Loading...
HomeMy WebLinkAboutERAMOSA - Bozeman SCADA MP SOQ City of Bozeman (MT) SCADA MASTER PLAN DEVELOPMENT SOQ Closing: July 15, 2021, 3:00 pm MDT Eramosa International Inc., w/AESI 9393 W. 110th St., Ste. 500, PMB #5605 Overland Park, KS 66210 Phone: 913.945.1566 Contact: Jeff Burton, PE jeff.burton@eramosa.com www.eramosa.com Bozeman SCADA Master Plan SOQ 2021 i Table of Contents 1.0 FIRM BACKGROUND ..................................................................................................... 1 1.1 ERAMOSA COMPANY PROFILE .......................................................................................................... 1 1.2 AESI COMPANY PROFILE ................................................................................................................ 3 2.0 EXPERIENCE ............................................................................................................... 3 2.1 ERAMOSA EXPERIENCE ................................................................................................................... 3 2.2 AESI EXPERIENCE ..................................................................................................................... 8 3.0 WORKLOAD ............................................................................................................... 10 4.0 PROJECT TEAM KEY PERSONNEL ............................................................................... 10 5.0 REFERENCES ............................................................................................................ 20 APPENDIX A ............................................................................................................................ I APPENDIX B ........................................................................................................................... II Bozeman SCADA Master Plan SOQ 2021 1 1.0 FIRM BACKGROUND Eramosa has been providing professional SCADA assessment, planning, design, and integration services to municipalities in the water and wastewater industry for over 20 years. We have strengthened our team by partnering with AESI, an industry-leading provider of cyber security consulting and engineering services since 1984. We are confident the strength of our team is demonstrated in the following sections, and this strength will be the best, most cost-effective solution to the City’s needs. 1.1 Eramosa Company Profile Eramosa Engineering Inc. was established in 1998 and is a recognized leader in providing specialized engineering services to the municipal water and wastewater sector across Canada and the United States for over 20 years. Our sister company, Eramosa International Inc., was established in 2010 to focus specifically on US clients. Our average annual revenues exceed $13M and we continue to target and realize 10-12% annual growth. Together, Eramosa seamlessly provides professional engineering services to assist our clients in meeting their business requirements through the application of appropriate technology. We will deliver these services out of our corporate office in Overland Park, KS, with support available if required, from our California and Tennessee professionals, as well as our Canadian offices in Calgary, Alberta, and Guelph, London, and Toronto, Ontario. Eramosa provides the full spectrum of vendor agnostic SCADA system services, from planning to implementation to support. We leverage all industry standards and best practices, and often help develop them through our organizational memberships and committee engagements. We maintain our cutting- edge expertise through continued training and project execution, demonstrated by a multitude of vendor certifications. Our SCADA and automation service offerings include:  Assessments and Master Planning  Process Standardization and Documentation  Instrumentation & Control Design  Conceptual and Detailed Network Design and Configuration (IT, OT, Enterprise)  Cybersecurity Assessment and Planning  Software Engineering, Programming, and Integration (SCADA, HMI, PLC/PAC/RTU)  Data Management and Visualization  24/7 Telephone Support  On-request Emergency Support Within our engineering services we also offer complete electrical engineering design from substation or switchyard incoming power (44kV/27.6kV/13.8kV) through power distribution within facilities (44kV/13.8kV/8320V4160V/2400V/600V). We also provide electrical and power system analysis, which includes arc flash, short-circuit and coordination studies. Bozeman SCADA Master Plan SOQ 2021 2 Eramosa is engaged with or certified by the following organizations to better assist in delivering quality consulting engineering services to our clients. We also maintain our own development licenses for the various SCADA software products, tools and vendor support services to better maintain our in-house expertise.  American Water Works Association (AWWA)  Association of Consulting Engineering Companies (ACEC)  Water Environment Federation (WEF)  Smart Water Networks Forum (SWAN)  International Society of Automation (ISA)  Institute of Electrical and Electronics Engineers (IEEE)  VTSCADA Advanced Certified System Integrator  Rockwell Automation/Allen-Bradley Consultant Toolkit Program  Inductive Automation Ignition Premier Certification  GE Automation Solution Provider  Omron Certified System Integrator  Schneider Electric Alliance Industrial System Integrator Locator - Alliance Registered  Wonderware System Platform Certified System Integrator Partner  Wonderware InTouch Certified System Integrator Partner  Bristol Babcock Software Integrator  VMWare Certified Professional  Thin Manager Certified Integrator  Systems Security Certified Practitioner (SSCP)  Cisco Certified Network Professional (CCNP)  Cisco Certified Network Associate – Routing and Switching (CCNA)  Google Cloud Platform Fundamentals  ITIL Foundations Certification  Cisco Firewall Specialist  CCNP Composite (R&S)  Cisco Certified Network Admin  Azure Administrator Associate Currently Eramosa employs over 95 professionals to provide our clients with technical solutions.  As a consulting engineering firm Eramosa provides valuable input working alongside our clients to optimize and leverage technology focused on our client’s business requirements.  Eramosa fully understands the challenges faced by our clients in planning and executing upgrades and appropriately applying technology solutions.  We invite you to visit our website at http://www.eramosa.com for more information about our firm. Bozeman SCADA Master Plan SOQ 2021 3 1.2 AESI Company Profile Eramosa has engaged AESI to supplement the cybersecurity posture assessment portion of this project. AESI is an engineering and consulting firm, serving utilities and municipalities since 1984. AESI staff of over 25 professionals provide management and engineering services with a focus on cybersecurity assessments, penetration testing and remediation design efforts. Our in-house, highly knowledgeable professionals have extensive, real IT and OT experience that feeds a healthy understanding of true operations, so the fundamentals of what is being protected are thought of—from the individual cyber asset to the system as a whole. The nature of and importance of the information that must be protected is well understood by the team selected for this engagement. We have a solid history of helping municipalities and utilities develop and implement a synergistic cyber security program from the fundamentals of assessing hardware and systems, to foundations of training/educating the people that use those systems on a daily basis, and up through to reporting as an element of risk management. As part of this project, AESI will provide a Cyber Security Risk & Posture Assessment, Gap Analysis, Cyber Program Framework recommendations and a Long-Term Roadmap for Bozeman. The authoritative reference framework will be the NIST Cybersecurity Framework V1.1 (NIST CSF). Unlike our competitors, AESI provides the native tools developed during the project (e.g., Risk/Impact Matrix, Heat Map of Impact vs. Likelihood, Roadmap of prioritized People, Governance & Process, and Technology Action Items) to our clients for use and management of their cybersecurity program, rather than simply pdf files. 