This paper presents background information and specific requirements of the Bioterrorism Act, specifically discussing the act's requirement of vulnerability assessments for community water systems serving a population of greater than 3,300 people. Case studies and lessons learned for small water systems are given and additional resources are listed. Includes figure.