WorkflowWater Operations

Drinking Water Incident Management

Drinking water incident management that reaches priority households first and lifts the boil water notice the hour it is safe

Boil-water notices lifted the hour the clear criteria are met, every step on one clock.

See one case, screen by screen ↓
demo212of 212priority households reached in 1 h 55 m from the first notice, inside the 2-hour target — water-dependent homes first, by phone
demo9of 9sample points with three clean sets in a row, plus chlorine, turbidity, pressure and the repair, before a lift notice is drafted
demo4of 4regulator deadlines met so far when the notice is lifted, as the closure report counts them — the regulator was phoned 39 minutes after the decision
demo21minfrom the last clean sample to the notice lifted for 6,412 properties, with two signatures and public health agreement
The problem

Why a boil water notice stays in force longer than the water is unsafe

When a trunk main bursts, pressure drops or a sample comes back positive, the duty manager has to decide fast whether thousands of homes must boil their water. Then the incident runs for days: the water quality team plans sampling in a spreadsheet and phones the samplers, lab results arrive as PDFs, communications writes each notice from a Word template and pushes it through a mass-notification tool, customer care pulls the priority register by postcode, and someone writes the regulator update by hand every morning.

What goes wrong is rarely the chemistry. Notices go out late or say different things in different channels. A care home or a home dialysis patient is missed. A positive result sits unread in a PDF. And the lift waits for someone to collate the last results against the clear criteria — often hours after the final clean sample came back — while every property in the zone keeps boiling water. Lift too early and the notice has to be reissued, which costs trust; reconstructing the timeline for the regulator afterwards takes weeks.

typical24hoursto reach the public with a Tier 1 notice, such as a boil water emergency, under the US EPA Public Notification Rule
typical~7,000a yeardrinking water advisories in the US (20,978 in 2012–2014), about half of them precautionary, commonly after a main leak or break
Where an incident's hours goestimated
By hand10 days
With the solution2 days
  • Scoring the alarm against the triggers and deciding the notice1.5 → 0.7 d
  • Drafting the first notice in every channel and language1 → 0.2 d
  • Building the priority call, visit and bottled-water lists1 → 0.2 d
  • Collating lab results against the clear criteria, each round3 → 0.2 d
  • Writing the daily regulator updates1.5 → 0.3 d
  • Drafting the lift notice and collecting the signatures2 → 0.4 d

Estimated split for one precautionary boil water notice, in hours of the incident team's time, by hand and with the solution.

How it works

How a boil-water incident runs

Seven agents assess, sample, notify and track the clear criteria; the incident commander and water quality manager decide.

What comes in
Signals in4 sources · pressure alarms, lab results, register, templates
Agents at work
Trigger assessoris it a notice?
Then
Notice writer
Vulnerable customer coordinator
Then
Sampling planner
Results reader
Then
Clear criteria trackerclean in a row
Regulator reporter
A person decides
Incident commanderdecides, signs, lifts
What comes out
Notices in 6 channels
Lift when the criteria are met
Regulator reports and closure
One case, step by step

One boil water notice, from a burst main to the lift

At 03:12 on Friday 9 October 2026, the 600 mm trunk main TM-14 bursts at Corran Road. Pressure in the Kestrel Rise zone of Lumina Water falls below 1.0 bar, and 6,412 properties — about 14,870 people — are about to be told to boil their water. Here is what happens next, screen by screen, in the working solution.

  1. 01Fri 03:12–04:10

    The alarm is scored against the triggers

    Trigger assessor

    The burst alarm on TM-14 comes in at 03:12, with flow at the Hollins Edge outlet up 340%. By 03:19, pressure in KR-2 is below 1.0 bar at 6 of 11 loggers; the lowest is 0.3 bar at Larkfield. The trigger assessor scores it against Lumina's triggers and finds TR-3 met: below 1.0 bar for 51 minutes, with low points in the zone. Smaller alarms elsewhere stay on a watch list, not an incident.

    “Trigger TR-3 met (below 1.0 bar for 51 minutes, low points in zone); precautionary notice advised” — a person decides.

  2. 02Fri 04:52–05:40

    Helen decides the notice and tells the regulator

    Helen Marsh · Water Operations Duty Manager, incident commander

    At 04:52 Helen declares Category 2 incident WQ-26-031 and decides a precautionary boil water notice. The notice writer has notice #1 drafted from template BW-1 by 05:02, in six channels and four languages. Helen phones inspector Daniel Price at the Water Quality Regulator at 05:31, 39 minutes after the decision, and notice #1 goes at 05:40: 5,204 texts, 1,108 voice calls, 3,980 emails, the website, social and Halden FM, and leaflets to all 6,412 doors by 11:00.

