Water utilities
Water systems serving more than 3,300 people already owe a recurring statutory risk assessment covering malevolent acts and physical barriers, which is where aerial exposure belongs rather than in a separate purchase.
Key facts
- AWIA section 2013, amending SDWA section 1433, requires community water systems serving more than 3,300 people to develop or update a Risk and Resilience Assessment and an Emergency Response Plan.
- The assessment must address the risk from malevolent acts as well as natural hazards, and must cover physical barriers, source water, intake, pretreatment, treatment, storage and distribution facilities.
- The assessment and the response plan must be reviewed at least once every five years to determine whether they need revising.
- Aerial observation of a water system therefore fits within an assessment the utility is already required to produce, rather than requiring a separate justification.
- Detection is lawful for a water utility to deploy. Mitigation is not available to a private or municipal operator under United States law.
What makes this facility type different
The threat model
Reconnaissance of treatment works, intakes, pumping stations and above all bulk chemical storage, where chlorine and other treatment chemicals represent an acute hazard that is attractive precisely because it is already on site. Public alarm is a second and more likely consequence: a drone filmed over a reservoir produces contamination fear among customers regardless of whether anything was physically possible.
The regulatory position
AWIA section 2013, which amended section 1433 of the Safe Drinking Water Act, requires community water systems serving more than 3,300 people to complete a Risk and Resilience Assessment covering malevolent acts and natural hazards, explicitly including physical barriers, source water, intake, treatment, storage and distribution. It must be reviewed at least every five years, so this is a recurring statutory assessment rather than a one-off obligation.
What constrains the response
Source water, reservoirs and open treatment basins cannot be enclosed, roofed or screened without destroying their function, so the asset most visible from the air is the one physical protection cannot cover. A water system is also usually a municipal body with a small operations team and no security function, which means any finding has to be actionable by people whose job is water quality rather than security.
The assessment already exists
Water utilities occupy an unusual position among the facility types here. Most are working out whether aerial exposure justifies attention at all. Water systems already owe a recurring statutory assessment that covers it.
AWIA section 2013, which amended section 1433 of the Safe Drinking Water Act, requires community water systems serving more than 3,300 people to complete a Risk and Resilience Assessment addressing malevolent acts and natural hazards. The statute names what it has to cover: physical barriers, source water, collection and intake, pretreatment, treatment, storage and distribution. It has to be reviewed at least every five years.
Aerial observation of those assets is not a separate subject requiring its own business case. It is an input to a document the utility is already obliged to produce and periodically revisit.
It is worth being precise about the limit of that: AWIA does not require drone detection, and a reading of it that arrives at a mandated technology is an overreach.
What is actually worth looking at
The instinctive fear is contamination, and it is the least likely of the realistic harms. Against the volumes held in a reservoir or a distribution system, a small aircraft is a poor delivery mechanism and dilution does most of the work.
Two other things matter more.
The first is bulk chemical storage. Chlorine and other treatment chemicals are an acute hazard already present on site, in quantity, and their location, containment and access routes are exactly what overflight reveals. The hazard does not need to be delivered because it is already there.
The second is public alarm. Footage of a drone over a reservoir circulates quickly and produces contamination fear among customers whether or not anything was physically possible. Managing that is a communications problem with an operational trigger, and utilities that have thought about it in advance handle it far better.
The asset you cannot protect
Every other guide on this site eventually arrives at a physical measure that covers something. A yard can be netted. A rooftop can be screened. A perimeter can be extended.
A reservoir cannot be roofed. An open treatment basin cannot be screened. Source water is by definition in the open. The most visible asset from the air is the one where physical protection is not available at any budget, because covering it would destroy its function.
Assessment work at a water utility should say clearly that some exposure cannot be removed, and should concentrate effort where protection is possible: chemical storage, control buildings, pumping stations and the points where access to the system can actually be gained.
Writing for the people who will act on it
Water systems are usually municipal bodies. The operations team are water quality and treatment specialists, frequently small in number, and there is typically no security function and no out-of-hours monitoring.
A finding that assumes a security operations capability will not be acted on, because there is nobody to act on it. Assessment work here has to land as specific, ordinary tasks owned by people whose expertise is water, and it has to be honest that detection equipment generating alerts nobody is positioned to receive is not a sensible purchase for most systems.
Related work
- C-UAS grant support Applications, and spending awards already held, under the FEMA C-UAS programme.
- Site assessment & design Vulnerability assessment, RF survey, sensor siting and coverage modelling.
- Procurement advisory Specification and evaluation against the Authorized Systems List.
FAQ
▸Does AWIA require us to address drones specifically?
No. It requires an assessment of risk from malevolent acts and natural hazards across named parts of the system, including physical barriers, source water, intake, treatment, storage and distribution. Aerial observation is one route by which a malevolent act becomes feasible, so it belongs inside that assessment. Anyone presenting AWIA as mandating drone detection is overstating it, and the statute governs rather than any summary of it.
▸Can a drone realistically contaminate a reservoir?
Physically it is a poor delivery method against the volumes involved, and dilution works heavily against it. The more realistic harms are reconnaissance of the assets where a serious hazard already exists, meaning bulk chemical storage, and public alarm. A video of a drone over a reservoir can create a contamination scare that costs far more to manage than any incident it depicted.
▸We are a small municipal system. Is this proportionate?
The assessment is proportionate because it is already required. Detection equipment usually is not, for the same reason it is not proportionate at a school: an alert needs someone positioned to act on it, and most water systems have no security function or out-of-hours monitoring. The productive work is normally the assessment itself and the response routing, not hardware.
▸How does this relate to funding?
Assessment and planning are named allowable cost categories under the FEMA C-UAS Grant Program, and local and territorial public safety bodies participate as subapplicants beneath a State Administrative Agency. Whether a given water utility qualifies depends on the funding notice and on the state's own allocation decisions, and the notice governs.