Which population threshold is commonly used for vulnerability assessment requirements?

• A. 1,000
• B. 3,300
• C. 5,000
• D. 10,000

Answer: (B)

Vulnerability assessments for water systems are tied to how many people a system serves. After regulatory changes in the early 2000s, community water systems that serve more than a certain number of people are required to conduct formal vulnerability assessments and put security measures in place. The commonly used threshold is 3,300 people. This cutoff focuses regulatory attention on larger systems where a disruption or contamination would affect more residents, while keeping the requirement manageable for smaller systems.

A vulnerability assessment involves identifying security risks, critical assets (like wells, treatment facilities, and key valves), potential threats, and existing protections. The goal is to uncover gaps and develop actions to strengthen protection, such as improving site security, access control, monitoring, and incident response.

Other thresholds (1,000, 5,000, 10,000) aren’t the standard cited for this requirement, which is why the 3,300 mark is the best answer.