Service Offerings

  • Business continuity
  • Certification preparation
  • Compliance procedure development and modifications
  • Internal control evaluations
  • Regulatory compliance
  • Risk assessments

The reliability of critical infrastructure is an increasingly fundamental responsibility for those who build, own and operate that infrastructure. As industry standards for reliability are developed and evolved, you need to know your systems and processes are reliable, compliant and effective.

Our team applies deep understanding of the structure and operation of infrastructure to help you evaluate its reliability in the face of the threats you face. Across the water, oil and gas sectors, we apply experience to develop practical and effective compliance plans.

Risk management and resiliency are focused on safety and reliable operations. We achieve them through a three-prong approach that balances system reliability, regulatory compliance and cyber risk management. Our consultants have experience in all three fields. We strive to improve the safety, security and reliability of critical infrastructure worldwide, delivering the people, process and technology that enables risk and resiliency, preparedness and situational awareness.

As we work with you to examine your reliability program, we emphasize:

  • Sophisticated protection and detection
  • Response and recoverability strategies
  • Logical opportunities for automation
  • Better risk visibility

Mind the Gap: Resilience Goes Beyond Compliance

Critical infrastructure industries are implementing connectivity and data systems that open them up to new threats that require cybersecurity mitigations.
Read more

Meeting the Requirements of America’s Water Infrastructure Act (AWIA)

Community drinking water systems serving populations over 3,300 conduct risk and resilience assessments (RRAs), update emergency response plans (ERPs) and certify those efforts with the U.S. Environmental Protection Agency every five years.

For RRAs, we leverage extensive experience with municipal water and wastewater infrastructure, physical security and cybersecurity capabilities to identify and mitigate malevolent and natural threats. Our holistic methods have proven effective in supporting AWIA compliance, assessing risk, resilience, monitoring systems, financial infrastructure, chemical handling, and operations and maintenance.

Our all-hazards approach to ERP development or revision supports incorporating four key criteria:

  • Strategies and resources to improve resilience
  • Plans and procedures that can be executed during an act that threatens the system’s ability to deliver safe drinking water
  • Action plans to be executed to reduce or eliminate risks
  • Strategies that facilitate detection of threatening acts

The Ticking Clock for AWIA Compliance on Risk Assessment and Emergency Response Plans

America’s Water Infrastructure Act (AWIA) requires compliance planning for the resiliency, physical security and cybersecurity of community water systems.
Read more

Managing Evolving Regulations for Oil & Gas

Multiple federal and state agencies govern oil and gas pipelines, storage and transportation. We can help you stay compliant, add efficiencies, and develop safe and secure operations. Interstate pipelines are managed by the Federal Energy Regulatory Commission (FERC) and the U.S. Department of Transportation (DOT), while pipeline operations are subject to the U.S. Department of Transportation’s Pipeline and Hazardous Material Safety Administration (PHMSA).

Our team’s experience guides you in developing the safety, security and monitoring strategies that foster compliance, with a focus on identifying critical steps and internal controls that lead to effective and streamlined operations. 

We cultivate in-depth understanding of regulatory guidance to improve your program, including such topics as recently published changes to PHMSA regulations transforming maintenance and safety requirements for natural gas pipelines, designed to increase safety of onshore gas transmission pipelines. We recognize that improvements to documentation and data collection are necessary to reflect the changing spatial patterns of natural gas production and an aging pipeline network.

Blog Post
Bridging the Gap: Benefits of a Business Continuity Plan
Risk is a constant. Preparing for disruptions is difficult, but a business continuity plan can help an organization stay afloat during and after an event.
Read more
Blog Post
Automating Security Operations: SOAR Supports Integrated Cybersecurity
Security Orchestration, Automation & Response (SOAR) can help teams automate and integrate processes for increased security amid increased remote work.
Read more
Blog Post
Choosing a Framework for Optimal Risk Management
Choosing the right framework is key in the assessment and management of risk. A framework can help organizations go beyond meeting compliance standards.
Read more
Blog Post
How Prepared Is Your Utility to Sustain and Extend Emergency Measures?
To plan for a pandemic of the current magnitude, utilities can identify business elements essential in assessing the potential impact of a disruption.
Read more
Blog Post
FERC Issues Final Rule on Protection System Coordination, Personnel Training in Order 847
FERC’s Order 847 provides a final rule for the coordination of protection systems for performance during faults and specific training for personnel reliability standards. Specifics are laid out to help operators prepare their staffs to handle issues.
Read more
Matt Morris, 1898 & Co., Part of Burns & McDonnell
Matt Morris
Managing Director, Security & Risk Consulting

Send Us a Note

*Denotes Required Field

1898 & Co. needs the contact information you provide to us to contact you about our products and services. You may unsubscribe from these communications at anytime. For information on how to unsubscribe, as well as our privacy practices and commitment to protecting your privacy, check out our Privacy Policy.

Because the future won’t wait.