AWIA Compliance and Water Security for Water Utilities
Emergency Response Plans are due December 31, 2026 for systems serving 3,301 to 49,999 people. We help your team get there: organized, documented and on time.
EGI helps community water systems across Indiana and Illinois complete and maintain their America's Water Infrastructure Act (AWIA) Risk and Resilience Assessment and Emergency Response Plan. Beyond compliance, we diagnose non-revenue water using IWA/AWWA water balance methodology, deploy AI-enabled SCADA monitoring that flags anomalies against your own trained operating baseline instead of fixed alarm thresholds, secure that monitoring under IEC 62443-aligned network segmentation, and govern it going forward as your fractional CIO or CISO — staged to fit your budget.
Your Risk and Resilience Assessment and Emergency Response Plan, organized and on time.
Community water systems serving more than 3,300 people must certify both to the U.S. EPA and review them every five years. Your utility certifies; EGI helps your team complete every step and stay ready for the next cycle.
Our approach comes from 18 years supporting a municipal water utility, with zero cybersecurity incidents, zero AWIA violations and zero unplanned downtime.
- A compliance status check that shows exactly where your Risk and Resilience Assessment and Emergency Response Plan stand
- A secure compliance portal where your team records each step, and your utility owns its data
- EGI review of every section before your authorized official certifies to the U.S. EPA
- Deadline reminders, corrective-action tracking and readiness reports for your board or council
EGI is here to help your leadership team close the gap between technical risk and regulatory accountability — built on IEC 62443 and NIST CSF, and built around the AWIA risk and resilience obligations your board is already required to meet.
Every recommendation ties to a named standard and a measured baseline, staged for the best ROI, proven stage by stage.
Water loss and exposed SCADA systems are both quietly compounding costs.
Many utilities lose a significant share of the water they treat before it ever reaches a customer's meter — treated water already paid for and never billed. SCADA systems reachable from the public internet have been directly targeted: attackers have altered control-system displays and disrupted operations at exposed utilities, and attackers increasingly use automated tools to find internet-exposed control equipment quickly. Few utilities can absorb a full-time CIO or CISO to stay ahead of that. EGI runs loss reduction, monitoring, and governance as one accountable engagement, priced to your budget.
- A quantified water balance that separates real (physical) losses from apparent (commercial) losses, not an estimate
- Anomaly detection built on your own operating baseline, not fixed alarm thresholds
- OT network segmentation and MFA-gated remote access, aligned to IEC 62443
- Fractional CIO/CISO leadership billed through your operating budget, not a new hire
- A five-stage implementation path — diagnose, prioritize, pilot, scale, sustain — so no stage outruns approved budget