U.S. EPA has launched the second round of America’s Water Infrastructure Act (AWIA) Section 2013 / Safe Drinking Water Act (SDWA) section 1433, which requires community drinking water systems (CWSs) serving more than 3,300 people to develop or update risk and resilience assessments (RRAs) and emergency response plans (ERPs) every five years.
See the upcoming certification deadlines in the table below:
CWS Population Served
RRA Certification Deadline
ERP Certification Deadline
Over 100,000
March 31, 2025
September 30, 2025
50,000 – 99,999
December 31, 2025
June 30, 2026
3,301 – 49,999
June 30, 2026
December 31, 2026
WICRD recently published updated versions of its Small System RRA Checklist and ERP Template and plans to publish an updated version of the Vulnerability Self-Assessment Tool (VSAT) by the end of November 2024. A Checklist of Priority Cybersecurity Practices for Water Systems was added to these resources to bolster a CWS’s analysis of their cybersecurity practices. EPA encourages all CWSs to fill out this new cybersecurity checklist and add it to their RRA or ERP.