City Council - Successor Agency - Housing Authority
November 19, 2024

CITY OF FULLERTON
Task Order for SCADA Planning &
Assessment Services Phase 1
City of Fullerton
Public Works Water Engineering
Attn: Michael Johansen,
Assistant Engineer
AUGUST 5, 2024
ii
City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Table of Contents
Letter of Transmittal 1
01 Qualifications, Related Experience,
and References of Proposer 3
02 Work Plan 13
03 Proposed Staffing 25
04 Fee Schedule 38
23692 Birtcher Drive
Lake Forest, CA 92630
949.517.9090 phone
949.517.9090 fax
westyost.com
1 August 5, 2024
Michael Johansen
City of Fullerton
303 West Commonwealth Ave
Fullerton, CA 92832
RE: Response to Task Order RFP for SCADA Planning and Assessment Services for the City of Fullerton Dear Michael:

In response to the City of Fullerton’s (City) Task Order RFP for SCADA Planning and Assessment Services, West Yost & Associates, Inc (West Yost) is pleased to submit our proposal for the specified scope of work. The development and implementation of SCADA systems is complex and involves many operational, organizational and technology considerations that are crucial to secure delivery of services to the community. Our team is highly experienced in managing multi-year SCADA projects throughout the western US.

Our team is eager and willing to support the City on this important project. Our team worked with the City on the America’s Water Infrastructure Act of 2018 (AWIA) Risk and Resilience Assessment (RRA) and Emergency Response Plan (ERP). Through that project, our team developed the cybersecurity assessment and all of the resultant cybersecurity recommendations, of which the SCADA master plan was a key outcome. We believe the knowledge gained through this project will enable us to hit the ground running on this project with key institutional knowledge gained that will benefit this project.

A Team That Understands Your Needs and Expectations
The West Yost team brings years’ of experience in designing, programming and supporting municipal SCADA systems.

The West Yost team will be led by Michael Gruenbaum. Michael has served as Project Manager on more than five SCADA Master Plan projects in California, Arizona, Oregon, and Hawaii. Michael Gruenbaum will be serving as Project Manager for this project. Michael has experience developing at least five SCADA Master Plans. He has also served as the Project Manager on a large SCADA Master Plan implementation project. Michael’s skillset includes more than 60 cybersecurity assessments as well as PLC programming and HMI configuration experience. Michael is supported by a team that has significant experience working together on SCADA projects, including: Dan Groves, Zane Wilsterman, Joel Cox, Andrew Ohrt, Jeremy Smith, and Greg Smith.

Dan Groves, who will be serving as QA/QC lead on the project, is a Control Systems Engineer having developed and implemented several SCADA Master Plans in California, Oregon, and Arizona. Zane Wilsterman brings 25 years of experience developing and implementing SCADA master plans, and designing and implementing complex electrical projects for water utilities. Joel Cox comes from a traditional IT background and brings a wealth of knowledge associated with server design, network design, cybersecurity and communications. Andrew Ohrt is West Yost’s Resilience area practice lead, which includes Cyber-Informed Engineering. Andrew will provide key input for cyber resilience so that the new SCADA system includes advanced cyber-attack mitigations that reduce the impact of future breaches. Jeremy Smith brings 20 years of experience developing and implementing SCADA master plans, developing and implementing SCADA standards, and conducting startups for water utilities of all sizes. Greg Smith is West Yost’s Programming/Configuration practice lead and brings significant knowledge and experience implementing PLC programming and HMI configuration standards and best practices to this project.

Michael Johansen
August 5, 2024
RE: Response to Task Order RFP for SCADA Planning and Assessment Services for the City of Fullerton 2 Our team will include one subconsultant – Applied Technology Group, Inc (ATG). We have partnered with ATG as a subconsultant on multiple projects where the project included a wireless survey component. ATG is located at 4440 Easton Drive, Bakersfield, CA 93309. ATG’s point of contact is Ron Fox (Project Manager) and Ron can be reached via telephone at 661.322.8650 or via email at [email protected].

Our team consists of local Southern California staff as well as remote staff that are integrated by means of innovative technologies. All projects listed in our proposal were delivered by the team proposed for this project. The City will benefit from this core team’s experience with SCADA Master Plans, cybersecurity, systems operations, and relationships with AWWA and Idaho National Laboratory to provide industry-leading expertise.

Required Statements
■ This proposal shall remain valid for a period of no less than 120 days from the date of submittal. ■ All information submitted with the proposal is true and correct. ■ There are no disciplinary actions against any of the licensed professionals listed in on our project team. ■ We acknowledge receipt of Addendum No. 1.

Summary
We have assembled a dedicated project team you can rely on to deliver a comprehensive SCADA Master Plan that can be readily adopted and implemented. We believe that there may be a more efficient and streamlined path to executing all required components in this project. If selected, we would welcome the opportunity to discuss an alternative approach which may save time and money for the City in the execution of this project. We appreciate the opportunity to offer this proposal and look forward to successfully and efficiently supporting the City in developing this important project.

Please contact Michael Gruenbaum at 626.627.7707 or via email at [email protected] if you have any questions or would like additional information regarding our qualifications, technical approach, or schedule for the scope of work included in our proposal.

Sincerely,

WEST YOST
Jeff Pelz, PE Michael Gruenbaum
Principal-in-Charge, Vice President Project Manager
530.792.3259 cell 626.627.7707 cell
[email protected] [email protected]
2020 Research Park Dr, Suite 100 23692 Birtcher Drive
Davis, CA 95618 Lake Forest, CA 92630
3 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 QUALIFICATIONS, RELATED EXPERIENCE, AND REFERENCES OF PROPOSER1 Firm Information
West Yost is an employee-owned consulting engineering
firm founded in 1990 to provide a high-level client service level around a focused area of technical expertise. We
are headquartered in Davis, California and have 230 staff members in 10 offices across the West Coast and remote
locations.

West Yost’s certified, licensed, or registered professionals focus exclusively on stormwater, potable water,
groundwater, recycled water, and wastewater clients.

West Yost provides broad experience in hydrologic/
hydraulic modeling, master planning, design, construction management, regulatory compliance, grant and program
management, supervisory control and data acquisition
(SCADA), operations technology, cybersecurity, and
resilience (OTCR) services.

Office Locations
Role Staff
Available
Engineers 26
Integrators 17
4 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Operations Technology, Cybersecurity,
and Resilience (OTCR) - Overview
West Yost Operations Technology, Cybersecurity and Resilience (OTCR) team designs, engineers, implements, and supports Supervisory Control and Data Acquisition (SCADA) systems, OT/IT, Cybersecurity, and All-Hazards Resilience projects.

We have extensive experience managing multi-year engagements throughout the western United States and are nationally recognized for cybersecurity advocacy and innovation in the water sector.

Our team’s thorough understanding of how water and wastewater systems operate gives us a significant advantage over many other firms. Several client references included in our qualifications can share with you how our unique approach provides a value-added change from past industry practices.

The OTCR team was founded in 2016 by two members who still manage the team today. We now have 27 members and have successfully completed dozens of SCADA projects for water and wastewater utilities of all sizes throughout the western United States. We are currently engaged in multi-year SCADA projects for the City of Garden Grove (CA), City of Tempe (AZ), City of Hillsboro (OR), Alderwood Water & Wastewater District (WA), and Honolulu Board of Water Supply (HI).

Our team is well suited to execute the tasks outlined in the TO RFP . We have decades of experience designing and developing control systems for all types of water and wastewater systems and facilities including the ones that the City operates. Our expertise covers the following areas:
■ SCADA Design and Implementation program management
■ Staffing roles and responsibilities definition
■ Development and implementation of SCADA standards
■ Electrical instrumentation engineering and hardware design ■ Resilient network architecture design
■ Cybersecurity assessment, planning, design, and implementation ■ Distributed energy resources
30+

YEARS IN BUSINESS, CREATING

LONG-TERM RELATIONSHIPS
1 20+

YEARS OF TEAM EXPERIENCE

WORKING ON SCADA AND

CONTROL SYSTEMS PROJECTS
80 SUCCESSFUL SCADA AND CONTROL

SYSTEMS PROJECTS
Fast Facts

5 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Project Experience
Our experience in assessing, designing, and implementing similar systems is extensive. Many of our team members have worked together for more than ten years executing these types of projects. The following projects and client information are provided for your reference. We recommend you contact our references to better understand the unique approach West Yost offers; their contact information can be found in this section of the proposal.

STAFF AUGMENTATION/

CITY ADVOCATE

TROUBLESHOOTING

ASSESSMENT AND

RECOMMENDATIONS

CYBERSECURITY

MISCELLANEOUS
Team Project Experience
SCADA Program Manager Services and SCADA Master Plan Implementation • City of Garden Grove, CA
AWIA Cybersecurity Risk and Resilience Assessment (RRA) and Emergency Response Plan (ERP)• City of Fullerton, CA
SCADA Master Plan • San Gabriel Valley Water Company, CA SCADA Master Plan and Implementation • City of Tempe, AZ SCADA Master Plan • East Orange County Water District, CA SCADA Master Plan and Implementation • City of Hillsboro, OR Program Management • City of Tempe, AZ
Financial Condition
West Yost has had no pending bankruptcies, liens, foreclosures, stop payment notices, project related judgments, lawsuits, arbitrations, mediations, or any similar actions filed that will impede our ability to complete the City’s contract.

West Yost is financially stable and secure. We have grown steadily from 2 to more than 200 employees and continue to hire qualified and experienced staff as warranted by our increasing workload. Our excellent record of staffing stability, satisfaction, and retention is evidenced by our many positive workplace culture awards. West Yost has the necessary facilities, ability, experience, and financial resources to successfully provide the services you may require for the City’s Project in a timely and satisfactory manner. As a company, we have completed over 3,200 projects for more than 600 clients.

Our annual billings have exceeded $44 million per year over the past three years, and we have cash reserves of more than three months’ operating expenses.

6 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 SCADA Program Manager Services and SCADA
Master Plan Implementation

CITY OF GARDEN GROVE, CA
West Yost is the Program Manager for the City of Garden Grove’s SCADA Master Plan Implementation. The Program consists of over 20 projects to upgrade the City’s aging water and sewer SCADA systems. The implementation projects are organized into Foundational, High-, Medium-, and Low-Priority projects. The Foundational projects consist of designing the City’s new core SCADA system, developing SCADA standards, and implementation of global screens and an automated operational strategy. In addition, policies and procedures were developed along with an access control system will be implemented.

Development of the SCADA Master Plan began with site visits to assist in developing a baseline assessment. West Yost’s team provided detailed recommendations to completely update the City’s entire SCADA system, consisting of detailed project cut sheets providing a roadmap for implementing the SCADA Master Plan. Fully implementing the SCADA Master Plan will provide the City with a modernized SCADA system that is flexible, user-friendly, and physically and cyber-resilient using industry-leading design practices. West Yost also conducted an AWIA assessment and implemented the findings of the AWIA assessment in the SCADA Master Plan, allowing the City to address the gaps found in the AWIA assessment simultaneously. As part of the SCADA Master Plan, West Yost also reverse-engineered existing PLC programs and developed detailed as-is control strategies. The detailed as-is control strategies will form the basis for developing the operational strategy and the to-be control strategies.

REFERENCE
Rebecca Li, PE
Senior Civil Engineer
714.741.5562
[email protected]

STAFFING
■ Michael Gruenbaum (Project
Manager)
■ Jeff Pelz (Principal-in-Charge)
■ Dan Groves (Technical Lead)
■ Zane Wilsterman, Jeremy Smith,
Joel Cox, Greg Smith, Andrew Ohrt
(Project Engineers)

PROJECT DATES
June 2019 - Present
ROLE
Prime
COST
SCADA Master Plan: $225,000
Implementation: $3,800,000
“WEST YOST HAS TAKEN ON THE ROLE OF ASSISTING US WITH A COMPLETE REPLACEMENT OF OUR ENTIRE SCADA SYSTEM. OUR ENGINEERING AND OPERATIONS TEAM HAVE VERY LIMITED AVAILABILITY TO MANAGE OR LEAD THE PROJECT, SINCE WE HAVE SO MANY PROJECTS TO EXECUTE. THE APPROACH THAT WEST YOST HAS TAKEN TO

INCLUDE THE PROGRAMMING/ CONFIGURATION OF THE SYSTEM IN THEIR SCOPE OF WORK HAS WORKED VERY WELL SO FAR. WE ARE HAPPY WITH THE PROJECT THUS FAR AND APPRECIATE THIS APPROACH THAT WILL HELP US WITH THIS MAJOR PROJECT.”
—Rebecca Li, City of Garden Grove Senior Civil Engineer 7 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 AWIA Cybersecurity Risk and Resilience
Assessment (RRA) and Emergency Response
Plan (ERP)

CITY OF FULLERTON, CA
West Yost conducted San Gabriel Valley Water Company’s AWIA Risk and Resilience Assessment and developed their Emergency Response Plan. A key outcome from their AWIA project was development and implementation of a SCADA Master Plan.

As a subcontractor to Herndon Solutions Group (HSG), West Yost performed the City’s Cybersecurity Risk and Resilience Assessment (Cyber-RRA) using the American Water Works Association (AWWA) Cybersecurity Tool and Guidance.

Using the J100 framework, West Yost conducted a comprehensive cybersecurity assessment consisting of 22 self-assessment questions and approximately 95 cybersecurity controls. West Yost assessed the implementation status of each control that was identified. The results of the cybersecurity assessment were summarized in a Technical Memorandum (Cyber TM), which was included in the Risk and Resilience Assessment (RRA) provided by HSG. The Cyber TM identified key vulnerabilities and summarized the City’s cybersecurity posture. In addition, cyber checklists and playbooks were included in the Emergency Response Plan (ERP) provided by HSG. West Yost’s experience on this project provides key knowledge and understanding with regards to the City’s cybersecurity posture and the specific cybersecurity needs of the projects resulting from this RFQ.

REFERENCE
Jon Orndorff (No longer with City)
TEAM
■ Michael Gruenbaum (Project
Manager)
■ Jeff Pelz (PIC)
■ Andrew Ohrt (Project Engineer)
■ Joel Cox (Cybersecurity Specialist)

PROJECT DATES
December 2019 - September 2020
ROLE
Subconsultant
COST
$5,500

8 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 SCADA Master Plan

SAN GABRIEL VALLEY WATER COMPANY , CA
West Yost developed a SCADA Master Plan for San Gabriel Valley Water Company’s (SGVWC) Los Angeles County and Fontana Water Company divisions.

Key drivers for the Master Plan included cybersecurity, obsolete hardware and software, and long-term maintenance and support of the SCADA system.

The Master Plan began with a Baseline Assessment where West Yost staff conducted site visits at representative sites and reviewed existing drawings and documentation to obtain an understanding of SGVWC’s existing SCADA system.

