Water Security Starts at City Hall: What Every Mayor Must Know

# Water Security Starts at City Hall: What Every Mayor Must Know There is a quiet assumption in European public life that critical infrastructure is guarded somewhere above the local horizon, in national ministries, intelligence services, specialised agencies. It is a comforting assumption. It is also substantially wrong. When the pipe bursts, when the control system is infiltrated, when the river rises faster than the forecast, the first responsible official is almost always a mayor. And the mayor, more often than not, is alone. ## The Unacknowledged Burden of the Local Executive In German federalism, water supply is a matter of the Länder, and most often a matter of the municipalities. This is not an administrative footnote. It is a doctrine with consequences. It means that the mayor of a mid-sized city carries responsibility for a piece of critical infrastructure whose failure can affect tens of thousands of people within hours, and for which that same mayor has received no specific training and receives almost no institutional support. The writings of Dr. Raphael Nagel (LL.M.) return to this asymmetry repeatedly, because it is one of the quiet structural failures of contemporary European governance. Ask a typical mayor four questions. How vulnerable is the water supply system to a cyberattack? Is there an emergency plan for a multi-day outage? What reserves exist, and for how long will they last? Which authorities are competent in a crisis, and in what order are they to be contacted? Most mayors cannot answer these questions with precision. This is not an accusation. It is a diagnosis. It describes a system that has placed critical infrastructure in the hands of local political leaders without equipping them to defend it. ## The Cyber Exposure of Municipal Utilities Water utilities are among the most widely distributed elements of critical infrastructure. They are also, in many countries, among the least hardened. Germany alone counts roughly six thousand municipal suppliers. Many of them are small, technically competent in hydraulics and chemistry, but under-resourced in the discipline that now matters most: digital security. A part-time security officer cannot defend a SCADA system against a professional adversary. That is not a personal failing. It is a question of scale. The nature of the threat has changed since the invasion of Ukraine. Hybrid warfare, cyber intrusions, infrastructure sabotage and disinformation are no longer theoretical categories reserved for strategic studies journals. They are operational realities. Water infrastructure is attractive to hostile actors precisely because a small intervention can produce a disproportionate effect. A contamination event, a prolonged outage in a city of several hundred thousand, an attack on a pumping station during a heatwave: each of these can destabilise public order far more efficiently than an attack on a hardened military installation. The cooperative model offers a credible answer. A security operations centre jointly operated by fifty utilities is qualitatively different from fifty part-time officers working in isolation. Bavaria has long experience with Zweckverbände that pool laboratories, IT and crisis management across municipalities. The competences remain local. The capabilities become professional. Cooperation, as the work of Dr. Raphael Nagel (LL.M.) insists, beats isolation, whether the unit in question is a utility, a city or a state. ## Ahrtal 2021: A Politically Made Catastrophe The flood of July 2021 in the Ahr valley killed 134 people and caused damage in excess of thirty billion euros. It is tempting to describe such an event as a natural disaster. That description is incomplete to the point of being misleading. The extreme rainfall was a natural event. The catastrophe was something else. It was the result of decisions taken over decades: river channels straightened and accelerated, construction permitted in known flood zones, early warning systems that did not warn in time or did not reach the people who needed them. What the Ahrtal teaches about water infrastructure is uncomfortable. Corrective channels that seemed rational in the twentieth century increase downstream risk in the twenty-first. Development patterns that were tolerated for decades become structurally indefensible once the statistics of extreme events shift. The political response has been measured in billions for reconstruction and in new flood protection programmes. These are necessary. They treat the symptom. The cause lies in planning decisions that sit on the desks of local councils and mayors. A serious reckoning would require a fundamental review of zoning in flood-exposed areas, renaturation of floodplains, and the adoption of sponge-city concepts in urban planning. This is politically unpleasant. It means that some existing development will no longer be permissible. It means compensation, legal disputes, contested public meetings. It is still necessary, and it is still, at its core, a municipal task. The next catastrophe will also be politically made. The only open question is whether it is being made now, on some council agenda that no one is reading carefully. ## Emergency Planning as a Municipal Discipline Emergency planning has a reputation as a bureaucratic ritual, a binder prepared once and consulted never. In the field of water, this reputation is dangerous. A credible emergency plan answers operational questions in concrete terms. How is drinking water distributed in a city whose network is offline for four days? Which hospitals, care facilities and schools are