CUI Explorer

Water Assessments

Vulnerability Assessments on the risks and security of public drinking water systems, to include, but not be limited to, a review of pipes and constructed conveyances, physical barriers, water collection, pretreatment, treatment, storage and distribution facilities, electronic, computer or other automated systems which are utilized by the public water system, the use, storage, or handling of various chemicals, and the operation and maintenance of such system.

Registry statusNARA & DoD
MarkingWATER
Organizational index groupCritical Infrastructure
Updated2026-05-15

This page exposes extracted CUI registry and authority analysis as crawlable text. The interactive explorer remains the operational workspace for filtering, comparison, and voice-agent aligned study.

Registry comparison

Field NARA Registry DoD Registry
Category description Vulnerability Assessments on the risks and security of public drinking water systems, to include, but not be limited to, a review of pipes and constructed conveyances, physical barriers, water collection, pretreatment, treatment, storage and distribution facilities, electronic, computer or other automated systems which are utilized by the public water system, the use, storage, or handling of various chemicals, and the operation and maintenance of such system. Vulnerability Assessments on the risks and security of public drinking water systems, to include, but not be limited to, a review of pipes and constructed conveyances, physical barriers, water collection, pretreatment, treatment, storage and distribution facilities, electronic, computer or other automated systems which are utilized by the public water system, the use, storage, or handling of various chemicals, and the operation and maintenance of such system.
Category marking WATER WATER
Banner marking CUI No corresponding field
Basic or Specified Basic No corresponding field
Authorities 42 USC 300i-2 42 USC 300i-2(a)(5)
DoD applicable policies No corresponding field None listed
Required warning statement No corresponding field None listed
Required dissemination control CUI None listed
Examples No corresponding field Record maintenance documents, Emergency response plans
Registry date April 6, 2026 2026-05-15

Authority analysis

Authority title
Registry authority evidence compiled; primary authority text analysis pending
Authorities
Multiple registry authorities
Source currency
NARA last reviewed: April 6, 2026 | DoD detail accessed: 2026-05-15
How the authority operates
NARA registry status: Basic. Per-authority NARA status values: Basic. NARA banner marking evidence: CUI. The registry evidence is preserved here; detailed primary-law or regulation text analysis remains pending for this category.

Trigger conditions

  • NARA category scope: Vulnerability Assessments on the risks and security of public drinking water systems, to include, but not be limited to, a review of pipes and constructed conveyances, physical barriers, water collection, pretreatment, treatment, storage and distribution facilities, electronic, computer or other automated systems which are utilized by the public water system, the use, storage, or handling of various chemicals, and the operation and maintenance of such system.

Covered information

  • Record maintenance documents
  • Emergency response plans
  • Registry-described information: Vulnerability Assessments on the risks and security of public drinking water systems, to include, but not be limited to, a review of pipes and constructed conveyances, physical barriers, water collection, pretreatment, treatment, storage and distribution facilities, electronic, computer or other automated systems which are utilized by the public water system, the use, storage, or handling of various chemicals, and the operation and maintenance of such system.

Specified controls

Nara basic or specified
Basic
Nara authority rows
42 USC 300i-2 | status: Basic | banner: CUI | sanctions: 42 USC 300i-2(a)(6)
Nara banner markings
CUI
Nara sanctions
42 USC 300i-2(a)(6)

Safeguarding and dissemination controls

NARA Registry
CUI
DoD Registry
None listed
Authority analysis
No DoD required dissemination control is listed on the registry page. Apply approved limited dissemination controls only when required or permitted by the designating agency or governing authority.
Basic or Specified
Use the registry assertions, NARA authority rows, DoD authorities, DoD policies, warning statements, required dissemination controls, and examples first. Where the cited authority does not specify a handling detail, apply CUI Basic safeguards and dissemination rules so long as they do not conflict with the authority or agency-specific controls.

Related authorities

Authority-by-authority detail

42 USC 300i-2

Listed by: NARA Registry, Related authorities

Designation evidence

  • NARA authority row: 42 USC 300i-2 | status: Basic | banner: CUI.
  • NARA sanctions field: 42 USC 300i-2(a)(6).
  • Related authority evidence: 42 USC 300i-2 | status: Basic | banner: CUI | sanctions: 42 USC 300i-2(a)(6)

Extracted authority meaning

None listed

Operating conditions

  • NARA category scope used with this authority: Vulnerability Assessments on the risks and security of public drinking water systems, to include, but not be limited to, a review of pipes and constructed conveyances, physical barriers, water collection, pretreatment, treatment, storage and distribution facilities, electronic, computer or other automated systems which are utilized by the public water system, the use, storage, or handling of various chemicals, and the operation and maintenance of such system.
  • 42 USC 300i-2 | status: Basic | banner: CUI | sanctions: 42 USC 300i-2(a)(6)
  • NARA registry status: Basic. Per-authority NARA status values: Basic. NARA banner marking evidence: CUI. The registry evidence is preserved here; detailed primary-law or regulation text analysis remains pending for this category.
  • NARA category scope: Vulnerability Assessments on the risks and security of public drinking water systems, to include, but not be limited to, a review of pipes and constructed conveyances, physical barriers, water collection, pretreatment, treatment, storage and distribution facilities, electronic, computer or other automated systems which are utilized by the public water system, the use, storage, or handling of various chemicals, and the operation and maintenance of such system.