The Baseline Assessment contained detailed findings and identified key gaps that need to be addressed
Following the Baseline Assessment, key alternatives were evaluated and presented in a workshop with SGVWC staff. Once decisions were made on the alternatives, West Yost moved forward with development of detailed Recommendations.

As part of development of the Recommendations, West Yost conducted a To- Be Roles and Responsibilities Workshop aimed at identifying key roles and responsibilities for long-term support of SGVWC’s SCADA system. Identification of roles and responsibilities is critical to the Staffing Assessment, which was the next step. West Yost conducted a Staffing Assessment Workshop with key SGVWC stakeholders. The Staffing Assessment is facilitated using a resource- loaded project schedule in Microsoft Project. The project schedule includes key staff with their existing job functions and includes tasks identified during the To-Be Roles and Responsibilities to determine whether existing staff can care for these responsibilities or whether additional staff need to be hired. The Staffing Assessment provided SGVWC with the justification needed to hire additional staff.

Following these workshops, West Yost completed development of all detailed recommendations. Once the Recommendations were reviewed with SGVWC staff and agreed to, West Yost developed a detailed Implementation Plan. The Implementation Plan, developed in Microsoft Project, includes all improvement projects with costs, durations, and predecessors. The Implementation Plan is key to providing a truly implementable SCADA Master Plan.

Once the Implementation Plan was completed, all components including the Baseline Assessment, Alternatives, Recommendations, To-Be Roles and Responsibilities, Staffing Assessment, and the Implementation Plan were included in the compiled SCADA Master Plan.

Since completion of the SCADA Master Plan, SGVWC has retained the services of West Yost through subsequent contracts to assist with the implementation of recommended projects through the SCADA Master Plan.

REFERENCE
Oscar Ramos
Operations Manager – Los Angeles
County Division
626.422.3730
[email protected]
TEAM
■ Michael Gruenbaum (Project
Manager/I&C Engineer)
■ Jeremy Smith (I&C Engineer)
■ Joel Cox (Cybersecurity Expert)

PROJECT DATES
June 2021 - July 2022
ROLE
Prime
COST
SCADA Master Plan: $75,000
Implementation: $17,000,000

9 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 SCADA Master Plan and Implementation

CITY OF TEMPE, AZ
West Yost is updating the City’s SCADA Master Plan that was previously implemented in 2013. This project’s scope includes assessing the City’s current cybersecurity posture and addressing continuity of operations during pandemics by providing a secure remote access. West Yost is working with City IT staff to evaluate current remote capabilities, including HMI hardware, and developing an implementation plan for improvements. West Yost is also reviewing the output of a RRA and ERP , including a significant cybersecurity review. The outcomes of this assessment will be reviewed and planned for implementation. West Yost addresses long-term needs by providing the City with a modernized SCADA system that is flexible, user-friendly, and both physically and cyber-resilient using industry-leading design practices.

One of the early phases of this project includes the implementation of Secure Remote Access for the City. West Yost is working with the City’s IT department to implement a secure solution that meets industry standards and City IT standards for security and reliability.

West Yost staff completed the previous City of Tempe SCADA Master Plan (2013) and assisted in implementing projects from the Master Plan over three years.

The City engaged West Yost to implement this program, including design and construction management.

REFERENCE
Greg Humphries
Control Center Supervisor
408.797.4190
[email protected]
TEAM
■ Daniel Groves (Program Manager)
■ Greg Smith (Deputy Program
Manager)
■ Joel Cox (Cybersecurity &
Networking)
■ Jeremy Smith (Instrumentation &
Controls Specialist)

PROJECT DATES
2021 - 2022
ROLE
Prime
COST
SCADA Master Plan: $293,000
Implementation: $31,354,000

10 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 SCADA Master Plan

EAST ORANGE COUNTY WATER DISTRICT, CA
West Yost developed a SCADA Master Plan for East Orange County Water District (EOCWD). Key drivers for the SCADA Master Plan included cybersecurity, obsolete hardware and software, and long-term maintenance and support of the SCADA system.

The SCADA Master Plan began with a Baseline Assessment where West Yost staff conducted site visits at representative sites and reviewed existing drawings and documentation to obtain an understanding of EOCWD’s existing SCADA system.

The Baseline Assessment contained detailed findings and identified key gaps that need to be addressed.

Following the Baseline Assessment, key alternatives were evaluated and presented in a workshop with EOCWD staff. West Yost evaluated components such as Programmable Logic Controller (PLC) hardware, remote access solutions, network communications options, Operator Interface Terminals (OIT), and server infrastructure.

Following the Alternatives Evaluation, West Yost developed detailed recommendations for all components assessed through the Baseline Assessment.

Once the Recommendations were reviewed with EOCWD staff, West Yost developed a detailed Implementation Plan. The Implementation Plan, developed in Microsoft Project, includes all improvement projects with costs, durations, and predecessors. West Yost worked with EOCWD to provide a detailed cost breakdown of all improvement so that EOCWD could secure funding.

Once the Implementation Plan was completed, all components including the Baseline Assessment, Alternatives, Recommendations, and the Implementation Plan were included in the compiled SCADA Master Plan.

Since completion of the SCADA Master Plan, EOCWD has retained the services of West Yost through subsequent contracts to assist with the implementation of recommended projects through the SCADA Master Plan.

REFERENCE
Jeff Smyth, PE
Engineering Manager
717.363.1260
[email protected]
TEAM
■ Michael Gruenbaum (Project
Manager/I&C Engineer)
■ Dan Groves (QA/QC)
■ Joel Cox (Cybersecurity Expert)

PROJECT DATES
October 2020 - April 2021
ROLE
Prime
COST
SCADA Master Plan: $74,990
Implementation: $8,000,000

11 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 SCADA Master Plan and Implementation

CITY OF HILLSBORO, OR
West Yost has completed a SCADA Master Plan with the City of Hillsboro (COH), evaluating the current system against the latest operational technology and cybersecurity standards, and best practices. The project assesses SCADA hardware, software, communications network architecture and protocols, programming and configuration approaches, organizational roles, and responsibilities for supporting SCADA, current and ongoing projects, and data sharing methodology both internally and with the other agencies.

The SCADA Master Plan built upon recommendations from the West Yost led AWIA work on cybersecurity and addresses Seismic-informed Engineering (SIE) and Consequence-driven, Cyber-informed Engineering (CCE) in the project portfolio. The SCADA Master Plan is a comprehensive document with a horizon of 10 years, focused on providing an implementable project portfolio of both Capital Improvement Plan (CIP) projects and COH-led internal initiatives to improve system support and accommodate future growth.

West Yost is currently supporting COH with SCADA implementation work.

Four projects that were identified in the SCADA Master Plan that are being implemented include:
■ FP-1 Core SCADA Support – SCADA Standards and Communication Network Design
■ FP-2 Policies and Procedures Development including Network, Server, and Application Cybersecurity
■ HP-1.1 & 1.2 Upper System Improvements Support
■ HP-2 Main Pressure Zone Improvements Support
The projects have been a team effort with COH Operations, IT, and SCADA professionals working in close collaboration with West Yost.

REFERENCE
Sophia Hobet
Water Operations Manager
503.615.6736
[email protected]
TEAM
■ Jeff Hesse (Project Manager)
■ Bob Ward (Principal-in-Charge)
■ Dan Groves (QA/QC)
■ Michael Gruenbaum, Andrew
Ohrt, Tara Mertz, Joel Cox, Bailey
Bartolucci (Project Engineers)

PROJECT DATES
2020 - 2023
ROLE
Prime
COST
SCADA Master Plan: $250,000
Implementation: $9,000,000

12 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Seismic-Informed Engineering (SIE)
Description of Work: SIE includes the integration of
Earthquake Early Warning (EEW) technology within the
SCADA environment. An EEW system can provide advance
warning of an earthquake to staff, and a SCADA system and can also assist the SCADA system with triaging damage to process equipment and safely returning process equipment to service following a seismic event. Through this task, West Yost will conduct a workshop aimed at explaining SIE strategies pre- and post-seismic event as well as notification of City personnel. The outcomes of the workshop will be included as recommendations in the SCADA Master Plan
and may include updates to process control strategies.

Benefits to the City: SIE can notify City personnel and protect process equipment during an earthquake and can also assist with triaging equipment and coordinating a safe approach for returning equipment to service following an earthquake.

Distributed Energy Resources (DER)
Description of Work: Distributed Energy Resources (DER) include a portfolio of energy resources such as utility power, permanent generators, portable generators, battery energy storage systems (BESS), photovoltaic (solar) systems, and micro-hydro turbine systems. Collectively these components, or a subset thereof, are connected to a microgrid controller which enables a water utility to establish their own microgrid and minimize dependence on utility power.

This approach provides several benefits, including: added resilience, cleaner energy, peak shaving, minimized
dependence on utility power especially during time of use, and the potential for recovering cost by sending unused energy back to the electrical grid.

As part of this task, West Yost will conduct an assessment of the City’s current electrical usage and portfolio of backup power. West Yost will evaluate options for DERs and can integrate these options within the SCADA Master Plan.

Benefits to the City: By implementing DERs, the City will increase resilience and minimize dependence on utility
power. This can, in turn, improve the functionality and reliability of the entire SCADA system.

Other Services
A Day Without SCADA® Tabletop Exercise
Description of Work: West Yost will create a real-world simulation of a SCADA cyber-attack and guide Operations and SCADA staff through the simulation. The purpose
of this exercise is to help City staff understand the
potential operational implications of a cyber-attack and develop approaches and mitigations to minimize the
impact of a cybersecurity attack. Immediately following the exercise, a “Hot Wash” will be conducted to discuss organizational strengths and areas for improvement. Areas for improvement relevant to the SCADA Master Plan will
be incorporated into deliverables by West Yost. Additional areas for improvement will be noted for the City.

Benefits to the City: This tabletop exercise, customized to the City’s operations, will engage Engineering, Operations, SCADA, and Management staff to test organizational response capabilities to a simulated cyber attack that affects the City’s SCADA system. The City will develop an understanding of their existing response capabilities as well as opportunities for improvement. The results of this exercise will be strategically integrated in the SCADA Master Plan.

Cyber-Informed Engineering (CIE)
Description of Work: Leveraging the outcomes of the Day Without SCADA™ Tabletop Exercise, West Yost will conduct a series of CIE workshops to review the CIE methodology from INL and conduct a high-level CIE evaluation of the City water system. CIE was developed by INL to support
critical infrastructure like water utilities build cyber-physical resilience. CIE emphasizes better engineering practices to reduce the risk of a cyberattack on the City’s control system.

This is an emerging best practice within the water sector.

This task will include four workshops aimed at introducing the concepts to City staff and then focusing on the concepts for staff based on their roles – administration, engineering, and operations. The results from these workshops will be included in the SCADA Master Plan Recommendations.

Benefits to the City: CIE will promote awareness regarding the prevalence of cyber risks as it pertains to water utilities.

CIE changes how we design, engineer, and operate our
systems, including the implementation of cyber-physical resilience to account for cyber risks.

In our ongoing effort to bring industry-leading
risk management and resilience practices to our
clients, West Yost has two concurrent initiatives
focused on seismic-informed engineering (SIE)
and consequence-driven cyber-informed engineering (CCE).

Our team will bring this expertise to your SCADA Master Planning process and provide recommendations similar to what West Yost has done for the City’s AWIA work.
13 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Plan. West Yost uses Microsoft Project for implementation plan development. For each project we include durations, start dates, end dates, predecessors, and costs which are escalated over time to account for inflation.

It should be noted that this approach does not list all of the meetings and workshops required to finalize the SCADA
Master Plan. Our team of SCADA experts use a highly
collaborative approach to developing the Master Plan
wherein we host a combination of virtual and in-person
workshops with City staff at each juncture of the Master Plan. This approach facilitates buy-in from City staff and mitigates surprises as the SCADA Master Plan is finalized.

WORK PLAN2
Project Understanding
and Approach
Our team is well-suited for this project because of our thorough understanding of the City’s needs. Our approach to addressing the City’s needs is outlined in the following sections.

SCADA Master Plan Gap Analysis
and Implementation Plan
West Yost understands that the City needs a qualified
consultant to perform an in-depth review and gap
analysis of the City’s existing SCADA Master Plan. It is our understanding that the previous SCADA Master Plan was
never finalized. We also understand the value of building cybersecurity protections into new SCADA systems and
networks from the planning phase. We have a highly skilled team of IT and SCADA experts on staff that are currently collaborating with national cybersecurity leaders from
AWWA, INL, and CISA to define guidelines for protecting SCADA systems in the water sector from the ever-evolving array of cyber threats.

Our approach is to begin with a detailed review and gap analysis of the entire SCADA Master Plan. We will review the baseline assessment of existing conditions and verify that conditions in the field are indeed as they were documented in the SCADA Master Plan.

After the baseline assessment is complete, we will do a comprehensive Alternatives Evaluation identifying the
best alternatives for the City. Each Alternative is like a ‘fork in the road,’ where a key decision needs to be made.

Each Alternative will be reviewed collaboratively with City staff in a review workshop where West Yost will outline a description of the alternative, pros and cons, cost impacts, and schedule impacts.

Once City staff reach a decision on all alternatives, West Yost will proceed with development of cybersecurity-focused
Recommendations. For each aspect of the SCADA system
(ie. field instrumentation, PLC hardware, SCADA software, etc.) assessed during the Baseline Assessment, West Yost will provide a corresponding recommendation. West Yost
will also provide recommendations for each alternative
selected along with justification for the selection.

After recommendations have been finalized, West Yost
will begin with development of a detailed implementation plan. The detailed implementation plan will serve as a
roadmap to guide City staff through the implementation
of all recommendations identified in the SCADA Master

14 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 With the aforementioned considerations in mind, West
Yost’s approach is to develop SCADA standards early in
the implementation of the SCADA Master Plan. Our team
have developed and implemented SCADA standards for
many utilities similar in size to the City of Fullerton (as an example, the City of Garden Grove). As SCADA standards
are developed, our team will train City staff on the use and implementation of these standards.

Staffing and Training
Our team believes that staffing and support as well as the training of staff are critical to keeping a SCADA system maintained and functioning properly. Our team of SCADA
experts frequently provide SCADA-related training to utility staff during our SCADA implementation projects.

It is important to consider staffing considerations for maintaining the SCADA system. West Yost typically
includes formal definition of roles and responsibilities, staffing assessments, and SCADA job descriptions as part of our SCADA projects. Using this approach, we empower
utilities to migrate away from complete reliance on system integrators and accomplish routine maintenance activities using internal resources.