    Report clock: phone within 1 hour · written report within 24 hours · daily update by 12:00 · closure within 20 working days.

  3. 03Fri 05:20–07:35

    Priority households hear first

    Marcus Obi · Customer care lead

    The vulnerable customer coordinator matches the zone to the priority register: 212 households, 9 of them water-dependent, and 8 sensitive sites. Elmwood House care home is called at 06:05, Mr D. Kowalczyk on home dialysis at 06:20 in Polish, the schools by 07:14. Home dialysis patients get 48 litres of bottled water a day, the care homes two pallets. The last priority household is reached at 07:35 — 1 h 55 m after the notice, inside the 2-hour target.

    Needs codes only — “Home dialysis · MD-02” — never medical detail.

  4. 04Fri 16:00 – Sat 11:45

    Larkfield comes back with coliforms

    Dr Samir Qadri · Water Quality Manager

    The sampling planner built plan SP-KR2-01 at 06:10: nine points, daily rounds, samplers and bottles booked. Round 1 at SP-04 Larkfield, the zone's low point, finds total coliforms 2 /100 ml, E. coli absent, free chlorine 0.18 mg/l. The results reader proposes a flush and three repeats; Samir agrees, Gary Fenton flushes hydrant H-2207, and the repeats upstream, at the point and downstream are all clean.

    Results reader: authorised results only — it proposes the follow-up; the water quality manager decides.

  5. 05Tue 10:20

    Four days under notice, one point to go

    Helen Marsh · incident commander

    The board shows 4d 04:40 under notice. On the clear criteria grid, eight of nine points have three clean sets in a row; SP-04 has two, and its round 4 sample S-26-41187 is incubating at the Ashcombe laboratory, due 10:30. Turbidity, pressure and the repair are already green. Regulator update #4 is drafted and due at 12:00.

    “Waiting for SP-04 Larkfield, round 4. Its third clean sample in a row is due from the Ashcombe laboratory at 10:30. Chlorine there must also reach 0.5 mg/l.”

  6. 0610:31

    The last clean result arrives and the grid turns green

    Results reader and Clear criteria tracker

    S-26-41187 is authorised by Ruth Okafor at 10:29: total coliforms and E. coli absent in 100 ml, chlorine 0.61 mg/l, turbidity 0.22 NTU. The tracker recounts: SP-04 now has rounds 2, 3 and 4 clean, so every line of rule LC-2 is met. It drafts the lift notice for 6,412 properties, the regulator letter and 212 lift calls, then stops and waits for two signatures.

    “All clear criteria met at 10:31. Lift notice drafted for 6,412 properties. Nothing goes out until you and Samir sign.”

  7. 0710:32

    The lift notice, already written

    Notice writer

    The lift notice is filled from template BW-L with the facts of this incident: safe to drink from 10:52, 31 samples at 9 points, Larkfield's third clear result. The health advice stays exactly as approved — run the cold kitchen tap for 2 minutes, empty ice trays and jugs, flush drinks machines before reopening. It is ready in English, Polish, Romanian and Portuguese, for six channels.

    Health advice wording is locked to the approved template; the notice writer fills in facts only.

  8. 0810:41–10:44

    Two signatures and public health agreement

    Helen Marsh, Dr Samir Qadri and public health

    Dr Anya Kowal of the Halden Public Health Office agrees by phone at 10:41, recorded by Samir. Helen signs at 10:43; Samir signs on his phone at 10:44. Until all three are on the notice, the lift button stays disabled.

    Nobody lifts alone: commander and water quality manager sign, public health is consulted.

  9. 0910:52 · lifted

    Every channel at once, 21 minutes after the last clean sample

    Helen Marsh · incident commander

    Helen lifts the notice. Texts, voice calls, emails, the website, social and leaflets go to 6,412 properties at the same minute, and the 212 priority households are called with the lift script. The regulator reporter drafts the lift notification for Helen to submit. The whole incident ran 4 days 5 hours 12 minutes.

    “Notice lifted at 10:52 · 21 minutes after the last clean result”

  10. 10After the lift

    The closure report drafts itself from the log

    Regulator reporter

    The closure report is drafted from the append-only incident log: summary, timeline, 31 samples with no E. coli, customers and notices, cause and actions. The main, cast iron laid in 1962, cracked around a joint, most likely from ground movement after 41 mm of rain; Larkfield's positive points to an air valve chamber at H-2207 that floods in heavy rain. It is due to the regulator by Tue 10 Nov, with Samir as reviewer.

