The National Strategy for Critical Infrastructure aims to make Canada’s 10 critical infrastructure sectors, one of which is water, more resilient. In keeping with the strategy, the Canadian Water and Wastewater Association (CWWA) has partnered with us to develop an all-hazards risk profile for the water sector which includes interdependencies and information sharing between the water sector and other critical infrastructure sectors.
This paper has two objectives. First, it reviews physical threats to water security in Canada and considers existing water security policy and legislation from Canadian provinces and territories in relation to theories that guide water security management. Then, it presents findings from a national survey of CWWA member organisations used to construct their risk profiles.
Our review of physical threats to water security and associated policy and practice suggest that water security management needs to develop in new directions to address emerging threats. Several management approaches are currently shaping water security practices, including ecosystem-based management, integrated management, and adaptive management. A variety of regulatory frameworks are also intended to influence water security practices, including the ISO Risk Management Principles and Guidelines, the Water Security Risk Assessment Framework, and the Water Security Status Indicator Framework. Water security practices have evolved over time from a focus on natural hazards, to man-made hazards, and now to an all-hazards approach. One of the most notable trends in water security management is the emergence of water ISACs for communicating risks and sharing best practices.
The findings from our survey suggest that there are ‘Five Perceived Risks to Water Security’ in Canada. These risks are Infrastructure-related, Water Supply, Cyber-related, Physical Access, and Other Uncertain Risks. Infrastructure-related risk and Water Supply risk yielded the highest risk scores.
Analyses suggest that employees from water utilities that service large populations perceive more risk for Physical Access, Cyber-related, and Other Uncertain Risks than do employees from water utilities that service small populations. Another important finding is that senior managers and non-senior managers have shared perceptions about the risks to water security. The implications of the findings for risk communication and risk management are considered.