Implementing the SCADA Master Plan
With the SCADA Master Plan and detailed implementation
plan developed, it is time to begin implementing the SCADA Master Plan. West Yost understands that the City is seeking a SCADA engineering firm to provide program management
for implementation of the SCADA Master Plan. To this
end, West Yost would like to propose our highly successful approach of a Technical Program Manager to oversee
the implementation of the SCADA Master Plan. Our team
has nearly 30 years of experience implementing SCADA
Master Plans. Our approach to SCADA Master Planning
does not allow short-cuts, with a focus on developing
SCADA standards early in the implementation and weaving cybersecurity in everything we do.

The program manager is responsible for maintaining and
implementing the SCADA implementation plan. It is critical that dependencies, resource needs, internal and external roles and responsibilities, and costs be managed accurately and in a timely manner. During implementation, our
Technical Program Manager will coordinate all aspects of the plan, including key coordination with other projects and stakeholders.

Development of SCADA Standards
Early in the SCADA Lifecycle
It is critical that SCADA standards are developed early in the implementation of the SCADA Master Plan.

The SCADA standards establish PLC programming
blocks, SCADA/HMI blocks, graphics, and faceplates,
tagging conventions, alarming conventions, trending
conventions, and network architecture & cybersecurity
considerations that will be implemented consistently
through subsequent projects.

In addition to promoting security, SCADA standards
promote efficiency by providing programming blocks
and graphics that will be utilized repeatedly thus saving effort for SCADA programmers. Most importantly, by
developing a robust set of SCADA standards each project that is delivered will function consistently with PLC logic and SCADA graphics and controls that have been vetted
through the SCADA standards. Our team has many
decades worth of collective experience developing and
implementing SCADA systems and associated standards
for water and wastewater utilities of all sizes leveraging standards such as the Top 20 Secure Coding Practices,
ISA-101, National Institute of Standards and Technology (NIST) 800-53, 800-82, and NIST Cybersecurity Framework (CSF).

Our OTCR team is led by Dan Groves (behind the camera)
and includes engineers and planners dedicated to the
OTCR team for electrical engineering; instrumentation,
controls, and electrical systems (EI&C); Supervisory
Control and Data Acquisition (SCADA); CCE; data
management and programming. The West Yost OTCR
team has been deeply involved in SCADA planning and
implementation for decades.
15 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Why West Yost?
Our team is very well suited for this project and will bring key benefits to the City through the implementation of this project. Our team’s key differentiators are included in the following sections.

Proactive Approach to Project
Management and Quality
Assurance/Quality Control
Project Management: We have assigned one of our top
project managers, Michael Gruenbaum, to this project.

Michael has managed dozens of projects, none of which
have had a budget overrun to date. Michael will use
proactive project management techniques to execute this important project on schedule and within the allocated
budget. Recurring check-in meetings between West Yost and the City are key to keeping the project on track. Michael will work with the City to determine the appropriate frequency for the recurring meetings, and each meeting will focus on work completed since the last meeting, work anticipated to be completed by the next meeting, budget status, schedule status, project concerns, and scope concerns. Any budget or schedule challenges will be communicated and handled between Michael and the City early to avoid any surprises.

Quality Assurance/Quality Control (QA/QC): Our team has a robust QA/QC Plan and has assigned our most senior
engineer and Business Sector Lead, Dan Groves, as QA/
QC Lead on this project. All deliverables will be thoroughly reviewed by Dan and the rest of the QA/QC team prior
to issuing any deliverables to the City. For each review, we maintain a QA/QC log of all comments and the QA/
QC team thoroughly backchecks all work to make sure
comments have been addressed, discussed, and responded
to. In the event that errors still occur, Michael and Dan will communicate very transparently with the City to address any challenges and determine the best path forward in close collaboration with the City.

Familiarity with the City
Our team conducted the City’s AWIA Cybersecurity Risk and Resilience Assessment in December 2019. We are familiar with the cybersecurity gaps identified, which are key drivers for implementing this project. We will pick up where that project left off and will update the cybersecurity assessment to reflect current conditions. Findings from the updated cybersecurity assessment will be integral to the new SCADA Master Plan.

Depth of Experience Implementing
SCADA Master Plans With
Orange County Utilities
Our team conducted AWIA Cybersecurity Risk and Resilience Assessments for almost all of the water utilities in Orange County. We are familiar with the challenges facing utilities in the area.

We developed the SCADA Master Plan for the City of Garden Grove and are currently midway through implementation,
which includes 20+ sites and had many of the same drivers as the City of Fullerton’s SCADA Master Plan.

We also developed the SCADA Master Plan for East
Orange County Water District (EOCWD). Following
development of the SCADA Master Plan, EOCWD retained
West Yost’s services as a Technical Program Manager for implementation of the SCADA Master Plan. In addition,
West Yost has been working with EOCWD to implement
resilience measures in response to their SCADA Master Plan and AWIA assessment.

Our experience working with many Orange County utilities as well as our experience developing and implementing
SCADA Master Plans with local utilities makes us an ideal fit for this project with the City.
16 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Resource-Loaded Project Schedules
West Yost uses Microsoft Project for internal project
planning and external project implementation planning and staffing assessments.

For internal project planning, the use of Microsoft Project allows our project manager to track progress completed
and resource commitments. The tool provides visibility over budget expended versus progress completed, facilitating meaningful discussions between the West Yost project
manager and the City project manager.

For external assignments such as project implementation planning, the use of Microsoft Project allows West Yost staff to load all projects contained in the project portfolio with durations and costs. Once everything is loaded in the file, projects can be easily modified or re-sequenced as needed to fit the City’s desired implementation plan. Microsoft Project allows West Yost to load a Microsoft Project file with City resources and assignments enabling business
case justification for new hires as needed to support the SCADA system development. Another valuable feature is
cost escalation. West Yost includes cost escalation for all projects. When re-sequencing projects, the cost escalation recalculates automatically improving cost estimates for projects implemented in the future.

A Unique Project Approach
Our team is a unique group of highly experienced, high
collaborative professionals. We view each project as an opportunity to exceed our clients’ expectations, and our approach to working with clients has been honed over
several decades to emphasize collaboration, honest and
open communication, and a commitment to shared success.

Our team is supported by West Yost’s other business sectors which include Water, Groundwater, Program Management,
Construction Management, Treatment, and Infrastructure.

These groups offer a wealth of experience to our SCADA
design team which gives us significant insights into
innovative ways to enhance SCADA systems. Working within our culture of collaboration, West Yost offers a strong and diverse portfolio of services.

Depth of Experience in Cybersecurity
West Yost has developed a unique perspective on
cybersecurity through our extensive experience supporting utilities across the U.S., establishing and maintaining standards for the Water Sector, and our partnership with INL. Through our partnership with INL, West Yost is bringing CIE to the Water Sector. The goal of CIE is to change how we engineer our water systems to better mitigate cyber-risk.

Our team are experts in cyber-resilience best practices and incorporate advanced protections into every SCADA project we undertake. Our cybersecurity and resilience services, include:
■ CIE Assessments
■ CCE Assessments
■ A Day Without SCADA® training and exercising
■ Network monitoring implementation and support
■ Standards compliance
■ Social engineering
■ Computer security incident response preparedness and
exercising
■ Security roles and responsibilities definition

17 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 schedule, outstanding issues to be resolved, and action items. Meeting minutes will be provided for each progress call.
■ Invoices and Progress Reports: Monthly invoices and
progress reports will be provided.
■ Quality Control: Internal quality assurance and quality control will be performed for each of the project
deliverables prior to final submission to the City. Dan Groves, who is our most senior California-Licensed
Control Systems Engineer, will serve as QA/QC lead on the project. Dan will not be involved in any other aspects of the project, which means the City will have a completely objective third-party QA/QC review. All QA/QC comment
logs will be shared with the City.
■ Data Sharing: West Yost will coordinate with City staff to provide a secure site for sensitive document exchange.

West Yost preference is for the City to host the site and retain control of all documents.
■ Project Closeout: West Yost will conduct final project closeout activities, including final document delivery and final progress report.

Task 1 Assumptions
■ Michael Gruenbaum will serve as Project Manager
for this project and will serve as the central point of communication between the West Yost team and the
City’s Project Manager.
■ The project kickoff meeting will be held in-person at a City-designated facility with key City staff and West Yost staff in attendance.
■ City Project Manager will attend progress meetings.

Task 1 Deliverables
■ West Yost will provide meeting agendas and notes, and monthly progress reports and invoices.
■ West Yost will provide meeting agendas for all meetings at least one working day prior to the meeting.
■ West Yost will prepare meeting minutes for all meetings and distribute them within five working days of the
meeting. West Yost will allow seven working days for City staff to provide comments on the meeting minutes, and
will finalize the meeting minutes within five calendars of receipt of City staff’s comments.
■ West Yost will provide Monthly project status reports and invoices.
■ West Yost will provide QA/QC logs for all deliverables to the City.

SCOPE OF SERVICES
The following is a list of the key tasks necessary to perform this proposed Scope of Services, each further described below:
■ Task 1. Kickoff Meeting (and Project Management)
■ Task 2. Review of Draft SCADA Master Plan
■ Task 3. Data Gathering, Site Visits, and Staff Interviews ■ Task 4. Condition Assessment and Recommended
Software and Network Upgrades
■ Task 5. Initial Workshop with City Staff
■ Task 6. Miscellaneous Items
Task 1. Kickoff Meeting (and
Project Management)
The objective of this task is to conduct a project kickoff meeting to initiate the project and to track work progress and expenditures by using proactive communications,
quality assurance, and quality control to keep the project on schedule and budget.

Please note that while Task No. 1 only contained scope for the Kick-off Meeting, there were several scope items related to Project Management that were contained on pages 5 and 6 of the TO RFP (under Scope of Services but ahead of Task No. 1). Those additional Project Management items ahead of Task No. 1 are included within the scope for Task 1.

This task will consist of the following activities:
■ Kickoff Meeting: West Yost will prepare for and
coordinate a kickoff meeting to initiate the project
and discuss scope, schedule, budget, and project
management. The kickoff meeting will be heavily focused on a review of West Yost’s proposed project schedule,
including all key milestones for successful completion
of the project. The kickoff meeting will include an
overview of key City needs related to SCADA, starting with Immediate SCADA System Needs and culminating with
Future SCADA System Needs. A key outcome from the
Kickoff Meeting will be a Request for Information (RFI) for all information and documentation to be reviewed as part of Task 3.
■ Progress Meetings: Bi-weekly (or as needed) conference calls and/or in-person meetings will be held to review
project status, including work completed during the latest report period, work anticipated to be completed during
the next reporting period, identified problems/issues
that could affect project budget/expenditures and/or
18 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 In addition, this tool provides an assessment of physical security including, but not limited to physical and logical perimeter security such as intrusion detection and video surveillance, data integrity, encryption, and unauthorized access.

The cybersecurity assessment will be focused on what has changed since the last cyber assessment, which gaps have been addressed, which gaps remain, and any new gaps that may exist due to changes in the City’s SCADA system or
facilities. In order to obtain an understanding of what has changed and comprehensively assess the security of the
City’s SCADA systems and facilities, West Yost will conduct site visits in advance of the virtual workshop. This work is further outlined in Task 3. Data Gathering, Site Visits, and Staff Interviews.

In addition, a document request for review of policies and procedures will be conducted by the project team to assess governance management of risk mitigation with emphasis
on business continuity, disaster recovery, vulnerability mitigation, change management, and network monitoring.

The results of the cybersecurity assessment workshop will be summarized in a Cyber Technical Memorandum which
will be included as an appendix to the SCADA Master Plan and can be provided to the City’s AWIA consultant for
inclusion in the upcoming AWIA RRA/ERP project. This will satisfy the cybersecurity portion of the upcoming AWIA
requirements.

Task 2 Assumptions
■ Key City staff to attend all workshops, hosted virtually. ■ West Yost will conduct a 3-hour virtual workshop using the AWWA Cybersecurity Tool and Guidance. All key City
stakeholders will be in attendance for the workshop.

Task 2 Deliverables
■ AWWA Cybersecurity Tool Output file.
■ Cyber Technical Memorandum.

Task 2. Review of Draft
SCADA Master Plan
The objective of this task is to review and comment on the City’s existing Draft SCADA Master Plan and the Risk and Resilience Assessment (RRA) with a focus on alignment
with the National Institute of Standards and Technology (NIST) SP 800 series and Cybersecurity Framework (CSF)
v2.0 best practice guidance for cybersecurity, resilience including high availability, and governance and planning to ensure compliance with the best practices and continuity of operations. Through this review process, our team will apply their institutional knowledge of general operational procedures of the City; knowledge of which was gained
through previous work with the City. The previous work
includes a project to develop the RRA in 2019/2020.

Several members of the proposed project team, Michael
Gruenbaum, Joel Cox, and Andrew Ohrt, conducted the
City’s cybersecurity assessment portion of the previous RRA.

Based on our experience and reporting from around the
Water Sector, utilities who rigorously apply the AWWA
J100 Standard in development of their RRA and adopt the National Institute of Standards and Technology (NIST) SP 800 series and Cybersecurity Framework (CSF) v2.0 best
practice guidance for cybersecurity resilience, are best positioned to pass an EPA audit. Our approach to the Draft SCADA Master Plan and RRA review will involve verification of the most recent J100-21 Standards and NIST CSF v2.0
guidance for the actions and recommendations within
both documents. West Yost will then provide the City with a technical memo which includes our findings and any
additional recommendations for increased resiliency and support of the City’s cybersecurity strategic vision.

West Yost will conduct a 3-hour virtual workshop with key City staff to perform an update to the City’s cybersecurity assessment which was conducted in 2019/2020 by West
Yost. During this workshop, the project team will leverage the AWWA Cybersecurity Tool and Guidance to conduct
the assessment. The security controls assessed within the AWWA tool are based on standards published by NIST, the Department of Homeland Security, and the International
Society of Automation, among others. The output of this tool is intended to inform the City’s current and future cyber risk management efforts. The security control areas for assessment include many aspects of cybersecurity
including identity management, access control, operations, applications, and network/telecommunications security.
19 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024

OPTIONAL TASKS

AS-IS ROLES AND RESPONSIBILITIES DEFINITION
As part of the Baseline Assessment, West Yost typically evaluates SCADA support and staffing with the goal
of making sure that the City is staffed appropriately
to maintain the SCADA system over the long term.

To accomplish this, we conduct an As-Is Roles and
Responsibilities workshop where we identify first, second, and third tier responders for all SCADA assets. Some
responders may be internal to the City, while others may be external to the City. The findings from the workshop are documented in a roles and responsibilities matrix that is integrated into the Baseline Assessment. See optional task

6.5.1 for additional information.
“A DAY WITHOUT SCADA” TABLETOP EXERCISE
As part of the Baseline Assessment, West Yost often
recommends utilities consider conducting a tabletop
exercise whereby a SCADA system outage due to a
cyberattack is simulated. This exercise helps to test
organizational response capabilities and may result in
recommended improvement projects. If selected, this task would be executed as part of the Baseline Assessment
and the findings would be integrated into the Baseline
Assessment. See optional task 6.5.3 for additional
information.