2.0 EXPERIENCE Eramosa has been delivering projects covering all aspects of SCADA and automation since inception in 1998. The addition of AESI to our team will bring their decades of cybersecurity assessment, design and testing experience to augment this aspect of the Bozeman SCADA Master Plan. 2.1 Eramosa Experience We trust that our team’s skills, knowledge, experience, and expertise are demonstrated throughout this proposal and look forward to working with the City of Bozeman on this important project. We have included three (3) projects below highlighting our experience completing Master Plans similar in scope and magnitude to what the City will be undertaking. Bozeman SCADA Master Plan SOQ 2021 4 Project Title Duration Owner / Agency Point of Contact Size of Project Scope of Services SCADA Master Plan, Design Upgrade, Construction Services, Standards (PCN) Project Duration: 2013-Present Inland Empire Utilities Agency 6075 Kimball Ave, Chino, CA 91708 Travis Sprague, IEUA, Project Manager 909-994-1992; tsprague@ieua.org $3,500,000 SCADA Master Plan, SCADA Upgrade Design, Construction Services, Standards (Process control narrative) Jeffrey Montano, PM Description of Type and Extent of Services This on-going project began with the development of a comprehensive SCADA Master Plan to define and document a roadmap for the implementation of the technology, practices and organization required to meet the Agency’s long-term vision for SCADA. The Agency’s current state was captured through onsite field investigations, reviewing existing documentation and conducting staff interviews. The Agency’s business requirements and vision for SCADA were captured through facilitated stakeholder workshops and by researching and analyzing technology alternatives and best practices required to address the Agency’s business requirements. Preliminary recommendations were reviewed to reach consensus on projects and priorities required to achieve the desired state, then project scope statements with budget and implementation plans were developed to bridge the gap between the current state and the desired state. The final SCADA Master Plan report provided a strategic roadmap for the Agency to invest $14.3 million in SCADA upgrades over a 7-year period. Key SCADA upgrade projects identified in the SCADA Master Plan included:  Developing SCADA standards, guidelines, and specifications  Developing a SCADA DR/BC plan and lifecycle management plan  Developing SCADA governance, change management and organization support plans  Performing an independent SCADA vulnerability assessment to determine the effectiveness of the Agency’s current security measures  Implementing an enterprise-wide, fully integrated and uniform SCADA Supervisory Control level based on the Rockwell FactoryTalk platform  Upgrading existing PLCs to the ControlLogix or CompactLogix processor  Decommissioning the Foxboro Supervisory Layer  Designing an Operational Data Management System (Historical data collection and reporting)  Implementing an electronic document management system Bozeman SCADA Master Plan SOQ 2021 5 Project Title Duration Owner / Agency Point of Contact Size of Project Scope of Services  Developing a knowledge management plan  Defining operational performance management KPIs  Implementing equipment condition-based monitoring  Automating workflow management  Implementing electronic O&M manuals Eramosa has now been contracted by the Agency for design and construction administration of the SCADA System upgrades at RP-1, which is now underway. The project supplies the migration of the existing Invensys Foxboro DCS system to Rockwell Automation PlantPAx based SCADA Enterprise System. Consulting Engineering services provided include system pre-design, control panel design, process control narratives, design review, and services during construction. SCADA Master Plan Project Duration: 2018-Present Napa Sanitation District 935 Hartle Court Napa, CA 94559 Robin Gamble-Holly, Asset Management 707-258-6031, rgamble@napasan.com $175,000 SCADA Planning Jeffrey Montano, PM Description of Type and Extent of Services NapaSan desired an independent review and evaluation of their existing SCADA system. The purpose of the review was to develop a SCADA Master Plan to address immediate operational risks and issues, as well as outline a future pathway that ensures NapaSan can rapidly and cost-effectively respond to external pressures. The Master Plan will guide budgeting and planning for future SCADA system upgrades, additions and enhancements. The review assessed NapaSan’s SCADA system against leading industry practice, as well as the system’s suitability to meet the operational objectives of NapaSan. Through the review, a series of recommended upgrades and improvements to systems, processes, culture and organizational support were identified. These are necessary to address immediate operational risks, as well as make improvements required to ensure the long-term operational objectives of NapaSan are met. The review found that the SCADA Support group within NapaSan were doing a good job of maintaining the system. Despite this good work, the NapaSan SCADA system is aging. As a result, it is getting more difficult to maintain and the risk of a significant failure is increasing. There are three (3) areas where investment is required immediately: Bozeman SCADA Master Plan SOQ 2021 6 Project Title Duration Owner / Agency Point of Contact Size of Project Scope of Services  Critical to the operations staff’s ability to effectively and efficiently control NapaSan’s processes is the requirement for a Control Room that provides clear, calm and isolated control areas. Control Rooms need to be arranged in a manner that allows operations to focus without distraction by outside influences, which is most acute during upset or abnormal operating conditions.  Industry practices should be applied to the SCADA applications to address items from graphical, alarming and reliability of the SCADA system. Efforts to define the configuration, connectivity, and notifications of the application will provide guidance for NapaSan the direction towards a solution that meets NapaSan’s requirements.  