This standard documents a process for identifying natural and human-caused security vulnerabilities, consequences, and incident likelihood in water and wastewater utilities, and it provides methods to evaluate the options for improving these weaknesses.