BASELINE ASSESSMENT REVIEW WORKSHOP
West Yost recommends a Baseline Assessment Review
Workshop to review the Baseline Assessment with City staff and to share findings. We have included an optional task for this workshop (see Task 6.5.2) which includes a virtual workshop as well as the effort to incorporate any comments received in the workshop.

Task 3 Assumptions
■ All documentation requested through the RFI will be
provided by the City to the secure data site within ten working days.
■ West Yost will provide three staff onsite for three days for site visits and staff interviews.
■ If selected, Task 6.5.1 will be executed in conjunction with Task 3.
■ If selected, Task 6.5.2 will be executed in conjunction with Task 3.
■ If selected, Task 6.5.3 will be executed in conjunction with Task 3.

Task 3 Deliverables
■ Staff interviews meeting minutes.
■ Baseline Assessment and gap analysis.

Task 3. Data Gathering, Site
Visits, and Staff Interviews
Key West Yost staff and City staff will conduct a site visit to representative City facilities. Site visits will focus on, but will not be limited to, control system hardware (ie. control panels), field instrumentation, physical security and access control, control philosophy, user interface for the SCADA system, etc.

West Yost will conduct staff interviews in conjunction with the site visits. Staff interviews will include Operations, SCADA, Maintenance, Engineering, and IT staff and
will be focused on input regarding the current state of the SCADA system, strategic vision for the new SCADA
system, opportunities for improvement (ie. User-Interface, functionality, standardization, etc.).

Following the site visits and staff interviews, West Yost will review in detail all documentation received as part of the RFI submitted in Task 1:
■ Draft SCADA Master Plan (already reviewed in Task 2)
■ RRA and ERP (already reviewed in Task 2)
■ Record drawings
■ Previous reports
■ Network architecture drawings and documentation
■ Operations & Maintenance (O&M) manuals
■ Control strategies
■ PLC programs
■ SCADA screens
With information from site visits, staff interviews, and a thorough review of all existing applicable documentation, West Yost will develop a Baseline Assessment of Existing Conditions (referred to as the “Baseline Assessment and Gap Analysis”), which will identify gaps between where the City would like their SCADA system to be versus where it currently is as well as against industry benchmarks and peer utilities of a comparable size. The Baseline Assessment will focus on the following components (note: the list below is not all-inclusive, but is a starting point):
■ PLC hardware
■ SCADA software
■ Communications and network architecture
■ SCADA system maintenance and support
■ Cybersecurity posture
■ Repository for software/version control and backup file storage
20 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 alignment with, City staff prior to inclusion into the
Recommendations. See optional task 6.5.4 for additional information.

TO-BE ROLES AND RESPONSIBILITIES DEFINITION
This optional task builds on the as-is roles and
responsibilities previously developed as part of optional task

6.5.1. See optional task 6.5.5 for additional information.

Task 4 Assumptions
■ If selected, Task 6.5.4 will be executed in conjunction with Task 4.
■ If selected, Task 6.5.5 will be executed in conjunction with Task 4.
■ West Yost has allocated up to $45,000 for the wireless survey to be conducted by ATG.

Task 4 Deliverables
■ Condition assessment for all SCADA-related assets.
■ ATG’s wireless survey report.
■ Alternatives evaluation.
■ Detailed recommendations.

Task 5. Initial Workshop with City Staff
(and Preliminary Conceptual Incremental
Implementation Plan Development)
Following development of Detailed Recommendations
developed in Task 4, West Yost will conduct a
Recommendations Review Workshop with City staff to
review all key recommendations prior to development of
the Preliminary Conceptual Incremental Implementation
Plan (Implementation Plan). The goal of this workshop
is for alignment between West Yost and the City on
all recommendations that will be integrated into the
Implementation Plan.

West Yost will update the Recommendations, as needed,
based on feedback from City staff and will submit the final Recommendations to City staff for informational purposes.

West Yost will then begin development of the Draft
Implementation Plan, which will be developed using
a resource-loaded Microsoft Project schedule. The
Implementation Plan will include Project IDs, Project Titles, Start Dates, End Dates, Durations, Predecessors, and Costs (with cost escalation and contingency, if required). All recommendations will be sequenced in the Implementation Plan which will be developed in close coordination with Engineering and Operations staff with the goal of minimizing the impact to Operations.

Task 4. Condition Assessment
and Recommended Software
and Network Upgrades
The objective of this task is to develop a comprehensive condition assessment for all SCADA-related assets including, but not limited to PLCs, Operator Interface Terminals
(OIT), network switches, other control panel hardware,
field instrumentation, and core SCADA infrastructure
(servers, core switches, workstations, mobile devices,
etc.). The project team will assess the existing operational requirements and associated risk levels to improve
operational reliability. The condition will be scored
systematically with categorical criteria to include age of hardware, resiliency, redundancy, and security. This assessment will focus on the following industrial control systems best practices in the following areas:
■ System integration, interoperability, and design
■ Systems hardening and security configuration
■ Network integrity and topology
■ Vulnerability management and patching
The condition assessment will be integrated into the
Baseline Assessment and Gap Analysis developed in Task 3.

Following development of the condition assessment,
West Yost will conduct an Alternatives Evaluation for any “fork in the road” decisions that need to be made. For
example, with respect to communications architecture there may be various options (or combinations of options) for communications.

To further evaluate the remote telemetry equipment, West Yost will engage a subconsultant (ATG) who will perform a wireless survey. Evaluation and viability of various
communications solutions will be conducted at each remote site. ATG’s report will be integrated into the Alternatives Evaluation and into the Recommendations.

The selected alternatives will be integrated into the detailed Recommendations. For every component assessed as
part of the Baseline Assessment and Gap Analysis (ie.

PLC hardware, SCADA software, communications and
network architecture, etc.), there will be a corresponding recommendation for future improvement.

OPTIONAL TASKS

ALTERNATIVES EVALUATION REVIEW WORKSHOP
After finalizing the Alternatives Evaluation, West Yost recommends a workshop with the City to review all
identified alternatives. The goal of this workshop is to present all alternatives and obtain feedback from, and
21 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Task 6.1 Deliverables
■ PowerPoint presentation for each training session.

TASK 6.2. COORDINATION WITH THIRD-PARTY

VENDORS
West Yost will leverage the City’s existing service level agreements (SLA) with third-party vendors to obtain support for the City’s SCADA system.

Task 6.2 Assumptions
■ West Yost has allocated up to 24 hours for this task.

TASK 6.3. GRANT APPLICATIONS AND

ADMINISTRATION SUPPORT
West Yost’s Funding and Grant Administration lead, Sheri Lasick, will provide support with regard to identification of applicable grants and will work with the City and the West Yost project team to apply for and administer applicable grant programs. The project team will engage Sheri early and often through internal meetings as well as including Sheri in meetings with the City (ie. kickoff meeting, bi- weekly progress meetings, key project meetings, etc.) so that Sheri can identify the appropriate funding mechanisms.

Task 6.3 Assumptions
■ Due to the unknown nature of which grant programs will be available and the extent of each grant application,
West Yost has allocated up to $5,000 for this task. Any effort in addition to this amount will be negotiated
between West Yost and the City and can leverage the
funds allocated in Task 6.6, as needed.

TASK 6.4. ELECTRICAL, INSTRUMENTATION, AND

CONTROLS (EI&C) SUPPORT
Our team has a deep bench of EI&C engineers. Our team
is listed below, along with their PE discipline and years of experience:
■ Dan Groves, Control Systems PE and Electrical PE, 29 years of experience
■ Zane Wilsterman, Electrical PE, 25 years of experience ■ Tiana Michaud, Civil PE and Electrical PE, 12 years of experience
■ Kenny Smith, EI&C (without PE), 46 years of experience ■ Jeremy Smith, Control Systems PE, 20 years of experience ■ Greg Smith, Control Systems PE, 13 years of experience West Yost will present the Draft Implementation Plan in a Workshop to City staff. Comments received in the workshop and through follow-up correspondence will be integrated into the Final Implementation Plan, which will be included as part of the SCADA Master Plan.

Task 5 Assumptions
■ Recommendations Review Workshop will be a 2-hour,
virtual workshop with key City staff and West Yost staff in attendance.
■ Draft Implementation Plan Review Workshop will be a
2-hour, virtual workshop with key City staff and West Yost staff in attendance.
■ West Yost will provide meeting agendas for all workshops at least one working day prior to the workshop.
■ West Yost will prepare meeting minutes for all workshops and distribute them within five working days of the
workshop. West Yost will allow seven working days for
City staff to provide comments on the meeting minutes,
and will finalize the meeting minutes within five calendars of receipt of City staff’s comments.
■ West Yost will prepare project costs in the
Implementation Plan using AACE Class 5 cost estimates.

Task 5 Deliverables
■ Recommendations Review Workshop agenda, facilitation
materials, and meeting minutes.
■ Draft Implementation Plan in PDF and Microsoft Project format.
■ Final Implementation Plan in PDF and Microsoft Project format.

Task 6. Miscellaneous Items
TASK 6. 1. O&M TRAINING
The objective of this task is to provide O&M training related to SCADA software, report creation and manipulation, PLC and OIT programming and configuration, troubleshooting
communications equipment, operation of field equipment, and cybersecurity awareness training. This training will be facilitated in-person through four training modules with West Yost subject matter experts.

Task 6.1 Assumptions
■ West Yost will facilitate four in-person training workshops at a City-designated location. Each training workshop will be up to four hours in length.
22 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Our EI&C team can provide a vast array of service from
planning, design, through implementation, commissioning, and start-up.

Task 6.4 Assumptions
■ Due to the unknown nature of which electrical services the City would like and which project(s) the City would like our EI&C team to support, West Yost has allocated
up to $5,000 for this task. Any effort in addition to this amount will be negotiated between West Yost and the
City and can leverage the funds allocated in Task 6.6, as needed.

TASK 6.5. OPTIONAL TASKS
West Yost has proposed various optional tasks that we feel would greatly enhance the outcomes from this project. Each optional task is listed below with a brief description.

TASK 6.5. 1. AS-IS ROLES AND RESPONSIBILITIES

DEFINITION (OPTIONAL)
West Yost will conduct a workshop with City staff to
evaluate current roles and responsibilities and identify gaps in required roles and responsibilities. Third party support will be considered during this workshop. Findings from
this workshop will inform recommendations to changes
in roles, which will be summarized in the To-Be Roles and Responsibilities matrix.

Task 6.5.1 Assumptions
■ West Yost will conduct a 2-hour As-Is Roles and
Responsibilities virtual workshop.

Task 6.5.1 Deliverables
■ As-Is Roles and Responsibilities Matrix, which will be integrated in the Baseline Assessment.
■ Meeting agenda and meeting minutes.

TASK 6.5.2. BASELINE ASSESSMENT REVIEW

WORKSHOP (OPTIONAL)
West Yost will conduct a 2-hour virtual workshop with key City staff to review the Baseline Assessment with City staff.

The goal of this workshop is for alignment with City staff and West Yost staff on the findings outlined in the Baseline Assessment. This task also includes the effort to incorporate any feedback received from City staff into the final version of the Baseline Assessment.

Task 6.5.2 Assumptions
■ West Yost will conduct a 2-hour Baseline Assessment
workshop, which will be conducted virtually.

Task 6.5.2 Deliverables
■ PowerPoint presentation summarizing findings in the
Baseline Assessment.
■ Meeting agenda and meeting minutes.
■ City comments received in the workshop will be
incorporated in the Baseline Assessment.

TASK 6.5.3. “A DAY WITHOUT SCADA” TABLETOP

EXERCISE (OPTIONAL)
West Yost will develop an A Day without SCADA® (DWOS)
table-top exercise that simulates the loss of the City’s SCADA system. The scenario will be realistic and based on real-world attacker tactics, techniques, and procedures (TTPs). The West Yost project team members will design and lead the exercise to ensure that the scenario will be specific to the City’s Operations & Maintenance (O&M) staff and
will simulate how internal and external resources interact, identify, respond to, and recover from the simulated
incident.

West Yost will facilitate three planning meetings to
review the scenario with internal team members and
coordination of the exercise for the City staff. A situation manual, player handbooks, and exercise evaluation guide will be prepared for participants. The exercise will include a brief presentation to establish a constructive learning environment that will coach participants on terminology, establishes rules of engagement between the participants, and identify engineering and organizational improvements.

The TTX is estimated to last for up to four hours. Upon completion of the exercise, West Yost will conduct an
immediate “hot-wash” meeting to receive feedback from
the participants, observers, and exercise coordinators. The results of the hot-wash meeting will be provided in the After-Action Report (AAR)/Improvement Plan (IP) technical memorandum.

Task 6.5.3 Assumptions
■ The exercise scenario will be specific to the City.
■ The exercise will be up to four hours in duration.
■ The outcomes of the AAR/IP will be integrated into the SCADA Master Plan.

Task 6.5.3 Deliverables
■ Meeting and exercise facilitation materials.
■ Draft and Final AAR/IP .
23 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024

1. Grant Application and Administration Support (see Task

6.3).

2. Electrical, Instrumentation & Controls (EI&C) Support (see Task 6.4)

3. SCADA Implementation support/program management.

4. Any additional services required by the City.

Task 6.6 Assumptions
■ West Yost will provide services as requested by the City up to the budget as shown for this task.

Task 6.6 Deliverables
■ List of deliverables to be developed in coordination with the City, depending on which components in this task are selected.

TASK 6.5.4. ALTERNATIVES EVALUATION REVIEW

WORKSHOP (OPTIONAL)
West Yost will conduct a 2-hour virtual workshop with key City staff to review the Alternatives Evaluation with City staff. The goal of this workshop is for alignment with City staff and West Yost staff on the findings outlined in the Alternatives Evaluation. This task also includes the effort to incorporate any feedback received from City staff into the final version of the Alternatives Evaluation.

Task 6.5.4 Assumptions
■ West Yost will conduct a 2-hour Alternatives Evaluation workshop, which will be conducted virtually.

Task 6.5.4 Deliverables
■ PowerPoint presentation summarizing findings in the
Alternatives Evaluation.
■ Meeting agenda and meeting minutes.
■ City comments received in the workshop will be
incorporated in the Alternatives Evaluation.

TASK 6.5.5. TO-BE ROLES AND RESPONSIBILITIES

DEFINITION (OPTIONAL)
West Yost will conduct a workshop with City staff to
evaluate proposed roles and responsibilities and identify gaps in required roles and responsibilities. Third party support will be considered during this workshop. The goal of this workshop is to identify changes to SCADA support roles and responsibilities as a result of the upgrade to the City’s SCADA system. The results of this workshop will be documented in a To-Be Roles and Responsibilities Matrix, which will be integrated into the Recommendations.