Appropriate levels of Operational Technology Cybersecurity coupled with Operations focused Risk Management and Mitigation have not yet been deployed. The business has focused on this from the IT perspective and Risk assessments have been done using a subjective approach. Risk Assessments and culture change around risk assessment, mitigation, and acceptance need to occur. Mitigation strategy’s need to be agreed to and deployed with a network architecture hardening effort. Proceeding with these three recommendations will improve the security, reliability of monitoring and control, data collection, reporting and the alarming of vital system operations. The total of all high priority tasks required to implement the Master Plan was estimated. Project Title Duration Owner / Agency Point of Contact Size of Project Scope of Services SCADA Master Plan Project Duration: 2019-2020 San Juan Water District 9935 Auburn Folsom Rd, Granite Bay, CA 95746 Chris von Collenberg, IT Manager 916-791-6915, cvcollenberg@sjwd.org $230,000 Assessment, SCADA Master Plan Jeffrey Montano, PM “They delivered a modern SCADA Master Plan to the District. They accurately assessed our current SCADA state and provided us phased recommendations to put us on the journey to optimized operations. They were highly collaborative with leading key workshops and helped us to understand and prioritize what we needed moving forward listening to all departments. We have a path to align our new technologies with our business requirements the next 10 yrs. Their practice leaders are highly skilled, dedicated team and bring real world experience to a project.” Description of Type and Extent of Services Bozeman SCADA Master Plan SOQ 2021 7 Project Title Duration Owner / Agency Point of Contact Size of Project Scope of Services San Juan Water District desired an independent review and evaluation of their existing SCADA system. The purpose of the review was to develop a SCADA Master Plan and address immediate operational risks and issues, as well as outline a future pathway that ensures the District can rapidly and cost-effectively respond to external pressures while keeping their SCADA System operational. The Master Plan guided budgeting and planning for maintenance of existing SCADA assets, plan future SCADA system upgrades, additions, and enhancements as well as establish Governance to support sound decisions. The District provides wholesale and retail water service. The wholesale area (which includes the District’s 17 square miles retail area) covers approximately 46 square miles in northeastern Sacramento and southeastern Placer Counties. The District wholesales water to San Juan Retail, Citrus Heights and Fair Oaks Water District, Orangevale Water Company, and the city of Folsom for its customers north of the American River. The District serves a population of approximately 151,000 within its wholesale service area. The District’s existing water supply consists of three separate raw water contracts. The first source of water is a settlement contract with the U.S. Bureau of Reclamation that provides 33,000 acre-feet of water from the American River. The second source is via a long-term renewable contract with the U.S. Bureau of Reclamation for 24,200 acre-feet of Central Valley Project Water. The third source is a contract with the Placer County Water Agency for up to 25,000 acre-feet of water. All sources of surface water are either stored or flow through Folsom Lake. Delivery is taken at Folsom Dam outlets, either by gravity or via the U.S. Bureau of Reclamation Pumping Plant. SCADA systems are comprised of technology, physical equipment, and configuration that does age and reach the end of life. For SCADA systems, the life cycle period for the major components vary widely. The SCADA system was looked at and assessed on how well the overall SCADA system is supporting the operational goals and staying within current capital funding while planning for additional funding requests are processed. Action Plan projects were sequenced in order of criticality, starting with Urgent items done in the first three years of the ten-year action plan. The first phase addresses Organizational needs, the infrastructure and security of the SCADA network, planning for replacement of SCADA equipment and planning for instrumentation upgrades for increased reliability. The second phase of work is planned to be completed in the 3 to 6-year window for the overall 10-year plan and will address PLC, OIT & Radio obsolescence with control panel replacement, documentation and software management utilizing the development/test environment created in phase one. The final phase will address hardware update planning moving forward, documentation repository, the Server Room and change management. Bozeman SCADA Master Plan SOQ 2021 8 2.2 AESI Experience AESI is known for providing regulatory and Cyber Security Services to entities across North America. Clients include small, medium, and large public power utilities, municipalities, Joint Action Agencies (JAAs) and co-ops, as well as investor-owned utilities and independent power producers. AESI has been selected as the exclusive Hometown Connections Partner for cyber security, IT / OT, and regulatory services for public power and their associated municipalities. Hometown Connections is a national, non-profit utility services organization specializing in the unique challenges facing community-owned utilities (https://www.hometownconnections.com/). Hometown Connections and its Partners work with utilities of all sizes, facilitating access to technology, services, and solutions from industry-leading companies. For more than 20 years, Hometown Connections and their Partners have helped over 900 utilities modernize their processes and systems. Using a collaborative, community-focused approach, Hometown Connections and its Partners provide innovative solutions without the private industry price tag. Hometown Connections offers solutions to develop each area of your utility business: operations, cybersecurity, business strategy, customer care, finance, and workforce. Hometown Connections and its Partners work collaboratively under the banner of the “Hometown Connections Smart Cities Advantage” and work in conjunction with the American Public Power Association (APPA). 2.2.1 AESI Project #1 – Halton Region (CAD) (2019 to Present) AESI assisted the region with developing governance related to the cyber security of their water wastewater SCADA system. Through a series of technical memos and workshops with region staff, AESI assisted in the following areas:  Creating a cyber security working group  Establishing a high-level understanding of the current cyber security posture vis-a-vis industry norms  Identifying ownership and roles and responsibilities around SCADA cyber security  Developing a threat review process  Developing a cyber vulnerability assessment process  Updating SCADA/it service level agreements related to cyber security  Selecting critical infrastructure protection standards to be applied to SCADA 2.2.2 AESI Project #2 – Clay County (GA) Utility Authority (2017 to Present) AESI performed a Cyber Security Assessment and Penetration Tests of their SCADA Systems at their water and wastewater treatment plants. Our comprehensive SCADA System Security Assessment includes:  Assessment Methodology o Utilize a “blind scan” methodology for evaluation Bozeman SCADA Master Plan SOQ 2021 9 o Security Assessment that should imitate an unknown attacker with limited or no knowledge of the existing SCADA system  External Network Penetration and Assessment o Public/External IP addresses of all endpoints will be provided o Perform reconnaissance operations to collect information that may be used in formulating an attack against the CCUA reclaimed water SCADA system o Evaluate all public IP address endpoints for exposed security vulnerabilities including but not limited to:  Misconfiguration of Devices  Weak encryption algorithms  Flaws in software/firmware that may be exploited to compromise the SCADA network  Internal Network Penetration and Assessment o Internal IP address subnets will be provided o A point of access internal to the SCADA network will be provided o Evaluate all SCADA internal subnets for potential security vulnerabilities that may allow the SCADA network to be compromised. This should include, but is not limited to: o Misconfiguration of Devices o Weak encryption algorithms o Missing security patches o Flaws in software/firmware that may be exploited to compromise the SCADA network o Default passwords, blank passwords, default SNMP community strings  Use of Best Practices o Determine if the SCADA system current hardware configuration falls within best business practices  Report of Findings o Prepare a report that lists the details of the following:  Network segments that were tested  Hardware components that were inspected  Software components that were tested  Provide ranking classification, potential ramifications, and recommendations to mitigate all identified security vulnerabilities. 