Your ERP Done. Certified.
In 48 hours.
Your RRA is filed. Your ERP needs to follow. Federal law requires ERP certification within 6 months of your RRA certification — the hard outer deadline is December 31, 2026. If your RRA is more than 6 months old, your penalty clock has already started. Meanwhile, Iranian-affiliated actors are actively targeting water PLCs across 12 states right now (CISA AA26-097A) — and your ERP is your documented response plan for exactly that scenario. KORVA delivers a complete, AWIA-compliant Emergency Response Plan in 48 hours. Certified. Defensible. On record when CISA or EPA comes calling.
48 hours to certified. Well before your ERP deadline.
Your ERP deadline is 6 months from your RRA certification date — with December 31, 2026 as the hard outer limit for this recertification cycle. KORVA delivers your complete ERP package in 48 hours, giving you weeks or months of runway to review, certify, and submit before that clock runs out.
What your ERP covers — domain by domain.
AWIA §2013 requires your ERP to address emergency response protocols for each domain where your RRA identified significant hazards. KORVA builds each domain section against your specific operational context.
Physical & Infrastructure
Response protocols for physical attacks, tampering, equipment failure, and infrastructure damage. Includes isolation procedures, backup operations, and restoration sequences.
Water Quality & Contamination
Intentional and unintentional contamination response — notification protocols, sampling, public communication, isolation, and alternative supply activation.
OT/SCADA & Cyber Incidents
Response procedures for cyberattacks on operational technology: detection, isolation, manual override, vendor notification, CISA reporting, and system restoration.
Natural Hazards & Climate Events
Response protocols for extreme weather, flooding, drought, freezing, seismic events, and other natural hazard scenarios identified in the RRA hazard assessment.
Staffing, Roles & Communications
Emergency staffing plan, decision authority matrix, internal escalation protocols, and external communication procedures — utilities, regulators, media, public.
Mutual Aid & Coordination
Coordination protocols with neighboring utilities, state emergency management, federal agencies (EPA, CISA, DHS), law enforcement, and regional water authorities.
What you receive in 48 hours.
A complete ERP package built to align with your RRA findings — not a generic template. AWIA §2013 compliant, certifiable, and ready for EPA submission.
-
✓Aligned with your existing RRA Your ERP is built to be internally consistent with the hazards identified in your RRA — satisfying the AWIA requirement that the two documents align. If you need both, the Bundle handles this automatically.
-
✓All 6 AWIA response domains addressed Physical security, contamination, cyber/OT incidents, natural hazards, staffing & communications, and mutual aid — each with specific, operational response protocols.
-
✓Certifiable under SDWA §1433 Your ERP is written to meet EPA certification requirements — including a certification memo formatted for EPA submission. Complete the certification yourself with our step-by-step checklist.
-
✓Operationally specific to your system Your intake data, population served, source type, system configuration, and operational context are built into every protocol. Not a fill-in-the-blank template.
4 deliverables. Everything you need to certify.
Every ERP Package includes the complete certification package — not just the document. You have everything to review, certify, and submit without a return trip.
Emergency Response Plan
The full ERP document — complete, AWIA §2013 compliant, covering all 6 required domains with response protocols specific to your utility type, population, source, and RRA findings.
Certification Memo
A formatted certification memorandum for EPA submission, affirming that the ERP has been reviewed and is consistent with the findings of the utility's most recent RRA.
EPA Submission Package
Complete EPA submission package with formatted cover letter, documentation checklist, and filing instructions for your primacy state — ready for submission without additional preparation.
Implementation Checklist
A 12-item post-certification checklist covering staff training, document distribution, annual review scheduling, and integration with mutual aid agreements — so the ERP doesn't just certify, it works.
KORVA vs. every other path to ERP compliance.
One table. Every option. Judge by timeline, cost, and whether it actually closes the gap before your deadline.
| Factor | KORVA ERP Package | Engineering Firm | DIY / Template |
|---|---|---|---|
| Price | $3,997 | $20,000 – $40,000+ | $0 – $2,000 (template cost) |
| Delivery timeline | ✓ 48 hours | ✗ 6–16 weeks | ⚠ Weeks to months |
| Closes gap before Dec 31? | ✓ Yes — 48 hours | ⚠ Possible, but 6–16 weeks | ⚠ Only if you write it correctly |
| What you provide | 20-minute intake form | Months of data collection, site visits, interviews | Everything — template fills nothing for you |
| RRA alignment | ✓ Built in | ✓ Yes — if RRA is current | ⚠ You must align manually |
| Regulatory defensibility | ✓ AWIA §2013 / SDWA §1433 | ✓ Yes — at significant cost | ⚠ Only if you write it correctly |
| Certification package included | ✓ Memo + submission package | ⚠ Varies by firm | ✗ You prepare separately |
| Penalty avoidance confidence | ✓ High — certified well before deadline | ⚠ Possible, at significant cost and time | ⚠ Depends on document quality |
We know what your ERP needs to address before you submit your intake.
KORVA Sentinel maintains 27,575+ water utility records sourced from EPA SDWIS and AWIA federal certification data. When you submit your intake, we already have your PWSID, population tier, source type, violation history, and AWIA certification status for both your RRA and ERP. Your intake adds the operational context public records can't tell us — producing an ERP with the specificity of an on-site engagement at a fraction of the timeline.
From order to certified ERP in 48 hours.
Four steps. 20 minutes of your time on intake. Full ERP package in your inbox within 48 hours of complete intake submission.
Order & Intake
Pay $3,997 and complete the intake form — about 20 minutes. Your utility's PWSID, RRA status, system configuration, operational context, and known hazard areas. The more complete, the stronger your ERP.
