency response plan should be compatible
with SEMS to allow a smooth interface with
the operations of the municipal emergency
response agency to ensure effective response to an
emergency and provide the ability to operate under
Unified Command.
OPTIONAL SERVICES
We understand the Tustin is considering preparing
an Emergency Operations Plan (EOP), either
as a separate document or combined with the
Emergency Response Plan (ERP). We understand
your objectives and are prepared to proceed, if this
optional task is authorized. There is a significant
benefit in preparing the EOP at the same time as
the E'RP. This will provide the best opportunity to
get the information and procedures in the right
place and have consistent formatting and content.
The key to preparing usable EOP/ERP documents
is to make it easy to find the information needed.
This means different things to different agencies.
We plan to meet with you and your staff to discuss
your existing approach to emergencies, describe the
different approaches to preparing for emergencies,
and provide our experience in preparing ERP/
EOP procedures and documents. In addition, we
can discuss with you the benefits of a combined
ERP/EOP document, versus separate documents,
to your system in more detail.
V:\Client20\Tustin~PropWulnerability Assessment~INDDLSec05-ProjectUnderstanding.indd Project Understanding
APPROACH
Carollo will approach the preparation of your
Security Vulnerability Assessment with the goal
of providing you with a quality project that meets
your expectations on time and on budget. At the
project kick-off meeting, we will refine our work
plan and use it as a road map through the end of
the project. This will help everyone involved in the
project know where we are and where we are going.
Our approach will be to keep you and your staff
involved throughout the duration of
the project. In fact, although we will
be performing the majority of the
work, Tustin staff will have a key
role in the development of work
products and final report. We
will make use of workshops to
facilitate group-brainstorming
sessions, evaluate ideas, and
expedite decision-making.
During the project, we
will maintain strict security
procedures. Final documents
will be secured to Tustin's
satisfaction.
Tustin's Security
Vulnerability Assessment
will identify and prioritize
critical facilities serving the
City of Tustin.
Security/Confidentiality of
Project Information
We understand that disclosure of any
information gathered as part of the
Security Vulnerability Assessment
has the potential to pose a significant
risk to public health and safety. During the project,
Carollo and all member companies of the team
will take every precaution to secure all project
records and destroy all drafts. After the project
is completed, Carollo and all member companies
of the team will return to Tustin all documents
obtained from Tustin or generated during the
course of this project.
We have developed specific procedures for
obtaining and processing security-sensitive
information. The procedure offers various options
for our clients, ranging from complete information
handling of specific items at the client's site,
to fully secure systems at our offices. These
procedures and options will be discussed with your
management team during the project initiation
task to make a final determination of the approach
that will be used to ensure long-term security of the
information.
You will be presented with a list of personnel
(experts and support staff) who will work on the
project. All members of the project team will
be specifically instructed to keep confidential
all information (paper, electronic, and verbal)
obtained or generated in the course of the proposed
project. Task leaders and project management will
maintain strict vigilance while implementing this
critical aspect of the project.
Tustin Staff Involvement
The project will require direct involvement of
Tustin staff at several levels. The table on the
following page provides a matrix of project tasks
and positions of Tustin personnel and the estimated
number of hours needed for each. Tustin staff
will be needed to provide necessary information
and documents, to escort members of the project
team during site inspections, to participate in
brainstorming sessions for developing vulnerability
scenarios, and to review submittals. Input from
Tustin's management will be essential in finalizing
the list of recommendations and in selecting those
capital improvements that will be studied in the
appropriate level of detail.
V:\Client20\Tustin~Prop\Vulnerabillity Assessmentklndd\Sec06-Approach.indd Approach and Scope of Work
TUS'I']N PERSONNEL TNVOLVEMENT EST/MATE
1 Project Initiation
2 FaCilityPrioritization ' ,'
3 Threat Analysis
4 AnalY~is°~P~i~LeveiA FaCilities -
5 Analysis of Priority Level B Facilities
6 :- FaUliTree-DeVel°Pment ,: ...._
7 Review Recommendations with Management
8 caPital improvements ~';, .
9 Vulnerability Assessment Engineering Report
Total
30 ,~
d
Work Plan
Identification and resolution of issues during the
preliminary design phase are critical to delivering
a quality project to Tustin on time and on budget.
One tool that we have found to be helpful is
having a work plan that generally shows the key
elements of the project. The work plan identifies
submittals, meetings, activities, reviews, and goals
for the project. A proposed work plan for the
project is shown on the following page. This work
plan may be modified according
to Tustin staff preferences.
Up-front planning helps
maintain an organized
and efficient project.
Workshops
One method we
have found that aids
communication and
keeps Tustin in the
driver's seat along side
Carollo (rather than in
the back seat watching
us do the work without
Tustin's input) is by using
a "workshop" approach. Carollo has been using this
technique successfully for over 12 years. In fact,
we pioneered the workshop process in the water/
Workshops will be used to promote brainstorming and to
expedite decision making. This will simplify problem solving,
avoid revisiting issues, and get straight to the solution. In
addition to Tustin staff, local police and fire will be encouraged
to participate in the discussions involving water facilities.
wastewater industry and have had great success
with it.
The objective of our workshop approach is to
explain issues that require input from staff, present
alternatives to resolving those issues, 'and make
decisions on which alternative that Tustin wants
to pursue. Workshops are not fishing expeditions
in which the design team tries to find out what the
staff feels are issues to address--they are tools for
decision making. Interactive workshops are a very
effective way to incorporate Tustin
working knowledge of
existing conditions into
the project. This strategy
results in decisions that
work and in a finished
product that is a source
of pride for Tustin and
Carollo staff.
Our workshops comprise
two distinct phases:
1) planning, and 2)
execution (conducting
the workshops with
Tustin staff). As with
everything else that happens on a project, the
planning phase is crucial. Steps in the planning
phase include:
1. Identify specific issues that require client input.
V:\Client20\Tustin~Prop\Vulnerabillity Assessmenfilndd\Sec06.Approach,indd
Approach and Scope of Work
,
Not every issue qualifies. We will use our
understanding of requirements and our expertise
to earmark those issues that require a decision
by staff in a workshop' setting. We will not waste
staff's time conducting meetings to ask them
what the issues are.
Develop acceptable alternative solutions to
present at the workshop. It is our job to prepare
a range of acceptable alternatives to present
in a workshop and an explanation for each.
Prescreening alternatives means staff will have
the best set of viable alternatives to evaluate
and make a decision.
Determine an appropriate level of information
to present at a workshop. We will present the
necessary information that will allow staff to
make an intelligent decision from a range of
alternatives. Doing this before the workshop will
make it as easy as possible for all participants to
understand the issues and the viability of each
alternative.
Prepare a format that makes it easy to assimilate
the information. We will present the information
to be conveyed at the workshop in a format
that is best suited for the specific situation
based on our experience in similar workshops.
For example, we often use alternative analysis
matrices, which show how we evaluate the
available solutions against a range of appropriate
criteria. Our job is to find ways to present
information in order to make the decision as
easy as possible.
Once we have planned the workshop, we conduct
it following this process:
1. Present an issue, reasons it is important enough
for the group to make a decision, and viable
alternatives to resolving it.
2. Moderate discussions of the issue and solutions.
3. Make a joint decision.
Workshops have become something of a fad in
recent years. Many firms see its value and try hard
to make the process work in the early stages of a
project, but abandon it as the project heats up.
A few firms simply pay lip service to the process
because it seems like the right thing to say in a
proposal.
We have made the workshop process a centerpiece
of our design approach. Workshops are at the
core of our technical approach and work scope for
this project. In fact, several are scheduled for this
project.
V:\Client20\Tusting)rop\Vulnerabillit¥ Assessment~lndd\Sec06-Approach.indd Approach and Scope of Work
VULNERABI'LI'TI FOR CITY OF TUSTTN
Estimate Costs for
Capital Improvement Projects
Prepare Final Vulnerability
Assessment Engineering Report
I- Fina Vu nerability Assessment
Engineering Report
Updatad Administrative
~ Procedures and Programs J
J Emergency Response Plan J
J Recommendations J
Kick-Off
Meeting
Presentation of
Final Documents
Establish Direction on:
* Communications
* Approach
* Methodology
* Prioritization Criteda
* Resources
' Information Access
and Control
* Schedule
Completed Project
On Schedule and
On Budget
V:\ClientZ0\Tusdn~'op\Vulnerabillity AssessmentX!ndd\Sec06-Approach. indd
Approach and Scope of Work
SCOPE OF WORK
The purpose of the proposed effort is to prepare
a Security Vulnerability Assessment, Emergency
Response Plan, and Emergency Operations Plan
for your drinking water system. As recommended
by the USEPA, we propose to use the RAM-
W(*m) methodology developed by Sandia as the
backbone of our evaluation approach to complete
your Security Vulnerability Assessment. Based on
Sandia's methodology and the guidelines provided
by USEPA, we have prepared a project plan
that will provide you with a comprehensive, yet
pragmatic and cost-effective set of solutions for
potential security vulnerabilities. Due to size and
governmental restrictions, we have not re-iterated
the Sandia RAM-W(~m) methodology in this
proposal. We will instead focus your attention on
how we will effectively apply the methodology to
meet your specific needs.
As described in the Sandia RAM-WI~m)
methodology, the Security Vulnerability
Assessment is the foundation upon which rational
(informed) decisions can be made to reduce
the risks from deliberate, malevolent actions. A
rational basis for decisions is needed to ensure
maximum gain from the funds that Tustin has set
aside to implement the recommended
improvements to their
facilities, equipment
and administrative
procedures. Similar
to the process safety
field, this basis must be
developed by creating
a comprehensive list of
potential scenarios along
with an assessment of the
likelihood of occurrence
and severity of impact for
each scenario. This list will be achieved through
the application of a systematic methodology and
the Participation of a team with expertise in all
aspects of both water operations and security.
This Security Vulnerability Assessment will identify security
improvements that benefit all of your customers.
Using the Sandia RAM-W(~m) methodology and
process hazard analysis techniques developed
for application in the process safety field, a
comprehensive list of potential scenarios of
malevolent acts towards critical facilities can be
identified and cataloged. The scenarios will be
ranked according to their severity of impact and
likelihood of occurrence by a panel of experts
from our team and key Tustin personnel. The
ranked list of scenarios will provide the basis for
recommending changes to the City's Emergency
Response Plan (to make it more specific to
the water department), security program, and
improvements to other Tustin administrative
programs and activities, facilities, and systems (i.e.,
capital improvements). The ranking will also be
used to help Tustin prioritize the recommendations
and develop a cost-effective plan for improving
security and reducing vulnerability.
The final product of the proposed effort for the
Security Vulnerability Assessment will include the
following:
· A ranked list of critical operations to your
water system.
· A ranked list of critical facilities.
· A report on potential sources of threat with PA
(Probability of Attack) values assigned.
· A technical memorandum presenting the
general characteristics of biological, chemical,
and radiological hazards and an analysis of
existing water quality monitoring
technologies with
recommendations.
· A prioritized list
of recommendations.
· A technical
memorandum (Security
Enhancement Plan)
discussing each
recommendation, their
risk-based justification,
estimated construction
costs, and a preliminary implementation
schedule.
~ A Security Vulnerability Assessment Report.
· A formal closing presentation, including
presentation notes, to Tustin management.
· An Emergency Response Plan consistent with
Standardized Emergency Management System
specifications.
V:\Client20\Tustin~Prop\VulnerabillityAssessment~Ind&Sec06-Approach.indd Approach and Scope of Work
Client. Consultant Scope of Work Cross Reference Table
,
1-A,
1-B.
1-C.
l-D:
2,
2-A.
3.
3-A,
3-B.
3-C,
3-D.
3-E.
3-G.
3-H,
3-1.
3-J.
3-K.
3-L,
3-M,
4.
4-B.
4-0!
4-D.
4-E
.
1-A.
1-B.
1-0,
2.
2-A.
3,
Project Management
Consultant Fees for Project Management
Project Schedule
Meetings
Monthly Project Status Reports
Research and Data Collection
Research and Collect Existing Information and Conditions
Vulnerability Assessment
Determine/define the City's objectives
Perform a systematic site characterization of the City's water system
ProVide a prioritization of the likely adverse events/consequencesthat could affect the
system and the City's service area
Define how malevolent acts might be conducted
Interdependency disruptions
Assess the likelihood of such malevolent acts from defined threat sources
The approach to the Assessment shall be "pedormance-based,'
The Assessment shall determine the most critical assets (targets) in water system'
The Assessment shall identifya system's vulnerabilities and Provide a prioritized Plan
Assessment shall also provide the comparison of the combined risk of adverse impact
to the property, water quality, and employees from various threats
Consultant sha I conduct a review of the exposure and risk associated with the illicit introduction
of chem ca, bio ogica, and radiolog cai water quality contaminants into the water~.isYstem 3
Consultant shall prepare a prioritized plan for security upgrades 7
consultant shall describe operat on and maintenance requirements ~ . '~ 7
,
Emergency Response Plan
and develOp an ERP 10
The ERP shall be incorporated as an appendix into the City's Emergency Plan 10
Oonsu tant sba rev ew Part Sect on B-4 "Eng neering and Utilities Branch Director" of the City's Emergency Plan 10
·
Consultant shall review the City's Emergency Plan and make recommendations for changes 10
Consultant shall Certify that the ERPfulfills a!l EPA requirements. 10
Items of Additional Work That May Be Included
Develop and EOP
Written gu:defines, checklists, and ...
Address the items necessary to develop...
2 throug h 10
1-A
1-B
1,C
2 through 10
2
2
2 and 3
3
4 and 5
3
2 through 8
4, 5,and 7
4, 5,and 7
7
11-A
11-A
11-A
11-B
NOne
V:\Client20\Tustin\Prop\VulnerabillityAssessment~Indd\Sec06-Approach.indd Approach and Scope of Work
We understand that the information contained in
these documents and all work products is sensitive
information that, if not maintained securely, could
be used to harm Tustin or its customers. Therefore,
we have implemented security procedures for the
handling of such sensitive information as described
later this section.
Our proposed scope of work
has been organized in a
manner that we believe
best describes our
approach to your Security
Vulnerability Assessment
project. This scope of
work follows the flow of
activities as shown earlier
in this section in the
work plan.
Tustin's Security Vulnerability Assessment will identify
critical customers served by Tustin's water system.
1. Project Management
As requested in the RFP, our project management
fees have been incorporated into our other tasks in
the scope of work.
1-A. Project Schedule
A detailed project schedule will be developed
and presented to Tustin at the project kick-off
meeting. As the project progresses, the schedule
will be updated and modified as required. At a
minimum, the project schedule will be updated
and distributed on a monthly basis. If needed
for a meeting or requested by Tustin, the project
schedule can be updated more frequently. We
fully understand the importance of completing
the vulnerability assessment on schedule and will
provide a completed report by October 31, 2003 as
requested in your RFE
1-B. Meetings
Carollo will meet with Tustin staff on a monthly
basis to review project status and for additional
meetings that may be required to answer questions
or resolve issues. Progress meetings will include
project schedule, budget, and overall progress of
the project. For all meetings, a draft agenda will
be distributed to your project manager prior to the
meeting to help identify the right persons to invite
and to allow for additional items to be discussed.
Carollo will bring the appropriate technical staff,
partners, and/or subconsultants as is required to
adequately discuss the agenda topics. Carollo's
project manager will conduct the meeting and
verify that the agenda is being adhered to. After
the meeting, Carollo will distribute draft meeting
minutes within five working days to the attendees
· for review and comment. After receiving
comments, the final meeting
minutes will be distributed.
In addition, Carollo
has proposed project
workshops to help
streamline the decision
process on several
issues. We have found
that workshops are an
efficient way to get the
decision makers together,
get all the concerns
addressed at once, and
then make a decision and move on.
Project Kick-off Meeting
The Project Kick-off Meeting will include Tustin
staff and key members of Carollo's project team
to verify the scope, methodology, resources, and
schedule. The following subjects will be addressed
during this meeting:
· Verify Scope - The physical systems to
be included in the Security Vulnerability
Assessment will be verified.
· Methodology - A formal presentation of the
specifics of the methodology for the Security
Vulnerability Assessment will be provided by the
project team. As noted earlier, the methodology
developed by Sandia for AWWA will be used
as the basis for the Security Vulnerability
Assessment methodology.
· Define Tustin's Objectives - Tustin staff and the
project team will identify the overall mission
of Tustin's water system and clearly define the
objectives of the system. Well-defined objectives
will help to prioritize the facilities within Tustin's
system.
