Critical Infrastructure Test

dhs framework

Mitigate, Prepare, Respond, Recover

Key Assets

Subset of critical resources: Statue of liberty, Wall street, Time square

Critical Infrastructure

Systems or
assets, whether physical or virtual, so vital to the
United States that the incapacity or destruction of
such systems and assets would have a debilitating
impact on security, national economic security,
national public health or safety, or any
combination of those matters: 600,000 bridges, 2,800 electric plants, 80,000 dams

Three specific objectives providing for a
continuity of operations

Identify assets determined to be the most
critical, Provide for a warning systems, Focus on other infrastructures that could be
targets of terrorism

National security

efforts on the part of
the federal government to protect US
national interests

Homeland security

not only federal but
states, local, private sector etc

Role of the Private Sector

80% of critical infrastructure in the US is
owned and operated by the private
sector

FOIA

Allows individuals to request access to
government records

Presumes records in possession of
Executive Branch are accessible to the
people

Presidential directives

Establish a policy

Different than executive orders
 Publication not required

Signed by President or authorized by the
National Security Council

National Security Council

 Established by the 1947 National Security Act
 Amended in 1949
 Under Truman
 President’s main forum for considering
national security and foreign policy matters
 Advises the Pres on national security and
foreign policy
 EO 13228: established Office of HS and HS

Homeland Security Presidential Directives

 1: Organization and Operation of the HSC
 2: Combatting Terrorism Through Immigration
Policies
 3: Homeland Security Advisory System
 4: National Strategy to Combat WMD’s
 5: Management of Domestic Incidents
 6: Integration and Use of Screening Information

 7. Critical Infrastructure Identification,
Prioritization and Protection
 8. National Preparedness
 Annex 1: National Planning
 9. Defense of US Agriculture and Food
 10. Biodefense for the 21st century
 11. Comprehensive Terrorist-Related Screening
Procedures
 12. Policy for a Common ID standard for
Federal employees and contractors

 13. Maritime Security Policy
 14. Domestic Nuclear Protection
 15. US Strategy and Policy in the War on Terror
 16. Aviation Strategy
 17. Nuclear Materials Information Program
 18. Medical Countermeasures against Weapons
of Mass Destruction

 19. Combatting Terrorist Use of Explosives in
the US
 20. National Continuity Policy
 Annex A: Continuity Planning
 21: Public Health and Medical Preparedness
 22. National Cyber Security Initiative
 24. Biometrics for Identification and Screening
to Enhance National Security

Artic Issues

Dispute over artic sea region

Homeland security Act 2002

Established DHS

Primary mission: Prevent Terrorism and
minimize damage

Patriot Act

Allowed greater access to information sharing

Enhances DHS investigations into the
international movement of illicit funds and
cyber crimes

Expansion of ICE’s strategy to investigate
terrorist/criminal monetary funds

Intel Reform & Terrorism Prevention act 2004

 Established National Director of Intelligence
 Provide information to
 The President
 Heads of depts/agencies of the executive branch
 Chairman of the Joint Chiefs of Staff and senior military
commanders
 Senate/HoR and congressional committees

Post-Katrina Emergency Management Reform Act of 2006

 Revised the role and mission of FEMA
 Increased the necessary
qualifications/responsibilities of FEMA’s
administrator

Three Threats

Physical, Human, Cyber

National Infrastructure Protection Plan

 Provides a coordinated approach to CI/KA protection
roles and responsibilities for all agencies
 Based on:
 Strong public/private partnerships
 Information sharing
 Risk management framework

Three types of risk

 Direct Infrastructure attacks
 Indirect Infrastructure attacks
 Exploitation of Infrastructure

Risk Management

deciding which protective
measures to take based on an agreed upon risk-
reduction strategy

Five Steps

Set Goals and Objectives, Identify Infrastructure, Assess and Analyze Risk, Implement Risk Management Activities, measure effectiveness.

National Incident Management System

NIMS is a systematic, proactive approach to guide
departments and agencies at all levels of
government, nongovernmental organizations
(NGO), and the private sector in working together
seamlessly and managing incidents involving all
threats and hazards—regardless of cause, size,
location, or complexity—in order to reduce loss of
life, loss of property, and harm to the environment.
NIMS is the essential foundation to the National
Preparedness System and provides the template
for the management of incidents and operations in
support of all five National Planning Frameworks.

National Incident Management System 2

 Is a set of principles and preparedness concepts
 IT is NOT:
 Only a response plan
 Only used for large scale events
 A communications plan
 Only applicable to EM
 Static

citizen Prep

individuals taking proactive steps to prepare for potential emergencies and disasters.

General Assessment Framework

Step One: Asset value assessment, Step Two: Threat Hazard Assessment, Step Three: Vulnerability Assessment, Step Four: Risk Assessment, Step Five: Risk Management

Two Categories

Man made and Natural

Risk =

Asset * Threat * Vulnerability