DATE: 06/17/2026
TO: Honorable Mayor and City Council Members
Honorable President and Board Members
FROM: Utilities Department
2026-230
REQUEST FOR CITY COUNCIL AND
CORONA UTILITY AUTHORITY ACTION
SUBJECT:
PROFESSIONAL SERVICES AGREEMENT WITH SOUTH COAST AUTOMATION
SYSTEMS FOR SCADA SYSTEM INTEGRATION AND MAINTENANCE
EXECUTIVE SUMMARY:
The Utilities Department operates a centralized SCADA system that provides real-time monitoring, automated controls, cybersecurity oversight, and essential regulatory reporting for the City’s utility facilities. Approval of the Professional Services Agreement with South Coast Automation Systems, Inc. will help preserve system integrity, ensure continuity of operations, protect against cybersecurity threats, and leverage South Coast Automation System, Inc.’s existing technical expertise and ongoing support for the City.
RECOMMENDED ACTION:
That the City Council:
a. Authorize an Exception to Competitive Bidding pursuant to Corona Municipal Code Section 3.08.140(D) to enter into professional services agreement with South Coast Automations Systems, Inc., to provide SCADA system integration and maintenance services.
b. Authorize the City Manager, or his designee, to execute the Professional Services Agreement with South Coast Automation Systems, Inc., to provide SCADA system maintenance and integration services in an amount not to exceed $700,000 per fiscal year.
c. Authorize the City Manager, or his designee, to negotiate and execute nonsubstantive extensions, change orders, and amendments up to $70,000 or 10% of the total contract amount.
d. Authorize the City Manager, or his designee, to issue yearly Purchase Orders to South Coast Automation Systems, Inc., in the amount of $700,000 per fiscal year.
That the Corona Utility Authority review, ratify, and to the extent necessary, direct that the City Council take the above actions.
BACKGROUND & HISTORY:
The Utilities Department operates and maintains a complex Supervisory Control and Data Acquisition (SCADA) system. Utilities Department operations staff rely on the SCADA network to efficiently monitor and control the City’s water treatment plants, distribution system, water reclamation facilities, groundwater wells, booster stations, storage tanks, pressure regulation stations, and electric utility Wholesale Distribution Access Tariff (WDAT) locations.
Utilities Department’s SCADA system consists of seven primary control centers connected through licensed radio communication. Each treatment plant is supported by multiple remote facilities that communicate with the main plant via licensed radio or fiber-optic networks. Across more than 100 locations, programmable logic controllers (PLCs) enable automated operations and provide remote monitoring and control. The system incorporates multiple cybersecurity protections to safeguard critical infrastructure and maintain system integrity. Each facility is equipped with alarm conditions that automatically notify on-duty operators by phone or text, ensuring rapid response to changing operational conditions.
Utilities Department requires the services of a qualified integration and automation firm to support City Staff, in the coordination and implementation of ongoing operations, maintenance, and upgrades of existing SCADA assets, as well as capital improvement projects. Typical SCADA integration tasks include PLC programming, input/output (I/O) mapping, alarm configuration, maintenance of critical components, technical support for system startup and testing, and cybersecurity support. Due to the complexity and interconnected nature of the SCADA system, continuity of service and deep system knowledge are essential to ensure reliable operations and minimize risk.
In 2020, Utilities Department issued a Request for Proposals (RFP) for SCADA integration services, and the City Council authorized a professional services agreement with South Coast Automation. This agreement expires on June 30, 2026.
ANALYSIS:
In March 2026, Utilities Department evaluated ongoing cyber security advisories issued by WaterISAC regarding threats to SCADA systems for utilities and other critical infrastructure, equipment vulnerability, and hacking in United States. For security reasons, it is the Utilities Department’s recommendation not to publish a Request for Proposal (RFP) document that will contain detailed information of its infrastructure. The SCADA system environment contains components such as:
Industrial control system (ICS) logic and programming Network segmentation and firewall rules
Encryption and authentication protocols
Proprietary process control configurations
Real‑ time communication links to field instrumentation and remote facilities Publishing detailed SCADA specifications publicly through a traditional RFP would expose infrastructure information and create unnecessary cybersecurity vulnerabilities.
Utilities Department's SCADA system has been engineered, configured, and maintained by South Coast Automation Systems (SCAS), who is the original integrator and holds intimate knowledge of the system’s programming, architecture, communications network, and proprietary configurations since its inception. Given the critical nature of these systems, maintaining continuity with the incumbent integrator is logical to protect SCADA system integrity in order to minimize cybersecurity risk, ensure compliance and avoid operational disruptions. SCAS is competent and capable of managing new, more complex threats by increasingly sophisticated external attackers, which decreases the potential for service disruption. Given the current sensitivity of the environment due cybersecurity advisories, the department is recommending staying with our current service provider to establish a long-term partnership with trusted SCADA integration to protect, support, and strengthen Utilities Department’s SCADA system.
SCAS is a reputable integration firm used by many municipal utilities and governments, including contracts with Department of Defense. They are highly trusted by Corona’s Utilities Department and IT teams, and experience limited to no turnover of staff. The long-term benefits from a single service provider have standardized the operational process controls, maintained efficient system integrations and ensured reliable data acquisition to meet all compliance and regulations. The adaptability of SCAS to provide exceptional service, as the Utilities operation grows and public health regulation increases, has been successful for many years.
South Coast Automation has competitively bid for the City of Corona’s services through multiple RFP process and have been awarded contracts based on knowledge, skills, ability and price. They remain competitive in price with other service providers in the industry.
Staff recommends approval of a Professional Services Agreement with South Coast Automation to provide professional SCADA system integration and maintenance services on the basis stated above.
FINANCIAL IMPACT:
Funding for the recommended actions is included in the FY 2027 Utilities Department Operating Budget. Funding in future fiscal years will be recommended through the budget process.
ENVIRONMENTAL ANALYSIS:
This action is categorically exempt pursuant to Section 15301 of the Guidelines for the California Environmental Quality Act (CEQA), which states that operation, repair, maintenance, permitting, leasing, licensing, or minor alteration of existing public or private structures, facilities, mechanical equipment, or topographical features, involving negligible or no expansion of use beyond that existing at the time of the CEQA determination is exempt from CEQA. This action involves SCADA system integration, maintenance, repair and replacement of existing equipment. Therefore, no environmental review is required.
PREPARED BY: AFTAB HUSSAIN, ASSISTANT UTILITIES DIRECTOR REVIEWED BY: TOM MOODY, UTILITIES DIRECTOR
ATTACHMENT:
1. Exhibit 1 – PSA