· Criteria for Facility/Systems Prioritization
- The objectives of Tustin's' water system will
be used to establish a set of criteria for ranking
(prioritizing) major facilities and systems. The
V:\Client20\Tustin\Prop\Vulnerabillity Assessment~Indd\Sec06.Approach.indd
Approach and Scope of Work
number of people served and criticality of the
users are examples of measures that might be
used for defining the prioritization criteria. It
is anticipated that more than one measure will
be used to define the prioritization criteria. The
criteria will be used in the initial steps of the
Security Vulnerability Assessment.
· Schedule - The schedule will be discussed in
terms of key milestones, workshops, interim
results presentations, and draft reports.
· Resources (Tustin Personnel) - Tustin personnel
and their role in the proposed project will
be discussed. Anticipated to be specifically
included in the project are operational and
supervisory personnel who will be needed in
the brainstorming sessions, and management
personnel who will be involved in making
key decisions. As part of this activity, their
level of effort will be discussed relative
to the appropriate project tasks. For the
brainstorming sessions in the workshops, we
expect the participation of area managers from
water operations, operations personnel, the
security manager, engineering personnel, and
information technology personnel. Their input
is needed for the design and operational details
of various facilities.
· Resources (Documentatibn) - Engineering
drawings, procedures, and other documents
and data that will be needed for conducting
the Security Vulnerability Assessment will be
identified, and their availability and accessibility
discussed.
· Resources (Local Authorities) - Personnel
from local law enforcement organizations may
also be required to provide information during
the various workshops. Approaching the local
authorities for advice and information will be
discussed.
· Information Access and Control - The
participants will discuss the steps which Carollo,
its subconsultants, and Tustin will take to
protect and control the information that will be
generated while conducting this project.
Deliverables
· A set of criteria for major facility prioritization.
· A finalized project plan including methodology
summary.
· A project schedule showing submittal and
meeting dates, topics, and participants.
1-C. Monthly Project Status Reports
Carollo will prepare and submit to Tustin's project
manager monthly reports that provide an update
of the project schedule, an updated graph (S-
Curve) of projected, estimated and actual budget,
and an updated progress report that summarizes
the services completed, services planned for the
upcoming month, and any issues impacting the
project schedule.
1-D. Information Secudty
Carollo has, in-place, strict document handling
procedures as well as exceptionally high security
features on our internal network. These procedures
are in writing and are strictly enforced. In addition,
only project team members have access to project
files on our network. Hardcopies of any documents,
including draft or working copies, must be locked
up when not being worked on. Draft documents
that are no longer needed must be shredded by the
team members.
For external communications, we have been
using PGP encrypted Email and hand delivery of
documents directly to our client or other project
team member. Electronic files are purged from
our network and recycle bins. Our network has
a hardware firewall, and we do not allow wireless
connections to our network.
2. Facility Prioritization
Tustin's facilities (i.e., systems and equipment)
will be prioritized using the criteria established
in the project kick-off meeting. For example, for
the measure "Supplying drinking water to XX
number of users," each facility will be assigned an
importance factor based on the number of people
served and/or the importance of the customer. The
process will be repeated for every measure defined
in the prioritization criteria.
Once all the facilities and systems have been
assigned prioritization values, a multi-variant
scoring process will be used to rank each facility
V:\Client20\Tustin~Prop\Vulnerabillity Assessment~Indd\Sec06-Approach.indd Approach and Scope of Work
according to the criteria established in the
preceding task. The prioritized list wil: a'.:c.',~' the
project team to determine where the weakest
points are located and to prioritize each facility in
terms of which should be studied first. Based on
past experience of the project team in analyzing
large complex systems, it is expected that the
facilities will be grouped into two priority levels.
· Group A, the high priority facilities, will be
analyzed first, using the full extent of the
recommended methodology.
· Group B, lower priority facilities, will be
subjected to a less rigorous overview.
Deliverables
· A Technical Memorandum that contains:
a) A description of the prioritization methodology.
b) A prioritized list of critical facilities and systems,
and the basis for the prioritized list.
c) A total list of facilities to be included in the
Security Vulnerability Assessment.
The Threat Assessment
will evaluate potential
threats by adversaries to
high visibility targets in
the City of Tustin. The
Probability of Attack (PA)
value will be established for
each adversary.
3. Threat Analysis
Three key issues will be addressed
in this task:
1) Potential sources of
malevolent acts.
2) Bacterial, chemical,
and radiological threat
characteristics.
3) Potential methods of cyber
attack on SCADA system.
I~ Potential Sources of Malevolent
Acts - The main objective of
this part of the task is to collect
sufficient information to gain an
understanding of the nature and
motivations of potential sources of
threat (i.e., malevolent acts). As
available from local law enforcement
(based on their own knowledge,
experiences, and consultation with
the local authorities), we will gather
information from the Tustin Police Department
and other local agencies about potential sources
of threat, their motivations, past activities,
modus operandi, and potential interest in
Tustin's facilities. In addition to external groups,
the analysis will include potential sources of
threat from within Tustin, such as disgruntled
employees or employees engaged in criminal
activities. The results of this task will be used
later to aid in establishing the likelihood of
specific malevolent act scenarios.
· Bacterial, Chemical, and Radiological Threat
Characteristics - A definition of important
categories of bacterial, chemical, and
radiological threats will be developed to serve
as the basis for establishing potential sources
for malevolent acts involving such materials.
This list will include a potential list of agents,
characteristics, anticipated behavior in water,
dangerous concentrations, and potential impact
on the public when water is used for drinking,
cooking, washing, or irrigation. In addition,
available water quality monitoring devices
will be evaluated and recommendations made
regarding the use of these devices in Tustin's
system.
· Potential Methods of Cyber Attack on SCADA
System - The SCADA system will be reviewed
to evaluate the potential for cyber attack. This
study will focus on potential weaknesses and
ease of penetration and will include an analysis
of firewall protection, dial-in and interned
intranet weaknesses, and physical security
of access points. This review will provide
recommendations for hardening the system
against malevolent threats.
Deliverables
· A Technical Memorandum will be prepared
containing the following:
· A list of all data gathered and records
researched required for the Security Vulnerability
Assessment.
· A listing of the potential sources of threat. A
summary will also be provided of possible
motivations and modus operandi of the potential
threat sources.
· A listing of potential sources of bacterial and
chemical threats and their characteristics.
V:\Client20\Tustin~Prop\Vulnerabillity Assessment~Indd\Sec06-Approach.indd Approach and Scope of Work
We will gather information from the City of Tustin Police
Department and other local agencies about potential sources
of threat, their motivations, past activities, modus operandi,
and potential interest in Tustin's facilities.
· A description of water quality monitoring
systems and approach.
· Recommendations related to contaminant
monitoring for the water system.
· A description of SOADA system processes.
· SCADA system vulnerabilities to cyber attack
and recommendations for improving SCADA
system security.
4. Analysis of Priorify Leve~ A Facilities
The objectives of this task are as follows:
· Identify a comprehensive list of scenarios in
terms of possible avenues of attack, and
existing safeguards that may prevent or mitigate
an attack.
· Determine consequence level (i.e., severity of
impact) for each scenario.
· Determine likelihood category for each scenario.
· Perform site visits to Tustin's facilities.
· Develop a preliminary list of recommendations.
In conjunction with key Tustin personnel, we will
conduct on-site inspections of the facilities to
understand their characteristics, and determine
both the likely routes of attack and the safeguards
already present to prevent or mitigate such an
attack. Facilities will be photographed during the
inspections.
Brainstorming sessions will be held to identify
scenarios, their consequence levels, and likelihood
categories. To ensure that a comprehensive list of
scenarios is identified, a workshop similar to that
used in conducting Process Hazard Analyses will
be utilized. To identify the existing safeguards,
both hardware and administrative/operational
procedures will be reviewed. We anticipate that
all relevant Tustin programs and activities will be
addressed. During the process, the following will be
reviewed with special emphasis: the City of Tustin's
ERP, the emergency training practices, and Tustin's
administrative policies, procedures and programs.
Depending on the topic of discussion for the
workshop, experts from both the project team
and Tustin staff will be invited to the meeting.
For example, when discussing operational issues,
session participants will likely include the area
managers and key operations personnel. When
discussing SCADA connections, and possible
threats to that system, the information technology
experts and Tustin staff members working with
your SCADA system will be invited to the
meetings.
An important outcome of the workshops will be
a list of specific recommendations for improving
the tamper resistance of the exposed water
distribution system elements, enhancing the
physical security of the facilities, and modifying the
existing administrative programs and procedures.
In addition, many of the items addressed in
the workshops will be used later during the
development of the ERR.
To help support brainstorming during the
workshops, a modified version of the software
that we have previously used for Process Hazard
Analyses (PHAPIus T,) will be used to record and
document the sessions, as well as for tracking
recommendations. This modified version includes
enhanced support for Security Vulnerability
Assessment, and as a value.added benefit to
Tustin, complimentary copies will be provided to
Tustin with the option to perform periodic updates.
Deliverables
· A set of facility photographs.
· A description of the physical utility system
(production, distribution, storage facilities,
population, area, etc.).
· A description of water sources and their
location.
V:\Client20\Tustin\Prop\Vulnerabillity Assessment~Indd\Sec06-Approach.indd
Approach and Scope of Work
A modified version of the software that we have previously used for
PHAPIus 'M will be used to record and document the sessions, as well
as tracking recommendations.
· A list of scenarios characterizing the malevolent
acts, existing safeguards, and risks to critical
facilities (will also be incorporated into and
enhanced in later tasks).
· A preliminary list of recommendations that will
include a brief description and basis of each
recommendation.
· Recommendations on policy changes to improve
security and training documents.
· A ranked list of the preliminary
recommendations developed during the facility
analyses.
5. Analysis of Priority Level B Facilities
In a workshop with key Tustin personnel, we
will briefly review Priority Level B facilities by
location, type of facility, purpose, and security
features. Most of these facilities will be analyzed
using site drawings and data, anecdotal evidence,
and proximity to neighbors. Field visits will be
conducted to determine if additional security
measures are needed. However, these visits may be
limited to representative facilities or may be less
involved than the site visits to the Priority Level A
facilities.
Deliverables
· A brief assessment of each Priority Level B
facility.
Preliminary recommendations to improve the
security of selected Priority Level B facilities (if
required) and bases for the recommendations.
6. Review Recommendations with
Tustin Management
The most important purpose of the preceding tasks
is to develop a set of recommendations for capital
improvements, updating Tustin's administrative
procedures and programs, developing the
ERP, and making changes to the emergency
training program. We will prepare a formal
presentation to Tustin management to discuss
the proposed recommendations. The ranked list
of recommendations from the preceding task
will be used here. The objective of the panel will
be to verify the recommendations, group similar
recommendations to facilitate
their implementation, and
verify the prioritization of the
recommendations. These
recommendations will be
developed further in the
Security Enhancement
Plan. The Security
Enhancement Plan will also
address Administrative and
Procedural Recommendations.
Deliverables
· A prioritized list of
recommendations that includes a security
improvements, capital facilities, and
administrative tasks selected for detailed
evaluation.
7. Security Enhancement Plan
The risk ranked recommendations will include
security improvements, capital facilities, and
administrative recommendations. Typical
improvements include installation of tamper-
resistant hatches, special fences, alarm systems,
surveillance systems, redundant pumping
facilities, etc. Justification for the proposed
protection systems will be included to explain
why the recommendation is included. The project
descriptions will be sufficient to prepare order
of magnitude construction cost estimates and
annual operations and maintenance cost estimates
V:\Client20\Tustin\Prop\Vulnerabillity Assessment~IndO, Sec06-Approach.indd
Approach and Scope of Work
for each project. A preliminary
implementation schedule will ae
developed that prioritizes the
proposed security enhancements
into one of three levels of action
plans: immediate, short- or long-
term plans.
is ahead is important. The
Security Enhancement
Plan will recommend
improvements that help
prepare Tustin for
what's ahead.
A Technical Memorandum
includes the following for
recommendation:
A description and basis of the
,mmended improvement.
Recommended operational procedure
tifications.
3) Ranking/priority level.
4) Planning level construction cost
estimates.
5) Estimated annual operating and
maintenance expenses.
6) A preliminary implementation schedule.
8. Security Vulnerability Assessment
Report
In addition to the task deliverables identified
above, a Security Vulnerability Assessment Report
will be provided to Tustin.
The Security Vulnerability Assessment Report will
include the following:
· A summary description of the methodology
employed including prioritization criteria.
· A list (or actual copies of) all data reviewed
and/or used to complete the vulnerability
assessment.
· A prioritized list of Tustin facilities.
· Names and qualifications of Tustin project team
members.
· Names and qualifications of Carollo's project
team members.
· A complete listing of the scenarios identified for
critical facilities along with existing mitigation
measures, ranked according to risk.
~ Final prioritized list of recommendations.
V:\Client20\Tustin~Prop\Vutnerabillity Assessment~lndd\Sec06-Approach.indd
Ail the reports and deliverables will undergo a
thorough quality control review process by the
project team before delivery. Draft copies will be
submitted to Tustin personnel for review, and the
final submittals will incorporate Tustin's comments.
As noted in the preceding section, all the reports
and work products will be treated as confidential
materials and will be strictly controlled by all
members of the project team.
Deliverables
· Security Vulnerability Assessment Report.
· Security Vulnerability Assessment Supporting
Documents.
9. Presentation of Final Report
The final report will be submitted to Tustin
management to present our findings and
recommendations for the project. The final
Security Vulnerability Assessment will be presented
to Tustin management at this meeting.
Deliverables
· A presentation to Tustin management.
10. Emergency Response Plan
Recommendations to the City of Tustin's
existing Emergency Plan will be developed based
on a review of the plan against the scenarios
postulated and ranked in the preceding tasks. The
recommended modifications will be compatible
with SEMS specifications. In addition, an ERP will
be developed for the Water Division based on the
recommendations from the security vulnerability
assessment. The format will be such that the
ERP can be inserted as an appendix into Tustin's
Emergency Plan. The ERP will be consistent
with SEMS specifications. The plan will define
the responsibilities of various organizational
entities of the Water Division, expected actions
before, during, and after an emergency, minimum
equipment that should be maintained at the ready
at all times, proper training of personnel, and
maintenance of the Emergency Response Plan
document up-to-date at ali times.
Scenario-based emergency procedures will be
developed for the Water Division. The scenarios
will be selected based on the potential events
identified during the workshops and concurrence
Approach and Scope of Work
of Tustin Water Division management. The
emergency procedures will be added to the ERP,,
which will also serve as a stand alone document
that will address each scenario separately in terms
of activation of a procedure, responsible persons,
required tools, specific actions that should be taken,
precautionary statements, criteria to contact other
agencies, etc. The plan will include a listing of all
key contacts and their telephone numbers and
addresses where relevant. The plan will also include
administrative procedures for personnel training and
maintaining the plan.
The ERP produced in this task will be certified as
compliant with all relevant requirements of the
Federal EPA and State Regulations.
Deliverables
· A list of recommendations to update Tustin's
Emergency Plan.
· Updated sections or separate Water Division
relevant plan to be added to Tustin's Emergency
Plan.
· Water Division Emergency Response Plan
(scenario specific plan).
1 1. Optional Services
A. Emergency Operations Plan
Deliverables
· A standalone Emergency Operations Plan
containing guidelines, checklists, and notices as
appropriate.
B. Combined Emergency Response Plan/Emergency
Operations Plan
If this subtask is authorized, we will develop a
combined ERP/EOP for Tustin's potable Water
System. The combined ERP/EOP will contain the
same information identified in the Scope of Work
Task 10 and Optional Services Task A, but the
deliverable would be a single document.
Deliverables
· A single Emergency Response Plan/Emergency
Operations Plan.
No additional optional services are included.
PROJECT DELIVERABLES
We will prepare and submit 7 copies of draft
documents (spiral bound), and 10 hard copies of the
final documents plus one camera-ready copy and
one electronic copy (including all figures, tables, and
maps) on data diskette or compact disc. Documents
will be submitted in a format compatible with Tustin's
current software: Microsoft Word 2000 and
Microsoft Excel 2000. Arial 12 font
If this subtask is authorized
will be used for body text.
we will develop an
Emergency Operations
Plan (EOP) for Tustin's
Water System. The
EOP will include
specific planning,
design and operational
recommendations for
emergency operations of
Tustin's domestic water
system. Emergencies to
be addressed include
scenarios identified
in the security vulnerability assessment, loss of
imported water during high demand periods,
reservoir structural failure, main breaks with loss of
pressure requiring DHS notification and boil water
notices, multiple water quality complaints, multiple
breaches in the system, fire flow demand requiring
the operation of interconnections with other cities/
agencies, etc.
