national protection and programs directorate … protection and programs directorate ... response...

13
National Protection and Programs Directorate Department of Homeland Security Florida Reliability Coordinating Council (FRCC) Critical Infrastructure Protection (CIP) Workshop The Office of Infrastructure Protection May 13-15, 2014

Upload: trinhbao

Post on 28-Apr-2018

227 views

Category:

Documents


2 download

TRANSCRIPT

Page 1: National Protection and Programs Directorate … Protection and Programs Directorate ... response engagement ... VBIED), most have requisite control in place to prevent access

National Protection and Programs Directorate Department of Homeland Security Florida Reliability Coordinating Council (FRCC)

Critical Infrastructure Protection (CIP) Workshop

The Office of Infrastructure Protection

May 13-15, 2014

Page 2: National Protection and Programs Directorate … Protection and Programs Directorate ... response engagement ... VBIED), most have requisite control in place to prevent access

Threats May Come from All hazards

2

Page 3: National Protection and Programs Directorate … Protection and Programs Directorate ... response engagement ... VBIED), most have requisite control in place to prevent access

IP facilitates collaborative exercises, provides training materials, courses and consultation to sector partners across the Nation and internationally, augmenting the critical infrastructure community’s awareness, preparedness, and response capabilities.

Information Sharing IP provides sensitive, but unclassified information regarding critical infrastructure intelligence, threats, and best practices to enhance critical infrastructure owners and operators’ decision-making capabilities.

IP provides data, information, and analysis for critical infrastructure partners to assess risk as a function of threat, vulnerability and consequence. Risk and vulnerability assessments help identify requirements for protective programs and resiliency strategies.

Partnerships IP facilitates partnerships across state, local, tribal, territorial, and Federal entities and the private sector that enable comprehensive response and engagement throughout the critical infrastructure community.

IP services and capabilities

Assessments & Analysis

3

Office of Infrastructure Protection

Training & Education

Page 4: National Protection and Programs Directorate … Protection and Programs Directorate ... response engagement ... VBIED), most have requisite control in place to prevent access

Providing intelligence and best practices to enhance decision-making

Information Sharing

HSIN-CI Secure platform for sensitive information sharing and collaboration between partners

PCII Protects private sector critical infrastructure information

NICC 24/7 watch center that maintains awareness, communication and coordination with stakeholders

PSA Trained critical infrastructure protection and vulnerability mitigation subject matter experts that support critical asset owners and operators, law enforcement and state and local officials.

In the wake of the 2013 Boston Marathon bombings, HSIN

delivered continuous, secure, web- conferencing capability to

over 400 multi-jurisdictional intelligence officials nationwide.

4

Page 5: National Protection and Programs Directorate … Protection and Programs Directorate ... response engagement ... VBIED), most have requisite control in place to prevent access

Protective Security Advisor (PSA) Program 96 PSAs and Regional Directors, including 89 field deployed

personnel, serve as critical infrastructure security specialists PSA Program has five mission areas:

Plan, coordinate and conduct security surveys and assessments Plan and conduct outreach activities Support National Special Security Events (NSSEs) and Special Event Activity

Rating (SEAR) Events Incident response Coordinate and support Improvised Explosive Device (IED) Awareness and

Risk Mitigation Training Also serve as a Point of Contact for other DHS support

Security clearance facilitation Convey local concerns and sensitivities

7

PSA Program

Page 6: National Protection and Programs Directorate … Protection and Programs Directorate ... response engagement ... VBIED), most have requisite control in place to prevent access

Tallahassee PSA Billy Sasser

Pensacola PSA Billy Sasser

Jacksonville PSA Billy Sasser

Tampa Bay PSA Ollie Gagnon

Orlando PSA Marty Smith

Ft. Meyers PSA Ollie Gagnon

Miami PSA Gary Warren

Florida PSAs

6

Page 7: National Protection and Programs Directorate … Protection and Programs Directorate ... response engagement ... VBIED), most have requisite control in place to prevent access

ECIP IST Protective Measures Index (PMI) includes

physical security, security forces, security management, protective measures, information sharing, and dependencies

Resilience Measures Index (RMI) includes mitigation measures, preparedness, recovery mechanisms and response capabilities

Enhanced Critical Infrastructure Protection (ECIP) Initiative Utilizes web-based Infrastructure Survey

