Which organization mandated vulnerability assessments for large water utilities?

• A. Homeland Security
• B. USEPA
• C. NSA
• D. CIA/FBI

Answer: (B)

Vulnerability assessments for large drinking water utilities are mandated by the USEPA under the Public Health Security and Bioterrorism Preparedness and Response Act of 2002. The act requires large community water systems to identify security weaknesses and establish a security plan and emergency response measures. The EPA administers and guides these requirements, with state agencies enforcing them. While Homeland Security handles broad infrastructure security, the specific mandate to conduct vulnerability assessments originated from the EPA’s implementation of the Bioterrorism Act. The NSA, CIA, and FBI do not issue this regulatory requirement.