Preparing an Emergency Response Plan for the Water
Division is an important step toward being prepared for an
emergency. Recommendations developed from the Security
Vulnerability Assessment will be integrated into Tustin's
Emergency Response Plan.
Carollo's project manager,
Powell, will personally
each document
it is submitted to
to ensure accuracy,
and integrity
all work products. In
addition, documents and
work products will be routinely
reviewed by all project team
members to verify that the
products meet Carollo's standards for accuracy,
quality, and consistency. Carollo's project manager
will certify accuracy and completeness of each
submittal in writing as requested.
PROJECT MANAGEMENT
Carollo has well-defined, rigorous procedures for
project management. These techniques have been
developed and refined over our 70-year history
V:\Ctient20\Tustin\Pmp\VulnerabillityAssessment~Indd\Sec06-Approach.indd Approach and Scope of Work
and contribute to our success and reputation. Key
elements of our management approach include.
· Emphasis on communication with the client and
within the project team.
· Emphasis on quality.
· Key senior staff involvement at all project stages.
· Frequent comparison of planned versus actual
budget and schedule.
Our management approach to the specific elements
identified in the scope of work follows.
A. Workshops and Meetings
Our most direct way to communicate with the client
and other agencies involved with the project will
be through meetings. Meetings will be scheduled
·
to present submittals, to review and discuss Tustin's
comments, and to report on the status of the overall
project. An agenda will be prepared for each meeting.
We typically forward the agenda one week in
advance so that staff is made aware of the issues to be
discussed and the people necessary to make decisions
are in attendance. Meeting notes are prepared for
each meeting to document decisions made. Items
documented in the meeting notes include:
· Attendees.
· Meeting time, date, and location.
· Record of discussion.
· Decisions made.
· Outstanding issues.
We also anticipate meeting on a more frequent and
informal basis with project team members as required
to assist in decision making. We schedule informal
meetings through Tustin's project manager to
maintain proper communication channels.
· Items requiring decisions.
· Changes in project scope.
The status report is prepared as part of our
monitoring of planned versus actual schedule
and budget. By monitoring this information on a
regular and frequent basis, potential problems are
immediately identified and corrective action can be
taken at the earliest possible time.
C. Project Staffing Planning
Staffing is key to successful project management and
an integral part of our quality management program.
Our fundamental approach is to assemble the best
qualified team to match the project requirements.
We then review the scope of the project and review
staffing levels and budgets from similar projects to
estimate labor requirements to complete a project.
A labor-hour estimate has been made for each task in
the scope of work. The estimate includes time for site
visits and meetings as well as actual engineering work
for the project. We use historical data, modified for
project specific requirements, to estimate the types
of services and personnel classifications to complete
each task.
The project schedule has a significant impact on
staffing planning. Project milestones are identified
and labor hour requirements per task are estimated to
determine staffing levels to complete the task by the
milestone date. The staffing levels are broken down
by discipline, to determin~ overall office personnel
planning. A database on staffing needs and current
staff assignments is maintained and updated monthly,
both company-wide and locally in our Santa Ana
office. The database allows us to project workloads
and identify if staff becomes over-committed or needs
additional work.
B. Monthly Progress Reports
Carollo project managers routinely prepare a monthly
status report for each project, which will also be
provided to Tustin. The status report addresses the
followings items:
· Project percent complete.
· Project progress in the previous month.
· Budget used.
· Budget remaining.
· Key decisions made in the previous month.
We combine this staffing effort with our project
planning, monitoring, and reporting procedures to
ensure that each project has adequate resources to
meet the project schedule.
D. Establishing and Maintaining
Schedules
Schedules are established by identifying project
milestones and determining when each task must be
complete to meet the milestone dates. The schedule
is reviewed to determine staff requirements to
complete the project on schedule.
V:\Client20\Tustin~Prop\Vulnerabillit¥ Assessment~Indd~Sec06-Approach.indd Approach and Scope of Work
If a project is needed on a fast track, more staff are
assigned than for a project with a longer schedule.
Each month, the project manager assesses the
percent complete for the project. The percent
complete is estimated on a per task basis, in a
defined manner, and is done independently of
budget review. Budget status is not provided to the
project manager until after the percent complete
has been estimated.
E. Monitoring Progress
To monitor project progress, the project labor-hour
budget is fit to the project schedule to form an
"S" curve. The "S" curve is a graphical illustration
of the project plan, showing how the project will
be completed on time and within the labor hour
budget.
Each month, the percent complete is plotted on
the "S" curve to compare actual project progress to
planned progress. If the actual progress falls behind
the planned progress, corrective measures are
identified and implemented.
F. Monitor Budgets
Twice each month, each project manager is
90%
70%
60%
50%
30%
2O%
10%
0%
Time in Months
The "S" curve is a graphical illustration o/the project plan,
showing how the project will be completed on time and within
the labor-hour budget.
provided a record of labor hours charged to each
job. Using the cumulative hours, percent of budget
used is calculated and plotted on the project
"S" curve. The project manager can then make an
assessment of the following:
Are percent complete and percent budget
expended close to the planned curve?
Are percent complete and percent budget
expended curves parallel, converging, or
diverging?
Does the rate of progress match the budget
expenditure rate?
G. Formal Quality Control Procedures
Carollo has a commitment to quality. A detailed
program for quality is incorporated into each of our
projects, with the goal being to provide high quality
engineering services consistent with the standards
of our company.
Carollo has developed a number of significant
design aid manuals that are used by our staff.
These documents are regularly used on our
projects to provide a consistent approach to quality
management. The documents include:
· Project Engineers Manual.
· Project Cost-Estimating Manual.
· Drafting Guidelines.
· Typical Details.
~, Standard Specifications.
· Design Criteria Manual.
· Construction Manual.
· Contracts Manual.
In addition to the resources referenced above,
Carollo has implemented a program for monitoring
and improving quality at appropriate points during
a project. This program begins at the preliminary
stages of a project and is applied at regular intervals
throughout the project.
Quality management begins with contract
development. Each contract is reviewed
independently for consistency among scope,
budget, schedule, and client expectations.
Quality management continues with organization
of the project team and project procedures. For
your project, we will provide staff experienced
V:\Client20\Tustin~Prop\Vulnerabillity Assessment~Indd\Sec06-Approach.indd
Approach and Scope of Work
with the various elements of the project. A
project-specific "Procedures Memoranda" will be
developed and routed to members of the project
team to establish a consistent approach to the
various phases of the project.
A Quality Management or Technical Review
Committee will review the project at major
milestones. We will use a selected
group of highly qualified engineers,
experienced in planning and design
as well as construction.
H. Security Program
Given the security sensitive
nature of the proposed effort,
we have augmented our
quality control program with
security requirements to ensure
that high quality services and
products do not present any
measurable risk to Tustin. Our
Quality Control and Security Program
(which is also implemented by all
subconsultants) includes the following key features:
· Written office policies and procedures specify
the control of security-sensitive information.
· Only project team members who have been
briefed on the control of security-sensitive
documents, are allowed access to security-
sensitive information.
· Control of both paper-based and electronic-
based security-sensitive information is managed
by our Information Security Manager (for this
project, Brian Powell).
· Visitors to our offices are continuously
supervised.
· Paper-based security-sensitive information is
maintained in a locked cabinet. Keys are only
assigned to project team members.
· Electronic-based security-sensitive information
is stored in specific project folders. Access to
these folders is only granted to project team
members.
· Once the security-sensitive project is completed,
electronic files will be either archived and
remain in the secure location, destroyed, and/or
provided to you (to be decided by you).
· Project team members are instructed to purge
files- (including their "Recycle Bin") of any
temporary files used on any computers.
· Any electronic-based security, sensitive
information removed from the office (e.g., for
use at a client's site), will be encrypted, to avoid
any practical potential for compromising the
data, such as if an employee laptop is stolen.
The same encryption approach is applied to the
use of Email.
· The office network uses only hardwired
connections (i.e., no application of wireless
technologies) and has a dedicated hardware
firewall to the Internet to minimize the potential
for external intrusion.
V:\Client20\TustinXPropWulnerabillityAssessment~Indd\Sec06-Approach.indd Approach and Scope of Work
We have developed a preliminary project schedule
(shown on the following page) to illustrate the time
· required to complete your Security Vulnerability
Assessment, Emergency Response Plan, and
Emergency Operations Plan. This detailed
schedule is intended to show our understanding
and our commitment to your project.
In summary, we believe that the Security
Vulnerability Assessment can be completed by
October 31, 2003. In addition, your Emergency
Response Plan and Emergency Operations Plan
can also be completed by October 31, 2003. This
assumes that we will receive Notice to Proceed by
May 21, 2003. We look forward to working with
you to meet your scheduling needs.
It is critical that the Security Vulnerability
Assessment be completed by December 31, 2003
to ensure that Tustin satisfies the requirements
established by the USEPA. Carollo is committed to
completing your project by this date.
V:\Client20\Tustin~Prop\Vulnerabitity Assessment\INDD\Sec07-ProjectSchedule.indd
Project Schedule
V:\Client20\Tustin~PropWulne rabilit¥ Assessment~NDD\Sec07-?rojectSchedule.indd
Project Schedule
SANDIA RAM-W CERTIFICATES
RESUMES
V:\Client20\Tustin~Prop\Vulnerability Assessment\lNDD\Sec08-Appendix.indd Appendix
Brian Jack Powell.
Education
BS Civil Engineering,
California State
Polytechnic
University, Pomona,
1988
Registration
Civil Engineering,
California
Sandia RAM- W
Certification
Professional
Affiliations
American Water
Works Association
Orange County Water
Association
Mr. Powell has 15 years of experience in
planning and design of water,
wastewater, and recycled water facilities.
Duties have included layout and design of
pipelines, pump stations, and pressure
reducing stations. Planning duties included
the preparation of hydraulic models
including H2ONET and HYDRA,
calibrating the models, and running various
scenarios.
· Project mapager for the City of Santa
Aha, California, USEPA mandated
vulnerability assessment. The project
involves preparation of preliminary
screening of the city's facilities,
prioritization of these facilities, and site
visits to all critical facilities. Checklist
forms will be developed and used to
identify areas of concern at each site. A
workshop will be used to refine the
vulnerability analysis for each site and then
a fault tree will be developed.
· Project manager for the City of Orange,
California, USEPA mandated vulnerability
assessment. The project involves
preparation of preliminary screening of the
city's facilities, prioritization of these
facilities, and site visits to all critical
facilities. Checklist forms will be
developed and used to identify areas of
concern at each site. A workshop will be
used to refine the vulnerability analysis for
each site and then a fault tree will be
developed.
· Carollo's project manager for the Long
Beach Water Department, California,
USEPA mandated vulnerability assessment.
The project involves preparation of
preliminary screening of the department's
facilities, prioritization of these facilities,
and site visits to all critical facilities.
Checklist forms will be developed and used
to identify areas of concern at each site. A
workshop will be used to refine the
vulnerability analysis for each site and then
a fault tree will be developed.
· Project manager for the Mesa
Consolidated Water District, California,
USEPA mandated vulnerability assessment.
The project involves preparation of
preliminary screening of the district's
facilities, prioritization of these facilities,
and site visits to all critical facilities.
Checklist forms will be developed and
used to identify areas of concern at each
site. A workshop will be used to refine the
vulnerability analysis for each site and
then a fault tree will be developed.
· Carollo's project manager for the
Placer County Water Agency, California,
USEPA mandated vulnerability
assessment. The project involves
preparation of preliminary screening of the
city's facilities, prioritization of these
facilities, and site visits to all critical
facilities. Checklist forms will be
developed and used to identify areas of
concern at each site. A workshop will be
used to refine the vulnerability analysis for
each site and then a fault tree will be
developed.
· Project manager for an analysis and
bench testing of pressure regulating valves
for the Orange County Water District's
(OCWD) legacy injection wells.
Developed technical specifications for the
recommended valves based on the bench
test results. Assisted OCWD procure the
valves for over 60 injection wells.
· Project manager for the design and
construction management of Disinfection
Facilities at Five Existing Well Sites for
the City of Anaheim. Prepared
construction plans and specifications for
the installation of sodium hypochlorite and
future aqueous ammonia at the City's Well
Nos. 39, 40, 41, 46 and 47. The design
included new masonry buildings that
conformed to the Anaheim Resort Area
aesthetics.
· Project engineer for a Water Reservoir
Nitrification Prevention and Control study
for the Yorba Linda Water District.
Developed recommendations for facility
modifications, operational improvements
and monitoring enhancements to reduce
future nitrification problems. Energy
management was also analyzed with
respect to the recommended
improvements.
V:~Cllent2ChTustin~Prop\¥ulnerability Assessment'~Resumes~PowellB.do¢
CCII'OI. LO
engineers
Brian Jack Powell P"g~ :~
· Project engineer for the preparation of a Water
System Master Plan for the Mesa Consolidated
Water District. Worked directly with Mesa staff to
prepare a Water System Supply Plan, an Emergency
Supply Plan and Water System Operations Plan for
the master plan. Then assisted Mesa staff complete
the Capital Improvement/Replacement Plan to
identify budgetary requirements through the year
2010.
· PretSared a computer model of the distribution
system and analyzed proposed improvements for the
City of Soledad, California. The City's 1.1 square
mile service area has a population of approximately
17,000, including the nearby state prison. The
distribution system consists of about 110,000 lineal
feet of pipelines with about 1 MG of storage. The
computer model was developed using H2ONET and
included over 400 pipes and 300 nodes. Results of
the modeling were used to size and locate a
proposed reservoir.
· Updated the Engineer's Report for the
Bellflower-Somerset Mutual Water Company in the
City of Bellflower, California. Using a computer
model developed in H2ONET, analyzed the existing
distribution system after BSMWC purchased water
facilities owned and operated by the City of
Bellflower. Provided recommendations for capital
facility improvements, operational improvements,
and capital replacement fund installments.
· Prepared a hydraulic computer model for the
Walnut Valley Water District's potable water
distribution system in Southern California.
Developed a complete computer model of all
pipelines 4-inch and larger using H2ONET. The
2800 pipe model was field calibrated and then used
to analyze the existing system and proposed
improvements.
· Prepared a Water Master Plan for the City of
Brea, California and its sphere of influence. Several
new major housing developments within the City's
Sphere of Influence and in the Carbon Canyon area
required that the City reexamine their existing
Water Master Plan and the facilities needed to serve
the future developments. The Master Plan included
an H2ONET computer model of the entire system,
field testing and calibration, storage analysis, water
supply analysis, a capital improVements program,
financing and water rate analysis. Also included
with the Master Plan, a complete water facilities
GIS system and Atlas Maps were prepared for the
City's existing ARC/Info GIS system. The GIS
database included detailed information for all major
facilities and every pipeline, water main valve and
fire hydrant in the system.
· Prepared a Water Distribution System Plan for
the Mesa Consolidated Water District, California.
Serving over 100,000 people, MCWD serves almost
all'of the City of Costa Mesa. Developed a
computer model of the District's 18 square mile
service area using H2ONET. Calibrated the model
using field testing results. Prepared a CIP program
and addressed strategies for future water supplies
and use/sale. Identified future potential reclaimed
water use and examined system reliability. Provided
recommendations for future GIS water atlas
mapping.
· Prepare a Water Master Plan Update and GIS
mapping compatible with the existing ARC/Info
GIS system for the City of La Habra, California.
The water master plan update focused on updating
the water demands, meeting minimum standards
throughout the system, meeting future development,
optimizing use of water supplies to reduce the
overall cost of water and planning for emergencies
along with review of financing methods and water
rate analysis. Water system modeling software used
for this project was H2ONET and included field
calibration.
· Preparation of construction plans and
specifications for the design of the Rawlings
Reservoir Booster Pumping Station for the City of
Tustin, California. The station consists of four
constant speed pumps producing 1,900 gpm with a
total of 150 hp. The facility also includes a
permanent backup generator.
· Preliminary design report for proposed
improvements to the City of Tustin, California
Foothill Reservoir, originally constructed in 1959.
Recommended improvements included repair of
cracks in the concrete reservoir roof, application of
a waterproofing sealer to the reservoir roof,
replacement of two existing retaining walls adjacent
to the reservoir and other site improvements.