2.2.3 AESI Project #3 – City of Fort Collins, CO (2016 and 2018) Cybersecurity Vulnerability Assessment AESI was contracted by the City of Fort Collins Utilities (FCU) to aid with three projects involving cyber security services in areas of financing, governance planning and their ESCADA system.  Identified vulnerabilities in the CIS system with remediating actions to maintain confidentiality of customer information, integrity of data stored, and system availability.  Assisted in using the NIST Framework for Improving Critical Infrastructure Cybersecurity to develop a cybersecurity plan and long-term maturation roadmap reflective of the FCU’s unique environment, aligning activities with its business requirements, risk tolerance, and resources. Bozeman SCADA Master Plan SOQ 2021 10  Identified vulnerability in the ESCADA system, producing actionable remediation tasks that would maintain safe reliable electricity distribution to Fort Collins residents and businesses. Cybersecurity Risk Assessment AESI was commissioned to identify key cybersecurity-related risk within their operations. These risk management projects have been primarily focused on the high-level risks associated with executive management governance and oversight. Using a combination of risk management techniques (i.e., profiling tool, risk tolerance and heat mapping), we worked closely with the client to conduct a risk assessment of its overall inherent risk (i.e., attack surface and threat landscape) and establish the clients risk profile. The clients resultant risk profile and security controls applied were mapped to the specific controls outlined within the NIST Cybersecurity Framework. To assess the client’s residual risk, AESI used a Risk Matrix to populate, assess and rank the effectiveness of the controls within specific risk area based on likelihood and impact. AESI used the resultant residual risk assessment to provide the client mitigation recommendations that align with the NIST Cybersecurity Framework for Improving Critical Infrastructure. In addition, we developed the long-term cybersecurity plan, with a road map of prioritized executable actions based on the client’s budget and resources. 3.0 WORKLOAD Eramosa and AESI are both very established and stable companies in their respective markets, and therefore always maintain a healthy backlog without stretching our staff too thin. We are confident we can provide all the manpower required to execute this project. We have proposed a team of Key Personnel that are available for immediate mobilization upon notice to proceed, who would continue to be intimately involved while leading the project. Specifically, the Project Manager and Lead Engineer can be available for up to as much as half-time and other staff can be dedicated full time, should the agreed upon schedule require it. Additional staff can also be engaged to focus on specific areas of expertise, allowing possible parallel execution of tasks to accelerate schedule if desired. We have included a representative project schedule in Appendix A, which should be a close approximation of what the City can expect, depending upon the final scope and expectations. Our firm’s relatively small size, flat organizational structure, and low overhead allows us to provide a high- value project team at very competitive rates, giving the City of Bozeman the best “bang for their buck”. 4.0 PROJECT TEAM KEY PERSONNEL We have assembled a team of experts and industry leaders in the planning, development and implementation of SCADA and Control Systems specifically for the municipal water and wastewater industry. Our team, depicted in the below organization chart, has completed and/or is in the process of completing numerous SCADA Master Plan and assessment projects similar in scope and magnitude to the City of Bozeman. Bozeman SCADA Master Plan SOQ 2021 11 City of Bozeman Jeffrey Montano, PE Project Lead Engineer/MP SME Jui Ghate, PE I&C SME Jeff Burgers, C.E.T. SCADA Design and Data Management SME Scott Lillie, C.E.T. SCADA Programming SME Max Sverdlov Network Specialist Lead Adam Plumstead, C.E.T. Alarm Management SME Jeff Burton, PE Project Manager James Chacko, CISSP, CISA Cybersecurity SME Kim Grosskurth, MBA Incident Response Planning Edvard Lauman, P.Eng. SCADA and Cybersecurity AESI Dave Westlund, PE Project Manager Figure 1 – Bozeman SCADA Master Plan Organization Chart Jeff Burton will drive the effort as Project Manager and have a heavy involvement in the details, participating in site assessments, workshops, and performing QA/QC on deliverables. Jeffrey Montano is the Master Planning Subject Matter Expert and will lead the planning and execution of the work, as well as perform additional QA/QC. Dave Westlund will lead the AESI team, leveraging his over 30 years of experience in cybersecurity and risk management. James Chacko will share the load with Dave, bringing the knowledge and experience that has earned him multiple cyber credentials to the details of this Master Planning effort. The remaining staff will all be involved in the workshops and developing the plan, focused on their specific areas of expertise. Professionals will be added as needed upon further definition of specific scope and schedule requirements. The resumes of the Key Personnel have been included on the following pages. Resumes for the additional staff named above are available upon request. Jeff Burton| Page 1 of 3 EDUCATION B.S., Mechanical Engineering, University of Nebraska, 1991 Lincoln, Nebraska PROFESSIONAL ASSOCIATIONS Professional Engineer KS #15579 Professional Engineer MO #2020027937 Professional Engineer FL #90208 OSHA 10 Hour Safety Training Certificate Jeff Burton, PE Vice President Jeff Burton is a highly skilled project manager with demonstrated accomplishments in engineering project pursuit and execution (including scope, schedule, and budget performance), client management and new client development, and team administrative leadership. As Vice President of Eramosa International, Inc., Jeff has responsibility for all aspects of the Eramosa Engineering’s U.S. business, including operations and team management, strategic growth, business development, project execution and performance, and conformance to quality standards. PROJECT EXPERIENCE Imperial Irrigation District (IID), WSA Capital Replacement Plan Update – Eramosa was retained by IID to update their Water System Automation Capital Replacement Plan. The new plan documented the existing SCADA assets (hardware and software), developed a conceptual design to upgrade their antiquated SCADA system, identified suitable replacements and upgrades, and provided an annual, budgetary cash