Task 6.5.5 Assumptions
■ West Yost will conduct a 2-hour To-Be Roles and
Responsibilities virtual workshop.

Task 6.5.5 Deliverables
■ To-Be Roles and Responsibilities Matrix, which will be integrated in the Recommendations.
■ Meeting agenda and meeting minutes.

TASK 6.6. AS-NEEDED SERVICES (OPTIONAL)
West Yost will provide services to the City upon request.

Services may include any of the optional tasks outlined below:
24 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024

PRINCIPAL-IN-CHARGE
Jeff Pelz, PE
Vice President

PROJECT MANAGER
Michael Gruenbaum
Technical Specialist IV
Networking/Cybersecurity
Joel A. Cox, GICSP , CCNA, GPEN
Engineering Technical Manager I
Tara Mertz
Senior Technical Specialist II
Resilience and CCE
Andrew Ohrt, PE, CISSP
Principal Technical Specialist I
Tara Mertz
Senior Technical Specialist II
Funding/Grant Administration
Sheri Lasick
Funding Practice Lead
Electrical, Instrumentation & Controls
Zane Wilsterman, PE
Principal Technical Specialist I
Jeremy Smith, PE
Principal Technical Specialist
Tiana Michaud, PE
Senior Technical Specialist II
Kenny Smith
Senior Technical Specialist I
Programming and Configuration
Gregory B. Smith, PE
Senior Technical Specialist I
Wireless Survey
Ron Fox
Applied Technology Group Inc. (Subconsultant)

TECHNICAL RESOURCE STAFF
QA/QC
Daniel Groves, PE, CISSP
Engineering Tech Manager II
PROPOSED STAFFING AND ORGANIZATION3
The West Yost team brings together specialists in SCADA, incident response planning, cybersecurity, and operational expertise. Our team organization chart is provided below with each team member having a minimum of 10 years of experience in the scope of work areas we are proposing on. Please refer to the following pages for more details about our team’s qualifications and their relevant projects.

Key personnel will be available to the extent proposed for the duration of the project. No designated “key” person on the contract shall be removed or replaced without the prior written concurrence of the City.

25 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Michael Gruenbaum
Project Manager
Michael Gruenbaum is a Technical Program Manager with extensive experience in program and project management, SCADA master planning, and the implementation of SCADA master plans. His expertise includes PLC programming; HMI configuration; and the development of control strategies, control panels, piping and instrumentation diagrams (P&IDs), and specifications for the water and wastewater sectors. He also has extensive experience in project delivery including bidding services, engineering services during construction, and construction management.

RELEVANT PROJECTS
SCADA Master Plan and Implementation, City of Garden Grove, CA: Project Manager. As part of the City’s Water Master plan project, West Yost developed a SCADA master plan which identified baseline conditions, an alternatives evaluation, key recommendations, and a detailed implementation plan. West Yost subsequently responded to the City’s RFP for SCADA implementation services and was selected as the City’s Technical Program Manager for implementation of the SCADA Master Plan, which includes detailed design and engineering, PLC programming, SCADA configuration, bidding services, and construction management.

AWIA Cybersecurity Risk and Resilience Assessment (RRA) and Emergency Response Plan (ERP), City of Fullerton, CA: Project Manager. As a subcontractor to Herndon Solutions Group (HSG), West Yost performed the City’s Cybersecurity Risk and Resilience Assessment (Cyber-RRA) using the American Water Works Association (AWWA) Cybersecurity Tool and Guidance.

SCADA Master Plan, East Orange County Water District, CA: Project Manager.

West Yost developed a SCADA Master Plan for East Orange County Water District (EOCWD). Key drivers for the Master Plan included cybersecurity, obsolete hardware and software, and long-term maintenance and support of the SCADA system.

SCADA Master Plan, San Gabriel Valley Water Company, CA: Project Manager.

West Yost developed a SCADA Master Plan (Master Plan) for San Gabriel Valley Water Company’s (SGVWC) Los Angeles County and Fontana Water Company divisions. Key drivers for the Master Plan included cybersecurity, obsolete hardware and software, and long-term maintenance and support of the SCADA system.

SCADA Master Plan, City of Tempe, AZ: Technical Specialist. West Yost is updating the City’s SCADA Master Plan that was previously implemented in 2013. The scope of this project first includes assessing of the City’s current cybersecurity posture and addressing continuity of operations during pandemics by providing a secure remote access. West Yost is addressing long term needs by providing the City with a modernized SCADA system that is flexible, user-friendly, and both physically and cyber-resilient using industry leading design practices.

SCADA Master Plan, City of Hillsboro, CA: Technical Specialist. West Yost completed a SCADA Master Plan with the City of Hillsboro (COH), evaluating the current system against the latest operational technology and cybersecurity standards, and best practices.

STAFF TITLE: Technical Specialist IV
YEARS OF EXPERIENCE: 12
YEARS AT WEST YOST: 4
LOCATION: Lake Forest, CA

CERTIFICATIONS
ƒ Occupational Certificate, CAD
Technician, Pasadena City College,
Pasadena
ƒ Occupational Certificate, CAD
Designer, Pasadena City College,
Pasadena
ƒ Occupational Certificate, Computer
Aided Technical Modeler and
Animator (CATMA), Pasadena City
College, Pasadena

EDUCATION
ƒ Electrical and Electronic Technology,
Pasadena City College, Pasadena

PUBLICATIONS & PRESENTATIONS
ƒ Gruenbaum, M., Li, R., and Tiano, K.
(2021). “Can’t We All Work Together?
Water and SCADA Master Planning
Success in Garden Grove.” AWWA
ACE21, June 16, Virtual.
ƒ Ervin, D., Gruenbaum, M.,
Damewood, M., and Ohrt, A. (2023).
“Take Advantage of Earthquake Early
Warning Systems.” Journal AWWA,
July/August 2023

26 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Jeff Pelz, PE
Principal-in-Charge
Jeff Pelz is a West Yost Vice President with over three decades of experience in the planning and design of municipal infrastructure systems and has completed successful facilities plans and designs for a variety of facilities, including major expansion, rehabilitation, and new construction at many wastewater treatment plants. Jeff has extensive experience in water and sewer master planning, including condition assessments, flow monitoring, I/I evaluations, computer modeling, cost estimating, and capital improvement programming. He has served as Principal-in- Charge on over 100 SCADA and Cybersecurity projects for West Yost.

RELEVANT PROJECTS
SCADA Master Plan and Implementation, City of Garden Grove, CA: Principal- in-Charge. As part of the City’s Water Master plan project, West Yost developed a SCADA master plan which identified baseline conditions, an alternatives evaluation, key recommendations, and a detailed implementation plan. West Yost subsequently responded to the City’s RFP for SCADA implementation services and was selected as the City’s Technical Program Manager for implementation of the SCADA Master Plan, which includes detailed design and engineering, PLC programming, SCADA configuration, bidding services, and construction management.

AWIA Cybersecurity Risk and Resilience Assessment (RRA) and Emergency Response Plan (ERP), City of Fullerton, CA: Principal-in-Charge. As a subcontractor to Herndon Solutions Group (HSG), West Yost performed the City’s Cybersecurity Risk and Resilience Assessment (Cyber-RRA) using the American Water Works Association (AWWA) Cybersecurity Tool and Guidance.

SCADA Master Plan, East Orange County Water District, CA: Principal-in-Charge.

West Yost developed a SCADA Master Plan for East Orange County Water District (EOCWD). Key drivers for the Master Plan included cybersecurity, obsolete hardware and software, and long-term maintenance and support of the SCADA system.

SCADA Master Plan, City of Tempe, AZ: Principal-in-Charge. West Yost is updating the City’s SCADA Master Plan that was previously implemented in 2013.

West Yost is addressing long term needs by providing the City with a modernized SCADA system that is flexible, user-friendly, and both physically and cyber- resilient using industry leading design practices.

SCADA Communications Network Design and PLC Upgrades, City of Redwood City, CA: Principal-in-Charge for communications system design, control system architecture design, and budgetary cost estimates to improve the City’s SCADA system. The project included evaluating the City’s control system and providing alternatives, recommendations, schedule and estimated costs to replace obsolete hardware and upgrade hardware for Ethernet-based communications to improve maintenance and support.

Secure SCADA Network Implementation – Columbia Heights, Minneapolis, MN: Principal-in-Charge. This project includes design (Phase 1) and implementation (Phase 2) of network upgrades and improvements at the Columbia Heights Membrane Plant, based on a previous network and security assessment completed by the same technical team.

STAFF TITLE: Vice President
YEARS OF EXPERIENCE: 36
YEARS AT WEST YOST: 33
LOCATION: Davis, CA

PROFESSIONAL REGISTRATIONS
ƒ Professional Civil Engineer, California
No. 46088

EDUCATION
ƒ BS, Civil Engineering, University of
California, Davis

PROFESSIONAL AFFILIATIONS
ƒ American Public Works Association
ƒ American Society of Civil Engineers
ƒ California Association of Sanitation
Agencies
ƒ California Water Environment
Association
ƒ Water Environment Federation

PUBLICATIONS
ƒ Crites, R.W., D.C. Gunther, A.P . Kruzic,
J.D. Pelz, G. Tchobanoglous (1988).

Design Manual: Constructed Wetlands
and Aquatic Plant Systems for
Municipal Wastewater Treatment

27 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Daniel Groves, PE, CISSP
QA/QC
Daniel Groves provides planning, design and implementation of Operational Technology (OT) systems in the water and wastewater infrastructure. For the past 10 years, Dan has focused on Cybersecurity for OT systems, including system assessments, design and implementation of system improvements to improve system performance and resilience against cyber threats. He has served as Program Manager, Project Manager and OT Cybersecurity Subject Matter Expert for assessments, and design and implementation of OT systems.

RELEVANT PROJECTS
SCADA Master Plan and Implementation, City of Garden Grove, CA: Technical Lead. As part of the City’s Water Master plan project, West Yost developed a SCADA master plan which identified baseline conditions, an alternatives evaluation, key recommendations, and a detailed implementation plan. West Yost subsequently responded to the City’s RFP for SCADA implementation services and was selected as the City’s Technical Program Manager for implementation of the SCADA Master Plan, which includes detailed design and engineering, PLC programming, SCADA configuration, bidding services, and construction management.

SCADA Master Plan, East Orange County Water District, CA: QA/QC. West Yost developed a SCADA Master Plan for East Orange County Water District (EOCWD).

Key drivers for the Master Plan included cybersecurity, obsolete hardware and software, and long-term maintenance and support of the SCADA system.

SCADA Master Plan and Implementation, City of Hillsboro, OR: QA/QC. West Yost Associates is currently developing a SCADA Master Plan with the City of Hillsboro (COH), evaluating the current system against the latest operational technology and cybersecurity standards and best practices. The Project is assessing SCADA hardware, software, communications network architecture and protocols, programming and configuration approach, organizational roles and responsibilities for supporting SCADA, current and ongoing projects, and data sharing mythology both internally and with the other Partners of the JWC. The final Master Plan will be a comprehensive document with a horizon of 5 years, focused on providing an implementable project portfolio of both CIP projects and COH-led internal initiatives
TARP WTP Improvements, Tucson Water, AZ: Technical Lead. Implemented design efforts pertaining to the process and instrumentation details of the plant control systems. Played a key role in designing the networking infrastructure pertaining to plant communications.

SCADA Master Plan, City of Davis, CA: Technical Advisor. The City of Davis SCADA Master Plan scope of work included documenting the SCADA Vision, Goals and Objectives, conducting a Baseline Assessment and Gap Analysis, development of a detailed Project Portfolio, SCADA Systems Standards and final development of a compiled SCADA Master Plan. West Yost developed conceptual level cost estimates for upgrades to key facilities for input into the City’s Capital Improvements Plan and budget for the project portfolio. Also included was development of SCADA System Support Roles and Responsibilities in coordination with the City IT department, standards for control system equipment and high level system architecture and network design.

STAFF TITLE: Engineering Tech Manager II
YEARS OF EXPERIENCE: 29
YEARS AT WEST YOST: 7
LOCATION: Phoenix, AZ

PROFESSIONAL REGISTRATIONS
ƒ Professional Electrical Engineer,
Oregon No. 93430, Arizona No.
40255, Hawaii No. 15787
ƒ Professional Controls Systems
Engineer, California No. 7454,
Arizona No. 45679, Colorado No.
0044651, Oregon No. 93430
ƒ EnvisionTM Sustainability Professional

EDUCATION
ƒ BS, Information Technology/
Information Systems Security,
University of Phoenix
ƒ Information Technology, Pima
Community College
ƒ Industrial Motor Controls, Gateway
Community College, Phoenix

CERTIFICATIONS/TRAINING
ƒ Project Management Professional
ƒ Certified Information System
Security Professional
ƒ CompTIA Network +
ƒ Completed Cisco Certified Network
Associate Training
ƒ ADEQ Grade 2 Water Distribution
Operator
ƒ BICSI DD102: Designing
Telecommunications Distribution
Systems

PROFESSIONAL AFFILIATIONS
ƒ California Water Environment Assoc.
ƒ Central Valley Clean Water Assoc.
ƒ Institute for Sustainable
Infrastructure

28 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Joel A. Cox, GICSP , CCNA, GPEN
Networking/Cybersecurity
Joel Cox is a tech specialist who provides a broad range of design and delivery of communications systems and data center infrastructure with a focus on network communications and cybersecurity. He has served as Project Manager, Subject Matter Expert for the design and implementation of Information Technology (IT) enterprise systems and Operational Technology (OT) to support manufacturing, services and municipal water and wastewater treatment systems. His experience includes project management, disaster recovery planning and information system security; communications network design and implementation; database design and implementation; storage design and implementation; and virtualization design and implementation.

EXPERIENCE
SCADA Master Plan, City of Garden Grove, CA: Technical Specialist. West Yost is updating the City of Garden Grove’s Water Master Plan to identify and prioritize improvements that will provide adequate flows and pressure to meet peak demands and fire flow requirements, meet regulatory requirements, provide redundancy for emergencies and address its aging infrastructure. West Yost’s Operations Technology Cybersecurity and Resilience (OTCR) team also conducted an evaluation to provide a practical and implementable SCADA Implementation plan.

AWIA Cybersecurity Risk and Resilience Assessment (RRA) and Emergency Response Plan (ERP), City of Fullerton, CA: Cybersecurity Specialist. As a subcontractor to Herndon Solutions Group (HSG), West Yost performed the City’s Cybersecurity Risk and Resilience Assessment (Cyber-RRA) using the American Water Works Association (AWWA) Cybersecurity Tool and Guidance.

SCADA Master Plan, San Gabriel Valley Water Company, CA: Technical Specialist. West Yost developed a SCADA Master Plan (Master Plan) for San Gabriel Valley Water Company’s (SGVWC) Los Angeles County and Fontana Water Company divisions. Key drivers for the Master Plan included cybersecurity, obsolete hardware and software, and long-term maintenance and support of the SCADA system.