· Water Improvements Feasibility study for the
City of South Pasadena, California to identify
alternate methods of supplying water to portions of
V:~Clicnt20\Tust inXProp\V ulnerability Assessment~esumes~PowcllB.doc
Brian Jack Powell P~:~ 3
· the water system at higher elevations to improve
water pressure and fire fighting capacity and to
eliminate the two existing elevated steel water
tanks. The computer model was developed using
EPANET and consisted of 528 pipes and 344 nodes.
After field testing the model, the City was
impressed by the usefulness of the computer model
to predict field conditions.
· Citywide Water System Computer Model -
Prepared a network analysis computer model for the
City of Orange, California using Cybernet®. The
City's system provides an average of 28 mgd to a
population of about 120,000 people. The model of
this system included over 2,700 pipes and 1,700
nodes with 18 wells, 13 booster stations, 17
reservoirs, 7 imported water connections, several
pressure reducing stations, and 8 pressure zones.
Field tests were conducted to calibrate the model.
Simulations were performed using the calibrated
model for average day, maximum day, peak hour,
and maximum day plus fire flow for numerous
locations and flow rates.
· Preparation of plans and specifications to retrofit
three existing above ground reservoirs with seismic
upgrades for Southern California Water Company.
The design involved the use of flexible expansion
joints at the inlet and outlet connections to the tanks.
The drains and overflows were also modified to
resist damage due to a seismic event.
· Developed a city-wide water master plan serving
63,000 people in the City of Bellflower, California.
The water system involved six separate water
purveyors with the City's facilities serving as the
backbone to each. Cybernet® was used to model the
water systems as one water system. The study
addressed reclaimed water use, water conservation
plan, consolidation plan, water quality, water
supply, capital improvement programs and
financing alternatives.
V :',Clicnt20~Tustin~rop\Vulnerability Assessment~Resumes~PowellB.doe
I~CiI'OI.I.O
engineers
Mary Clyburn
Education
BS Civil Engineering,
Purdue University,
1974
MS Sanitary
Engineering, Georgia
Institute of
Technology, 1978
Registration
Civil, Arizona,
California, Nevada,
Oregon, Washington
Professional
Affiliations
American Academy of
Environmental
Engineers ( Diplomate)
American Society of
Civil Engineers
American Water
Works Association
Water Environment
Federation
Ms. Clyburn, a partner with Carollo
Engineers, has been responsible for
multi-million dollar projects including
planning, design, and construction services.
Her relevant experience follows:
· Technical advisor for a membrane pilot
plant as part of the joint Ground Water
Replenishment (GWR) project for Orange
County Sanitation District and Orange
County Water District, California. This is a
new project which investigates alternative
membrane treatment (MF and RO)
combinations to eliminate the need for
future activated sludge wastewater
treatment.
· Partner-in-charge for the Chlorine
Disinfection Facility upgrades for Irvine
Ranch Water District. This project includes
modifications to the existing chlorine
building at the Michelson Water
Reclamation Plant, including a new
chlorine gas scrubber, chlorinators,
injectors, diffusers, associated alarms, and a
temporary sodium hypochlorite system.
Also included are similar improvements at
the Rattlesnake Reservoir site.
· Partner-in-charge during the
construction phase of the City of Riverside,
California, tertiary filtration,
chlorination/dechlorination, and outfall
facilities. This work included design of a
bank of 3,900-sf (planning to 6,500-sf)
filters, chemical feed and mixing systems,
flocculators, air backwash facilities, and a
new DCS control system serving new and
existing tertiary facilities.
· Partner-in-charge for design of a major
plant reconstruction project for the E1 Toro
Water District, California. The project
included replacement and upgrade of
various components of the existing 6-mgd
plant to meet Title 22 reliability
requirements. Design of the facilities
included provisions for future biological
nutrient removal and tertiary treatment. The
project also involved assisting the E1 Toro
Water District with an application for Iow-
interest financing under the State of
California's Revolving Loan Fund program.
Another element of this project was
headworks odor control. The existing
facilities are covered and the foul air
collected for treatment in a soil scrubber
facility. Carollo Engineers recommended
covering individual unit processes to
reduce the amount of foul air for treatment
and avoid the cost of constructing a new
building.
· Technical advisor for a study to
determine the cost impact, to water and
wastewater rate payers, of the proposed
Orange County Water District
(OCWD)/Orange County Sanitation
District (OCSD), California, Groundwater
Replenishment Project (GWR). The GWR
is a project to treat 100 mgd of secondary
effluent with micro filtration andreverse
osmosis so that it can be percolated into
the ground. The study evaluated the
project costs and benefits. Rate structure
models for both OCWD and OCSD were
developed and the project costs were
plugged into these models. The model
outputs included the cost impacts to the
OCWD and OCSD rate payers.
· Partner-in-charge and technical
manager for the Clark County Water
Reclamation District, Las Vegas, Nevada,
for development of a 30-year Facility Plan
for wastewater treatment service up to a
total flow of 130 mgd. The Facility Plan
identified treatment expansion
requirements consisting of a total of $640
million for new facilities to accommodate
growth and replace aging facilities. Las
Vegas is one of the fastest growing
communities in the nation. It is also one of
the few communities in the western United
States that discharges treated wastewater
to a high-quality lake that is used for
drinking water supply, Lake Mead.
Treatment requirements are very stringent,
requiring essentially complete phosphorus
removal and nitrification. Future facilities
include biological phosphorus removal and
tertiary treatment consisting of ferric
chloride addition and filtration.
· Partner-in-charge for the Clark County
Water Reclamation District, Nevada,
Capacity Optimization Project, which
developed information on the capacity of
V AClicnt20~Tustiah~op\V ulaerability AssessmentXResumes\ClybumM.doc
CCII'OI.I-O
en~-ineers
Mary Clyburn Page 2
the existing activated sludge process based on
current wastewater characteristics and plant
operation. An interim operating plan was developed
for operation as the plant reaches its rated capacity ·
and new activated sludge facilities are constructed
and put into operation. The evaluation included
assisting staff with evaluation of emulsion polymer
for solids conditioning, determining hydraulic and
solids loading capacity of the dissolved air
floatation process, implementation of enhanced
primary treatment and its impact on activated sludge
and options for interim operation of activated sludge
facilities.
· Assistant project manager for the Secondary
Expansion Project at Orange County Sanitation
District, California, Plant No. 1. This project has an
estimated construction cost of $35 million and
includes activated sludge aeration with automated
dissolved oxygen contact secondary clarifiers, and
DAF thickeners. It included preparation of an
application to the South Coast Air Quality
Management District for a permit to construct. The
permit application addresses the health impacts
associated with the proposed expansion. The project
also includes air dispersion modeling and a health
risk assessment of toxic compounds in off-gases
from the specific unit processes.
· Partner-in-charge for planning, design, and
construction services for the Clark County Water
Reclamation District, Nevada, Central Plant Bar
Screen Facility. The new Central Plant Bar Screen
Facility will provide preliminary treatment for
wastewater flows conveyed to the treatment plant
through the new Crosstown Interceptor as well as
flows entering the plant through the existing
interceptors. The new Central Plant Bar Screen
Facility includes new bar screens sized for an
average annual flow of 130 mgd and will
consolidate all wastewater screening into one
location. Other new processes include
grit/screenings handling facility, screenings
washing/compaction facility, ferric chloride feed
facility, soil biofilters, hydraulic structures, and
electrical building.
· Partner-in-charge for Clark County Water
Reclamation District, Nevada, Biological
Phosphorus Removal Conversion project. The
existing 88-mgd nitrifying activated sludge plant
was converted to biological phosphorus removal.
The converted plant produces a fully nitrified
effluent with a phosphorus concentration of less
than 0.3 mg/L. This conversion allowed the District
to abandon their existing lime sedimentation process
and associated facilities for an annual operating cost
savings in excess of $1.4 million. Key features of
the retrofit work included evaluation of process
configurations using the "Biowin" model, design of
basin modifications to enhance performance, design
of new internal aeration tank baffles, design of new
inlet feed configuration, recommendations to
increase operational flexibility, and work to
minimize the amount of oxygen in primary effluent.
· Project manager for design and construction
management, for the new 280-mgd Headworks No.
2 at Orange County Sanitation District, California,
Plant No. 1. The headworks includes six 8-foot bar
screens and five 70-mgd mixed flow pumps with
500-hp variable frequency type drives. The $35-
million project also includes five aerated grit
chambers with a total peak capacity of 380 mgd.
The collected grit is washed and augered to grit
loading hoppers. Also included is equipment for
prechlorination, odor control, ferric chloride feed,
ventilation, and various support systems. The Bar
Screen Building and Influent Pumping Facility were
designed to allow two parallel flow paths so that
part of the facilities can be isolated and taken out of
service for maintenance. The new headworks
operates in conjunction with the existing
headworks. All wastewater entering the plant is
metered at a Metering and Diversion Structure. A
portion of the incoming wastewater may be diverted
to Plant No. 2 for treatment via the existing
Interplant Diversion Pipeline. All flows to Plant No.
1 must pass through the bar screens in Headworks
No. 2.
· Project manager for air toxics assessment for the
San Bernardino Municipal Water District,
California. The air toxics assessment included
preparation of an Emission Inventory Plan and
Emission Inventory Report to meet the requirements
of the Air Toxics Hot Spots and Assessment Act of
1987 (AB2588). The Emission'Inventory Report
includes development of emission estimation
models using source test data, approved emission
factors and fate transport models such as BASTE
for preparing a plant-wide emission inventory.
Emission sources at San Bernardino Municipal
Water District include combustion sources like
V :~Ciicnt20~Tustin~ro p\V ulnm-abilit y Assessment~Resumes~lybumM.doc
Mary Clyburn Page
engines, flares and standby generators, liquid
treatment processes and solids treatment processes.
· Project manager for preparation of 40-mgd
Capacity Report and design of the City of Riverside,
California, Water Quality Control Plant Solids
Handling Project, Plant No. 1 Upgrade Project,
Hydraulic Reliability Project, and the Interim Belt
Press Facilities. The Riverside Water Quality
Control Plant provides Title 22 reclamation with
trickling filters, activated sludge, and chlorination.
She designed modifications to the trickling filters to
enhance capacity and improve treatment. She was
involved in construction services for the Hydraulic
· Reliability Project, the Interim Belt Press Facilities
and 1982 expansion. These projects total over $50
million in construction costs. Other projects for the
City of Riverside include Influent/Effiuent
Metering, Anthracite Failure Evaluation, 1985
Master Plan Report, Operational Assistance,
Chemical Addition Studies, Digester Rehabilitation,
and Storm Drain designs.
· Partner-in-charge for design of Fine Bubble
Diffuser Retrofit for City of Riverside, California.
In response to new stringent discharge limits, the
current design converted activated sludge reactors to
anoxic reactors for biological nutrient removal. The
conversion included installing baffles and mixers to
form an anoxic zone and installing high-efficiency
aeration panels and mixed liquor recycling pumps.
The high-efficiency aeration panels are stainless
steel with a plastic flexible membrane covering.that
has numerous tiny slits through which air passes. It
produces "super fine" bubbles, resulting in a very
high oxygen transfer efficiency. High OTE reduces
energy use. The panel system uses 20 to 40 percent
less energy than conventional aeration systems.
Publications/Presentations
Pai, P., Dielmann, D., Smith, W., Lee, M.C.,
Esquer, M.E., and Leveque. E.G. "Implementing a
'Good Neighbor' Policy: Designing a State-of-the-
Art Headworks Facility for Minimal Odor
Generation." Paper presented at the 2002 Water
Environment Federation Technical Conference &
Exposition, Chicago, IL, September 28-October 3,
2002.
Lee, M.C., Leveque, E.G., Bury, P., Zegers, R.,
Neher, M., and Bagger, K. "The Effects of
September 11,2001 on the Las Vegas Area Water
and Wastewater Systems." Proceedings of the 2002
Water Environment Federation Technical
Conference & Exposition, Chicago, IL, September
28-October 3, 2002.
Pai, P., Johnson, W., Leveque, E.G., Buhr, H.O.,
Narayanan, B., Lee, M.C., and Dold, P. "Using
Computer Simulation to Optimize BNR Design."
Paper presented at the 2001 Water Environment
Technical Conference & Exposition, Atlanta, GA,
October 13-17,2001.
Gillette, R.A., Lee, M.C., Buhr, H.O., Hill, B.,
Cafferty, D., Mautz, W., and Sirois, L. "Nitrifying
versus Non-Nitrifying Operation at the E1 Toro
Water District Activated Sludge Plant." Paper
presented at the Water Environment Federation
Technical Conference & Exposition, Anaheim, CA,
October 14-18, 2000.
Narayanan, B., Buhr, H.O., Leveque, E.G., Lee,
M.C., and Shepherd, B. "Could Your Secondary
Clarifier Sludge Removal Mechanism Be A Process
Bottleneck?" Paper presented at the conferences
Water Environment Federation Technical
Conference & Exposition, Anaheim, CA, October
14-18, 2000, and the Nevada Water Environment
Association 2000 Annual Conference, Reno, NV,
March 8-10, 2000.
Leveque, E.G., Buhr, H.O., Lee, M.C., Pai, P.,
Johnson, W., and Dold, P. "Computer Modeling
Toolbox for Effective Design Optimization." Paper
presented at the Nevada Water Environment
Association 2000 Annual Conference, Reno, NV,
March 8-10, 2000.
Buhr, H.O., Lee, M.C., Leveque, E.G., Johnson, W.,
and Shepherd, B."Reinventing Activated Sludge
Treatment for Biological Phosphorus Removal."
Paper presented at the Water Environment
Federation 72nd Annual Technical Conference,
Orlando, FL, October 9-13, 1999.
Esquer, M., Leveque, E.G., Lee, M.C., Shepherd,
B., Dielmann, and Pai, P. "Implementing A 'Good
Neighbor' Policy; The Clark County Sanitation
District Designs a State-of-the-Art Headworks
Facility for Minimal Odor Generation." Paper
presented at the Nevada Water Environment
Federation 1999 Annual Conference, Las Vegas,
NV, March 10-12, 1999.
V:~Client20~TustinXPropWulnerability Assessment~a~e, sumesK21yburmM.do¢
COI'OI.I-O
engineers
H&l&ne Baribeau
Education
BS Civil Engineering,
Ecole PoIytechnique
Montreal, 1990
MS
Civil/Environmental,
Ecole Polytechnique of
Montreal, 1992
PhD
Civil/Environmental
Engineering, Ecole
Polytechnique of
Montreal, I995
Registration
Professional Engineer,
California
Water Treatment Plant
Operator- G3,
California
Quebec Board of
Engineers
Professional
Affiliations
American Water
Works Association
American Society for
Microbiology
Dr. Baribeau joined Carollo in the
summer of 2000 as a member of the
Applied Research Group. Ms. Baribeau
specializes in applied research and
consulting related to drinking water quality,
treatment and distribution. Her experience
includes disinfectants, disinfection
byproducts, biological treatment, and water
quality in distribution systems. Recent
project experience includes:
· Water quality engineer for the City of
Santa Ana, California, USEPA mandated
vulnerability assessment. The project
involves preparation of preliminary
screening of the city's facilities,
prioritization of these facilities, and site
visits to all critical facilities. Checklist
forms will be developed and used to
identify areas of concern at each site. A
workshop will be used to refine the
vulnerability analysis for each site and then
a fault tree will be developed.
· Water quality engineer for the City of
Orange, California, USEPA mandated
vulnerability assessment. The project
involves preparation of preliminary
screening of the city's facilities,
prioritization of these facilities, and site
visits to all critical facilities. Checklist
forms will be developed and used to
identify areas of concern at each site. A
workshop will be used to refine the
vulnerability analysis for each site and then
a fault tree will be developed.
· Water quality engineer for the Long
Beach Water Department, California,
USEPA mandated vulnerability assessment.
The project involves preparation of
preliminary screening of the department's
facilities, prioritization of these facilities,
and site visits to all critical facilities.
Checklist forms will be developed and used
to identify areas of concern at each site. A
workshop will be used to refine the
vulnerability analysis for each site and then
a fault tree will be developed.
· Water quality engineer for the Mesa
Consolidated Water District, California,
USEPA mandated vulnerability assessment.
The project involves preparation of
preliminary screening of the district's
facilities, prioritization of these facilities,
and site visits to all critical facilities.
Checklist forms will be developed and
used to identify areas of concern at each
site. A workshop will be used to refine the
vulnerability analysis for each site and
then a fault tree will be developed.
· Water quality engineer for the Placer
County Water Agency, California, USEPA
mandated vulnerability assessment. The
project involves preparation of preliminary
screening of the city's facilities,
prioritization of these facilities, and site
visits to all critical facilities. Checklist
forms will be developed and used to
identify areas of concern at each site. A
workshop will be used to refine the
vulnerability analysis for each site and
then a fault tree will be developed.