ERP Build
KORVA Sentinel builds your Emergency Response Plan against your intake data, EPA record, and your RRA findings. All 6 required AWIA domains addressed with protocols specific to your system.
Delivery — 48 Hours
All 4 deliverables arrive in your inbox: complete ERP document, certification memo, EPA submission package, and implementation checklist. Review and request any revisions before certifying.
Certify & Submit
Follow the submission checklist to certify your ERP with EPA. KORVA remains available for any revisions through your certification deadline. Once certified, your compliance obligation for this cycle is complete.
The fastest path to closing your ERP compliance gap.
Your ERP deadline is 6 months from your RRA certification date — December 31, 2026 at the latest. Miss it, and civil penalties up to $71,545/day can apply. Meanwhile, Iranian-affiliated actors are actively exploiting water system PLCs across 12 states right now (CISA AA26-097A). Your ERP is your documented plan for exactly that scenario — the one document that shows CISA and EPA you have a response on file. KORVA closes the gap in 48 hours. No site visits. No multi-week engagements. No five-figure engineering contracts.
Need a Professional Engineer seal?
Some utilities — particularly those subject to state PE requirements or serving as a procurement reference — need their ERP reviewed and sealed by a licensed Professional Engineer. KORVA offers PE-sealed review as a separate engagement.
Questions we hear every time.
Possibly yes. AWIA §2013 requires water systems to certify their Emergency Response Plan within 6 months of certifying their Risk & Resilience Assessment. June 30, 2026 is the general AWIA recertification deadline — but your ERP obligation is tied to your RRA certification date, not to June 30 itself. If your RRA was certified in June 2025, your ERP deadline was December 2025. If your RRA was certified in September 2025, your ERP deadline was March 2026. If your RRA was certified before December 2025, your ERP deadline has already passed. The $71,545/day civil penalty clock can begin from the day your 6-month window closed — not from when someone notifies you. If your ERP is uncertified and your RRA is more than 6 months old, the time to act is now, not June 30.
Almost certainly yes. AWIA §2013 requires your ERP to be updated within 6 months of each RRA recertification, and to reflect the specific hazards your RRA identified for this cycle. A 2021 ERP may not satisfy the 2026 recertification cycle — particularly if your RRA findings have changed, your infrastructure has changed, or the threat landscape has evolved. The safest path is a new ERP built specifically for this cycle.
Your intake form includes questions about the key findings and hazard areas from your RRA — what domains showed significant risk, what vulnerabilities were identified, what baseline conditions your RRA documented. We use that information to align your ERP's response protocols to your RRA findings. If your RRA is available as a document, you can attach it to the intake and we'll build directly from it. If you need both documents, the AWIA Bundle builds them from a single intake, with automatic alignment.
Yes. The ERP Package is built to meet AWIA §2013 and SDWA §1433 certification requirements. Your package includes a certification memo formatted for EPA submission and a submission checklist. The certification itself is a utility action — you review the document, confirm it meets your operational reality, and certify it to EPA. KORVA provides any revisions needed through your certification deadline. We've built the document to be certifiable; the certification step is yours to complete.
Order the AWIA Recertification Bundle ($5,497). It includes both the RRA and ERP built from a single intake — no duplicate questions, automatic alignment between the two documents, and $2,497 in savings versus ordering them separately. If you're not sure whether you need one or both, the AI Compliance Risk Snapshot ($497) will tell you definitively — and the $497 is credited toward whichever package you order.
The ERP deadline is 6 months from your RRA certification date, with December 31, 2026 as the hard outer limit for this recertification cycle. June 30, 2026 is the RRA deadline — not the ERP deadline. If your RRA was just certified in June 2026, your ERP is due by December 2026. If your RRA was certified earlier — say, February 2026 — your ERP is due August 2026. Order today, complete intake in 20 minutes, and your ERP package is delivered within 48 hours — giving you months to review, certify, and submit before your window closes. If your RRA was certified in the first AWIA cycle and your ERP was never updated, that original deadline has already passed; get it certified now to stop the exposure.
The ERP Package ($3,997) delivers only the Emergency Response Plan and its certification materials — the right choice if your RRA is current and certified for this cycle. The AWIA Recertification Bundle ($5,497) delivers both the RRA and ERP from one intake, with built-in alignment between them. The Bundle costs $5,497 vs. $7,994 if you bought both packages separately — a savings of $2,497. If your RRA is current, buy the ERP Package. If either document is missing or outdated, buy the Bundle.
Your ERP. In 48 hours.
One intake form. 20 minutes. Your ERP — built, certified, and documented. Iranian-affiliated actors are actively targeting water utilities right now (CISA AA26-097A). Your ERP is your on-file response plan for exactly that scenario. Don't let the exposure compound another day.
The KORVA ERP Package delivers an AI-assisted Emergency Response Plan built from your intake data, EPA records, and KORVA Sentinel's 27,575-record compliance database. It is not legal advice. The ERP document is designed to meet AWIA §2013 and SDWA §1433 certification requirements; however, EPA acceptance, penalty avoidance, and regulatory outcomes cannot be guaranteed and depend on your utility's timely certification, accurate intake submission, and compliance with applicable primacy state requirements. Utilities should verify specific obligations with EPA, CISA, state primacy agencies, and qualified legal counsel before final compliance action. Civil penalty figures reflect the 40 CFR §19 statutory maximum; actual enforcement is at EPA discretion. PE-sealed review is a separate engagement — contact sentinel@korvasystems.com for availability and pricing.