AWIA Round II RRAs and ERPs: Why the Best Emergency Response Plan Is an Updated One

In 2018, the America’s Water Infrastructure Act of 2018 (AWIA) was enacted, creating a new foundation for how community waterworks systems prepare for and evaluate emergencies. Since then, public water suppliers have been mandated to submit their Risk and Resilience Assessments (RRAs) and Emergency Response Plans (ERPs) in an effort to lay the groundwork for improving utility resilience and preparedness.

Now, with AWIA Round II officially underway and recertification deadlines having begun in March 2025, water systems are once again required to revisit and update these critical documents. While the criteria needed to complete these documents have not changed, the conditions utilities face have evolved significantly since Round I’s end in 2020/2021. Between aging infrastructure, cybersecurity vulnerabilities, emerging threats due to climate change, and an increase in oversight, maintaining and updating these documents is more critical than ever.

A Refresher on AWIA ERPs and RRAs

To refresh, an RRA is an evaluation that examines a utility’s vulnerabilities, threats, and consequences should it experience an emergency. The purpose of this document is to help utilities understand where they are most vulnerable and where mitigation efforts will be the most effective. Together, the ERP and RRA form a solid foundation for a utility’s emergency preparedness strategy.

An ERP is an extensive manual for emergencies, containing any and all information and strategies that would be critical during an emergency. This includes, but is not limited to, utility personnel information, strategies on how to communicate with the public and stakeholders, contingency plans for alternative water sources, and more.

The U.S. Environmental Protection Agency (EPA) requires communities with populations of over 3,300 people to develop both an RRA and an ERP, and they must be updated every five years at minimum. Below are the current Round II deadlines:

• Over 100,000 population: RRA certification was due March 31, 2025, and ERP certification was due September 30, 2025.
• 50,000-99,999 population: RRA certification was due December 31, 2025, and ERP certification is due June 30, 2026.
• 3,301-49,999 population: RRA certification is due June 30, 2026, and ERP certification is due December 31, 2026.

If utilities have not yet updated their RRA or ERP, we strongly suggest scheduling your review now in order to meet the above deadlines.

Building Capability Beyond Compliance

Even though training is not mandated by AWIA, many utilities are now voluntarily incorporating training requirements into their own internal compliance processes. By recognizing that Round II is more than just paperwork, utilities can leverage their knowledge from these training sessions and set themselves up for success in the case of an emergency.

One training opportunity is the AWWA’s Utility Risk and Resilience Certificate Program, an online eLearning course. This course offers participants self-paced coursework that is aligned with AWIA concepts and resilience best practices, such as ANSI/AWWA standards and AWWA’s Cybersecurity Guidance.

For Massachusetts utilities specifically, MassDEP has a dedicated webpage to provide information, resources, and guides on how to prepare their ERPs, ranging from general guidance to more specific responsibilities such as cyber threats and chemical safety. The March 2025 issue of their In the Main newsletter also provided more resources and information.

Even with the above resources from EPA and MassDEP, it is often a challenge for water systems to implement training on their own. And that is where we come in. Tata & Howard’s expertise includes not only creating and updating RRAs and ERPs but also providing comprehensive training to water professionals. This training is invaluable for emergency readiness, such as recently experienced by the Cherry Valley and Rochdale Water District.

As Round II deadlines near, utilities that invest in training are often better positioned to produce higher-quality plans, respond effectively to emergencies, and demonstrate organizational readiness beyond minimum compliance.

Why Round II Matters More Than Ever

Even though Round II does not require any new criteria from utilities, its timing could not be more ideal. Water systems continue to face far more complex conditions, from extreme weather events like wildfires, floods, and lengthy power outages to increasing cyberattacks on critical infrastructure and supply chain challenges that highlight weaknesses in the availability of necessary parts and equipment.

Beyond these external threats, internal changes such as infrastructure improvements, operational changes, staff turnover, asset aging, and more can also alter a utility’s exposure to risk. Emergency plans that were once accurate may no longer reflect the current flow of operations, which can be detrimental in the face of an emergency. With these emerging threats and inevitable internal changes, Round II provides utilities with the critical opportunity to revisit their emergency plans and assessments and align them with the reality of their present-day conditions.

What makes this next cycle even more important is that utilities have the chance to reflect on the past five years from every angle. For example, utilities can evaluate how the system changed since Round I, which may have reduced previous risks or created new ones. They can also evaluate how systems will be able — or unable — to withstand the possibility of other emerging threats in their current state. This time also creates a unique opportunity to look at new tools and training opportunities that are designed to assist utilities and their staffing. Lastly, it provides utilities with the time to reflect on not only the successes and challenges from the past five years but that of their peers as well.

By leveraging new tools, resources, research, and the time to reflect, utilities can further strengthen their emergency preparedness.

Conclusion

By approaching Round II as more than just a regulatory obligation, utilities can use this next cycle to meaningfully improve their resilience, enhance their emergency response capabilities, and set themselves up for long-term success. Contact us to learn more about updating your RRAs and ERPs or to schedule a consultation or training session.