· Principal investigator for the American
Water Works Association Research
Foundation (AwwaRF) Project 2770,
Formation and Decay of Disinfection
Byproducts (DBPs) in the Distribution
System. The goal of this project is to
understand the formation and decay of
selected DBPs (four THMs, nine HAAs,
bromate, N-nitrosodimethylamine
(NDMA), haloacetonitrites, and
haloketones (HKs)) in full-scale
distribution systems.
· Principal investigator for AwwaRF
Project 2771, Changes in Distribution
System Water Quality on Disinfection
Efficacy. The project goal is to assess the
impact of dynamic water quality
conditions in distribution systems on the
inactivation of microorganisms. The
project specifically addresses the
usefulness of maintaining a secondary
disinfectant residual and the target level to
be maintained.
· Co-investigator for AwwaRF Project
2760, Optimizing Chloramine Treatment.
The objective of this project is to
synthesize all relevant research,
operational, and practical information on
the use of chloramines in water treatment,
and develop new utility case studies. One
V:~Client20~TustinLProp\Vulnerability AssessmentLResumesXB aribeauH, doc
COI'OI.I-O
e~lneers
H&l&ne Baribeau
Page 2
of the deliverables will be an updated version of
AwwaRF Manual Optimizing Chloramine
Treatment, originally published in 1993.
· Participant in AwwaRF Project 2639, Public
· Perception of Tap Water Chlorinous Flavor. This
study's purpose is to identify public perceptions
about chlorinous tastes and odors (from free
chlorine and chloramine) and overall water quality,
and evaluate how those perceptions affect selection
of tap water alternatives such as bottled water and
point-of-use/point-of-entry treatment devices.
· Principal investigator for the National Water
Research Institute (NWRI), Project CS 699-601-99,
Microbial Regrowth and Population
Characterization of Suspended and Fixed Biomass
in Concrete and Steel Reservoirs. Work included
characterization of the biomass in reservoirs with
emphasis on coliforms and nitrifying bacteria with
the goal of determining an early-warning system for
nitrification and coliform episodes in distribution
systems.
· Principal investigator for the AwwaRF
Agreement 2565, Rapid Screening of Pathogens in
Water. Work included development of a rapid
method for screening of pathogens in water
( Cryptosporidium parvum, Giardia duodenalis,
Escherichia coli, and enteroviruses) by applying
molecular techniques (DNA amplification and
liquid hybridization) in a multi-well microplate
format.
· Participant in AwwaRF Project 2559,
Disinfection Efficiency and Dose Measurement for
Medium-Pressure and Pulsed UV Disinfection
Systems. Work included overseeing all microbial
aspects of the study (C. parvum, I-tPC, B. subtilis,
MS-2); experimental design; organism preparation;
enumeration before and after irradiation; viability
and infectivity assays for C. parvum, quality
assurance/quality control; and data reporting.
· Participant in the Electric Power Research
Institute (EPRI)/California Energy Commission
(CEC) study of Electrotechnology Applications for
Potable Water Production and Protection of the
Environment. Work included overseeing all
microbial aspects of the study (C. parvum, G.
duodenalis, E. coli, HPC, B. subtilis, MS-2
coliphage, and Phi-6 bacteriophage); experimental
design, organism preparation; enumeration before
and after irradiation; viability and infectivity assays
for C. parvum, quality assurance/quality control;
and data reporting.
· Participant in AwwaRF Project 339, Formation,
Occurrence, Stability and Dominance of Haloacetic
Acids and Trihalomethanes in Treated Drinking
Water. Work included overseeing a 1 O-month
simulated distribution system experiment using four
annular reactors; monitoring disinfectant residuals,
THM and HAA concentrations, and suspended and
fixed biomass; developing methods for monitoring
of Xanthobacter autotrophicus (an organism know
to degrade dihalogenated HAA); and spiking the
reactors with X. autotrophicus.
· Participant in AwwaRF Project 490, Filter
Operation Effects on Pathogen Passage. Work
included overseeing all microbial aspects of the
study (C. parvum, G. duodenalis, B. subtilis, E. coli,
and MS-2 coliphage); organism preparation and
enumeration; seeding of organisms in a pilot plant;
quality assurance/quality control; and data
reporting.
· Participant in AwwaRF and United Kingdom
Water Industry Research Group (UKWIR) Project
365, Distribution Generated Taste and Odor
Phenomena. Work included overseeing a two-year
simulated distribution system study involving
annular reactors at the effluent of three different
treatment processes.
· Participant in AwwaRF Project 252, Optimizing
Filtration in Biological Filters. Work included
comparison of conventional versus biological
filtration, anthracite versus GAC filter media, and
various backwashing procedures. Work also
included developing BDOC method; direct and
viable microbial counts using epifluorescence
microscopy; fixed biomass on filter media using
phospholipids; and monitoring of coliforms,
Aeromonas hydrophila, ammonia-oxidizing bacteria
and Salmonella typhimurium using molecular
techniques (PCR amplification).
· Participant in a study conducted by the
Metropolitan Water District of Southern California
on the Impact of Biological and Conventional
Treatments on Simulated Distribution Systems.
Conducted the simulated distribution system study
using six annular reactors after conventional and
biological treatment, with monitoring of disinfectant
V :'~C lient20XTustia~Prop\Vulnerabilit y Asse-~sment'~Resumes~BaribeauH.doc
engineers
H&l&ne Baribeau
Page 3
residuals, AOC and BDOC, and suspended and
fixed biomass by culturng techniques, molecular
methods, and epifluorescence microscopy. Work
also included the development of several of these
'methods.
· Participant in a study on the chang, es in water
quality in distribution systems at the Ecole
Polytechnique of Montrtal/Qutbec Ministry of
Environment, Qutbec, Canada. In charge of the
day-to-day operation of the study. Work included
overseeing a dozen persons for the monitoring of
physical, chemical, and microbial parameters in
three full-scale distribution systems in the City of
Laval, Qutbec.
i Doctoral (Ph.D.) thesis work the Changes in.
Disinfectants and DBPs in the Distribution Systems
of the City of LavaI, Qutbec, Canada. The study
included analysis and method development for
chlorine, chlorine dioxide, THMs, HAAs, DOX,
HANs, HKs, chloropicrin, chlorite, chlorate.
· Master's thesis work on the "Applicability of
Biological Filtration in Cold Water" funded by the
Canadian Ministry of Health and Welfare, and
Ministry of Environment/Qutbec Ministry of
Environment. The study included analysis of
chlorine demand and DBP removal (THM and
DOX) during ozonation and biofiltration.
· Participant in the conversion of chlorination
facilities to chloramination facilities at Sunset and
Windsor Reservoirs of the City of Pasadena Water
and Power Department, California. Participated in
Task 1, evaluation of the chloramine conversion
approach.
· Participant in the evaluation and predesign of
improvements to the City of Vallejo, California,
Travis Air Force Base Water Treatment Plant. Since
the plant's upgrade in 1993, a number of operational
shortcomings have presented challenges to the
treatment plant operators. Participated in the
Comprehensive Performance Evaluation (CPE)
program. The CPE identified the necessary
improvements to restore regulatory compliance, cost
effectively increase plant capacity, preserve water
quality, and provide for customer safety. Also
participated in an evaluation of the feasibility of
implementing various treatment processes.
· Participant in the Water Reservoir Nitrification
Prevention and Control project for Yorba Linda
Water District. This study focused on eight
reservoirs that have experienced nitrification
episodes. Participated in the water quality data
analysis, review of Nitrification Monitoring Action
Plan and development of recommendations for
improvements, evaluation of system and reservoirs
operations, and development of recommendations to
prevent nitrification in reservoirs.
· Technical consultant for the Metropolitan Water
District of Southern California on an Alternative
Disinfectant Evaluation. Serves as a Techfiical
Advisor on distribution system issues and water
treatment processes arising out of proposed chlorine
and chlorine dioxide applications at their drinking
water treatment facilities.
Publications/Presentations
Singer, P.C., Weinberg, H.S., Brophy, K., Liang, L.,
Roberts, M., Grisstede, I., Krasner, S., Baribeau, H.,
Arora, H., and Naj an, I. "Relative Dominance of
Halocetic Acids and Trihalomethanes in Treated
Drinking Water," American Water Works
Association Research Foundation, Denver, CO.
2002.
Baribeau, H., Prtvost, M., Desjardins, R., and
Lafrance, P., "Changes in Chlorine and DOX
Concentrations in Distribution Systems," Journal of
the American Water Works Association. 93:12:102-
114, 2001.
Cohen, Y.K, Smith, C.D., and Baribeau, H.
"Distribution System Nitrification - Causes,
Prevention and Control," Opflow, American Water
Works Association. 2001.
Mofidi, A.A., Baribeau, H., Rochelle, P.A., De
Leon, R., Coffey, B.M., and Green J.F.
"Disinfection of Cryptosporidium parvum with
Polychromatic UV Light," Journal of the American
Water Works Association. 93:6:95-109, 2001.
Prtvost, M., Romprt, A., Baribeau, H., Coallier, J.,
and Lafrance, P. "Service Lines: Their Effect on
Microbiological Quality," Journal of the American
Water Works Association. 89:7:78-91, 1997.
Baribeau, H., Pr6vost, M., Desjardins, R., Lafrance,
P., and Legube, B. "Effects de l'ozonation et de la
filtration biologique sur la demande en chlore et sur
V :~Ciient20~Tustin~Prop\Vulnerability Assessment~Cesumes~Bari~auH-doc
I~01'01.1.0
engineers
H&l&ne Baribeau Page 4
les prtcurseurs de trihalomtthanes et des composts
organo-halogtnts totaux," Canadian Journal of
Civil Engineering, 22:5:945-954, 1'995.
Baribeau, H. "l~volution des oxydants et des sous-
produits d'oxydation dans les rtseaux de
distribution d'eau potable de Ville de Laval." l~cole
Polytechnique of Montrtal, Qutbec. Ph.D. thesis.
February, 1995.
Baribeau H. "l~tude de la consommation en chlore h
long terme d'une eau h potabiliser." gcole
Polytechnique of Montrtal, Qutbec. Master thesis.
March 1992.
B aribeau, H., Flores, A., Kirmeyer, G., Thompson,
G.,'and LeChevallier, M. "A Survey on Chloramine
Treatment." Paper presented at the American Water
Works Association 2002 Water Quality Technology
Conference, Seattle, WA, November 10-13, 2002.
Kirmeyer, G.K., LeChevallier, M.W., and Baribeau,
H. "Decision Process on Whether to Switch from
Free Chlorine to Chloramines." Paper presented at
the American Water Works Association 2002 Water
Quality Technology Conference, Seattle, WA,
November 10-13, 2002.
Mackey, E.D., and Baribeau, H., and Suffet, I.H.M.
"Comparison of Customer Sensitivity to Free and
Combined Chlorine and Satisfaction with Tap
Water Quality," Paper presented at the American
Water Works Association 2002 Water Quality
Technology Conference, Seattle, WA, November
10-13, 2002.
Baribeau, H., Mackey, E.D., Davis, J.E., Crozes,
G.F., and Hetherington, J. "Public Perception of
Chlorinous Flavors in the U.S." Poster presention at
the International Water Association 6th Annual
Symposium on Off-Flavors in the Aquatic
Environment, Barcelona, Spain, October 7-10,
2002.
Baribeau, H., Mackey, E.D., Crozes, G.F., Suffet,
I.H.M., and Piriou, P. "Public Thresholds for
Chlorinous Flavors in U.S. Tap Water." Paper
presented at the International Water Association 6th
Annual Symposium on Off-Flavors in the Aquatic
Environment, Barcelona, Spain, October 7-10,
2002.
Min, J., Meyerhofer, J., and Baribeau, H. "Chlorine
or Chloramines: Know the Facts Before Making a
Decision." Paper presentation at the American
Water Works Association 2002 Distribution and
Plant Operations Conference, Nashville, TN,
September 7-10 2002.
Baribeau, H., Singer, P.C., Williams, S.L., Boulos,
L. "Distribution System HAP,. Formation and
Degradation." Workshop presentation at the
American Water Works Association 2002 Annual
Conference & Exposition, New Orleans, LA, June
16-20, 2002.
Baribeau, H., Mackey, E.D., Crozes, G.F., Suffet,
I.H., and Piriou, P. "Public Perception of Tap Water
Chlorinous Flavor." Paper presented at the Florida
Section of the American Water Works Association
Region IV Symposium, Tampa, Florida, January 24,
2002.
Baribeau, H., Mackey, E.D., Booth, S.D., Davis,
J.E., Manileve, C., Crozes, G.F., Suffet, I.H., and
Pirious, P. "Public Perception of Tap Water
Chlorinous Flavor - Methods Used." Proceedings of
the American Water Works Association Water
Quality Technology Conference, Nashville,
Tennessee, November 11-15, 2001.
Baribeau, H., Kinner, C.A., De Leon, R., and
Rochelle, P.A. "Nitrification in Steel and Concrete
Drinking Water Reservoirs: A Case Study."
Proceedings of the American Water Works
Association Annual Conference and Exposition,
Washington, D.C., June 17-21, 2001.
Mackey, E.D., Davis J.E., Crozes, G.F., and
Baribeau, H. "Public Perception of Tap Water
Chlorinous Flavor." Proceedings of the American
Water Works Association Annual Conference and
Exposition, Washington, D.C., June 17-21, 2001.
Baribeau, H., Krasner, S.W., Chinn, R., and Singer,
P.C. "Impact of Biomass on the Stability of
Haloacetic Acids and Trihalomethanes in a
Simulated Distribution System." Proceedings of the
American Water Works Association Water Quality
Technology Conference, Salt Lake City, UT,
November 5-9, 2000.
Baribeau, H., Kinner, C.A., Stephen, J.R., De Leon,
R., Rochelle, P.A., and Clark, D.L. "Microbial
Population Characterization of Suspended and
Fixed Biomass in Drinking Water Reservoirs."
Proceedings of the American Water Works
V:~21i~nt20\Tustin~rop\Vulnerabilit y Assessment~Resun~s~BaribeauH.doc
CCII'OI.I-O
enl~lnee~s
HAIAne Baribeau Page 5
Association Water Quality Technology Conference,
Salt Lake City, UT, November 5-9, 2000.
Kinner, C.A., Baribeau, H., Thompson, K.A., De
Leon, R., and Clark, D.L. "Monitoring Strategy for
Fixed and Suspended Nitrifying Bacteria in Potable
Water Reservoirs." Proceedings of the American
Water Works Association Water Quality
Technology Conference, Salt Lake City, UT,
November 5-9, 2000.
V :XClient20~TustinXProp\Vulaerability Assessment~Resumes~BaribeauH.doc
engineers
Nicki L. Giese
Education
B$ Bio-Resource
Engineering,
University of British
Columbia, Vancouver,
Canada, 1996
MS Civil Engineering,
University of
California, Davis,
1999
PhD Civil
Engineering,
University of
California, Davis,
2002
Registration
Engineer-in-Training,
California
Professional
Affiliations
American Water
Works Association
American Society of
Microbiology
International
Ultraviolet Association
Dr. Giese joined the Carollo Research
Group in the Spring of 2002 after
completing her PhD in civil engineering
(minor in microbiology), at the University.
of California at Davis. She has spent the
past five years researching ultraviolet (LTV)
disinfection and water distribution system
biofilms, focused on both water and
wastewater applications. Since joining
Carollo, Ms. Giese has focused on
distribution system water quality and water
treatment plant evaluations. Her awards
include the Abel Wolman Doctoral
Fellowship, the Chancellor's Teaching
Fellowship, and the Trojan Technologies
Fellowship for UV Research.
· Served as part of team for evaluating
water quality threats for vulnerability
assessments for Mesa Consolidated Water
District, Long Beach Water Department,
Placer County Water Agency, and the cities
of Orange and Santa Ana, California.
· Process engineer for the Water
Reservoir Nitrification Prevention and
Control Study for Yorba Linda Water
District. Responsibilities included
evaluation of sampling procedures and
correlation of reservoir operation with
suspected nitrification episodes.
· Process engineer for the American
Water Works Association Research
Foundation (AwwaRF) Project #2770
"Formation and Decay of Disinfection By-
Products in the Distribution System." The
project focus is the investigation of the
formation and decay of disinfection by-
products (DBPs), such as trihalomethanes
and halo-acetic acids, within distribution
systems including biodegradation of DBPs
by distribution system biofilms.
