Enacted on June 12, 2002, Public Law 107-188 requires public and privately owned community potable water systems to perform a vulnerability assessment (VA) if they serve populations greater than 3,300 people. In response, we reviewed a confidential municipal client's system to identify critical points and other vulnerabilities which were entered into the Vulnerability Self Assessment Tool (VSAT) for water and wastewater utilities to develop a risk profile. This risk profile identified areas needing improvements to reduce risk to an acceptable level.