    Proposed actions: raise and seal the chamber at H-2207 · add SP-04 Larkfield to routine sampling · survey TM-14 · a second pressure logger at Larkfield.

Who it’s for

Built for everyone on the incident team.

The same boil water notice, seen by the five people who run it — what their incident looked like before, and what it looks like now.

HM
Helen MarshWater Operations Duty Manager, Lumina Water · incident commander for WQ-26-031
Incident commander
Before
Runs the incident from a whiteboard, a spreadsheet and a dozen email threads, and waits for someone to collate the results before she can decide the lift.
Now
Runs it from one board and one clock, signs every notice, and decides the lift the minute the criteria turn green. “I want to lift the notice the hour it is safe, not the evening after.”
DS
Dr Samir QadriWater Quality Manager · owns the sampling plan, agrees the lift
Water quality manager
Before
Plans sampling in a spreadsheet, phones the samplers and reads lab PDFs one by one. “One positive at Larkfield and the whole zone waits.”
Now
Sees every point's clean streak, every result with its chain of custody, and the follow-up proposed for a positive. “Show me the streak.”
BL
Bethan LloydCommunications lead · notices in six channels and four languages, media
Communications lead
Before
Rewrites each notice from a Word template for every channel and language, under the clock.
Now
Gets every notice drafted from the approved template with the incident's facts, in four languages, and approves the translations. “Every channel has to say the same thing, at the same minute.”
MO
Marcus ObiCustomer care lead · priority customers, bottled water, call volumes
Customer care lead
Before
Pulls the priority register by postcode and builds the call list by hand while the phones ring.
Now
Gets the call, visit and bottled-water lists matched to the zone, with first contact tracked against the 2-hour target. “Two care homes, four home dialysis patients. They hear from us first.”
GF
Gary FentonNetwork field lead · repair, flushing, disinfection, valve operations
Network field lead
Before
Waits for someone to read the lab PDF before he knows a positive at Larkfield needs a flush.
Now
Has his field jobs on the board — stand by at hydrant H-2207, flush again if SP-04 fails — and every repair and valve operation on the incident log with its work order. “The main's back. Tell me where to flush.”
Built on the engine

7 agents. Each with one job, and hard limits.

Seven agents assess, sample, notify and track the clear criteria; the incident commander and water quality manager decide.

Trigger assessor

Reads pressure and flow telemetry, burst alarms, lab alerts and customer contacts, scores each against triggers TR-1 to TR-6 and proposes the notice decision with its evidence and the properties in the zone. Below a trigger, it opens a watch item.

  • Never declares an incident
  • Never issues a notice — a person decides
Sampling planner

Builds the sampling plan from the zone inlet, the repair, low points, dead ends, schools and care homes; plans daily rounds after flushing, books samplers and lab slots and tracks every bottle from tap to lab.

  • Never moves or drops a sample point without the water quality manager
Results reader

Reads each result from the laboratory system once it is authorised, compares coliforms, E. coli, chlorine and turbidity with the clear criteria, and for a positive proposes flushing and repeats upstream, at the point and downstream.

  • Authorised results only — never treats a result as clean before the lab authorises it
  • Proposes the follow-up; the water quality manager decides
Clear criteria tracker

After every result, recounts the clean run at each point and checks chlorine, turbidity, pressure and the repair. When every line is met, it drafts the lift notice, the regulator lift notification and the priority call list, and asks for signatures.

  • Never lifts a notice
  • Two signatures, and public health consulted, before any lift
Notice writer

Fills the approved templates — boil water, lift, do not drink — with the zone, times, water stations and phone line, in English, Polish, Romanian and Portuguese, and checks every number against the incident.

  • Never sends a notice
  • Health advice wording locked to the approved template
Vulnerable customer coordinator

Lists every priority household, care home, school, surgery and food business in the zone, puts water-dependent homes first by phone in their language, plans daily bottled water and tracks first contact against the 2-hour target.

  • Shares needs codes only, never medical detail
  • Never closes a contact without an outcome
Regulator reporter

Drafts the written, daily, lift and closure reports from the incident log, samples, notices and contacts, puts each deadline on the incident clock, and cites every fact.

  • Never submits — the incident commander submits
  • Every fact cited
Incident team

Commander decides and lifts, water quality manager agrees, public health consulted. The agents propose; a named person decides.

Ask in plain words

Ask about the incident, in plain words

Ask about the incident, a sample, a notice or a customer. Every answer cites its source; notices, the lift and regulator reports are signed by people.

