✣ For water utilities
Your ERP is due
every five years
AWIA requires a certified risk and resilience assessment and an emergency response plan that answers it. Preppr keeps the two connected, exercises the plan, and builds the record for your next certification.
AWIA Section 1433
6 mo
to certify your ERP after your risk and resilience assessment is certified.
✣ The compliance clock
Two documents. One deadline cycle.
Certification dates are set by population served, and the cycle repeats every five years. Each one asks whether the ERP still reflects the risks you assessed.
5 yrs
RRA review and recertification
Review and revise the risk and resilience assessment, then recertify to EPA.
6 mo
ERP certification follows
Certify an emergency response plan that addresses the RRA findings within six months.
3
Population tiers, three dates
Systems serving 100,000+, 50,000–99,999, and 3,301–49,999 people each have their own deadline.
1
Plan that has to work
The ERP must cover response, mitigation, detection, and coordination for the threats you assessed.
Source: America’s Water Infrastructure Act of 2018, Section 1433 (SDWA). Confirm your system’s dates with EPA.
✣ When the auditor asks
Every step leaves evidence
Preppr records each part of the cycle as it happens, so the documentation exists before anyone requests it.
Assess
Ask Preppr
Links RRA findings to the ERP sections that address them.
✓ Gap register mapped to each RRA threat
Gather intel
Intelligence
Brings hazard and threat signal into context with your plans and assessments.
✓ Threat picture linked to your hazards
Engage
Collaborate
Interviews operators, lab staff, and WARN partners.
✓ Documented partner input with dates
Design
Exercise & Simulation
Builds scenarios from your highest-risk assets.
✓ Exercise plan tied to RRA findings
Exercise
Exercise & Simulation
Runs the test with operations, IT/OT, and public health.
✓ Dated participant and decision log
Improve
Improve
Tracks mitigation actions to closure.
✓ AAR/IP and plan revisions ready for recertification
✣ Scenarios utilities run in Preppr
Test the day you hope never comes
Contamination
Source water contamination
Detection, sampling, boil-water notices, and alternate supply.
Cyber
SCADA compromise
Manual operations, IT/OT isolation, and CISA coordination.
Power
Extended power loss
Backup generation, fuel contracts, and pressure management.
✣ Inside Preppr
From your plans to a ready exercise
Exercise Designer reads your own plans and the rules your sector answers to, then drafts the scenario, injects, and objectives for your team to review.
app.preppr.ai
Connect your AWIA risk and resilience assessment to your ERP, exercise it, and carry findings into recertification.
How Preppr supports water & wastewater across the cycle
1 · Ask
Ask Preppr
Link your RRA findings to the ERP sections that address them, and spot what the ERP leaves out.
2 · Remember
Knowledge
Keep your ERP, RRA, procedures and past AARs in one cited memory across the utility.
3 · Watch
Intelligence
Track contamination, cyber and weather signals against your highest-risk assets.
4 · Engage
Collaborate
Capture what operators, lab staff and mutual-aid partners actually do during an event.
5 · Practice
Exercise & Simulation
Build scenarios from your highest-risk assets and threats, and test the ERP with operations, IT/OT and public health partners.
6 · Improve
Improve
Track mitigation actions through to your next certification, with coverage against NIST CSF 2.0.
Requirements this covers
AWIA §2013
RRA and ERP, certified to EPA, reviewed every five years.
AWWA standards
Industry guidance on risk and resilience management.
Scenarios teams test
Ransomware on SCADA
Source-water contamination
Main break and pressure loss
Extended power outage
Chemical release at treatment plant
Drought
“I just see a huge place for this in the water sector.”
Christine Herndon
Founder & Managing Principal · Nextline Strategies, LLC
See it with your own plans.
A 30-minute demo built around your hazards and obligations.
Other sectors