Upload
trinhbao
View
224
Download
2
Embed Size (px)
Citation preview
National Protection and Programs Directorate Department of Homeland Security Florida Reliability Coordinating Council (FRCC)
Critical Infrastructure Protection (CIP) Workshop
The Office of Infrastructure Protection
May 13-15, 2014
Threats May Come from All hazards
2
IP facilitates collaborative exercises, provides training materials, courses and consultation to sector partners across the Nation and internationally, augmenting the critical infrastructure community’s awareness, preparedness, and response capabilities.
Information Sharing IP provides sensitive, but unclassified information regarding critical infrastructure intelligence, threats, and best practices to enhance critical infrastructure owners and operators’ decision-making capabilities.
IP provides data, information, and analysis for critical infrastructure partners to assess risk as a function of threat, vulnerability and consequence. Risk and vulnerability assessments help identify requirements for protective programs and resiliency strategies.
Partnerships IP facilitates partnerships across state, local, tribal, territorial, and Federal entities and the private sector that enable comprehensive response and engagement throughout the critical infrastructure community.
IP services and capabilities
Assessments & Analysis
3
Office of Infrastructure Protection
Training & Education
Providing intelligence and best practices to enhance decision-making
Information Sharing
HSIN-CI Secure platform for sensitive information sharing and collaboration between partners
PCII Protects private sector critical infrastructure information
NICC 24/7 watch center that maintains awareness, communication and coordination with stakeholders
PSA Trained critical infrastructure protection and vulnerability mitigation subject matter experts that support critical asset owners and operators, law enforcement and state and local officials.
In the wake of the 2013 Boston Marathon bombings, HSIN
delivered continuous, secure, web- conferencing capability to
over 400 multi-jurisdictional intelligence officials nationwide.
4
Protective Security Advisor (PSA) Program 96 PSAs and Regional Directors, including 89 field deployed
personnel, serve as critical infrastructure security specialists PSA Program has five mission areas:
Plan, coordinate and conduct security surveys and assessments Plan and conduct outreach activities Support National Special Security Events (NSSEs) and Special Event Activity
Rating (SEAR) Events Incident response Coordinate and support Improvised Explosive Device (IED) Awareness and
Risk Mitigation Training Also serve as a Point of Contact for other DHS support
Security clearance facilitation Convey local concerns and sensitivities
7
PSA Program
Tallahassee PSA Billy Sasser
Pensacola PSA Billy Sasser
Jacksonville PSA Billy Sasser
Tampa Bay PSA Ollie Gagnon
Orlando PSA Marty Smith
Ft. Meyers PSA Ollie Gagnon
Miami PSA Gary Warren
Florida PSAs
6
ECIP IST Protective Measures Index (PMI) includes
physical security, security forces, security management, protective measures, information sharing, and dependencies
Resilience Measures Index (RMI) includes mitigation measures, preparedness, recovery mechanisms and response capabilities
Enhanced Critical Infrastructure Protection (ECIP) Initiative Utilizes web-based Infrastructure Survey
Tool (IST) PCII protected and allows for:
Identifying overall security Information sharing Analyzing data and improving metrics
9
ECIP
ECIP Dashboard Facility protective measures index
Informs protective measures planning
Substation Assessments Voluntary assessments As of July 1, 2013, 154 ECIP IST or SAVs conducted on substations Electronic Security Systems
56% Use Interior Intrusion Detection Systems (IDS), 22% Use Exterior 60% employ CCTV; of those:
• 43% have greater than 75% coverage, and 38% have less than 25% coverage • 83% use digital technology, 17% use analog • 63% transmit via fiber cable and 30% use coaxial • 82% have emergency back-up power • 39% have video analytics or anomaly detection
CCTV Monitoring • 52% have dedicated 24/7 security staff to monitor the cameras, while 32%
have trained but not dedicated staff • 98% record CCTV feeds • 71% maintain the recorded information for more than a week but less than a
month; 27% store the information for over a month
10
Sector Low Sector High
Comparison Group: 127 Substations
Substation Protective Measures Protective Measures Index (PMI) Dashboard
Most substations have high- quality fences
– Chain link between 6-15 feet high
– Very few have a walled perimeter
Most substations are well- illuminated
Robust entry control typically requiring access cards and added status checks
Security management varies by company: some have extensive plans, while others have significant gaps
0.0
10.0
20.0
30.0
40.0
50.0
60.0
70.0
80.0
90.0
100.0
Overall PMI Physical Security
Security Security Force Management Profile
Information Sharing
Security Activity
Background
Facility
11
Generally score high in preparedness, awareness, and planning
Mitigation measures such as back-up systems and alternates are generally good
For attacks that require entry to the facility (theft, IED placement, VBIED), most have requisite control in place to prevent access
For natural hazards, substations are generally prepared
– Recovery tends to be low due to the lead time to obtain certain parts
– Response tend to be low due to minimal on-site capabilities
Gaps – Recovery tends to be low due to
the lead time to obtain certain parts
– Response tends to be low due to minimal on-site capabilities 12
Substation Resilience Measures Resilience Measures Index (RMI) Dashboard
0.0
10.0
20.0
30.0
40.0
50.0
60.0
70.0
80.0
90.0
100.0
Overall RMI Mitigation Measures
Preparedness Recovery Mechanisms
Response Capabilites
Sector Average Sector Low Sector High
Comparison Group: 49 Substations
Voluntary assessments 117 substations* participated in follow-up visits:
5 sites completed improvements 49 have planned/started improvements
Improvements made impacting: Information Sharing: forged closer ties between State/local police and
security, leveraged contacts made during ECIP visits Security Management: incorporating new technology to enhance on-
site emergency operations center Physical Security: upgrading CCTV, more robust entry control,
increased standoff distance to significant assets and areas
* Based on data collected for IST from January 1, 2011 and SAVs from April 25, 2012
IST and SAV Follow-up Visits
13
How can you help? How to reach us PSA Contact Information Name: O.T. Gagnon III (Ollie) Phone: 813-597-1158 E-mail: [email protected]
National Infrastructure Coordinating Center (NICC) Contact Information E-mail: [email protected] Phone: 202-282-9201.
Websites: DHS National Protection & Programs Directorate (NPPD) http://www.dhs.gov/about-national-protection-and-programs-directorate
DHS-NPPD Office of Infrastructure Protection http://www.dhs.gov/office-infrastructure-protection
Be Involved
14
For more information visit: www.dhs.gov/criticalinfrastructure