A Report of the 2002-2003 Civil Grand Jury For the City and County of San Francisco Keeping the Faucets Flowing:

R1

SECURITY PLANS MUST BE IMPLEMENTED FACTS • SFPUC has contingency plans for operations in an emergency following a natural or man made disaster, but does not have a plan to implement increased security for all parts of its water delivery system. • SFPUC hired the Lawrence Livermore National Laboratory to conduct the vulnerability assessment mandated by the federal Bioterrorism Act. The Lawrence Livermore Laboratory Vulnerability Assessment was submitted to the EPA and the Office of Homeland Security on March 31, 2003. This was the first security assessment of the entire water system. The risk reduction section of that assessment recommends steps that should be taken to make the SFPUC water system more secure.3 • SFPUC management has denied requests by SFPUC departments for funding for security. The few security upgrades made by SFPUC departments to date have been funded out of existing department operating budgets. For example, the SFPUC city distribution department made security improvements such as installing sensory badge access, re-keying locks and installing fencing. • Although SFPUC has not implemented and has no plan for implementation of comprehensive, system wide, security, it has contracted with the National Park Service to assign rangers, trucks and radios to provide security for the O’Shaughnessy Dam and Hetch Hetchy reservoir. The $300,000 annual cost is paid for out of the existing Hetch Hetchy budget. • The SFPUC budget for fiscal year 2003-2004 includes one security related item – $1.2 million to be spent on lab assistants and equipment to be used in the Water Quality Bureau for screening for contaminants which are either natural or intentional. • In November 2002, the voters approved a $1.6 billion revenue bond measure to fund the SFPUC long-term capital improvement program. The Capital Improvement Plan includes 77 water infrastructure projects designed to replace or repair aging facilities, seismically upgrade facilities, provide safe water in increasing demand, and improve water supply. Those projects, which affect only 60 to 70 percent of the system, will include upgraded security in the design. Because the vulnerability assessment contains sensitive information, the Grand Jury has not detailed specifically identified vulnerabilities of the water delivery system nor the steps recommended by Lawrence Livermore Act to make the system more secure. 5 • SFPUC has recently created a security director position. SFPUC is conducting interviews and expects to fill the position within the next few months.