RAET consists of several components: (a) a Fault Tree Viewer for risk navigation/exploration, (b) a Scenario Planner serving as a wizard for scenario(s) creation and management, preparation of input data for simulations and visualization of primary results, (c) a Stress-Testing Platform with seamlessly integrated modelling tools for cyber-physical scenarios, (d) a Key Performance Indicators tool for detailed assessment of results and impact, (e) a toolkit library providing information about other tools and advanced search capabilities to integrated databases e.g. with risk reduction measures. Using RAET, water experts can identify the most vulnerable elements of their system (currently WDN), configure multiple risk scenario, use these scenarios together with simulation models to play out ‘attacks’ where the physical water system interacts with the cyber control layer, visualise the system’s response to these attacks and quantify impacts against several KPIs and identify response measures and assess what impact these would have on performance.