· Process engineer for the AwwaRF
Project #2771 "Changes in Distribution
System Water Quality on Disinfection
Efficacy." This research will address
questions concerning the usefulness of
maintaining a secondary disinfectant
residual and the target level to be
maintained.
· Doctoral research investigating the
impact of UV disinfection on the growth
of bacterial biofilms within a model
distribution system. Concluded that (1)
UV disinfection had little impact on the
density of bacteria in the biofilm and (2)
UV disinfection did not reduce the ability
of opportunistic pathogens to colonize the
biofilm.
· Process engineer for the Water
Treatment Plant Master Plan for the
Contra Costa Water District.
Responsibilities include evaluation of the
abilities of the Randall-Bold and Bollman
WTPs to meet current and future
regulations.
· Preliminary evaluation of enhanced
coagulation requirements based on water
quality data under the Stage 1 Disinfection
By-Products Rule for the City of Tracy.
· Masters research investigating
variation in the response of three species
of coliform bacteria and one virus to three
wavelengths of UV light, using a
collimated beam apparatus. Major
conclusion of this research was that
variation in germicidal efficiencies among
microorganisms need not be considered in
modeling of the germicidal dose delivered
by a medium pressure UV system~ Results
published in Water Research.
· Periodic participant in contract work
investigating the feasibility of
implementing UV disinfection at the
Sacramento Wastewater Treatment Plant.~
Roles included collimated beam testing,
experimental design, and troubleshooting.
Publications/Presentations
Giese, N.L. and Darby, J. "Sensitivity of
Microorganisms to Different Wavelengths
of UV Light: Implications on Modeling of
Medium-Pressure UV systems," Water
Research, Volume 34, No. 6. 4007-4013.
2001.
Giese, N.L. and Darby, J. "Impact of
Ultraviolet Disinfection on Biofilms in a
Model Distribution System." Proceedings
of the First International Congress on
V :,~Client20~Tustia~Oro p\Vulner ability AssessmentLResumes\GieseN.doc
Nicki L. Giese Page 2
Ultraviolet Technologies, Washington, D.C., ~June
14-16, 2001.
V :~lient20~Tustin~rop\V ulnerability Assessm~nt~Resumes~GieseN.doc
enalneers
Karen Hermack
Education
BS Civil Engineering,
University of Virginia,
1998
MS Environmental
Engineering,
University of
Michigan, 2000
Registration
Engineer-in-Training,
Virginia
Professional
Affiliations
American Water
Works Association
Orange County Water
Association
M's. Hermack has three years of
.experience in water distribution
system modeling and the planning and
design of wastewater treatment and
collection facilities. Responsibilities have
included deVeloping and calibrating water
distribution system models, tracking
existing and proposed water and
wastewater facilities using GIS, and
preparing construction documents. She is
an experienced user of H2ONet, WaterCad,
and ArcView GIS.
· Project engineer for the Mesa
Consolidated Water District, California,
USEPA-mandated vulnerability
assessment. Participated in site visits to
identify security concerns at Mesa's
facilities and participated in workshops to
develop recommended improvements for
each facility. Developed estimated costs of
implementing engineering improvements.
Prepared technical memorandum
summarizing all recommended
improvements.
· Project engineer for the City of Orange,
California, USEPA-mandated vulnerability
assessment. Participated in site visits to
identify security concerns at Orange's
facilities and participated in workshops to
develop recommended improvements for
each facility. Developed estimated costs of
implementing engineering improvements.
Prepared technical memorandum
summarizing all recommended
improvements.
· Project engineer for the City of Santa
Aha, California, USEPA-mandated
vulnerability assessment. Developed
estimated costs of implementing
engineering improvements. Prepared
technical memorandum summarizing
recommended engineering and security
.improvements.
· Project engineer for the Long Beach
Water Department, California, USEPA-
mandated vulnerability assessment.
Developed estimated costs of implementing
engineering improvements.
· Project engineer for Placer County
Water Agency, California, USEPA-
mandated vulnerability assessment.
Participated in site visits to identify
security concerns at Mesa's facilities and
participated in workshops to develop
recommended improvements for each
facility. Developed estimated costs of
implementing engineering improvements.
Prepared technical memorandum
summarizing all recommended
improvements.
· As a graduate student at the University
of Michigan, studied the ability of dense
non-aqueous phase liquid (DNAPL)
wastes to alter the wettability of aquifer
solids. Developed a test method to
measure the wettability of DNAPL waste
systems. Applied wettability test to
determine the ability of DNAPL wastes to
alter wettability characteristics of solids.
· As a student at the University of
Virginia, performed a post-audit of a
water-quality model of the Patuxent
Estuary following the implementation of
eutrophication controls. Analyzed water
quality data to study the effects of reduced
nutrient loadings on eutrophication in the
estuary. Calibrated the model using the
water quality data and identified model
deficiencies.
· Project engineer for the Sanitation
District No. 1 of Northern Kentucky
preliminary design of improvements to the
wastewater collection system. Used
ArcView GIS to help client delineate
future service area boundaries based on
future land use projections and natural
topography. Collected current and future
land use data from local planning
agencies. Used GIS to identify natural
drainage boundaries and alternative
locations for future facilities. Developed
flow projections for 20-yr and 50-yr
planning periods based on census data,
land use projections, and service area
boundaries. Assisted with the development
of presentations to the local area business
council regarding the proposed future
service area boundaries.
V AClient20\TustinkProp\Vulnerabilky Asses~ment~Resun~-IermackK. doc
CCII'OI.I.O
e~lneers
Karen Hermack Page 2
· Project engineer for the Sanitation District No. 1
of Northern Kentucky design of improvements to
three wastewater pump stations. The project
included the replacement of a 10-mgd pump station,
modifications to two smaller pump stations, and the
replacement and installation of combination air
release/vacuum valves along three force mains.
Assisted with the development of a hydraulic model
of the existing pump stations and force main
systems in WaterCad. Performed site investigations
at the existing pump stations and existing air release
valve manholes along the force mains. Selected
pumps and equipment and prepared drawings,
specifications, and cost estimates for the project.
· Project engineer for the calibration of a 1900-
pipe water-distribution system model for Butler
County, Ohio. Assisted with model development by
collecting, organizing, and analyzing data.
Performed demand allocation using detailed
customer billing records. Developed diurnal demand
patterns by performing flow balances on specific
pressure zones within the distribution system.
Calibrated the model for average-day and peak-day
conditions. Performed model runs to simulate
system improvements,~prepare hydrant curves,
estimate water age, and evaluate system velocities
and headlosses. Coordinated with the client to
develop a method to easily manage and track the
modeling of distribution system improvements.
Developed and led a one-day training session for
Butler County's engineers, operators, and
management to utilize the model to simulate system
improvements and identify potential system threats,
including contamination of the water supply.
Provided technical support to the client after
delivery of calibrated model. Developed report
summarizing model development and organization
for the client.
· Project engineer for the City of Miamisburg,
Ohio, feasibility study, which verified that the
City's current sewer rates were sufficient to fund
improvements to the City's wastewater treatment
plant and helped the client achieve an excellent
bond rating. Performed a cash flow analysis of the
City's sewer system revenues, expenditures, and
debt service. Coordinated with the City's Finance
Department to collect historical data and forecast
revenues and expenditures five years into the future.
Prepared report summarizing the existing facilities
at the wastewater treatment plant, the hydraulic and
treatment limitations of the facilities, the proposed
improvements to the wastewater treatment plant,
and the method and results of the cash flow
analysis.
· Performed miscellaneous modeling tasks with a
fully-calibrated CYBERNET 3.1 water-distribution
system model for the City of Mason, Ohio, to
simulate system improvements and evaluate
alternative water supply scenarios. Used model to
size multiple pressure-reducing valves for average-
day and fire-flow conditions.
· Project engineer for the update of a I-I2ONET
water distribution system model for the City of
Mason, Ohio. Added recent and future system
improvements, updated demands, and created
scenarios to represent future planning years.
· Assisted with the development of recommended
improvements for the Sanitation District No. 1 of
Northern Kentucky wastewater collection system.
Analyzed output from a collection system model
and sized gravity sewer lines and force mains based
on model output. Developed system curves for
proposed force mains and selected pumps for
proposed pump stations.
· Project engineer for the Preliminary Design
Report for the Sanitation District No. 1 of Northern
Kentucky Dry Creek Wastewater Treatment Plant
Sodium Hypochlorite Disinfection Facility.
Analyzed historical records of gaseous chlorine
usage to evaluate disinfection requirements.
Developed equivalent sodium hypochlorite
requirements and sized storage tanks accordingly.
Prepared preliminary building layouts, process flow
schematics, and cost estimates. Evaluated feed
equipment and storage tank alternatives. Developed
design memorandum summarizing the existing and
proposed facilities, historical chlorine usage, and
special design considerations for sodium
hypochlorite facilities.
· Performed Phase I Environmental Site
Assessments of two drug stores in Bethel and
Georgetown, Ohio.
· Design engineer for the Eastern Municipal
Water District, California, Digester Heating System
Upgrades at the Hemet/San Jacinto, Moreno Valley,
and Temecula Valley Regional Water Reclamation
Facilities. Responsibilities include preparing
V AClient20~Tustin~Prop\Vulnerability Assessment~ResumesXHenmickK. doc
I~01'01.1.0
e~lneers
Karen Hermack Page 3
drawings and specifications for the installation of
new heat exchangers and hot water recirculation
pumps and modifications to the existing heating
system piping.
V AClient20~Tustin~rop\Vulnerabilit y AssessmenfsRestm~sLHermackK. doc
(::CII'OLI. O
erlelneers
James A. Meyerhofer
Education
BS Civil Engineering,
Loyola Maryrnount,
1987
MS Civil Engineering,
University of
California, Davis,
1989
Registration
Civil, California,
Idaho
Professional
Af~liations
American Water
Works Association
Mr. Meyerhofer, an associate, has 13
years of experience focused on water
treatment. His experience includes pilot
plant design and operation, water quality
studies, treatment plant evaluation and
design, and construction management. His
experience includes:
· Project manager for the City of Santa
Barbara Cater Water Treatment Plant and
distribution system vulnerability
assessment.
· Project manager for the City of Santa
Barbara, California, evaluation of a
downtown well field and the subsequent
design of a centralized water treatment
plant. The work includes field and
pilot-scale testing to evaluate treatment
alternatives for the removal of iron,
manganese, and hydrogen sulfide from five
City wells.
· Project manager for Yucaipa Valley
Water District, California, pilot study
evaluating low pressure membranes for a
12-mgd water treatment plant.
· Project manager for the City of
Bellingham, Washington, pilot study
evaluating three different filter media
designs for the 24-mgd in-line filtration
plant.
· Project engineer on the three-year East
Bay Municipal Utility District (EBMUD),
California, Blue Water Project. Jim was the
key individual on EBMUD's corrosion
control optimization study for the Lead and
Copper Rule. The pilot study evaluated pH
adjustment, alkalinity adjustment, and
orthophosphate addition for corrosion
control optimization, and included linear
polarization resistance, coupon weight loss,
and pipe loop leaching for corrosion rate
measurement. Also involved in the design,
construction, and operation of two
additional 25-gpm pilot studies focused on
solving the blue water problem. Assisted on
the development and implementation of a
distribution system sampling program and
coordinated EBMUD's lateral replacement
program.
· Staff engineer for the predesign
information study for the City of
Appleton, Wisconsin, Appleton Water
Treatment Plant. Ozone, granular activated
carbon in RSSCTs, potassium
permanganate, and power activated carbon
were evaluated to control taste and odor
and DBP formation. FPA's and CLSA's
were utilized to evaluate the effectiveness
of each treatment process.
· Staff engineer for the Lake Michigan
Membrane/Ozone Research and
Demonstration Project for Electrical
Power Research Institute (EPRI).
Conducted ozone demand and decay
experiments on Lake Michigan water and
evaluated the impact of pre-ozonation on
downstream processes.
· Staff engineer for the evaluation and
optimization of the North Shore Water
Commission, Michigan, 18-mgd
conventional water treatment plant treating
Lake Michigan water.
· Performed desktop and bench-scale
evaluations of oxidative-based control
strategies for control of hydrogen sulfide
and iron in a groundwater supply for the
Star Sewer and Water District, Idaho.
Treatment alternatives included a
phosphorus-based sequestering agent
followed by either chlorine, ozone, or
hydrogen peroxide.
· Conducted desktop, bench-scale, and
full-scale evaluations of treatment
alternatives for hydrogen sulfide in well
water for the Nob Hill Water District,
Washington. Based on the source water
pH greater than 9.0, hydrogen peroxide
was demonstrated as a cost-effective
treatment process.
· As part of preparation of the City of
Havre, Montana, Water Master Plan, an
evaluation of multi-stage treatment
alternatives was conducted to control iron,
manganese, nitrate, sulfate, and total
dissolved solids in the City's groundwater
supplies. Recommended processes
included oxidation and filtration for iron
and manganese removal followed by
V:XCiient20~Tustin~Wop\Vulnerability AssessmentkResumes'dvieyerho ferJ.do¢
enolneers
James A. Meyerhofer Page 2
reverse osmosis or EDR for reduction of the other
contaminants.
· Project engineer for the study of operational
issues and procedures for the City of Bellingham,
Washington, 24-mgd in-line filtration water
treatment plant. Proposed recommendations to
improve coagulation, filtration, backwashing, and
residuals handling processes at the water treatment
plant.
· Project manager for Yucaipa Valley Water
District, California, Regional Water Filtration
Facility. The preliminary design study for this new
12-mgd facility included an evaluation of treatment
process alternatives for raw water from Santa Ana
River and Mill Creek. Also included was a complete
review of current and near future state and federal
water quality regulations.
· Project manager for pre-design and design of the
City of Santa Barbara, California, 37-mgd Cater
Water Treatment Plant. This project included
bench-scale testing to develop operational strategies
for meeting enhanced coagulation requirements.
Pre-design and design elements include: complete
filter rehabilitation, flocculation upgrades,
upgrading existing bulk hypochlorite system and
evaluating conversion to chloramines, and
construction of new solids handling, chemical feed,
and backwash systems.
· Project manager for projects at the City of
Yakima, Washington, 24-mgd Naches Water
Treatment Plant including: facility evaluation,
design of filter upgrades, and an intake pre-design.
Improvements to the facility include: pretreatment,
filtration, and residuals handling.
· Project manager for a project for the City of
Pasadena, California, to investigate the conversion
of chlorine facilities to chloramination facilities at
two sites. The project includes an evaluation of
alternatives, predesign of feed systems, detailed
design, and bidding services.
· Project manager for the City of Havre, Montana,
Water Treatment Plant and Distribution System
Master Plan and Water Treatment Plant design.
Coordinated design disciplines and prepared
mechanical design for upgrades and rehabilitation to
the City's 6.0-mgd conventional facility that was
last modified in 1971. Project included a 210-ppd
on-site sodium hypochlorite generation system.
Providing management of construction services
during construction of the facility upgrades.
· Project engineer for the Salt Lake County Water
Conservancy District, Utah, pre-design and design
of the upgrade of the Southeast Regional 20-mgd
direct filtration water treatment plant to a
conventional water treatment plant.
· Project engineer for the City of Oswego,
Oregon, new bulk sodium hypochlorite, lime, and
carbon dioxide feed facilities at the 16-mgd Lake
Oswego Water Treatment Plant. The new lime and
carbon dioxide feed systems employ bulk hydrated
lime storage, two lime saturators, and pressurized
carbon dioxide solution feeders. Performed resident
engineering duties during construction.
· Resident engineer for the City of Vallejo,
California, construction management for expansion
of the Fleming Hill Water Treatment Plant.
Capacity of the treatment plant was increased from
28 mgd to 42 mgd. The project included adding
preozonation and intermediate ozonation and adding
new chemical feed facilities. Conducted a jar test
evaluation to assist the treatment plant operators in
meeting capacity requirements during construction.
Worked daily with the plant superintendent to
maintain plant performance and operation during
construction. Worked closely with the operators in
maintaining existing, temporary, and new chemical
feed and disinfection facilities. Involved in bringing
new processes on-line. Also performed field office
duties with shop drawing review. His primary
inspection responsibility was yard and chemical
piping installation but also performed general
inspection of structural, architectural, and
mechanical details.
Publications/Presentations
Min, J., Meyerhofer, J., and Baribeau, H. "Chlorine
or Chloramines: Know the Facts Before Making a
Decision." Paper presentation at the American
Water Works Association 2002 Distribution and
Plant Operations Conference, Nashville, TN,
September 7-10, 2002.