flow over the 20-year program life of the Plan. As Project Manager and Lead Engineer, Jeff inspected approximately 25 of the 109 sites in the IID system and lead the development of a conceptual design that used standard configurations, equipment (including gates, actuators, instrumentation, VFD’s, backup generators, and PLC and SCADA hardware and software), and construction approaches for similar sites. Jeff collaborated with IID to develop an implementation schedule using identified risk criteria to prioritize and levelize the work. He then added budgetary costs to the schedule, then levelized the work with respect to IID resource availability and annual costs. Jeff then prepared the draft and final Plan reports and presented the findings to the Program Control Committee of stakeholders. Inland Empire Utilities Agency, SCADA Upgrade – As Project Director, Jeff provided project management of the preliminary design for SCADA upgrade for two facilities and complete design for two other facilities. These upgrades are moving the system from Foxboro to Rockwell Automation PlantPAx. At this point, one of the complete design facilities is complete, the two preliminary design projects have just been awarded to a Design-Build contractor and have just started the complete design of last facility to be upgraded. City of Kitchener, SCADA Master Plan – The City contracted Jeff’s team to develop a comprehensive SCADA Master Plan to define and document a roadmap for the implementation of the technology, practices and organization required to meet the City’s long-term vision for SCADA. The City was progressively Jeff Burton| Page 2 of 3 becoming more dependent on their SCADA system to maintain regulatory compliance and service levels. As a result, the City required that the new SCADA be designed to: (1) provide a high degree of reliability and system availability; (2) provide Operations staff with centralized monitoring and control; (3) provide historical reports and trending; (4) provide remote access to the HMI layer for monitoring and control of the system; (5) provide real-time monitoring of the system to allow Operations staff to respond quickly to regulatory compliance events such as spills; and (6) be based on mainstream vendor products used in the wastewater industry that have local distribution and support channels. The SCADA Master Plan assessed the SCADA systems deployed at twenty-three remote wastewater pumping states and consisted of Flyght (Xylem) pump controllers, Aquaview HMI software, and a 900 MHz radio network for communications with the remote outstations from City Hall. The final SCADA master plan report provided a strategic plan for the City to invest $3.5 million in SCADA upgrades over a 4 year period. Region of Durham, Water Treatment SCADA Upgrade - The Region of Durham initiated the Regional Water SCADA System Integration Program to manage the steps necessary to upgrade and integrate all its water supply SCADA systems into a single standardized system capable of being remotely monitored and controlled. The project is being implemented in a multistage approach, which started with the development of a SCADA master plan, followed by the detailed design and construction stages. The scope of services provided as the prime consultant include: performing onsite investigations and asset collection at all 65 water treatment facilities, defining high-level business requirements, defining technology alternatives, evaluating alternatives against the Region’s requirement, defining the future desired state, developing scope of work directives for all required SCADA upgrades to be performed during detailed design, developing a program roadmap and capital cost estimates, developing detailed design drawings and tender specifications, performing all required systems integration services, and providing contract administration / site supervision services. The SCADA Master Plan phase of the project was completed and is currently on the implementation phase. The implementation phase consists of a $22 million SCADA upgrade program for 6 water treatment plants (low lift, chemical, filters, high lift) and 59 remote outstations to the Region’s new SCADA standard. SCADA upgrades included the design/construction of a new 18 GHz/3.65 GHz wide area network, Ethernet local area networks at 6 water treatment plants, and retrofitting of existing control panels to accommodate the GE Rx3i controller hardware platform. The new SCADA system standard utilizes several hardware/software vendors including: GE iFIX, GE iHistorian, GE Change Management, GE Rx3i controllers, Solarwinds, ACP Thinmanager and Ignition. PRIOR TO ERAMOSA EXPERIENCE Black & Veatch (1997-2019) Project Manager 2 (2019) and Project Manager 1 (2016-2019) - Pursued (20%), captured (5%), planned (15%), staffed and executed (50%) engineering services projects in the Power Generation industry. Managed existing client relationships and developed new clients leading to increased revenue at mandated margins (10%). Engineering Manager/Assistant Project Manager (2013-2016) – Managed the project team and deliverables production to meet the contractual scope, schedule and budget while ensuring quality for multi-discipline engineering services projects (75%). Developed proposals and maintained client relationships, ensuring expectations were being met (25%). PGS Control/Electrical Section Head (2012-2015) - Directed the electrical / control engineering staff assignments for all PGS projects using domestic and international professionals. (20%) Administered, mentored and developed an assigned pool of professionals, including training, career growth and annual performance reviews. (30%) Project Discipline Engineer (2010-2013) - Planned (15%) and led (15%) all controls and electrical (aux power) activities, deliverables preparation (25%) and QA (25%) on assigned power generation services projects in accordance with the contractual scope, schedule and man-hour budget. Led proposal development (15%), provided training and mentoring of professionals and input to discipline standards, tools and processes (5%). Jeff Burton| Page 3 of 3 Lead Controls Engineer (2004-2010) - Planned (10%) and led (15%) all controls design activities, deliverables preparation (50%) and QA (15%) on assigned power generation services projects in accordance with the contractual scope, schedule and man- hour budget. Assisted with proposal development (2%), training and mentoring of professionals (3%), and provided input to discipline standards, tools and processes (5%). Lead Schematics Engineer (1999-2004) - Planned (10%), directed (15%) and checked (15%) the schematics/wiring design for a team of engineers and designers on assigned services and EPC power generation projects. Prepared the design for specific systems (60%). Schematics Design Engineer (1997-1999) - Prepared the control schematics and wiring diagrams on assigned systems for new, EPC power generation projects (100%). Representative Projects: Martin and Manatee Power Projects - Indiantown & Parrish, FL (2003-2004): Lead Schematic Engineer on this EPC project for concurrent design of two 4 x 1 combined cycle plants, including two existing and 6 new combustion turbines at two different sites, with a set of common deliverables. Planned the 7800 m-h schematics effort, lead the team, and personally designed the schematics and control logic for the low and MV switchgear, generator breakers, substation breakers, generator step-up transformers, protective relay trip scheme, and excitation. Killen Unit 