systems and actions required to protect a water supply from natural disasters, security threats, accidental and intentional contamination, and other vulnerabilities