Skip to main content

Utility Security and Readiness Issues

ARWA supports members in initiatives to improve security and emergency preparedness. There are several important tools available online. In addition, contact us if you need assistance.


Identity Theft Prevention Program

In 2009, ARWA designed the Identity Theft Prevention Program Compliance Model to assist water and wastewater utilities in complying with the Federal Trade Commission’s (FTC) Identity Theft Red Flag Rule.

Download the template,
Identity Theft Prevention Program
Compliance Model
Original Compliance Deadline was May 1, 2009

Identity Theft Template Cover

The rule requires utilities to develop an “Identity Theft Prevention Program.” The program consists of selecting methods to detect red flags when accounts are fraudulent, procedures to prevent the establishment of false accounts, procedures to ensure existing accounts are not being manipulated, and procedures to respond to identity theft.

All utilities are required to comply with the FTC’s “Identity Theft Red Flag Rule” even if only nominal information such as name, phone number and address are collected. However, the true risk established through the risk assessment activity may not require any changes to existing policies or procedures.

The primary purpose of the rule is to protect against the establishment of false accounts and ensure existing accounts are not being manipulated. This regulation does not address or require utilities to adopt measures that will protect consumer information and prevent unauthorized access. However, implementation of good management practices to protect personal consumer data can prevent identity theft.

Appendix A is a list of other security procedures a utility should consider to protect consumer information and to prevent unauthorized access. Steps required to develop a utility’s individual Identity Theft Prevention Program:

  • Assess their existing identity theft risk (risk assessment) for new and existing accounts.
  • Use the risk assessment to select measures (red flags) that may be used to detect attempts to establish fraudulent accounts.
  • Identify procedures for employees to prevent the establishment of false accounts and procedures for employees to implement if existing accounts are being manipulated.
  • Obtain program approval by the governing body or designated senior management [originally, by November 1, 2008 (extended to May 1, 2009)].
  • Train the appropriate employees on the program’s policies and procedures.
  • Update the plan annually with review and approval by the governing body or designated senior management.

The annual report should address any material matters related to the program such as the effectiveness of the policies and procedures, the oversight and effectiveness of any third party billing and account establishment entities, a summary of any identity thefts incidents and the response to the incident, and recommendations for substantial changes to the program, if any.

Download the template,
Identity Theft Prevention Program
Compliance Model

(MS Word format)



With heightened security measures underway at utility facilities, you may be interested in purchasing a number of these signs for your utility.

8" x 12" plastic
24" x 36" aluminum

Ordering information



Quick Links

Utility Security and Identity Theft Prevention Program Compliance Model

Basic Utility Readiness Guide


Being prepared and alert to circumstances which could be detrimental to the production and availability of safe drinking water is essential. Please take measures to ensure proper security controls are in place. logo


National Terrorism Advisory System (NTAS)

  For more on risk level, threats, and protection, visit the Dept of Homeland Security website at

Open for Registration

Basic Water Distribution / Wastewater Collection Operation & Maintenance (W/WW)
Oct 22-Thomasville
Nov 7-Decatur
Learn More
Water I/II Certification Test Prep (W)
Starts Oct 21-Monroeville
Learn More
Water and Wastewater Utility Management Training (W/WW)
3:30-9:00 pm-Dinner Included!
Oct 24-Cullman
Oct 29-Wetumpka
Nov 7-Gulf Shores
Nov 19-Tuscaloosa
Nov 21-Selma
Learn More
Wastewater Process Monitoring and Control (WW)
Nov 6-Northport
Learn More
Practical Microscope Use (WW)
Dec 18-Troy
Learn More
ARWA's 42nd Annual Technical Training Conference
Mobile, Alabama

March 15-18, 2020
Room Reservations are Open!
Water University
Utility Management Certification

Learn More
Schedule your own
On-site CEH Training

Earn CEHs
Plan for future training!
Training Calendar


New! To provide our members with additional protection, we have implemented a Secure Certificate on our website. This authenticates the ARWA website and encrypts transmitted data such as name and contact information. You will see a lock symbol, a green color, or the https:// secure protocol in the address bar of your browser.



Water Loss Protection

The ARWA/NRWA ServLine Program protects your utility against losses from customers’ water leaks, and provides the opportunity for them to add service line repair replacement protection. Learn more.



Alabama Rural Water Association is a non-profit organization representing water and wastewater systems serving rural communities and towns and commercial firms which support these systems.

We provide assistance to comply with State and Federal regulations, to help with management and operational problems, and to stimulate training initiatives.

Learn more about us.


Alabama Rural Water Association
2576 Bell Road
Montgomery AL 36117 
Phone: (334) 396-5511
Fax: (334) 396-7090