2 DCS Retrofit - Manchester, OH (2004-2006): Lead Schematic and Control Engineer on this engineering services project to replace the existing controls systems on a coal-fired steam turbine generator with a DCS. Planned the schematics and controls efforts, lead the design, personally created the logic macro templates and specific control logic for unique equipment, and checked all revised control wiring diagrams and new wiring diagrams. Dell Dual Fuel Conversion Project - Dell, AR (2009-2011): Control and Electrical PDE on this engineering services project to add fuel oil combustion capability to two gas turbines on an existing, 2 x 1 CC unit, including replacing the DCS, upgrading the turbine controls, adding new switchgear, expanding the existing water treatment plant, and adding two fuel oil and one demineralized water storage tanks. Lead the overall design and personally designed the control logic macros, schematic standard templates, and reviewed and checked the Control and Electrical discipline drawings, reports and specifications prior to issue. AECI New Madrid Units 1 and 2 Controls Upgrades - Marston, MO (2011 -2013): PDE/EM on these 2 engineering services projects to replace the BOP and Aux Electric controls with a DCS, integrating with the existing Turbine and Boiler DCS's. This project was valued at over $3M in engineering services and included over 5000 hardwired I/O points. Lead the overall design and personally designed the control logic macros, schematic standards and templates, and reviewed and checked the Control and Electrical discipline drawings, reports and specifications prior to issue. General Electric (1991-1997) Field Service Engineer – Directed the installation of control and protection systems on combustion and steam turbine- generators and excitation systems, including both new unit and retrofit applications. Verified terminations, performed loop checks and calibrated instrumentation. Reviewed and modified control logic and graphics. Supervised start-up, initial synchronization and loading, performance testing, reliability runs and unit turnover. Representative Project: Texaco Refinery, South Sumatra, Indonesia (1993): Prepared the complete upgrade design for a 35MW simple-cycle combustion turbine, including I/O, logic, graphics, interconnecting wiring, and demolition plan. Supervised the installation, performed the checkout and commissioning, directed start-up, initial synchronization, loading, reliability run and turnover. Jeff Montano| Page 1 of 2 EDUCATION B.S.E.E.E., California State University, Sacramento Iil Project Management Fundamentals NEC 2014 PROFESSIONAL ASSOCIATIONS Professional Engineer, California & Oregon APEGA Alberta P.Eng. Jeff Montano, PE, P.Eng. Team Leader/Project Manager Jeff Montano is a seasoned Engineer with 20+ years experience in condition assessment, planning, design and project management for SCADA, DCS, electrical power, process, I&C, and communications. Jeff has extensive experience in design, construction, system integration, instrumentation & control, process systems, power systems, water, food & beverage, mining & material handling. He has experience in master planning, business systems, integration, configuration and training. PROJECT EXPERIENCE Napa Sanitation District, Napa, CA - SCADA Master Plan – Lead the effort to create a SCADA Master Plan for the Napa Sanitation District. Effort included Assessment, Industry Practices for SCADA, a Gap analysis and an Action Plan to progress the system along with the industry. San Juan Water District, San Juan, CA – SCADA Master Plan – Lead the effort to create a SCADA Master Plan for the San Juan Water District. Effort included Assessment, Industry Practices for SCADA, a Gap analysis and an Action Plan to progress the system along with the industry. Sacramento County Water Agency, Sacramento, CA - SCADA Replacement - Lead the effort to replace the SCADA system for county water agency. The existing system contains 180 remote sites located throughout the county running on proprietary software. The system contains 40 thousand tags and a communication system that connects remote sites with SCADA computers located at main and back-up control centers. Eagle River Water and Sanitation District, Vail, CO – SCADA Assessment – Develop Wastewater SCADA assessment and design replacement plan for three plants. Design replacement of Wonderware SCADA system at WWTP with GE’s Proficy to match water plants. Design system architecture to enable remote monitoring and control of WW plants. Jeff Montano| Page 2 of 2 City of Woodland, CA – SCADA Assessment, System Upgrade, Design – Develop city wide SCADA assessment and improvement plan for city owned utilities and Wastewater plant. Upgrade existing SCADA system at WWTP to newer version, adding screens and UV process areas along with construction review and coordination revolving around SCADA and its needs. Manage city wide communication master plan. Mammoth Lakes, CA – Wastewater Plant Expansion, MCWD – Responsible for design of electrical/I&C design build package and construction services during the installation of the SCADA/Electrical. All the older MCCs were replaced with new gear. A new ATS and Generator were added to provide back-up power to the plant. Coordination with contractors and equipment vendors to integrate new control panels and LAN linked to SCADA computers. Once WWTP control systems were installed the main SCADA system was upgraded from Intouch 8.11 to 9.5 to a new architecture and installed into racks located in Telco closet. Mammoth Lakes, CA – Water Treatment Plant Expansion, MCWD – Responsible for design of electrical/PID construction package and construction services during the installation of the SCADA and Electrical. This system consists of six existing pressure filters and seven new pressure filters. The plant electrical service was upgraded to 480VAC from 208VAC. The service transformer was replaced and coordination with the utility provider was accomplished. A new MCC, ATS, Generator and distribution panels were added to the plant. Coordination was done with contractors and system integrator. Alameda Flood Control Agency, Alameda, CA – Storm SCADA System – Responsible for configuration and construction services during the installation of the flood control SCADA system. This system has 20 pumping stations, a repeater site and a central control center. These sites are all linked using spread spectrum radios and dial-up modems for back-up to the SCADA computer network. The SCADA computer has remote dial-in access and control of the entire system. Tasks include electrical design packages, RTU programming, radio configuration and system networking. Santa Lucia Preserve, Carmel, CA - Water SCADA System – Responsible for construction services during the installation of the water SCADA system. This system has over 100 sites including wells, water treatment plants, booster stations and PRVs. These sites are all linked using spread spectrum radios, RS485, and DH+ to a central SCADA computer. The SCADA computer has remote dial-in access and control of the entire system. Tasks include electrical design package, RTU programming, radio configuration and system networking. Development of custom driver to capture flow meter totals. City OF Napa, CA – Hennessey WTP SCADA System Upgrade – Responsible for construction services during the installation of a new SCADA system at the Hennessey WTP. Responsibilities included submittal reviews, responding to construction questions and RFI’s, preparing change orders