The assessment covers the resilience of the pipes and constructed conveyances, physical barriers, source water, water collection and intake, pretreatment, treatment, storage and distribution facilities, and the electronic, computer or other automated systems the system uses, including the security of those systems. This is the statute's cybersecurity requirement: EPA's 2024 guidance states that systems must consider cybersecurity in the assessment and offers its cybersecurity checklist as one way to meet it. Resilience means the ability to adapt to or withstand a malevolent act or natural hazard without interrupting function, or to return rapidly to normal operation ((h)(1)).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.