SCADA Master Plan, City of Tempe, AZ: Technical Specialist. West Yost is updating the City’s SCADA Master Plan that was previously implemented in 2013. The scope of this project first includes assessing of the City’s current cybersecurity posture and addressing continuity of operations during pandemics by providing a secure remote access. West Yost is working with City IT staff to evaluate current remote capabilities, including human machine interface (HMI) hardware, and developing an implementation plan for improvements. West Yost is also reviewing the output of a Risk and Resilience Assessment and Emergency Response Plan, including a significant review of cybersecurity.

SCADA Master Plan, East Orange County Water District, CA: Cybersecurity Expert. West Yost developed a SCADA Master Plan for East Orange County Water District (EOCWD). Key drivers for the Master Plan included cybersecurity, obsolete hardware and software, and long-term maintenance and support of the SCADA system.

STAFF TITLE: Engineering Technical
Manager I
YEARS OF EXPERIENCE: 27
YEARS AT WEST YOST: 1
LOCATION: Remote

EDUCATION/TRAINING/

CERTIFICATIONS
ƒ Cisco Certified Network
Associate (CCNA), Routing and
Switching, Security, Cisco ID No.

CSCO12375337
ƒ GIAC GPEN (Penetration Testing)
ƒ GIAC GICSP (Industrial Security
Professional)
ƒ SANS SEC560, Network
Penetration Testing and Ethical
Hacking
ƒ SANS ICS410, ICS/SCADA Security
Essentials
ƒ Red Tiger Security, Securing ICS/
SCADA Systems
ƒ Department of Homeland
Security, 210W – Cybersecurity
for Industrial Control Systems

PROFESSIONAL QUALIFICATIONS
ƒ Virtualization: VMWare
ƒ Storage Systems: NetApp, IBM
ƒ Network: Cisco, F5
ƒ Power/UPS Systems: APC
Symmetra
ƒ Operating Systems: Linux,
Windows, Mac
ƒ Open Source Tools: Nagios,
Metasploit, Wireshark, etc.
ƒ Databases: MySQL, DB2, Oracle,
SQL Server
ƒ Web servers: Apache, Tomcat, IIS,
Weblogic
ƒ Scripting: Various scripting
languages

29 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Andrew Ohrt, PE, CISSP
Resilience and CCE
Andrew Ohrt an experienced facilitator and program manager specializing in infrastructure resilience. Over the course of Andrew’s career, he has assisted clients with building all-hazards resilience with a focus on cybersecurity.

Currently, Mr. Ohrt leads West Yost’s Resilience Practice group and their partnership with Idaho National Laboratory (INL) and the American Water Works Association (AWWA) to bring Cyber-informed Engineering (CIE) to the Water Sector. Since 2019, Mr. Ohrt has served as the project lead for development of the American Water Works Association’s cybersecurity resources including the Water Sector Cybersecurity Risk Management Guidance and Self-Assessment Tool, the small systems version of the tool, and various training resources.

EXPERIENCE
SCADA Master Plan, City of Garden Grove, CA: Technical Specialist. West Yost updated the City of Garden Grove’s Water Master Plan to identify and prioritize control system and cybersecurity improvements that will provide adequate flows and pressure to meet peak demands and fire flow requirements, meet regulatory requirements, provide redundancy for emergencies and address its aging infrastructure. Execution of the plan will provide the City with a modernized SCADA system that is flexible, user-friendly, and both physically and cyber resilient using industry leading design practices.

AWIA Cybersecurity Risk and Resilience Assessment (RRA) and Emergency Response Plan (ERP), City of Fullerton, CA: Project Engineer. As a subcontractor to Herndon Solutions Group (HSG), West Yost performed the City’s Cybersecurity Risk and Resilience Assessment (Cyber-RRA) using the American Water Works Association (AWWA) Cybersecurity Tool and Guidance.

SCADA Master Plan, City of Tempe, AZ: Technical Specialist. In 2021, West Yost updated the City’s SCADA Master Plan that was previously implemented in 2013. Within the planning process, West Yost conducted CIE/CCE awareness training. The training was conducted over four modules including: 1) CIE/CCE concept introduction, 2) CIE/CCE for engineers, 3) CIE/CCE for operations staff and 4) identification and development of cyber-risk mitigation measures. The inclusion of CIE/CCE in within the project, allowed West Yost to better address the long term needs by providing the City with a modernized SCADA system that is flexible, user-friendly, and both physically and cyber-resilient using industry leading design practices.

SCADA Master Plan, City of Hillsboro, CA: Project Engineer. West Yost completed a SCADA Master Plan with the City of Hillsboro (COH), evaluating the current system against the latest operational technology and cybersecurity standards, and best practices.

Emergency SCADA CCE Assessment – Honolulu Board of Water Supply (BWS), HI: Technical Specialist. To meet the short-term need to replace the SCADA controls at a critical pump station, BWS opted to implement a cloud-based SCADA solution. To ensure that the water system could maintain a high-level of operational resilience, West Yost conducted a CCE assessment of the proposed SCADA solution. The outcome of this assessment was a set of cyber-risk mitigation measures designed specifically for a SCADA-in-the-cloud implementation.

STAFF TITLE: Resilience Practice Area
Lead, Principal Technical Specialist I
YEARS OF EXPERIENCE: 17
YEARS AT WEST YOST: 4
LOCATION: Remote

PROFESSIONAL REGISTRATIONS
ƒ Professional Environmental
Engineer: Alaska No. 14322,
Minnesota No. 50531, Washington
No. 47854
ƒ Certified Information System
Security Practitioner (CISSP)

PROFESSIONAL CERTIFICATES
ƒ AWWA Utility Risk and Resilience
ƒ AWWA J100-10 Risk Analysis and
Management for Critical Asset
Protection (RAMCAP) Standard for
Risk and Resilience Management of
Water and Wastewater System
ƒ Envision Sustainability Professional
(ENV SP)
ƒ FEMA IS-100.b, IS-120.a, IS-130, IS-
200.B, IS-700.A, IS-800.B, IS-860.B
ƒ Institute of Asset Management
ƒ Idaho National Laboratory
Consequence-driven, Cyber-
informed Engineering Work Force
Development & ACCELERATE

EDUCATION
ƒ MS, Civil Engineering, University of
Minnesota, Twin Cities
ƒ BA, Physics, Gustavus Adolphus
College

PROFESSIONAL AFFILIATIONS
ƒ American Water Works Association
ƒ US Department of Homeland
Security – Cybersecurity &
Infrastructure Security Agency –
Control Systems Workgroup
ƒ Security and Emergency
Preparedness Committee Member

30 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Tara M. Mertz
Networking/Cybersecurity, Resilience & CCE
Tara Mertz is a Senior Technical Specialist who provides services in operational technology systems master planning and risk assessment with a focus on cybersecurity, network architecture, and governance. Tara joined West Yost in January 2022 and brings to the team 22+ years of public sector IT/OT leadership experience. Her experience includes project management of cross-functional teams, technical owner’s advisory services, cybersecurity risk assessment, network design, and implementation planning. She is technically proficient and effectively communicates strategic planning vision to stakeholders.

EXPERIENCE
SCADA Master Plan and Implementation, City of Tempe, AZ: Program Initiatives Support. Tara is the acting liaison between the City’s IT department and the Water Utility department to support program initiatives. West Yost provides high-level technical review of City strategic directives and prescriptive guidance based on NIST CSF framework and the Arizona Department of Environmental Quality (ADEQ). West Yost previously provided SCADA system master planning.

The current phase is the implementation of a portfolio of projects that require in-depth technical understanding of cyber-hygiene, network architecture, and incorporate required controls required in the cyber-Risk and Resilience Assessment (RRA).

SCADA Technology Upgrades Project Phase 1 , Fairfield-Suisun Sewer District, Fairfield, CA: Technical Lead. West Yost OTCR provided services for the network design and initial comprehensive cybersecurity assessment of the District’s core SCADA systems including servers, workstations, network equipment, and software. Tara documented the current condition of the network communications equipment including routers, switches, and firewalls and provided recommendations for secure network convergence between the SCADA and untrusted networks as well as improvements to enhance resiliency through distributed architecture of the core SCADA servers.

SCADA Technology Upgrades Project Phase 2, Fairfield-Suisun Sewer District, Fairfield, CA: Owner’s Advisory Program Manager. As Phase 2, Tara and her team developed hardware and software performance specifications, bills of materials, an implementation plan, and designed high level network architecture cybersecurity improvements including virtualization of the core SCADA systems and segmentation of the networks. The project work includes technical owner’s advisory services and engineering support during implementation of upgrades to the SCADA Software HMI and industrial alarm system. Tara is also supporting the District as program manager to coordinate and validate the work performed by contractors and subcontractors of the District.

SCADA Cybersecurity Baseline Assessment, Las Gallinas Valley Sanitary District, San Rafael, CA: Project Manager and Technical Lead. West Yost OTCR provided services to the client to provide a comprehensive SCADA network assessment aimed at identifying, documenting, and outlining any cybersecurity deficiencies or areas which may benefit from alternative improvements. Tara was responsible for providing overall project management, coordinating site visits for evaluation of systems and data collection, and development of a prioritized list of projects based on recommendations for foundational cybersecurity safeguards.

STAFF TITLE: Senior Technical Specialist II
YEARS OF EXPERIENCE: 22
YEARS WITH WEST YOST: 2
LOCATION: Sacramento, CA

CERTIFICATIONS
ƒ CompTIA Security+ SY0-701, 2024
ƒ MCPS: Microsoft Certified
Professional, 2018

EDUCATION
ƒ BA, Communications, San Diego State
University
ƒ SANS MGT414: SANS Training
Program for CISSP Certification
ƒ Department of Homeland Security,
201 – Intermediate Cybersecurity for
Industrial Control Systems
ƒ Department of Homeland Security,
301 – ICS Cybersecurity
ƒ VMWare vSphere v7.x Install,
Configure, Manage
ƒ Cisco Security CSFPA and CSVPN
ƒ Homeland Security/FEMA Certificates:

IS100, IS120, IS130, IS200, IS553,
IS700, and K146

PROFESSIONAL AFFILIATIONS
ƒ Control Systems Cybersecurity
Association International CS2AI

31 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Zane Wilsterman, PE
Electrical, Instrumentation, and Controls Lead
Zane is an accomplished engineer with interstate experience in engineering and construction. He provides electrical engineering and construction services predominately for water/wastewater treatment projects with expertise in electrical engineering, engineering project management, owner and contractor relationships, risk management, construction management, project estimation, cost and fee negotiation, and market planning. He is a results-oriented, decisive leader in small to medium sized construction projects who has recently joined the West Yost Operations Technology, Cybersecurity, and Resilience business sector team.

EXPERIENCE
New Bedford Sewage Lift Station Rehabilitation, Vallejo Flood and Wastewater District, CA: Electrical Engineer of Record overseeing design for complete site rehabilitation. A new building was designed to house electrical power equipment, standby generator, and site control system. The new instrumentation and control systems were customized based on client preferences and standards. This site has been designed to communicate with remote SCADA master computer for remote monitoring of critical site data.

City of Yuba City Well 2 at WTP , City of Yuba City, CA: Electrical Engineer of Record for this project that included 480V power feed from medium voltage transformer to Well 2 power distribution equipment, variable frequency drive, and PLC Cabinet.

Bickford Ranch Water Tank No. 1 and Pump Station No. 1 , Placer County Water Agency (PCWA), Placer County, CA: Electrical Engineering and inspection support for this project providing inspection services on behalf of PCWA for this developer driven, $9 million project that includes water distribution, storage, and pumping equipment and facilities to serve the new Bickford Ranch housing development in Unincorporated Placer County, California. The project consists of a new pumping station with four 200 hp and two 25 hp jockey vertical turbine pumps with VFDs, controls, valves and all other related mechanical and electrical components, site piping including pump suction and discharge, site water, irrigation and drainage, an approximately 1,650 sq. ft. pump station structure, backup generator, 10,000 gallon hydropneumatic tank and air compressors, a

1.4-MG welded steel water storage tank, approximately 4,500 feet of new 18 inch ductile iron distribution pipeline, approximately 1,800 feet of new 60 inch welded steel transmission pipeline, a new 24 foot wide paved access road to Pump Station No. 1 including a new concrete box culvert for crossing the Caperton Canal, and associated side work including grading, paving, landscaping, retaining walls, equipment pads structural foundations, and retention pond.

Owner’s Representative Services, Well 80, Sacramento Suburban Water District, CA: Electrical Engineering and inspection support for this project to provide construction management and inspection services as part of its Owners Representative’s role beginning with the first of up to four new monitoring wells and four new groundwater wells and associated pumping and treatment facilities.

STAFF TITLE: Principal Technical Specialist I
YEARS OF EXPERIENCE: 25
YEARS WITH WEST YOST: 2

PROFESSIONAL REGISTRATIONS
ƒ Professional Electrical Engineer,
Oregon No. 101414
ƒ Professional Electrical Engineer,
California No. 22550
ƒ Professional Electrical Engineer,
Arizona No. 39548

EDUCATION
ƒ BS, Mechanical Engineering, Arizona
State University, Tempe, AZ

PROFESSIONAL AFFILIATIONS
ƒ American Water Works Association

32 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Jeremy Smith, PE
Electrical, Instrumentation & Controls
Jeremy provides services from detailed control system design to implementation, start-up and programming for remote facilities, treatment plants, and distributed regional systems. He has led control system design, improvements, and evaluations; and develops master plans. Design and commissioning experience includes large scale system integrations and control improvements for the cities of Mesa, Tucson, Tempe, Tucson, Honolulu (HI), Garden Grove (CA), Davis (CA), San Jose (CA), Los Angeles, and Orange County.

EXPERIENCE
SCADA Master Plan, City of Garden Grove, CA: I&C Engineer. West Yost is updating the City of Garden Grove’s Water Master Plan to identify and prioritize improvements that will provide adequate flows and pressure to meet peak demands and fire flow requirements, meet regulatory requirements, provide redundancy for emergencies and address its aging infrastructure. West Yost’s Operations Technology Cybersecurity and Resilience (OTCR) team also conducted an evaluation to provide a practical and implementable SCADA Implementation plan. Execution of the plan will provide the City with a modernized SCADA system that is flexible, user-friendly, and both physically and cyber-resilient using industry leading design practices. Jeremy provided field assessment and QC review of the design.

SCADA Master Plan, City of Tempe, AZ: I&C Specialist. West Yost is updating the City’s SCADA Master Plan that was previously implemented in 2013. The scope of this project first includes assessing of the City’s current cybersecurity posture and addressing continuity of operations during pandemics by providing a secure remote access. West Yost is working with City IT staff to evaluate current remote capabilities, including human machine interface (HMI) hardware, and developing an implementation plan for improvements. West Yost is also reviewing the output of a Risk and Resilience Assessment and Emergency Response Plan, including a significant review of cybersecurity.