What is still stopping the lift?

One sample point. SP-04 Larkfield had total coliforms in round 1 on Friday, so rule LC-2 needs rounds 2, 3 and 4 clean there. Rounds 2 and 3 are clean; round 4 (S-26-41187) is due from Ashcombe at 10:30. Chlorine at SP-04 was 0.48 mg/l in round 3 and must reach 0.5. Everything else is met: the other 8 points, turbidity, pressure and the repair.

Why did Larkfield fail on Friday?

Round 1 at SP-04 found total coliforms 2 per 100 ml, E. coli absent, chlorine 0.18 mg/l. Larkfield is the zone's low point, where pressure fell to 0.3 bar at 04:20. Gary flushed hydrant H-2207 on Saturday and three repeats upstream, at the point and downstream were all clean.

Has every priority customer been reached?

Yes. All 212 priority households in the zone were reached by Fri 07:35, 1 hour 55 minutes after notice #1. The 9 water-dependent homes, including 4 on home dialysis, get bottled water every day, and both care homes get 2 pallets a day. 61 food businesses were told by email and phone.

Draft today's regulator update

Update #4 is drafted and due at 12:00. It states the notice, the 31 samples, the SP-04 history and the priority customers, each line cited to the log, and proposes the lift for this morning if round 4 is clean. You submit it; I never do.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

The incident boardThe incident clock, the zone map with every sample point, the clear criteria grid, the run log, actions by role and every notice sent.
Incidents and watch itemsThis year's water quality incidents and the alarms the trigger assessor is watching below a trigger.
Regulator reportsThe report clock with every obligation, the reports sent and today's update drafted with each fact cited.
Priority customers and sensitive sitesEvery priority household and sensitive site in the zone, with its need, support and first contact, and the bottled water stations.
The sampling planThirty-one samples at nine points with sampler, result, chlorine and turbidity, and why Larkfield needed a fourth round.
Clear criteria metThe last clean result read in, every line of rule LC-2 green, and the lift notice drafted for signature.
The lift noticeDrafted from the approved lift template in four languages and six channels, waiting for two signatures.
Signed and agreedThe incident commander and the water quality manager sign; public health agreement is recorded.
Notice liftedEvery channel sent to 6,412 properties at once, 21 minutes after the last clean result.
The board after the liftTime under notice stopped at 4d 05:12, every check in the run log done and the closure report drafting.
The closure reportSummary, key times, samples, customers, cause and actions, drafted from the incident log for the regulator.
The incident logEvery event and decision in order, person or agent, with its source — append-only.
Your rulesTriggers, clear criteria, clocks and approvers, saved as a draft for the water quality director to approve.
Governance

Built for a water quality incident: signed, cited, on the record.

Nobody lifts aloneEvery notice and the lift need two signatures — the incident commander and the water quality manager — and public health is consulted before any lift. Regulator reports are submitted by the commander only.
Agents draft; people declare, notify and liftThe agents score alarms, count clean samples, match customers and draft notices and reports. None of them declares an incident, sends a notice, lifts a notice or submits to the regulator.
Only authorised results countA sample is clean only once the laboratory has authorised it. A positive gets a proposed follow-up — flush, repeat upstream, at the point and downstream — and the water quality manager decides.
Health advice wording is lockedNotices are filled from templates approved by the public health office — BW-1, BW-L and DN-1. The agents fill in facts only; the health advice never changes.
Every fact cites its sourceEach line of a notice, regulator update and closure report points to its sample ID, telemetry tag, work order or log entry. Priority customers are shared by needs code only.
An append-only incident logEvery event and decision is recorded in order, with who made it — person or agent — and its source. The log is the closure report's timeline, and changes to the incident rules wait for the water quality director's approval.
Configuration

Your incident plan's rules, not ours

Triggers, clear criteria, clocks, approvers, channels and templates are settings. Changes are saved as a draft and the water quality director approves them before they apply to the next incident.