Safeguarding and dissemination controls

  • NARA registry control evidence: status Basic; banner marking CUI.
  • Nara basic or specified: Basic
  • Nara authority rows: 42 USC 300i-2 | status: Basic | banner: CUI | sanctions: 42 USC 300i-2(a)(6)
  • Nara banner markings: CUI
  • Nara sanctions: 42 USC 300i-2(a)(6)
  • No DoD required dissemination control is listed on the registry page. Apply approved limited dissemination controls only when required or permitted by the designating agency or governing authority.
  • Use the registry assertions, NARA authority rows, DoD authorities, DoD policies, warning statements, required dissemination controls, and examples first. Where the cited authority does not specify a handling detail, apply CUI Basic safeguards and dissemination rules so long as they do not conflict with the authority or agency-specific controls.

42 USC 300i-2(a)(5)

Listed by: DoD Registry, Related authorities

Designation evidence

  • DoD authority row: 42 USC 300i-2(a)(5). DoD lists this citation for the category; this DoD detail page does not display a separate Basic/Specified field.
  • Related authority evidence: DoD lists this authority for the category; the linked authority text is extracted below when available.
  • Registry designation context: Basic, CUI. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
  • Registry designation for this category is Basic with banner CUI.

Extracted authority meaning

  • Page 1078 TITLE 42—THE PUBLIC HEALTH AND WELFARE § 300i–1
  • Registry designation context: Basic, CUI. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.

Operating conditions

  • DoD category scope used with this authority: Vulnerability Assessments on the risks and security of public drinking water systems, to include, but not be limited to, a review of pipes and constructed conveyances, physical barriers, water collection, pretreatment, treatment, storage and distribution facilities, electronic, computer or other automated systems which are utilized by the public water system, the use, storage, or handling of various chemicals, and the operation and maintenance of such system.
  • DoD lists this authority for the category; the linked authority text is extracted below when available.
  • NARA registry status: Basic. Per-authority NARA status values: Basic. NARA banner marking evidence: CUI. The registry evidence is preserved here; detailed primary-law or regulation text analysis remains pending for this category.
  • NARA category scope: Vulnerability Assessments on the risks and security of public drinking water systems, to include, but not be limited to, a review of pipes and constructed conveyances, physical barriers, water collection, pretreatment, treatment, storage and distribution facilities, electronic, computer or other automated systems which are utilized by the public water system, the use, storage, or handling of various chemicals, and the operation and maintenance of such system.
  • Extracted authority condition: (6)(A) Except as provided in subparagraph (B), any individual referred to in paragraph (5)(B) who acquires the assessment submitted under paragraph (2), or any reproduction of such as- sessment, or any information derived from such assessment, and who knowingly or recklessly re- veals such assessment, reproduction, or informa- tion other than— (i) to an individual designated by the Admin- istrator under paragraph (5), (ii) for purposes of section 300j–4 of this title or for actions under section 300i of this title, or (iii) for use in any administrative or judicial proceeding to impose a penalty for failure to comply with this section, shall upon conviction be imprisoned for not more than one year or fined in accordance with the provisions of chapter 227 of title 18 applica- ble to class A misdemeanors, or both, and shall be removed from Federal office or employment.
  • Extracted authority condition: (d) ‘‘Tamper’’ defined For purposes of this section, the term ‘‘tam- per’’ means— (1) to introduce a contaminant into a public water system with the intention of harming persons; or (2) to otherwise interfere with the operation of a public water system with the intention of harming persons.
  • Extracted authority condition: (d) Guidance to small public water systems The Administrator shall provide guidance to community water systems serving a population of less than 3,300 persons on how to conduct vul- nerability assessments, prepare emergency re- sponse plans, and address threats from terrorist attacks or other intentional actions designed to disrupt the provision of safe drinking water or significantly affect the public health or signifi- cantly affect the safety or supply of drinking water provided to communities and individuals.
  • Extracted authority condition: (c) Record maintenance Each community water system shall maintain a copy of the emergency response plan com- pleted pursuant to subsection (b) for 5 years after such plan has been certified to the Admin- istrator under this section.
  • Extracted authority condition: Contaminant prevention, detection and response (a) In general The Administrator, in consultation with the Centers for Disease Control and, after consulta- tion with appropriate departments and agencies of the Federal Government and with State and local governments, shall review (or enter into contracts or cooperative agreements to provide for a review of) current and future methods to prevent, detect and respond to the intentional introduction of chemical, biological or radio- logical contaminants into community water systems and source water for community water systems, including each of the following: (1) Methods, means and equipment, includ- ing real time monitoring systems, designed to monitor and detect various levels of chemical, biological, and radiological contaminants or indicators of contaminants and reduce the likelihood that such contaminants can be suc- cessfully introduced into public water systems and source water intended to be used for drinking water.