and site reviews of construction progress. South Bay System Authority, Redwood City, CA – Wastewater SCADA System Support – Responsible for control system modification to pump stations, and effluent pumping. Electrical changes to VFD in pumping stations including system commissioning and verification. Redesign of pump controls for VFD replacement and program commissioning on final effluent pump station. Placer County Water Agency Foothill WTP, Newcastle, CA – Plant Expansion – Responsible for control system modification to PLC5 and SCADA system for plant expansion including PLC programming, HMI modifications, start-up and testing of new water treatment plant. Doug Westlund P.Eng., MBA 1 / 2 Professional Summary Doug Westlund has more than 30 years’ experience in risk management, cyber security, and communications in the critical infrastructure markets. Doug is driven by ‘big picture’ and ‘long term’ strategies and implementations to achieve the right balance of today’s issues and budgets, while building towards the needs and solutions for tomorrow. His pragmatic approach connects governing boards, executive teams and operational teams for an aligned approach. Doug is a natural teacher and knowledge transfer to customers and team members is an innate element with all his work. Doug is a recognized industry leader in cyber security and maintains strong relationships with leading technology, industry and government organizations. Relevant Project Experience Strategic Planning  Developed methodology for operational risk management including risk and financial impact models  Developed multi-phase strategy for the Ontario Energy Board’s implementation of a provincial cyber and physical regulatory compliance framework  Developed cyber security and privacy risk profile tool in correspondence to security controls of the NIST Cybersecurity Framework  Developed approach to expand the utility cyber security program to the associated municipality/city as a whole  Developed and conducted risk management and cyber and physical security training for Utility Executive Teams and Board of Directors across the U.S. and Canada  Developed holistic Cyber Security Blueprint to guide planning, budgeting and implementation efforts for utility cyber and physical security programs  Developed 3 Year Technology Strategic Plan for worldwide network equipment supplier  Developed Telco data / IP Strategic Plan  Developed Business Plan successfully resulting in significant funding for firm  Developed company valuation models  Developed annual Strategic Plans for firm resulting in success in cyber security market  Developed international expansion strategy leveraging on government export programs  Presented how to develop and implement effective cyber security management to utility CEOs  Developed and successfully implemented strategy to address cyber security risks and liabilities associated with utility Board of Directors  Developed utility insurance cyber security risk management framework  Developed cyber security plan for oil & gas sector Areas of Expertise  Cyber & Physical Security  Risk Management  Communications  Utility Automation  Strategic Planning Education  MBA, Ivey School of Business, University of Western Ontario, 1989  B.A.Sc. in Engineering (Process Control), University of Waterloo, 1984 Professional Associations  Professional Engineers of Ontario (PEO) Doug Westlund P.Eng., MBA 2 / 2 SCADA & Utility Automation  Designed, developed and installed SCADA systems for industrial automation implementations in Korea, Mexico and the US  Developed new data communications algorithms between SCADA and RTU systems  Led team in developing industry’s first integrated SCADA cyber security console  Led team in developing integration of a cyber security platform with leading AMI vendor’s head end system  Led team in developing VMWare level integration of a cyber platform with a leading utility engineering applications vendor’s software suite Cyber & Physical Security  Led development of the Ontario Energy Board’s Cyber Security Framework which is North America’s first cyber and physical security regulatory framework for distribution utilities  Developed comprehensive risk management and cyber & privacy program development approach based on the NIST Cybersecurity Framework, the DOE ES-C2M2 maturity model, Generally Accepted Privacy Principles (GAPP), and water (AWWA) controls  Developed concept for innovative OT threat detection solution for electric utilities  Developed cyber security vulnerability assessment methodology for mid-market electric utilities  Conducted over 100 cyber security vulnerability assessments for generation, transmission and distribution electric utilities  Developed framework for Board level cyber and physical security monitoring and management using the NIST Critical Infrastructure Cybersecurity Framework  Regular presenter and trainer at APPA, NRECA and EDA conferences  Co-authored a cyber security primer document targeted at utility executives and Board members – this document is sold on the APPA bookstore website  Led technical team on developing and launching the industry’s first portable and extensible OT Unified Threat Management platform  Led professional services team on a two-year detailed AMI cyber security assessment project for a consortium of 18 distribution utilities and a one-and-a-half-year detailed AMI cyber security assessment project for a consortium of 15 distribution utilities  Developed a cyber security management model for Joint Action Agencies and Generation & Transmission entities  Developed a cyber security framework adopted by the Ontario Smart Grid Forum  Presented to the Ontario Energy Board, at their request, on the state of cyber security in Ontario  Member of the IESO’s NERC Reliability Standards Committee  Presented to the Commissioner of the Federal Energy Regulatory Commission, at his request, on effective cyber security solutions for the electric sector  Developed cyber security managed services model for electric utilities  Led a technical team on development of the industry’s first AMI collector Unified Threat Management platform capable of withstanding pole top environmental conditions  Led successful pilot with seven distribution utilities and their cyber security insurance provider including development of new risk management tools for the utilities and the insurance provider James Chacko CISSP, CISA, ITIL, CEH, CHFI 1 / 1 Professional Summary James Chacko is an astute and enthusiastic senior cyber security professional with over 15 years of progressive experience with emphasis on IT projects related to critical infrastructure, systems and application deployment, and integration with operations for the utilities industry. He has proven experience in operations and technical support, systems/network administration, business technical analysis and project management. Currently pursuing his MSc. in Cybersecurity (Cyber-physical Systems) from Georgia Institute of Technology, a knowledgeable Certified Information System Security Professional (CISSP), James can provide a holistic understanding of cyber security vulnerabilities in all areas of IT/OT infrastructure and enhances his extensive knowledge with experience in developing and implementing the policies and procedures critical to improving resiliency. As a Subject Matter Expert (SME), his project methodology is to deliver the best approach for the client, unbiased of a vendor, and give direction and skill transfer for improving a utility’s cyber security position and standards. Relevant Project Experience Cyber Security  Developed and implemented multiple patch management programs for various utilities across North America.  