SCADA Master Plan, San Gabriel Valley Water Company, CA: I&C Specialist.

West Yost developed a SCADA Master Plan for SGVWC’s Los Angeles County and Fontana Water Company divisions. The Master Plan included a Baseline Assessment with site visits, a thorough understanding of SGVWC’s existing SCADA system, and detailed findings that identified key gaps. Alternatives were evaluated and presented in a workshop with SGVWC staff following the assessment and developed derailed recommendations. An Implementation plan was developed that included all improvement projects with costs, durations, and predecessors.

Greenfield WRP Phase-III Expansion SCADA Improvements, City of Mesa, AZ:

Technical Lead. The existing Greenfield WRP was expanded to add an additional 14 mgd of capacity. BC led the programming, migrated the legacy PLCs to the new Modicon M580 platform, and implemented new PLCs to support the plant wide expansion. This migration and expansion included 48 control panels, and updated network, HMI programming, and security procedures. Jeremy led the technical team and oversaw programming, workshops, control strategy development, submittal review, and CMAR coordination.

STAFF TITLE: Principal Technical
Specialist I
YEARS OF EXPERIENCE: 20
YEARS AT WEST YOST: 2
LOCATION: Phoenix, AZ

PROFESSIONAL REGISTRATIONS
ƒ Licensed Professional Engineer:

Control Systems (CSE) / PE-AZ,
56714 / PE-CA, 7509

CERTIFICATIONS
ƒ Certified Construction
Technologist (CDT)

33 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Tiana A. Michaud, PE
Electrical, Instrumentation, and Controls
Tiana offers a diverse and comprehensive skill set, honed through her tenure at an electric utility, giving her expertise in generation, transmission, and industrial retail interconnections. She managed everything from customer agreements to electric distribution design during her tenure at Jacobs Engineering. Her expertise spans SCADA communications, meters, transformers, contract management, and maintenance, and extends to systems design for water treatment and lift stations. Tiana is supporting multiple construction services projects by taking on management duties, supporting and managing the company’s licenses for the PTW Software, and ensuring company-wide technical documentation is up to date. This experience showcases her ability to combine engineering acumen with project management skills.

EXPERIENCE
SCADA Upgrades Phase 3 Preliminary Design, East Orange County Water District, CA: Staff Engineer. West Yost developed a SCADA Master Plan for East Orange County Water District (EOCWD). Key drivers for the Master Plan included cybersecurity, obsolete hardware and software, and long-term maintenance and support of the SCADA system. The Master Plan began with a Baseline Assessment where West Yost staff conducted site visits at representative sites and reviewed existing drawings and documentation to obtain an understanding of EOCWD’s existing SCADA system.Following the Baseline Assessment, key alternatives were evaluated and presented in a workshop with EOCWD’s staff.

Recommendations were reviewed with EOCWD staff, West Yost developed a detailed Implementation Plan. Once the Implementation Plan was completed, all components including the Baseline Assessment, Alternatives, Recommendations, and the Implementation Plan were included in the compiled SCADA Master Plan.

San Luis Rey Water Reclamation Facility (SLRWRF) Electrical Assessment, City of Oceanside, CA: Staff Engineer. The SLRWRF is a major wastewater treatment facility for which the West Yost team is currently providing an electrical and instrumentation equipment replacement and energy efficiency strategy designed to replace equipment that has become outdated. Tiana is providing HW review and routing, organized meetings, completed research and updated shape files for this project.

City of San Diego NCWRP Expansion, San Diego, CA: SDC Coordinator.

Coordinated bid documents and responses from design engineers during bidding of 1800+ sheet expansion project. Provided construction services support via managing turnaround times and quality responses to contractors’ requests for information (RFIs) and submittals after notice to proceed. Tracked potential changes for construction during the submittal and RFI processes. Attended weekly coordination meetings with the client’s construction manager and the contractor STAFF TITLE: Senior Technical Specialist II
YEARS OF EXPERIENCE: 12

PROFESSIONAL REGISTRATIONS
ƒ Professional Engineer, California No.

E22654
ƒ Professional Civil Engineer, Oregon
No. 83208
ƒ Professional Civil Engineer,
Washington No. 52948
ƒ Professional Civil Engineer, Nevada
No. 027330
ƒ Professional Civil Engineer,
Hawaii No. 19378

EDUCATION
ƒ BS, Electrical and Computer
Engineering, Oregon State University

34 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Kenny Smith
Electrical, Instrumentation, and Controls
Kenny Smith has 46 years of experience in the field of instrumentation and electrical systems. This includes the pipeing and instrumentation diagram (P&ID) design, PLC control panel layout and CAD design, PLC/HMI configuration, loop testing and startup of distributed control systems (DCSs), programmable logic controllers (PLCs), remote telemetry units (RTUs), and SCADA-based systems for lift stations, water and wastewater treatment plants, complex chemical plants, and oil refineries. His expertise lies in designing automatic control of process loops, programming and configuring DCSs, PLCs, and RTUs, configuring graphical interfaces for PC HMI and operator terminals, configuring databases, reports, and logs, writing interlock summaries and detailed control descrieption, designing and CAD models of loop diagrams, ISA data forms, and loop descriptions and control narratives. He is proficient in training of operating and maintenance personnel. Kenny has experience in detailed writing of specifications for: Division 40 (Instrumentation and Control), 26 (Electrical) for motor control centers (MCCs) and standby generators. His background with DuPont Chemical Refinery and Fluor Daniel Oil Refinery provided field experience in troubleshooting, calibrating, component replacement of all types of instruments, process analyzers, electrical power panels, lighting panels, motor switchgears, and relay logic control panels.

While at the Dupont Corpus Christi plant, Kenny was certified to work on 480 and 4,160-volt switchgear and motor control center troubleshooting and repair.

EXPERIENCE
SCADA Master Plan, City of Garden Grove, CA: Technical Specialist. West Yost is updating the City of Garden Grove’s Water Master Plan to identify and prioritize improvements that will provide adequate flows and pressure to meet peak demands and fire flow requirements, meet regulatory requirements, provide redundancy for emergencies and address its aging infrastructure. West Yost’s Operations Technology Cybersecurity and Resilience (OTCR) team also conducted an evaluation to provide a practical and implementable SCADA Implementation plan. Execution of the plan will provide the City with a modernized SCADA system that is flexible, user-friendly, and both physically and cyber resilient using industry leading design practices.

SCADA Master Plan, City of Davis, CA: Technical Specialist. The City of Davis SCADA Master Plan scope of work included documenting the SCADA Vision, Goals and Objectives, conducting a Baseline Assessment and Gap Analysis, development of a detailed Project Portfolio, SCADA Systems Standards, and final development of a compiled SCADA Master Plan. The project portfolio included development of conceptual level cost estimates for upgrades to key facilities for input into the City’s Capital Improvements Plan and budget. Also included in the Master Plan was development of SCADA System Support Roles and Responsibilities, in coordination with the City’s IT department, standards for control system equipment as well as a high level system architecture and network design.

STAFF TITLE: Senior Technical Specialist I
YEARS OF EXPERIENCE: 46

SPECIALIZED TRAINING
ƒ Westinghouse WDPF Distributed
Control System (DCS)
ƒ Rosemount System 3 DCS
ƒ Honeywell 2000 and 3000 DCS
ƒ Digital Unix Network
ƒ Valmet Automation OASyS Systems
ƒ Transmission Control Protocol/
Internet Protocol (TCP/IP)
ƒ Network Training; Square D
Programmable Logic Controller (PLC)
ƒ GE Series 90 PLC
ƒ Allen-Bradley SLC and PLC5 PLC
ƒ Allen-Bradley RSView; Siemans/TI 505
PLC
ƒ Modicon Compaq, 984 and Quantum
PLCs
ƒ Modicon ConCept Programming;
ƒ Itellution IFix
ƒ Arcom Remote Telemetry Unit (RTU)
ƒ Valmet Polecat RTU
ƒ Sensaphone SCADA 3000 RTU

EDUCATION
ƒ Electrical Technology, Del Mar College

PROFESSIONAL AFFILIATIONS
ƒ International Society of Automation

35 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Gregory B. Smith, PE
Programming and Configuration
Greg Smith is an instrumentation and controls automation engineer. He has experience in PLC and HMI programming, SQL database management, SQL Server Reporting, and control systems design. His project involvement includes wastewater facilities, water production facilities, water reclamation facilities, and various industrial and commercial construction projects.

EXPERIENCE
SCADA Master Plan and Implementation, City of Garden Grove, CA: Technical Engineer. As part of the City’s Water Master plan project, West Yost developed a SCADA master plan which identified baseline conditions, an alternatives evaluation, key recommendations, and a detailed implementation plan. West Yost subsequently responded to the City’s RFP for SCADA implementation services and was selected as the City’s Technical Program Manager for implementation of the SCADA Master Plan, which includes detailed design and engineering, PLC programming, SCADA configuration, bidding services, and construction management.

SCADA Master Plan and Implementation, City of Tempe, AZ: Technical Lead.

Provided SCADA system implementation, configuration, and training services that stemmed from upgrades to the SCADA network, hardware and software; updated Citect HMI screens and configurations as well as PLC programming to accommodate hardware and software upgrades; tested communications across the system for consistency and reliability.

SCADA Network Analysis and Detailed Design, Davis, CA: Liaison between client and RFI references. Worked on behalf of the client to schedule and facilitate meetings with vendor references to capture the references’ feedback on their experience with their respective Central Data Repository software solution.

The project was identified in the City’s SCADA Master Plan to include detailed network analysis and documentation; detailed network design; development of a detailed implementation plan and penetration testing. This project addressed the Detailed Network Analysis and Documentation portion of the Project.

Secure SCADA Network Implementation – Columbia Heights, Minneapolis Water Works, City of Minneapolis, MN: Technical Advisor for implementation planning and programming and configuration services. The Columbia Heights Membrane Plant, which opened in 2005, has a capacity of 78 MGD, with ultrafiltration membranes and equipment. This project included design (Phase 1) and implementation (Phase 2) of network upgrades and improvements at the Columbia Heights Membrane Plant. The scope of work included detailed network design, PLC programming and system implementation to upgrade the treatment plant, and extensive design and implementation of a complete replacement of the ControlNet network currently implemented in the plant and conversion to ethernet communications.

AWC SCADA Standards Development, Arizona Water Company, AZ: SCADA Standards Developer. As part of an ongoing effort to evaluate and improve the SCADA system of Arizona Water Company, Greg was tasked with developing programming and hardware standards that would meet the long term needs of Arizona Water Company. Based on a system wide analysis and alternatives study, Greg developed these programming and hardware standards around system and user requirements to provide the best path forward in system migration and operations.

STAFF TITLE: Senior Technical Specialist I
YEARS OF EXPERIENCE: 12
YEARS AT WEST YOST: 5
LOCATION: Phoenix, AZ

PROFESSIONAL REGISTRATIONS
ƒ Professional Control Systems
Engineer, Arizona No. 72785
ƒ Professional Control Systems
Engineer, California No. 7636

EDUCATION
ƒ BS, Computer and Information
Science, University of Alabama,
Birmingham

36 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 Sheri Lasick
Funding/Grant Administration
Sheri Lasick leads the funding practice who provides grant writing, funding research, and funding management services to public and non-profit entities, as well as program analyses, policy development, and industry research. Having worked for federal, state, and local governments as well as private firms prior to starting her own business, Sheri has a keen understanding of the issues and challenges faced by public employees and assists local public agencies in meeting the needs of the communities they serve by locating alternative funding sources and providing analytical services. Sheri has assisted cities, special districts, and municipalities in receiving over $132 million in grants and $200 million in low-interest loans for water and wastewater infrastructure projects, park and transportation improvement projects, and public safety activities. She has managed grant reporting requirements for projects ranging from $26,000 to $60 million dollar projects with multiple funding sources. One of Sheri’s specialties is providing labor compliance services as a post-grant award service. For this project, Sheri will lead funding research and application development.

EXPERIENCE
Funding Research and Application Development, Hidden Valley Lake Community Services District SCADA Upgrade, Hidden Valley Lake, CA: Sheri researched and developed the funding strategic plan for the district’s new SCADA and distributed energy resources projects which identified federal funding for the design and implementation of a new, modern SCADA communications network to improve the security, operations, and efficiency of water system. Sheri led the development of an US Bureau of Reclamation Project Design Grant application for the design of the project, current under consideration for a funding request for $400,000.

Funding Research and Application Development for Distributed Energy Resources, Woodland Davis Clean Water Agency, Davis, CA: Sheri researched and identified grant funding for the Agency’s to design and implement distributed energy resources projects to address critical challenges stemming from power reliability issues. Sheri led the development of an US Bureau of Reclamation Project Design Grant application for the design of the project, current under consideration for a funding request for $400,000.

Grant Strategy Services, Moulton Niguel Water District, Laguna Niguel, CA: Lead Grant writer and funding strategist for grant strategy services from 2017 through current. Services included reviewing the District’s top priority CIP projects, evaluating potentially applicable grant and loan opportunities, preparing various federal grant applications for the District resulting in over $18.3 million in awards.

Services included grant opportunity research and monthly updates, and grant writing services.

Las Virgenes Municipal Water District, Calabasas, CA: Sheri has provided grant administration services for multiple sources of funding, including a US Bureau of Reclamation Water and Energy Efficiency Grant and California Prop. 1 IRWM grant for a residential AMI implementation project secured by Sheri Lasick prior to joining West Yost. Sheri also led a West Yost team providing grant administration services for a Prop. 1 grant the District was awarded for its Pure Water Demonstration project.

STAFF TITLE: Senior Technical Specialist I
YEARS OF EXPERIENCE: 24
YEARS AT WEST YOST: 2+, 10 as a
subconsultant
LOCATION: Sacramento, CA

EDUCATION
ƒ MA, Anthropology/Archaeology
Graduate Work
ƒ BA, Anthropology, California State
University, Sacramento
ƒ Project Management, University
of Phoenix

Ron Fox
System Specialist / Project Manager

Ron Fox has over 18 years of experience in wireless technologies including, SCADA, Licensed Microwave and Land Mobile Communications. Ron has s urveyed, designed, and deployed SCADA systems for Water, Power, Oil and Gas industri es throughout the state of California.

Relevant Project Experience
Project Management, Oakdale Irrigation District
Coordinated and managed all aspects of their SCADA System upgrade, to include obtaining FCC frequencies, scheduling numerous visits to survey for and test new frequencies, supplied client with numerous equipment proposals, and was their single point of contact for all upgrade questions.

Project Management, CDM Smith Survey Project in Poj oaque, NM Coordinated and managed all aspects of a 28-site Survey Project in NM. Submitted numerous proposals, reviewed contracts, scheduled survey crews for a week-long survey, prepared and submitted final invoices.