Safeguarding and dissemination controls

  • Nara basic or specified: Basic
  • Nara authority rows: 42 USC 300i-2 | status: Basic | banner: CUI | sanctions: 42 USC 300i-2(a)(6)
  • Nara banner markings: CUI
  • Nara sanctions: 42 USC 300i-2(a)(6)
  • No DoD required dissemination control is listed on the registry page. Apply approved limited dissemination controls only when required or permitted by the designating agency or governing authority.
  • Use the registry assertions, NARA authority rows, DoD authorities, DoD policies, warning statements, required dissemination controls, and examples first. Where the cited authority does not specify a handling detail, apply CUI Basic safeguards and dissemination rules so long as they do not conflict with the authority or agency-specific controls.
  • Extracted authority control: The vulnerability as- sessment shall include, but not be limited to, a review of pipes and constructed conveyances, physical barriers, water collection, pre- treatment, treatment, storage and distribution facilities, electronic, computer or other auto- mated systems which are utilized by the public water system, the use, storage, or handling of various chemicals, and the operation and main- tenance of such system.
  • Extracted authority control: The emergency response plan shall include, but not be limited to, plans, procedures, and identifica- tion of equipment that can be implemented or utilized in the event of a terrorist or other in- tentional attack on the public water system.
  • Extracted authority control: Such protocols shall ensure that— (A) each copy of such assessment, and all in- formation contained in or derived from the as- sessment, is kept in a secure location; (B) only individuals designated by the Ad- ministrator may have access to the copies of the assessments; and (C) no copy of an assessment, or part of an assessment, or information contained in or de- rived from an assessment shall be available to anyone other than an individual designated by the Administrator.
  • Extracted authority control: (6)(A) Except as provided in subparagraph (B), any individual referred to in paragraph (5)(B) who acquires the assessment submitted under paragraph (2), or any reproduction of such as- sessment, or any information derived from such assessment, and who knowingly or recklessly re- veals such assessment, reproduction, or informa- tion other than— (i) to an individual designated by the Admin- istrator under paragraph (5), (ii) for purposes of section 300j–4 of this title or for actions under section 300i of this title, or (iii) for use in any administrative or judicial proceeding to impose a penalty for failure to comply with this section, shall upon conviction be imprisoned for not more than one year or fined in accordance with the provisions of chapter 227 of title 18 applica- ble to class A misdemeanors, or both, and shall be removed from Federal office or employment.
  • Extracted authority control: L. 99–339, § 204(3), struck out ‘‘will- fully’’ after ‘‘person who’’ and substituted ‘‘subject to a civil penalty of not to exceed’’ for ‘‘fined not more than’’. § 300i–1.

Authority excerpts

Extracted authority passage 2

The vulnerability as- sessment shall include, but not be limited to, a review of pipes and constructed conveyances, physical barriers, water collection, pre- treatment, treatment, storage and distribution facilities, electronic, computer or other auto- mated systems which are utilized by the public water system, the use, storage, or handling of various chemicals, and the operation and main- tenance of such system.

Extracted authority passage 3

The emergency response plan shall include, but not be limited to, plans, procedures, and identifica- tion of equipment that can be implemented or utilized in the event of a terrorist or other in- tentional attack on the public water system.

Extracted authority passage 4

Such protocols shall ensure that— (A) each copy of such assessment, and all in- formation contained in or derived from the as- sessment, is kept in a secure location; (B) only individuals designated by the Ad- ministrator may have access to the copies of the assessments; and (C) no copy of an assessment, or part of an assessment, or information contained in or de- rived from an assessment shall be available to anyone other than an individual designated by the Administrator.

Extracted authority passage 5

(6)(A) Except as provided in subparagraph (B), any individual referred to in paragraph (5)(B) who acquires the assessment submitted under paragraph (2), or any reproduction of such as- sessment, or any information derived from such assessment, and who knowingly or recklessly re- veals such assessment, reproduction, or informa- tion other than— (i) to an individual designated by the Admin- istrator under paragraph (5), (ii) for purposes of section 300j–4 of this title or for actions under section 300i of this title, or (iii) for use in any administrative or judicial proceeding to impose a penalty for failure to comply with this section, shall upon conviction be imprisoned for not more than one year or fined in accordance with the provisions of chapter 227 of title 18 applica- ble to class A misdemeanors, or both, and shall be removed from Federal office or employment.

Extracted authority passage 6

(d) ‘‘Tamper’’ defined For purposes of this section, the term ‘‘tam- per’’ means— (1) to introduce a contaminant into a public water system with the intention of harming persons; or (2) to otherwise interfere with the operation of a public water system with the intention of harming persons.