Supported the development of security architecture and policy documentation projects based on standards such as NIST Cyber Security Framework, NERC CIP, and Ontario Cyber Security Framework, providing ongoing support for revision and implementation.  Vulnerability assessments and penetration testing, including web application penetration testing for NB Power, ATCO, EPCOR, and Utilities Standards Forum (USF).  Inventoried utility assets for categorization and classification based on NERC CIP.  Documented a list of enabled listening ports on BCA’s in the OT environment, providing the requirement and justification based on NERC CIP for ATCO Electric.  Expert Security Analyst for closed loop monitoring services, providing Security Operations Sensor services (SOC) including ongoing monitoring of activity at the utility network level, translation of data logs and expert guidance on steps for remediation.  Researched next generation cyber security software applications and solutions.  Participated in the development of an American Public Power Association (APPA) survey to collect data and evaluate “data- in-motion”.  Streamlined the process for identifying and categorizing BES Cyber Systems and their associated BES Cyber Assets as High, Medium or Low, based on NERC CIP standards.  Development support of IT/OT Cyber Security training across North America for the utilities sector. Areas of Expertise  Standards, baselines, policies, procedures and guidelines  Disaster Recovery Planning  Systems and Process Audit  Risk Management  Governance and Compliance  Payment Card Industry – Data Security Standards (PCI-DSS) Education  Master of Science – Cybersecurity (Cyber- physical Systems), Georgia Institute of Technology, USA, in progress  Master of International Business, University of Wollongong, Australia, 2007  Bachelor of Technology – Information Technology, University of Madras, India, 2004 Professional Associations  International Information Security Certification Consortium (ISC2)  ISACA Bozeman SCADA Master Plan SOQ 2021 20 5.0 REFERENCES Imperial Irrigation District Water System Automation Capital Improvement Plan Update Contact Name: Sylvester Jones Role: Program Manager Contact Email: sjones@IID.com Contact Phone Number: (760) 339-9139 Riverside Public Utilities SCADA Design-Build Owner’s Engineer Contact Name: Mera Chaney Role: Project Manager Contact Email: mchaney@riversideca.gov Contact Phone Number: (951) 826-5025 Inland Empire Utilities Agency - Wastewater SCADA Master Plan, SCADA Migration Design & Implementation Support Contact Name: Travis Sprague Role: Capital Program Manager Contact Email: tsprague@ieua.org Contact Phone Number: (909) 994-1992 Napa Sanitation City SCADA System Master Plan Contact Name: Robin Gamble-Holley Role: Data Analyst Contact Email: rgamble@napasan.com Contact Phone Number: (707) 312-1619 San Juan Water District SCADA Master Plan Contact Name: Chris von Collenberg Role: IT Manager Contact Email: cvcollenberg@sjwd.org Contact Phone Number: (916) 791-6915 Bozeman SCADA Master Plan SOQ 2021 i Appendix A Representative Schedule IDTask ModeTask NameDurationStart FinishPredecessors1Bozeman (MT) Master Planning211 daysMon 8/2/21Mon 5/23/222Notice to proceed0 daysMon 8/2/21Mon 8/2/213Project Management211 daysMon 8/2/21Mon 5/23/224Project set-up5 daysMon 8/2/21Fri 8/6/2125Project intiation call1 dayMon 8/9/21Mon 8/9/2146Project kickoff mtg5 daysTue 8/10/21Mon 8/16/2157Weekly project calls200 daysTue 8/17/21Mon 5/23/2268200 - Documentation Request and Review20 daysTue 8/17/21Mon 9/13/219Submit RFI5 daysTue 8/17/21Mon 8/23/21610Document collection5 daysTue 8/24/21Mon 8/30/21911Document Review5 daysTue 8/31/21Mon 9/6/211012Workshop5 daysTue 9/7/21Mon 9/13/211113300 - Field Surveys20 daysTue 9/14/21Mon 10/11/2114Treatment plants5 daysTue 9/14/21Mon 9/20/211215Remote Sites5 daysTue 9/21/21Mon 9/27/211416Consolidate Data5 daysTue 9/28/21Mon 10/4/211517Staff Interviews5 daysTue 10/5/21Mon 10/11/211618400 - Assessment and Analysis15 daysTue 10/12/21Mon 11/1/2119Workshop ##15 daysTue 10/12/21Mon 10/18/2120Vision5 daysTue 10/12/21Mon 10/18/211721Workshop #25 daysTue 10/19/21Mon 10/25/2122Network5 daysTue 10/19/21Mon 10/25/212023Workshop #35 daysTue 10/26/21Mon 11/1/2124Documentation5 daysTue 10/26/21Mon 11/1/212225500 - Current State25 daysTue 11/2/21Mon 12/6/2126Draft Current State Report5 daysTue 11/2/21Mon 11/8/212427Submit Draft current State5 daysTue 11/9/21Mon 11/15/212628Client Review5 daysTue 11/16/21Mon 11/22/212729Current State Workshop5 daysTue 11/23/21Mon 11/29/212830Finalize Current State Report5 daysTue 11/30/21Mon 12/6/212931600 - Desired State30 daysTue 12/7/21Mon 1/17/2232Desired State Workshop5 daysTue 12/7/21Mon 12/13/213033Draft Desired State Report5 daysTue 12/14/21Mon 12/20/213234Submit Desired State Report5 daysTue 12/21/21Mon 12/27/213335Client Review5 daysTue 12/28/21Mon 1/3/223436Workshop5 daysTue 1/4/22Mon 1/10/223537Finalize Desired State Report5 daysTue 1/11/22Mon 1/17/223638700 - Master Plan Report75 daysTue 1/18/22Mon 5/2/2239Develop Project List5 daysTue 1/18/22Mon 1/24/223740Priortize Projects5 daysTue 1/25/22Mon 1/31/223941Submit Proposed projects5 daysTue 2/1/22Mon 2/7/224042Client Review5 daysTue 2/8/22Mon 2/14/224143Draft Schedule5 daysTue 2/15/22Mon 2/21/224244Draft Estimates5 daysTue 2/22/22Mon 2/28/224345Workshop projects with client5 daysTue 3/1/22Mon 3/7/224446Draft Master Plan Development5 daysTue 3/8/22Mon 3/14/224547Draft Master Plan submittal5 daysTue 3/15/22Mon 3/21/224648Client review5 daysTue 3/22/22Mon 3/28/224749Master Plan Workshop5 daysTue 3/29/22Mon 4/4/224850Final Master Plan5 daysTue 4/5/22Mon 4/11/224951Submit Final Master Plan5 daysTue 4/12/22Mon 4/18/225052Draft Presentation5 daysTue 4/19/22Mon 4/25/225153Final Presentation5 daysTue 4/26/22Mon 5/2/225254Project Complete0 daysMon 5/23/22Mon 5/23/2253FF+15 days8/25/23JunJulAugSepOctNovDecJanFebMarAprMayJunJulQtr 3, 2021Qtr 4, 2021Qtr 1, 2022Qtr 2, 2022Qtr 3, 2022TaskSplitMilestoneSummaryProject SummaryInactive TaskInactive MilestoneInactive SummaryManual TaskDuration-onlyManual Summary RollupManual SummaryStart-onlyFinish-onlyExternal TasksExternal MilestoneDeadlineProgressManual ProgressPage 1Project: TTSA SCADA & IT MPDate: Wed 7/14/21 Bozeman SCADA Master Plan SOQ 2021 ii Appendix B Attachment A – Nondiscrimination and Equal Pay Affirmation Attachment A NONDISCRIMINATION AND EQUAL PAY AFFIRMATION name of entity submitting) hereby affirms it will not discriminate on the basis of race, color, religion, creed, sex, age, marital status, national origin, or because of actual or perceived sexual orientation, gender identity or disability and acknowledges and understands the eventual contract will contain a provision prohibiting discrimination as described above and this prohibition on discrimination shall apply to the hiring and treatments or proposer’s employees and to all subcontracts. In addition, ____________________________________(name of entity submitting) hereby affirms it will abide by the Equal Pay Act of 1963 and Section 39-3-104, MCA (the Montana Equal Pay Act), and has visited the State of Montana Equal Pay for Equal Work “best practices” website, https://equalpay.mt.gov/BestPractices/Employers, or equivalent “best practices publication and has read the material. Name and title of person authorized to sign on behalf of submitter Bozeman SCADA Master Plan SOQ 2021 ii