NYC-WTC_000233682

NYC 9/11 Public Portal Document

RESPONSE GUIDELINES

2.2 Evaluating Threat Warnings

The first critical step in evaluating a contamination threat is recognition of a threat warning (i.e., an unusual situation that may have presented the opportunity for contamination of the drinking water). The utility will likely be in the best position to observe a threat warning and evaluate whether or not the activity is suspicious (i.e., first decision point in the Threat Evaluation process). This section briefly describes factors to consider when evaluating various types of threat warnings.

The common types of threat warnings include: • Security breaches: A security breach is an unauthorized intrusion into a secured facility that may be discovered through direct observation, an alarm trigger, or signs of intrusion (e.g., cut locks, open doors, cut fences). Security breaches may be the most common threat warnings, but in most cases are related to day-to-day operation and maintenance within the water system. Other security breaches may be due to criminal activity such as trespassing, vandalism, and theft rather than attempts to contaminate the water. o Security Incident Report Form —> Section 2.4 • Witness account: A threat warning may come from an individual who directly witnesses suspicious activity, such as trespassing, breaking and entering, or some other form of tampering. The witness could be a utility employee, law enforcement officer, citizen, etc. o Witness Account Report Form —> Section 2.5 • Direct notification by perpetrator: A threat may be made directly, verbally or in writing, to the water utility, the news media, law enforcement, or a government agency. Verbal threats made over the phone are historically the most common type of direct threats from perpetrators; however, there have also been written threats to contaminate the drinking water supply. o Phone Threat Report Form Section 2.6 o Written Threat Report Form Section 2.7 • Unusual water quality or consumer complaints: Unusual water quality results or an unexplained or unusually high incidence of consumer complaints may seiwe as a warning of potential contamination. In order to evaluate this type of warning, it will be necessary to carefully track routinely monitored water quality data and/or consumer complaints such that significant deviations from an established baseline might be observed. o Water Quality and Consumer Complaints Report Form —> Section 2.8 • Notification by public health agency: Notification from a public health agency regarding increased incidence of disease or death is another possible threat warning. A threat triggered by a public health notification is unique in that at least a segment of the population has presumably been exposed to a harmful substance. In this case, public health officials may launch an epidemiological investigation in an attempt to identify the source of the outbreak, during which the utility may be expected to play a support role. o Public Health Information Report Form Section 2.9

6 Interim Final - August 2004

CITY_21MC100_004992345

NYC-WTC_000233688