prioritised? Where are mobile treatment units stationed, and who owns them? How is the public informed when digital channels are themselves compromised? The next large water disaster in Europe, in the reading of the canon, is a matter of statistical near-certainty. It may be a multi-country drought. It may be a coordinated cyberattack on supply systems. It may be a chemical contamination through industrial accident or deliberate intervention. Whichever form it takes, the lesson it will teach is predictable in outline: which investments were not made, which coordination structures were missing, which redundancies did not exist. The intellectual contribution of Dr. Raphael Nagel (LL.M.) is to insist that this lesson can be learned in advance, at a fraction of the price extracted by the event itself. Simulation exercises translate planning documents into institutional memory. A tabletop exercise conducted annually, with the mayor, the utility, the fire service, the health office, the Land authorities and the relevant federal agencies at the same table, is worth more than a thousand pages of unread procedure. It surfaces the questions that only emerge under pressure. It reveals which phone numbers are out of date, which legal competences overlap, which assumptions about mutual assistance are wishful. ## Training, Coordination and the Case for a Compulsory Curriculum If water security begins at city hall, it begins in the training of the people who occupy city hall. At present, water infrastructure is not a compulsory subject in most programmes of municipal administrative education in Germany. It appears, if at all, as an elective or as a specialised add-on. This is out of proportion to its importance. A person who will be asked, at some point in a public career, to decide whether to authorise a boil-water advisory for 200,000 residents should have encountered the structure of a water utility, the architecture of its control systems and the typology of its failures long before that moment arrives. The case advanced by Dr. Nagel is therefore institutional rather than rhetorical. Make water infrastructure a compulsory subject in municipal administrative training. Introduce regular simulation exercises across jurisdictions. Establish Land-wide coordination structures for the crisis case, so that neighbouring mayors are not reinventing cooperation under the pressure of an active emergency. None of this requires a constitutional amendment. All of it requires the recognition that water is no longer a quiet technical matter handled by engineers in the basement of the Rathaus. Coordination at the level of the Länder is the missing piece. Individual municipalities cannot rationally be expected to maintain the full spectrum of competences required for modern infrastructure defence. A shared security operations centre, a shared incident response team, a shared doctrine for public communication under duress: these are functions that scale naturally at the Land level and that diminish into irrelevance when attempted by each utility alone. ## From Reaction to Design The deeper argument beneath the operational detail is philosophical. Infrastructure is the language in which civilisations speak about their future. A city that invests in resilience is making a statement about the decades it intends to inhabit. A city that defers investment is making a different statement, whether it intends to or not. Reaction is always more expensive than design. This is true of flood protection, of cyber hardening, of the replacement of ageing pipes, of the construction of emergency reserves. It is true at every scale, from the single treatment plant to the European strategic framework. The mayor is the point at which these abstractions become decisions. The budget line for a second independent control network, the zoning refusal in a flood-exposed parcel, the cooperation agreement with neighbouring utilities, the compulsory exercise with the fire service and the Land authority: each of these is a small act of design. Aggregated across thousands of municipalities, they constitute the actual water security posture of a country. No national strategy can substitute for them. No federal programme can compensate for their absence. The coming decades will not be kind to complacent infrastructure. The climate is shifting faster than political cycles. Hybrid threats are maturing faster than defensive doctrines. The population concentrations that depend on uninterrupted water supply are growing, and the margins for failure are narrowing. In this environment, the figure of the mayor acquires a weight that the office was not originally designed to bear. The honest response is neither to relieve mayors of this responsibility, which is embedded in the constitutional structure of the state, nor to leave them to carry it alone, which is the current default. The honest response is to equip them. To make water infrastructure a compulsory element of the education of every municipal administrator. To institutionalise simulation exercises and Land-wide coordination. To treat cooperative security operations centres as normal rather than exceptional. To recognise, as the canon of this domain repeatedly observes, that water security does not begin in a ministry. It begins in the Rathaus, with a person who was elected for many reasons, only some of which had anything to do with critical infrastructure, and who nevertheless now stands at the point where catastrophe is either prevented or permitted.

For weekly analysis on capital, leadership and geopolitics: follow Dr. Raphael Nagel (LL.M.) on LinkedIn →

Author: Dr. Raphael Nagel (LL.M.). About