Tool (IST) PCII protected and allows for:

Identifying overall security Information sharing Analyzing data and improving metrics

9

ECIP

ECIP Dashboard Facility protective measures index

Informs protective measures planning

Page 8: National Protection and Programs Directorate … Protection and Programs Directorate ... response engagement ... VBIED), most have requisite control in place to prevent access

Substation Assessments Voluntary assessments As of July 1, 2013, 154 ECIP IST or SAVs conducted on substations Electronic Security Systems

56% Use Interior Intrusion Detection Systems (IDS), 22% Use Exterior 60% employ CCTV; of those:

• 43% have greater than 75% coverage, and 38% have less than 25% coverage • 83% use digital technology, 17% use analog • 63% transmit via fiber cable and 30% use coaxial • 82% have emergency back-up power • 39% have video analytics or anomaly detection

CCTV Monitoring • 52% have dedicated 24/7 security staff to monitor the cameras, while 32%

have trained but not dedicated staff • 98% record CCTV feeds • 71% maintain the recorded information for more than a week but less than a

month; 27% store the information for over a month

10

Page 9: National Protection and Programs Directorate … Protection and Programs Directorate ... response engagement ... VBIED), most have requisite control in place to prevent access

Sector Low Sector High

Comparison Group: 127 Substations

Substation Protective Measures Protective Measures Index (PMI) Dashboard

Most substations have high- quality fences

– Chain link between 6-15 feet high

– Very few have a walled perimeter

Most substations are well- illuminated

Robust entry control typically requiring access cards and added status checks

Security management varies by company: some have extensive plans, while others have significant gaps

0.0

10.0

20.0

30.0

40.0

50.0

60.0

70.0

80.0

90.0

100.0

Overall PMI Physical Security

Security Security Force Management Profile

Information Sharing

Security Activity

Background

Facility

11

Page 10: National Protection and Programs Directorate … Protection and Programs Directorate ... response engagement ... VBIED), most have requisite control in place to prevent access

Generally score high in preparedness, awareness, and planning

Mitigation measures such as back-up systems and alternates are generally good

For attacks that require entry to the facility (theft, IED placement, VBIED), most have requisite control in place to prevent access

For natural hazards, substations are generally prepared

– Recovery tends to be low due to the lead time to obtain certain parts

– Response tend to be low due to minimal on-site capabilities

Gaps – Recovery tends to be low due to

the lead time to obtain certain parts

– Response tends to be low due to minimal on-site capabilities 12

Substation Resilience Measures Resilience Measures Index (RMI) Dashboard

0.0

10.0

20.0

30.0

40.0

50.0

60.0

70.0

80.0

90.0

100.0

Overall RMI Mitigation Measures

Preparedness Recovery Mechanisms

Response Capabilites

Sector Average Sector Low Sector High

Comparison Group: 49 Substations

Page 11: National Protection and Programs Directorate … Protection and Programs Directorate ... response engagement ... VBIED), most have requisite control in place to prevent access

Voluntary assessments 117 substations* participated in follow-up visits:

5 sites completed improvements 49 have planned/started improvements

Improvements made impacting: Information Sharing: forged closer ties between State/local police and

security, leveraged contacts made during ECIP visits Security Management: incorporating new technology to enhance on-

site emergency operations center Physical Security: upgrading CCTV, more robust entry control,

increased standoff distance to significant assets and areas

* Based on data collected for IST from January 1, 2011 and SAVs from April 25, 2012

IST and SAV Follow-up Visits

13

Page 12: National Protection and Programs Directorate … Protection and Programs Directorate ... response engagement ... VBIED), most have requisite control in place to prevent access

How can you help? How to reach us PSA Contact Information Name: O.T. Gagnon III (Ollie) Phone: 813-597-1158 E-mail: [email protected]

National Infrastructure Coordinating Center (NICC) Contact Information E-mail: [email protected] Phone: 202-282-9201.

Websites: DHS National Protection & Programs Directorate (NPPD) http://www.dhs.gov/about-national-protection-and-programs-directorate

DHS-NPPD Office of Infrastructure Protection http://www.dhs.gov/office-infrastructure-protection

Be Involved

14

Page 13: National Protection and Programs Directorate … Protection and Programs Directorate ... response engagement ... VBIED), most have requisite control in place to prevent access

For more information visit: www.dhs.gov/criticalinfrastructure