SettingDefaultChoose from
TR-3 · Pressure below1.0 bar for 30 minPressure and minutes set by the utility; TR-1 (E. coli present) is always on, alongside coliforms, turbidity, chlorine and taste or odour triggers
Clean sets in a row at every point3 setsNumber of consecutive clean sets the tracker counts before it drafts a lift
Hours between sets, at least18 hMinimum hours between sample sets at the same point
Free chlorine at every point0.5 mg/lMinimum free chlorine, with turbidity under 1 NTU and pressure held at 2.0 bar for 24 h
Main repaired, flushed and disinfectedOn, lockedAlways part of the clear criteria
Regulator clocksPhone 1 h · written 24 h · daily 12:00Hours and time of day on the incident clock; closure report in 20 working days
Every priority household reached2 hHours from the notice; the first customer notice has its own 2-hour target, and priority households by phone first is locked on
Channels and languagesAll onText, voice call, email · website, app, social, local radio · leaflet to every door · English, Polish, Romanian, Portuguese
Connections

Works with the systems an incident already runs on

Network telemetrypressure loggers, flow meters and burst alarms from SCADA
Laboratory systemauthorised coliform, E. coli, chlorine and turbidity results, with chain of custody
Priority register and sensitive siteswater-dependent homes, care homes, schools, surgeries and food businesses by needs code
Notification channelstext, voice, email, website and app, social, local radio and leaflet drops
Incident plan and templatestriggers, clear criteria and approved boil water, lift and do not drink wording
Work ordersrepair, flushing, disinfection and valve operations from the field
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
2hours
to tell and supply every priority household and sensitive site in the zone
212 of 212 reached
Kestrel Rise, in 1 h 55 m
typical
24hours
legal limit for the first public notice of a boil-water situation, met with notices drafted from approved templates
target
21min
from the last clean sample to the notice lifted, where collating results commonly takes hours
Todayhours to collate
With agents21 minutes

“demo” = seen in the working solution, on its sample incident data · “estimated” = our estimate (the hours split) · “typical” = published figures: US EPA Public Notification Rule, 40 CFR 141 Subpart Q (Tier 1 notice within 24 hours); Reynolds et al., via the University of Michigan Graham Sustainability Institute (20,978 US drinking water advisories in 2012–2014, about 53 % precautionary). On lifting, Michigan EGLE guidance asks for two consecutive clean sets 24 hours apart, and Indiana IDEM recommends a second set 24 hours later; the sample utility's rule asks for three. Lumina Utilities, Lumina Water, the Kestrel Rise zone, the regulator, the public health office and the people, places and records named on this page are fictional — characters and sample data in the working solution.

Questions

What water utilities ask us about boil water incidents.

What is drinking water incident management software?

Software that runs a boil-water, do-not-drink or contamination incident from the first alarm to the closure report: the decision, the notices, sampling, priority customers and regulator reports on one clock. Drinking Water Incident Management adds seven agents that score alarms, plan sampling, read lab results, track the clear criteria and draft notices and reports. The incident commander and the water quality manager decide and sign.

How does it decide when a boil water notice can be lifted?

The clear criteria tracker recounts the clean run at every sample point after each authorised result, and checks free chlorine, turbidity, pressure and the repair against your rule. In the sample incident that rule asks for three clean sets in a row at every point, at least 18 hours apart. When every line is met it drafts the lift notice — it never lifts one; two people sign and public health is consulted.

How does boil water notice management software help meet public notification deadlines?

Every deadline — the regulator phone call, the written report, the daily update, the lift notification and the closure report — sits on the incident clock, and the first notice is drafted from your approved template in every channel and language — 10 minutes after the decision in the sample incident. In the US, a Tier 1 notice such as a boil water emergency must reach the public within 24 hours. The solution keeps the clock in view; your team still sends and submits.

How does it protect vulnerable customers during a water incident?

The vulnerable customer coordinator matches the zone to your priority register and sensitive sites, puts water-dependent homes first by phone in their language, and tracks first contact against a 2-hour target. In the sample incident all 212 priority households were reached in 1 h 55 m. It shares needs codes only, never medical detail.

Does it handle positive samples and resampling?

Yes. The results reader reads only results the laboratory has authorised, and for a positive proposes flushing and repeat samples upstream, at the point and downstream. The water quality manager decides, and the sampling planner never moves or drops a point without them.

Do people stay in control of the notices and the lift?

Yes. The agents draft, count, match and flag; they never declare an incident, send a notice, lift a notice or submit to the regulator. Every notice and the lift need the incident commander's and the water quality manager's signatures, health advice wording is locked to the approved template, and every step is on an append-only incident log.

Can we use our own triggers, clear criteria and templates?

Yes. Triggers, the clear criteria rule, the regulator and customer clocks, approvers, channels, languages and templates are all settings. Changes are saved as a draft and the water quality director approves them before they apply to the next incident.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents — your incident plan, triggers and clear criteria, notice templates and a past incident — and it goes live once every quality gate has passed. We will walk you through it on one of your own past boil water notices first.

See it on
your next incident.

We'll run Drinking Water Incident Management on one of your own past boil water notices.