Meyerhofer, J.A., Brown, D., Foreman, R., and
Bench, B.L. "Managed Filtration - The Remedy for
Hiccupping Filters." Paper presented at the
American Water Works Association 2001 Pacific
V :~Ciient20~Tustin~rop\Vulnerability Assessment~XCesumes~vleyerho fvrJ.doc
COI'OI.I-O
engineers
James A. Meyerhofer Page 3
Northwest Section Conference, Yakima, WA, May
2-4, 2001.
Walker, R.P., Meyerhofer, J.A., Brown, D., and
Calvin, D. "Water Diversion - City of Yakima Raw
Water Intake Project." Paper presented at the
American Water Works Association 2001 Pacific
Northwest Section Conference, Yakima, WA, May
2-4, 2001.
Meyerhofer, J.A. "The Effect of Time and Future
Regulations on Havre's WTP." Paper presented at
the American Water Works Association Montana
Section, Kalispell, MT, May 1998.
Meyerhofer, J.A. "Water Treatment for the Next
Millennium." Paper presented at the American
Water Works Association Short School, Pendleton,
OR, April 1998.
Meyerhofer, J.A. "Saturated Lime and CO2 for
Corrosion Control." Poster presentation at the Water
Quality and Technology Conference, American
Water Works Association, Denver, CO, November
1997.
Crozes, G.F., Hagstrom, J.P., and Meyerhofer, J.A.
"Evaluation of Ozone Application Points for
Cryptosporidium Inactivation in a Conventional
Water Treatment Plant." Paper presented at the
American Water Works Association Conference,
Milwaukee, WI, 1997.
Crozes, G.F., Suffet, I.H., Marshall, M.R.,
Hagstrom, J.P., and Meyerhofer, J.A. "How Ozone
Can Eliminate or Produce T&O Compounds." Paper
presented at the American Water Works Association
Water Quality and Technology Conference, Denver,
CO, 1997.
Meyerhofer, J.A., Marshall, M.R., Crozes, G.F.,
Komarek, J., and Gray, D. "SatUrated Lime and
CO2: An Innovative and Cost Effective Corrosion
Control Approach." Paper presented at the
American Water Works Association Water Quality
and Technology Conference, Denver, CO, 1997.
Meyerhofer, J.A. "Construction Impacts Avoided
Using Enhanced Coagulation." Paper presented at
the Cai-Nevada Section of the American Water
Works Association, San Diego, CA, October 1994.
Meyerhofer, J.A. "Enhanced Coagulation Utilized
to Mitigate Construction Impacts on Treatment
Plant Performance and Capacity." Paper presented
at the Distribution System Symposium, Omaha, NB,
September 1994.
Meyerhofer, J.A., Schroeder, E.D., Corsi, R.L., and
Chang, D.P.Y. "Control of Volatile Organic
Compound Emissions During Preliminary and
Primary Treatment." Presented at the Water
Pollution Control Association/Environmental
Protection Agency Workshop on Air Toxics
Emissions and POTWs, Alexandria, VA, July 1989.
V:~Client2(hTustinh~vop\Vulnerabilit y Assessn~nth~.esun~sl3/lcyerho ferJ.doc
en ~lr~eers
Gene Heyer
Education
BA Business
Management,
California State
University, Fullerton,
1969
Registration
Control System
Engineer, California
Professional
Affiliations
American Water
Works Association
CA-NV Section,
American Water
Works Association
Water Environment
Federation (National)
California Water
Environment
Federation (State)
The Instrumentation,
Systems, and
Automation Society
IEEE Computer
Society
Mr. Heyer has performed Supervisory
Control and Data Acquisition
(SCADA) system design for numerous
municipal water and wastewater agencies;
pump station programmable logic control
(PLC) control systems; application
engineering for flow, level, pressure,
chemical feed, analytical instrumentation,
and communication; along with master
plans, feasibility studies, and construction
management services.
· Responsible for conducting cyber
security evaluation for vulnerability
assessments for the Mesa Consolidated
Water District and the City of Orange.
· Project engineer for the removal and
replacement of plant controls for the city of
Palmdale, California, water treatment plant.
The project includes VFD upgrades,
automatic filter operation, and Ethernet
radio communications system. The system
includes Control Microsystems RTUs with
Ethernet radios.
· Project engineer for a preliminary
design report for the South Orange County
Wastewater Authority, California, Coastal
Treatment Plant. The project includes
removal of tone telemetry and installation
of a new Allen-Bradley ControLogix (PLC)
control system, and integration with other
District-wide SCADA upgrades.
· Instrumentation engineer for the Santa
Margarita Water District, California,
District-wide SCADA Master Plan, Oso
Wastewater Treatment Plant (WWTP)
computer-based control system, South
County pipeline controls, and CMS for
installation of Phase 1 SCADA system. The
Phase 1 system uses the Allen-Bradley SLC
500 and Micrologix PLCs in a distributed
control configuration for the water
distribution system and the Chiquita
WWTP. The communication is via
Metricom spread spectrum radios to replace
the existing 450 MHz licensed system. The
new system expands the use of the National
Instruments "Lookout" software to the
Chiquita WWTP.
· Instrumentation engineer for the Moosa
Wastewater Treatment Plant, California,
Valley Center Municipal Water District
design of new personal computer-based
plant supervisory system. The system was
designed to facilitate the plant expansion.
Therefore, the existing systems were only
monitored. The Moosa plant is now
connected via T-1 to District headquarters
where a new host computer SCADA
system pilot project is being installed for
monitoring and control of both water
distribution and Moosa operations.
· Instrumentation engineer for the San
Diego County Water Authority, California,
instrumentation design for North County
Distribution Pipeline project. This
included interface of existing instruments
at the Oceanside Water Treatment Plant
(WTP) and controls for three sites
including single and multiple flow control
facilities. The plant effluent flow and
chemical feed systems were integrated into
the Water Authority SCADA system
through a remote terminal unit at the
NCDP inlet from the WTP. The remaining
pipeline instrumentation and controls for
turnouts to three other agency members
were also integrated into the existing
agency-wide SCADA system RTUs. Each
site had provisions for telephone and fiber
optic communications.
· Instrumentation engineer for the
Mountain Water Company, Missoula,
Montana, SCADA system design and
construction management water
distribution system. Prepared a
preliminary design study that selected
Allen-Bradley SLC 500, Esteem radios (75
MHz), and DMACS Intellution software.
Researched and selected the prequalified
system integrators for the region.
Supervised specification preparation and
mandatory prebid meeting with
prequalified system integrators. Evaluated
bid proposals with the water company staff
and recommended award to Power
Engineers of Hailey, Idaho. Reviewed
shop drawings, supervised factory test
prior to system installation. The entire
project was completed in less than one
V:~21ient20~Tustm' ~Prop\Vulnerabilit y Assessment~ResumesXHeyerG.doc
I~01'01.1.0
engineers
Gene Heyer Page 2
year and was featured in the May 1997 issue of
Water World.
· SCADA consultant for water reclamation wells
and 16th Street Pump Station for City of NeWPort
Beach Public Works Department, California. The
project included integration of four new wells in
Fountain Valley with the existing Bristol RTUs in
the City network using Wonderware. The network
used the City's T1 services to link the existing
Bristol system into the new SCADA system at 16th
Street.
· Instrumentation engineer for a preliminary and
final design for the Leucadia County Water District,
California, District-wide lift station monitoring
system. The preliminary design phase included
meetings with District staff, site visits and tours of
various agencies to examine current SCADA system
technology. The final design selection included
Modicon PLCs, leased ADN telephone circuits, and
Wonderware software.
· Instrumentation engineer for the City of Poway,
California, SCADA design for water treatment plant
expansion and water distribution system. The
system included fiber optic based communication
system for the WTP, leased telephone for the water
distribution and collection sites with a point to point
spread spectrum radio link to a solar powered site.
The new control room for the WTP and water
distribution system includes a rear projection large
screen graphic for operations, training and
emergency command and control. The software
selected was Wonderware and the PLCs were
Allen-Bradley SLC 500.
· Instrumentation engineer for the Western
Municipal Water District, California, Phase I and
Phase II SCADA system design for pipeline and
water distribution system. This system uses the
existing direct buried cable for Phase I
communications and Freewave spread spectrum
radios for Phase II. The initial site visits and
meetings were followed by tours of selected
agencies in the area. At that time the predominant
software vendor was Intellution. The client
preferred a Windows-based solution and selected
Wonderware even though it was only a small firm
in Irvine. The selection of Opto 22 was based on the
close proximity of the manufacturing facility in
Temecula. The Phase I system was installed initially
using the District-owned direct buried cable. The
remaining Phase II sites did not all have cable
available so radio surveys were performed and
spread spectrum radios were installed for the Phase
II communications. The field sites are equipped
with Opto 22 Mystic controllers and the system
software is Wonderware.
· Instrumentation engineer for the Central Basin,
Park Water Company, California, design for the
Central Basin SCADA system. During the
preliminary design, contacted two agencies using
similar Cla-Val flow control schemes from MWD
turnouts. An electric motor drive for the pilot valves
was designed and implemented for the water
company distribution system. Allen-Bradley SLC
500 PLCs, leased ADN circuits (from two service
providers) tied the Compton, Bellflower and
Downey systems together with the dual host
personal computer system with Intellution software.
Construction supervision, shop drawing review and
witness of factory acceptance testing were included
in the engineering services. The system was
designed and installed in 18 months by CMC, Napa,
California. The project was completed in May 1998.
· Instrumentation engineer for the City of Tustin,
California, SCADA system upgrade. The system
included 20 sites consisting of wells, booster pump
stations and reservoirs. The new system replaced a
proprietary SCADA system and optimized the
leased telephone communication system. The
project included Allen Bradley PLCs and
Wonderware HMI software.
· Project instrumentation engineer for the City of
Oceanside, California, Mission Avenue Lift Station.
The project included four 150 horsepower/VFD
controlled motors. Pump station controls include
redundant level controls and complete integration
into the City SCADA system. The pump station
utilizes Modicon PLCs and communication is via
leased telephone service.
· Project instrumentation engineer for installation
of collection system SCADA for the Leucadia
County Water District, California. The system
included Modicon PLCs at the remote sites that
communicate over leased telephone service. The
redundant personal computer based host provides
complete system monitoring and remote access.
V :~Ciieat20~TustinkProp\¥ ulnerabilit y AssessmentLResumesR-teyerG.doc
Harold ¥. Dahlstrom
Education
BS Mechanical
Engineering, Arizona
State University, 1994
Cisco Internetwork
Design
Cisco Advanced
Router Configuration
Cisco Advanced BGP
SANS Auditing
Networks, Perimeters,
and Systems
SANS Securing Win2k
GoM
NAI Sniffer Distributed
Enterprise
Management
Registration
Certified~ ElT, Arizona,
1995
Certifications
Cisco CCNA
Cisco CCDA
GIAC GGSC
Novell CNA
M'r. Dahlstrom is a Network & Security
.Engineer who joined Carollo
Engineers in 1994. He has more than 15
years experience in PC and network
operations.
Previous Experience
· Information Services Operations
Manager that oversees day-to-day
operations and technical support staff.
Confers regularly with Information
Services Director on matters of staffing,
planning, budget, and systems
implementation.
· Insourced Carollo's wide area network
management and design. This change led to
a significant cost savings and improvement
in WAN availability.
· Implemented a comprehensive frame-
relay management package that gives total
visibility to monitor the network,
promoting intelligent bandwidth upgrade
decisions and reduced time-to-fix for
service issues.
· Designed and implemented Carollo's
redundant internet gateways. This included
security firewall design, and programming.
· Analyzed packet-level WAN
communications for several in-house and
commercial applications. The result of this
analysis led to changes in the programming
code that increased efficiency by over
30 percent.
· Carollo's Network Engineer: Oversees
network management functions in support
of IT services related to the operation,
performance, and availability of data
communications networks. Analyzes
network performance and recommends
adjustments to a wide variety of complex
network management functions, with
responsibility for overall performance and
availability of networks. Directs and
manages the planning, development,
installation, testing, modification, and
evaluation of all data networks (LA.Ns and
WANs) and related client services and
reporting. Responsible for Carollo's 22
node frame-relay network dispersed over
the United States.
· Carollo's Network Security Systems
Manager: Plans and develops security
measures to safeguard all network systems
against accidental or unauthorized access,
modification or destruction. Confers with
management, application staff, and
facilities staff to identify and plan security
for network management systems
(telecommunications and
hardware/peripheral installations, network
authentication practices). Implements and
enforces network security policies.
Advises resource owners on formation of
appropriate network security policy.
· Consulted with project engineers to
provide advice on IT issues for many
treatment plant design and upgrade
projects.
· Participated in several plant
Vulnerability Assessments, providing both
IT oversight and technical assessment of
IT infrastructure.
V:XClient20~Tustin~:Yop\Vulnerability Assessment~Resun~s~Dab. lstromH.doc
COI'OI.I.O
engineers
Stephen R. Melvin' PE CSP
Project Engineer and Vulnerability Assessment Task Lead
Mr. Melvin has been active in the risk and safety field for over ten years. He is currently
involved in several Vulnerability Assessment projects. He was the Fire Safety Engineer
for the Orange County Fire Authority's Hazardous Materials Services Section and served
as the co-chair for the Administering Agency Subcommittee of the Local Emergency
Planning Committee (Region I). He was instrumental in Sandia National Laboratories
development of their Chemical Facility Vulnerability Assessment Methodology and has
been reviewing the anti-terrorism portions of risk management plans for chemical
facilities for three years. Mr. Melvin is a Naval Reserve Officer and currently serves as
the Executive Officer for Naval Weapons Station Seal Beach Explosive Outload Team
Detachment One. Mr. Melvin also has significant experience in the development of
Process Hazard Analysis for a wide-range of facilities.
Major Water Department in the County of Los Angeles: Served as the Project
Engineer for the RAM-W Vulnerability Assessment. Mr. Melvin was responsible for
the day-to-day project management and communication with the Department. This
department serves approximately 446,000 customers. Preliminary screening of the
department's water facilities were prepared and 'refined after field visits to the facility
sites. A prioritized list of security counter measures was developed and served as the
basis for the Emergency Response Plan and Capital Improvements Plan for the
Vulnerability Assessment. The project was completed within the deadline and on
budget.
City of Santa Ana: Served as the Project Engineer and Vulnerability Assessment
Task Leader for the RAM-W Vulnerability Assessment Project Team. Mr. Melvin
was responsible for the day-to-day project management, scheduling, and
communication with the city. The city serves about 338,000 customers. Under Mr.
Melvin's direction, the project team utilized the results of the threat assessment to
prioritize the facilities and develop attack scenarios. The project team further created
a prioritized list of security counter measures to serve as the basis for the Capital
Improvements Plan for the Vulnerability Assessment. The team also utilized
Sandia's generic fault trees to determine critical paths and critical equipment.
Mesa Consolidated Water District: Served as the Project Engineer and Vulnerability
Assessment Task Leader for the RAM-W Vulnerability Assessment Project Team.
Mr. Melvin was responsible for the day-to-day project management, scheduling, and
communication with the District. Mesa Consolidated Water District serves more than
100,000 customers. Project site involves a state-of-the-art color water treatment
facility. In addition, the site contains liquid oxygen ozone generators.
Risk Managemen} Professionals, Inc.
:\Client20\TusfinLPropWulnerability Assessment~ResumesXRMP~tephenR.Melvin. doc
Three Valleys Municipal Water District: Will serve as the Project Engineer and
Vulnerability Assessment Task Leader for the RAM-W Vulnerability Assessment.
The water district serves about 475,000 customers. Mr. Melvin is responsible for the
day-to-day project management, scheduling, and communication with the district.
Under Mr. Melvin's direction the team will create a ranked list of potential threats to
critical facilities (utilizing Sandia RAM-W(sm) Methodology). A summary report of
potential hazards will be developed by the team and will be used to provide
recommendations and develop a cost-effective plan for improving security.
Irvine Ranch Water District, Moulton Niguel Water District, City of Tustin Water
Department, City of Yorba Linda Water Department, the Metropolitan Water District
and others: Mr. Melvin was responsible for reviewing the Risk Management Plans
and required them to address security, terrorism, and sabotage issues.
· Eastern Municipal Water District: Served as Project Engineer and was instrumental in
completing the Risk Management Plan update and CalARP Program Audit.
Mr. Melvin has also developed valuable experience while participating on the following
related activities:
· Assisted Sandia National Labs in development of Risk-Based Chemical Facility
Vulnerability Assessment Methodology
· Active member of the Orange County Private Sector Terrorism Response Group
.:
· Developed methodologies for Counter-Terrorist and Software Threat/Risk Analyses
Risk Management Professionals, Inc.