Project Management, Carollo Engineering Survey Proj ect in South Lake Tahoe, CA Coordinated and managed all aspects of a 97-site Survey Project for the South Tahoe PUD. Reviewed contracts and work plans, suggested changes, scheduled crews for a 2-week long survey to include Licensed VHF and Microwave links, prepared and subm itted invoices.

Survey Numerous Projects for Automated Controls, Fr esno Worked with Automated Controls personnel on numerou s projects from simple equipment replacement to scheduling and conducting many site surveys, system designs, equipment proposals and follow-up.

System Design, Survey, & Equipment Replacement for Turlock Irrigation District Assisted Turlock Irrigation personnel with the complete replacement of their aging 9810 system with new iNETII radios to include completing a 21-site survey, survey report and proposals for all new equipment. Assisted with bringing on a licensed UHF system at some of their sites. This included obtaining the needed FCC frequencies, surveying, and providing them with the new equipment.

SCADA System Technical Support Services for All Exi sting and New Potential Clients, Applied Technology Group, Inc .

Ron is an integral part of our SCADA support team, often the first person our clients speak with when addressing system needs, product knowledge and over -the-phone troubleshooting.

OFFICE LOCATION
Bakersfield, California

YEARS OF

EXPERIENCE
18 EDUCATION
Sam Houston State
University
Community College of
the Air Force

LICENSES/

CERTIFICATIONS
MDS Certified:

Broadband, Narrowband
& Networking

37 City of Fullerton | Task Order SCADA Planning & Assessment Services| August 5, 2024 FEE SCHEDULE4
West Yost’s proposed level of effort and budget for each of the tasks described above is shown in Table 1, below. West Yost will perform the scope of services described above on a time-and-expenses basis, at the billing rates set forth in West Yost’s Billing Rate Schedule, with a not-to-exceed budget of $405,598. Please see our Project Schedule and Budget (following Table 1), which includes a breakdown of schedule and budget for all core and optional tasks. Any additional services not included in this scope of services will be performed only after receiving written authorization and a corresponding budget augmentation.

Table 1. Estimated Project Hours and Budget
Task Core or
Optional
Level of
Effort,
hours
Estimated
Budget, dollars
Task 1.

Kick off Meeting (and Project Management) Core 199 $49,080 Task 2. R eview of Draft SCADA Master Plan Core 81 $18,686 Task 3. Da ta Gathering, Site Visits, and Staff Interviews Core 204 $51,868 Task 4. Condition Assessmen t and Recommended Software and Network Upgrades
Core 236 $104,074
Task 5. Initial W orkshop with City Staff (and Preliminary Conceptual Incremental Implementation Plan Development)
Core 155 $37,571
Task 6. Miscellaneous It ems Both 235+ $144,319
Task 6.1 O&M Training Core 143 $38,173
Task 6.2 Coordination with Third-Party Vendors Core 24 $4,834 Task 6.3 Grant Applications and Administration Support* Core TBD $5,000 Task 6.4 Electrical, Instrumentation, and Controls (EI&C) Support* Optional TBD $5,000 Task 6.5 Optional Tasks Optional 68+ $56,312
Task 6.5.1 As-Is Roles and Responsibilities Definition Optional 10 $2,359 Task 6.5.2 Baseline Assessment Review Workshop Optional 24 $5,797 Task 6.5.3 “A Day Without SCADA” Tabletop Exercise* Optional TBD $40,000 Task 6.5.4 Alternatives Evaluation Review Workshop Optional 24 $5,797 Task 6.5.5 To-Be Roles and Responsibilities Definition Optional 10 $2,359 Task 6.6 As-Needed Services* Optional TBD $35,000
Core Task Hours and Budget 1042 $309,286
Optional Task Hours and Budget 68+ TBD $96,312
Total Project Hours and Budget 1,110+ $405,598
*Indicates tasks that have been estimated as closely as possible but haven’t been estimated with specific hours and resources. If any of these tasks are of interest to the City, West Yost will scope out the effort and budget for the respective tasks.

ID Task Name Duration Start Finish Predecessors Work Cost 1 City of Fullerton - SCADA Planning and Assessment Services260 days Mon 9/30/24Wed 10/8/25 1,109.53 hrs$405,597.26 2 Key Milestones 240 days Mon 9/30/24Wed 9/10/25 0 hrs $0.00 3 Notice to Proceed 0 days Mon 9/30/24Mon 9/30/24 0 hrs $0.00 4 City Response to RFI 2 wks Wed 10/23/24Tue 11/5/249 0 hrs $0.00 5 Project Completion 0 days Wed 9/10/25Wed 9/10/2555FF 0 hrs $0.00 6 Task 1 - Kickoff Meeting (and Project Management)260 days Mon 9/30/24Wed 10/8/25 199 hrs$49,079.75 7 Internal Kickoff Meeting 1 day Mon 10/7/24Mon 10/7/243FS+1 wk 5 hrs $1,404.00 8 External Kickoff Meeting 1 day Tue 10/15/24Tue 10/15/247FS+1 wk 16 hrs $6,312.00 9 Issue RFI 1 wk Wed 10/16/24Tue 10/22/248 6 hrs $1,282.00 10 Project Management 260 days Mon 9/30/24Wed 10/8/25 160 hrs$37,415.19 11 Start Date 0 days Mon 9/30/24Mon 9/30/243SS 0 hrs $0.00 12 End Date 0 days Wed 10/8/25Wed 10/8/2513 0 hrs $0.00 13 Project Closeout 1 mon Thu 9/11/25Wed 10/8/2555 12 hrs $2,666.56 14 Task 2 - Review of Draft SCADA Master Plan21 days Wed 11/6/24Fri 12/6/24 81 hrs$18,686.00 15 Review of SCADA Master Plan and RRA 2 wks Wed 11/6/24Tue 11/19/244 56 hrs$13,016.00 16 Cybersecurity Assessment Update 11 days Wed 11/20/24Fri 12/6/24 25 hrs $5,670.00 17 Cyber Workshop 1 day Wed 11/20/24Wed 11/20/2415 9 hrs $2,280.00 18 Draft Cyber TM 10 days Thu 11/21/24Fri 12/6/24 16 hrs $3,390.00 19 Development 1 wk Thu 11/21/24Wed 11/27/2417 8 hrs $1,496.00 20 QA/QC 2 days Mon 12/2/24Tue 12/3/2419 2 hrs $612.00
21 Incorporate Comments 2 days Wed 12/4/24Thu 12/5/2420 4 hrs $748.00 22 Submit to City Staff 1 day Fri 12/6/24 Fri 12/6/24 21 2 hrs $534.00 23 Task 3 - Data Gathering, Site Visits, and Staff Interviews44 days Mon 12/9/24Mon 2/10/25 204 hrs$51,868.23 24 Site Visits and Staff Interviews 3 days Mon 12/9/24Wed 12/11/2414 68 hrs$18,941.00 25 Review of Existing Documentation (excluding Draft
SCADA Master Plan and RRA)
2 wks Thu 12/12/24Thu 12/26/2424 60 hrs$13,600.00
26 Baseline Assessment and Gap Analysis 31 days Fri 12/27/24Mon 2/10/25 76 hrs$19,327.23 27 Development 3 wks Fri 12/27/24Fri 1/17/25 25 56 hrs$13,432.51 28 QA/QC 1 wk Mon 1/27/25Fri 1/31/25 27,78 4 hrs $1,460.16 29 Incorporate Comments 1 wk Mon 2/3/25 Fri 2/7/25 28 12 hrs $3,323.84 30 Submit to City Staff 1 day Mon 2/10/25Mon 2/10/2529 4 hrs $1,110.72 31 Task 4 - Condition Assessment and Recommended
Software and Network Upgrades
96 days Mon 1/20/25Wed 6/4/25 236 hrs$104,074.08
32 Condition Assessment 2 wks Mon 1/20/25Fri 1/31/25 27 32 hrs $7,105.28 33 Wireless Study 4 wks Mon 1/20/25Fri 2/14/25 32SS 0 hrs $45,000.00 34 Alternatives Evaluation 20 days Thu 3/6/25 Wed 4/2/25 84 hrs$21,334.56 35 Development 3 wks Thu 3/6/25 Wed 3/26/2575,33FF 68 hrs$17,301.44 36 QA/QC 2 days Thu 3/27/25Fri 3/28/25 35 2 hrs $730.08 9/30
9/10
9/30
10/8
Sep Oct Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep Oct Qtr 4, 2024 Qtr 1, 2025 Qtr 2, 2025 Qtr 3, 2025 Qtr 4, 2025 Task
Split
Milestone
Summary
Project Summary
Inactive Task
Inactive Milestone
Inactive Summary
Manual Task
Duration-only
Manual Summary Rollup
Manual Summary
Start-only
Finish-only
External Tasks
External Milestone
Deadline
Progress
Manual Progress

Project: City of Fullerton - SCAD
Date: Wed 7/31/24
ID Task Name Duration Start Finish Predecessors Work Cost 37 Incorporate Comments 2 days Mon 3/31/25Tue 4/1/25 36 10 hrs $2,192.32 38 Submit to City Staff 1 day Wed 4/2/25 Wed 4/2/2537 4 hrs $1,110.72 39 Recommendations 28 days Fri 4/25/25 Wed 6/4/25 120 hrs$30,634.24 40 Development 4 wks Fri 4/25/25 Thu 5/22/2579 80 hrs$19,968.00 41 QA/QC 2 days Fri 5/23/25 Tue 5/27/2540 4 hrs $1,460.16 42 Incorporate Comments 1 wk Wed 5/28/25Tue 6/3/25 41 32 hrs $8,095.36 43 Submit to City Staff 1 day Wed 6/4/25 Wed 6/4/2542 4 hrs $1,110.72 44 Task 5 - Initial Workshop with City Staff (and
Preliminary Conceptual Incremental Implementation
Plan Development)
58 days Thu 6/19/25Wed 9/10/25 155 hrs$37,571.04
45 Recommendations Review Workshop 1 day Thu 6/19/25Thu 6/19/2543FS+2 wks 12 hrs $2,968.16 46 Incorporate City Comments in Recommendations2 wks Fri 6/20/25 Thu 7/3/25 45 28 hrs $6,768.32 47 Preliminary Conceptual Incremental Implementation
Plan
47 days Mon 7/7/25Wed 9/10/25 115 hrs$27,834.56
48 Draft Plan 26 days Mon 7/7/25Mon 8/11/25 74 hrs$18,243.68 49 Development 3 wks Mon 7/7/25 Fri 7/25/25 46 52 hrs$12,101.44 50 QA/QC 1 wk Mon 7/28/25Fri 8/1/25 49 8 hrs $2,920.32
51 Incorporate Comments 1 wk Mon 8/4/25 Fri 8/8/25 50 12 hrs $2,666.56 52 Submit to City Staff 1 day Mon 8/11/25Mon 8/11/2551 2 hrs $555.36 53 Implementation Plan Review Workshop1 day Tue 8/26/25 Tue 8/26/2552FS+2 wks 17 hrs $4,257.76 54 Final Plan 10 days Wed 8/27/25Wed 9/10/25 24 hrs $5,333.12 55 Incorporate City Comments/Finalize 2 wks Wed 8/27/25Wed 9/10/2553 24 hrs $5,333.12 56 Task 6 - Miscellaneous Items 240 days Mon 9/30/24Wed 9/10/25 234.53 hrs$144,318.16 57 Task 6.1 - O&M Training 240 days Mon 9/30/24Wed 9/10/25 142.53 hrs$38,173.05 61 Task 6.2 - Coordination with Third-Party Vendors240 days Mon 9/30/24Wed 9/10/25 24 hrs $4,833.75 65 Task 6.3 - Grant Applications and Administration
Support
240 days Mon 9/30/24Wed 9/10/25 0 hrs $5,000.00
69 Task 6.4 - Electrical, Instrumentation, and Controls (EI&C) Support
240 days Mon 9/30/24Wed 9/10/25 0 hrs $5,000.00
73 Task 6.5 - Optional Tasks 99 days Thu 12/12/24Fri 5/2/25 68 hrs$56,311.36 74 Task 6.5.1 - As-Is Roles and Responsibilities
Definition (OPTIONAL)
1 day Mon 1/6/25Mon 1/6/2527SS+1 wk 10 hrs $2,358.72
75 Task 6.5.2 - Baseline Assessment Review
Workshop (OPTIONAL)
6 days Wed 2/26/25Wed 3/5/25 24 hrs $5,796.96
78 Task 6.5.3 - "A Day Without SCADA" Tabletop
Exercise (OPTIONAL)
6 wks Thu 12/12/24Fri 1/24/25 25SS 0 hrs $40,000.00
79 Task 6.5.4 - Alternatives Evaluation Review
Workshop (OPTIONAL)
6 days Thu 4/17/25Thu 4/24/25 24 hrs $5,796.96
82 Task 6.5.5 - To-Be Roles and Responsibilities
Definition (OPTIONAL)
1 day Fri 5/2/25 Fri 5/2/25 40SS+1 wk 10 hrs $2,358.72
Sep Oct Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep Oct Qtr 4, 2024 Qtr 1, 2025 Qtr 2, 2025 Qtr 3, 2025 Qtr 4, 2025 Task
Split
Milestone
Summary
Project Summary
Inactive Task
Inactive Milestone
Inactive Summary
Manual Task
Duration-only
Manual Summary Rollup
Manual Summary
Start-only
Finish-only
External Tasks
External Milestone
Deadline
Progress
Manual Progress

Project: City of Fullerton - SCAD
Date: Wed 7/31/24
ID Task Name Duration Start Finish Predecessors Work Cost 83 Task 6.6 - As-Needed Services (OPTIONAL)240 days Mon 9/30/24Wed 9/10/25 0 hrs $35,000.00 Sep Oct Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep Oct Qtr 4, 2024 Qtr 1, 2025 Qtr 2, 2025 Qtr 3, 2025 Qtr 4, 2025 Task
Split
Milestone
Summary
Project Summary
Inactive Task
Inactive Milestone
Inactive Summary
Manual Task
Duration-only
Manual Summary Rollup
Manual Summary
Start-only
Finish-only
External Tasks
External Milestone
Deadline
Progress
Manual Progress

Project: City of Fullerton - SCAD
Date: Wed 7/31/24

WE SUPPORT OUR COMMUNITIES

WE ARE WATER FOCUSED

WE TAKE PRIDE IN WHAT WE DO

WE STRIVE TO BECOME OUR BEST
WE DO WHAT’S RIGHT

WE BELIEVE IN QUALITY

WE LISTEN

WE SOLVE CHALLENGING PROBLEMS

WE SEE THE BIGGER PICTURE

WE TAKE OWNERSHIP

WE COLLABORATE

WE HAVE FUN

WE ARE WEST YOST