V :\Client20\Tustin'dh'op\Vulnerability Assessment~esumes~MP~tephenR.Melvin.doc
All
Assessment. Mesa Consolidated Water District serves more than 100,000 customers.
Project involves a state of the art color water treatment facility. In addition, the site
contains liquid oxygen ozone generators.
Three Valleys Municipal Water District: Currently serving as the Project Manager
and the Emergency Response Plan Task Leader for the RAM-W Vulnerability
Assessment. This Water District serves about 475,000 customers. A prioritized list
of security counter measures will be developed. The team will create a ranked list of
potential threats~ to critical facilities (utilizing Sandia RAM-W(sm) Methodology
document). A summary report of potential hazards will be developed by the team and
will be used to provide recommendations and develop a cost-effective plan for
improving security. This will serve as the basis for the Emergency Response Plan,
Capital Improvements Plan and the Vulnerability Assessment.
City of E1 Centro: Served as Project Manager for the development and submittal of
CalARP and RMP documentation; development and updates of the Emergency
Response Plan; PHA study; and Offsite Consequence Analysis.
Irvine Ranch Water District: Served as Project Engineer to develop and perform
updates of the Emergency Response Plan and conducted a Safety Management
Systems Audit.
of the above mentioned projects included:
Performance of Process Hazard Analyses that have included the assessment of site
security issues and hazards precipitating from deliberate acts
Creation of Emergency Response Plans that have specifically addressed:
"Threats/Civil Disorder", "Potential Imminent Danger to Personnel (e.g., hostages,
armed individual)", and "Procedures for Handling Demonstrations, Threats of
Violence, or Civil Disorder"
Creation and implementation of risk communication plans for facilities that have
addressed questions about the facility's preparedness to address deliberate acts
Mr. Maher has published many articles on the subjects of Fault Tree Analysis
Methodology and Applications, Risk Management Techniques, Quantitative Assessment,
Risk and Safety Communication of Potential Facility Vulnerabilities, Process Hazard
Analysis Methodologies and Applications, and held workshops on Process Hazard
Analysis, which address vulnerability assessment.
Mr. Maher was the primary author of the "Risk Communications Guide for State & Local
Agencies" (December 1999) that provides a comprehensive summary of the best risk
communication practices for potential emergencies and/or disasters.
Risk Management Professionals, Inc.
V :~lient20\Tustin~rop\V ulnerability AssessmenthResumes~RMP~ tevenT.Maher.doc
Thelma Yoosephiance
Ms Thelma Yoosephiance is a consultant with Kazarians & Associates specializing in
safety analysis of engineered systems. She is an expert in propane and hydrogen storage
technology.' She is respOnsible for regulatory research, development of operating and
administrative procedures and conduct hazard analyses. She has been involved in several
projects including fast-fill technology in the application of propane used to fuel motor
vehicles and in system safety analysis of aircraft parts.
The following is a select list of project experiences and achievements of
Ms. Yoosephiance:
· Applied detail-oriented skills in conducting a system safety analysis to determine
the design integrity of an aircraft component. A fault tree teChnique, as described
in the Fault Tree Handbook (NIJR]EG 0492), developed by the U.S. Nuclear
Regulatory Commission, was used to perform a qualitative analysis of the
component's failure probability.
· Applied leadership skills to successfully perform internal ISO 14000 and QS 9000
audits, issue findings, coordinate and verify corrective actions. Efforts resulted in
the successfully achievement of ISO/QS certifications.
· Employed public speaking skills to present technical seminars introducing
proposed federal standards for particulate matter (PM2.5). The seminars were
provided to inform government and industry personnel regarding the reasons -
behind the standard, including the adverse health effects on humans, and the
methodology to be used for sample collection, data analysis, and reporting to the
EPA.
· Applied her knowledge of the regulatory process to monitor, track, and lobby
proposed federal, state, and local air quality regulations. Further employed public
speaking skills to present industry opinion before state and local boards regarding
proposed legislation. Effectively communicated the affects of regulatory impacts
on industry resulted with an invitation to establish and lead an industry task force
to support legislation promoting the use of alternate fuel vehicles.
· As team leader, applied strong organizational skills and knowledge of alternative
fuel vehicles to obtain evaporative and tail-pipe emission certifications, including
Onboard Diagnostics (OBD Il), from the California Air Resources Board (CARB)
and the Environmental Protection Agency (EPA). Identified regulatory
requirements and communicated necessary testing procedures to calibration and
field engineers. Essential information documented for submittal to CARB and
EPA for approval.
· Effectively applied organizational and management skills to simultaneously
oversee several air quality programs, monitor progress, and track budget.
Kazarians & Associates
A Member of RMP Services Partnership
Thelma Yoosephiance (continued)
Employed negotiating.skills as key liaison responsible for interfacing between
customers, contractors, and government agencies.
Used initiative and strong writing skills to establish, implement, and incorporate
mandatory drug and alcohol testing procedures into company's safety program for
employees responsible for driving commercial motor vehicles.
Performing the duties of a Local Area Network (LAN) administrator for CARB,
responsibilities included the procurement, installation, and maintenance of all
computer hardware and software within the LAN encompassing the southern
Califomia area. Traveled throughout California and Mexico to provide technical
support and computer training to air quality personnel operating the Air Quality
Data Acquisition System (AQDAS I & l]).
Education
Bachelor of Science (BS) Degree in Physics from California State University, Northridge,
1991
Kazarians & Associates
A Member of RMP Services PaRnership
Mardy Kazarians, PhD
Quality Control and Project Information Security Manager
Dr. Kazarians is a recognized expert in risk and safety with considerable experience in
developing methods for assessing vulnerabilities of engineered systems, safety
management and other hazards. He is experienced in hazard assessment methods,
programs and procedures development and implementation, development of emergency
response plans, personnel training, development of process safety management programs,
hazard and operability studies, safety audits, and risk assessments. He has contributed to,
or has been the principal investigator for, vulnerability studies for water treatment
facilities, refineries, chemical manufacturing plants, refrigeration systems, aerospace
manufacturing plants, semiconductor manufacturing plants, nuclear fuel processing
plants, nuclear power plants, and transportation systems. Below is a list of a few of those
projects:
City of Santa Ana: Acted as project manager and responsible for the RAM-W
Vulnerability ASsessment. The City of Santa Ana serves about 338,000 customers.
Preliminary screening of the City' s water facilities was prepared and then refined
after field visits to the facility sites. A prioritized list of security counter measures
was developed and served as the basis for the Emergency Response Plan and Capital
Improvements Plan for the Vulnerability Assessment.
Major Water Department in the County of Los Angeles: Served as Quality
Assurance/Quality Control Manager for the RAM-W Vulnerability Assessment. Mr.
Kazarians was responsible for the overall quality control and project information
security for the city. A prioritized list of security counter measures was developed
and served as the basis for the Emergency Response Plan and Capital Improvements
Plan for the Vulnerability Assessment. The project was completed within the
deadline and on budget.
Three Valleys Municipal Water District: Mr. Kazarians is serving as the Quality
Assurance/Quality Control Manager for the RAM-W Vulnerability Assessment. The
Water Department serves about 475,000 customers. Mr. Kazarians will be
responsible for the overall quality control and project information security for the
Three Valley Municipal Water District.
Eastern Municipal Water District: Served as Project Manager and main technical
expert for PSM program development, CalARP and RMP development and submittal;
Emergency Response Plan development and updates, training program development
and implementation and the management of change support.
Irvine Ranch Water District: Served as Project Manager for CalARP and RMP
development and submittal; PSM program update; Emergency Response Plan
development and updates and management of change support.
Risk Management Professionals, Inc.
V:\Client20\TusfinLPropWulnerability AssessmentLResumesXRMPWlard yKazarians .doc
Westem Municipal Water District: Served as Project Manager for the development
of the PSM program, CalARP and RMP development and submittal and for
Emergency Response Plan development.
Elsinore Valley Municipal Water District: Prepared the CalARP and RMP submittals
Casitas Municipal Water District: Assisted the District in the preparation of CalARP
and RMP related technical studies.
All of the above-mentioned projects included:
· Performance of Process Hazard Analyses (PHAs)that have included the assessment
of site security issues and hazards precipitating from deliberate acts.
Creation of Emergency Response Plans that have specifically addressed:
"Threats/Civil Disorder," "Potential Imminent Danger to Personnel (e.g., hostages,
armed individual)," and "Procedures for Handling Demonstrations, Threats of
Violence, or Civil Disorder."
Creation and implementmion of risk communication plans for facilities that have
addressed questions about the facility's preparedness to address deliberate acts.
Mr. Kazarians has published numerous articles on the subjects of risk management,
risk assessment, fire analysis, reliability, and risk management.
Risk Management Professionals, Inc.
V :\Ciient20\TustinkProp\Vulnerability Assessment~esumes~RMPhMardyKazarians.doc
JAMES FL BLACK, CPP
EDUCATION
California State University, Dominguez Hills CA, BS Business Administration, 1989.
Ten years experience in the Security and Automation industry specializing in facility planning,
design and renovation with respect to Security Systems, Video Surveillance (CCTV), Fiber
Optics, Broadband Networking/Automation, Access Control and Audio/Visual systems.
Special expertise in multiple entity coordination and design team interface and security
planning.
Practical background in specification/design of video security systems, System integration, End
User Relations/Presentations and Project Management.
Responsible for performing field survey and analysis of existing security and fire/life safety
systems to determine feasibility for equipment rehabilitation or replacement.
EXPERIENCE DETAIL
Vulnerability Assessment, Project Management, master planning, design development,
construction documentation, construction administration and commissioning of security systems,
monitoring, access control, video surveillance, network fiber optic infrastructures and
communication systems projects. The follOwing is a representative sample of projects:
- Ontario International Airport (LAWA), Los Angeles World Airports. Security services for
investigation and evaluation, design and construction supervision for physical security
systems improvements and compliance of FAA 107.14 Requirements at existing and
new airport terminals, provided Access Control and Alarm Monitoring System
(ACAMS), Alarm Access Control, Closed Circuit Video & Intercommunication for two
existing domestic terminal buildings, one Federal Inspection Facility (International
terminal), Command Center, US Post Office, fuel farm area and a major expansion
with three new terminal buildings.
- City of Mesa Police Department. Provided a complete Security System design for the
City of Mesa Properties including City Hall, Police Facility, City Plaza and lSD
buildings. Currently providing planning, design of security system for the Police Facility
and the Evidence and Identification Laboratory Addition. Integrated access control and
security system with the City of Mesa central monitoring control. Currently working on
City of Mesa, Jail Facility controls project upgrade.
- Griffith Observatory. Provided Preliminary Engineering Phase and Basis for Design.
Currently providing construction documents and Construction Administration for
security systems Upgrade Project.
- Mesa Arts and Entertainment Center,'City of Mesa, AZ. Total project cost: 90 million.
The Mesa Arts Center will be a cornerstone project in Mesa, Arizona's downtown
redevelopment, transforming the face of downtown with the mix of world class
performing theaters, art studios, galleries, gardens, public gathering spaces and
informal performance areas. Completion: Spring 2005.
V:\Client20\Tustin~Prop\Vulnerability Assessment~esu mes\TRC~BlackJ.doc I
Community Hospital of Monterey, CA. Provided security evaluation, planning, design,
specification and construction administration services for completely integrated security
systems during the extensive renovation and expansion of the hospital and parking
structure. System includes access control, photo identification badging, closed circuit
video, infant security, asset protection, intercom systems and emergency telephone
systems. TFIC-EASl also provided budget development, construction coordination and
system commissioning
PROFESSIONAL AFFILIATIONS
American Society for Industrial Security (ASIS), Chapter 40 Vice Chairman, 1999-2000
Mentor for ASIS annual CPP education courses, Region III
InfraGard Representative (Los Angeles Chapter)
PROFESSIONAL CERTIFICATIONS
Certified Protection Professional (CPP), ASIS Certification No. 9059
Certified and licensed to apply "Critical Infrastructure Risk and Vulnerability Assessment
Methodology" developed by the US Department of Energy's Sandia National Laboratories in
concert with the Environmental Protection Agency (EPA) License # 02-WRAM079
TECHNICAL PUBLICATIONS
Published Articles for Mass Transit Magazine ("CCTV in transportation") and Security Sales
Magazine ("Focusing on the Auto-Iris Lens").
Reviews Books and CD's for inclusion in American Society for Industrial Security's national
reference library
Established RS-422 communication protocol publication for use by System Integrators and
Installers to ease integration of CCTV products with other specialty systems.
Established and Taught CCTV Training Academy for Security Professionals 1.
V:\Client20\Tustin\Prop\Vulnerability Assessment~Resumes\TRC~BlackJ.doc 2
KEITH USHNEFI
EDUCATION
Northrop Institute of Technology (EE)
California State University Los Angeles (Fire Administration, Barth Scholarship Award)
PROFESSIONAL EXPERIENCE
Twenty-five years experience specializing in Threat Vulnerability Assessments and planning,
design, construction and implementation of security, CCTV, access control, fire alarm,
audio/visual, and special-function Iow voltage control systems. Special expertise in security
system integration, working with design teams, estimatin,g.
Highly Practical background in the construction industry, including the conceptualization, design,
installation, maintenance, test and startup phases of all Iow-voltage control systems. Proficient
with both electromechanical and microprocessor-based hardware and software controls.
RELEVANT EXPERIENCE
Western Municipal Water District, Riverside CoUnty. Currently under contract to perform
and security Vulnerability Assessment to assess the critical ~areas of the site, review
existing physical security, make recommendation to upgrade security technology,
policies/procedures. Provide specifications and construction drawings, administer the
bidding process and provide construction management for security technology upgrade.
Phase I! is to provide a Vulnerability Assessment for eleven pumping stations/tanks
servicing Riverside county.
County of Santa Clara, Roads & Airports Dept. Security consulting services for the
development of a ThreatNulnerability Assessment and Security Plan for Palo Alto,
South County and Reid- Hillview Airports.
Los Angeles City, Multiple City-wide Facilities. Providing Vulnerability Assessment's for
citywide facilities to determine the criticality and probability of the security measures.
Develop countermeasures to augment security threats. These will be served by alarm,
access control, CCTV and 2-way voice communications systems that will be linked to a
newly designed central .monitoring center at City Hall East which will be manned 24
hours per day by Dept. of General Services,Security personnel. The system will
incorporate existing security systems into the new technology and will permit the real-
time monitoring, and eventually all City properties over fiber, telephone and DSL lines,
allowing the reporting of alarms and assessment of events via video and audio as events
unfold.
V:\Client20\Tustin~Prop\Vulnerability Assessment\Resumes\TRC~KushnerK.doc 1
City of Mesa, Arizona. Provided a complete Security System design for the City of Mesa
Properties including City Hall, Police Facility, City Plaza and lSD buildings. Currently
providing planning, design of security system for the Police Facility and the Evidence
and Identification Laboratory Addition. Integrated access control and security system
with the City of Mesa central monitoring control. Currently working on City of Mesa, Jail
Facility controls project upgrade
City of Beverly Hills, Multiple City Sites Security consulting services for the development
of a ThreatNulnerability Assessment and Security Plan for city-wide sites. Provided a
comprehensive security assessment and report to provide Central Station monitoring of
City Wide facilities. Provided design engineering services for multiple projects including:
The Civic Center Safety Zone, CCTV Upgrade for Dispatch Center Relocation,
Greystone Park, Post Office Building, Art Gallery and City Jail control system Upgrade
Project.
PROFESSIONAL CERTIFICATIONS
Certified, AWWARF/Sandia National Laboratories RAM-W Training (Risk Assessment
Methodology for Water Surety
PROFESSIONAL ACCOMPLISHMENTS
Construction Management on a diversity of large projects:
Speaker @ California Board of Corrections conference for system integration & detention
control systems
Served on California Automatic Fire Alarm Association Board of Directors for new fire alarm
legislation for the State of California
General Manager of a Contracting Firm of 35 employees.
PROFESSIONAL AFFILIATIONS
American Water Works Association (AWWA)
Chairman Security Industry Association (SIA)
Licensed Low-Voltage Contractor (California C-16 D-O5/C-7, #617811)
California Automatic Fire Alarm Association (CAFAA)
National Fire Protection Association (NFPA)
American Correctional Association (ACA)
V:\Client20\Tustin~rop\Vulnerability Assessment~esumes\TRC~KushnerK.doc 2