nchrp 20-59 (14b) project updatesp.bridges.transportation.org/documents/2014 scobs...

NCHRP 20-59 (14B)

PROJECT UPDATE

T-1

AASHTO Technical Subcommittee for Bridge Security

Meghann Valeo, P.E.

6/23/2014

1

Objectives

• Introduce Research Team

• Objectives of Research

• Gather T-1 Committee Input

• Discussion

2

Research Team

CASE, LLC and WMC, LLC

David Eckern, Jeffrey Western

Principal Investigators

Ernest “Ron” Frazier, Jeff Caldwell

Countermeasures Assessment &

Security Experts

Pat Bye, Dave Fletcher, Meghann Valeo

Western Management and

Consulting

Alan Pisarski

Independent Consultant

Objective

To develop and produce three (3) products to be considered for use by SCOTSEM, AASHTO and related Associations, NCHRP Panel 20-59, various Federal Agencies (including FHWA, FTA, DHS, etc) and State DOTs in forming policy recommendations, security advocacy, investment direction and educational outreach opportunities.

• Fundamentals of Effective All Hazards Security Management for State DOTs

• All Hazards Security and Emergency Management Implementation Plan for State DOTs and other Transportation Organizations

• National Needs Assessment for Ensuring Transportation Infrastructure Security

4

Core Tasks

CASE, LLC and WMC, LLC

5

NATIONAL

NEEDS ASSESSMENT

Ensuring Transportation Infrastructure Security

INTERIM DRAFT SUMMARY

6/23/2014

6

Program

Areas

• Protection of Critical Mobility Assets

• Enhancement of Traffic Management Capabilities

• Improvement of State DOT Emergency Response

• Improvement of State DOT All-Hazards Resilience (New)

• Existing Tunnel – Cybersecurity

• Transportation Management Centers – Security Cybersecurity

• DOT Short Term and Long Range All-Hazards Resilience

• Modal Security Cost Data for Transit, Maritime, Freight Rail and Aeronautics.

7

Added

Program

Elements

Cost

Tables

• Table 1: Annual and Six Year

Total Costs Summary for

Highway-Related Security

Programs

• Table 2: Annual and Six Year

Total Costs Summary for

Transportation Modal Security

Programs (New)

8

Table 1: Annual and Six Year Total Costs Summary for Highway-Related Security Programs DRAFT 4/29/2014 … Meghann Valeo/Jeff Western

Year 1 Year 2 Year 3 Year 4 Year 5 Year 6

$100 $100 $100 $100 $100 $100 $600

$5 $5 $5 $5 $5 $5 $30

Existing Tunnel - - - - - - - - No ongoing cost. Completed.

$11.0 $11.0 $11.0 $11.0 $11.0 $11.0 $66

$3.0 $3.0 $3.0 $3.0 $3.0 $3.0 $18

Transportation Management Centers - - - - - - - - No ongoing cost. Completed.

$2.0 $2.0 $2.0 $2.0 $2.0 $2.0 $12

$1.0 $1.0 $1.0 $1.0 $1.0 $1.0 $6

Commercial Vehicles - - - - - - - - Intergrated into DOT Operations

$5 $5 $5 $5 $5 $5 $30

$1 $1 $1 $1 $1 $1 $6

$5 $5 $5 $5 $5 $5 $30

$1 $1 $1 $1 $1 $1 $6

- - - - - - -

Note: Cyber enhancements funding cost for State DOT Central Operations and Facilities are not included in this needs assessment report.

Enhancment of

Traffic

Management

Capabilities

Improvement of

State DOT All-

Hazards Resilience $5 $5 $5

Planning, Infrastructure

Assessessments and Training

Planning, Training, Communications

Program

Six Year

Capital Costs

(in Millions)

Bridge Reconstruction/New

- - - - - - -

Capital Costs (in Millions)

Operating Costs (in Millions)Program Elements

Protection of

Critical Mobility

Assets

(State DOT Cyber Security Systems

excluded from this assessment)$5 $30$5

Six Year

Operating Costs

(in Millions)

Comments

Mostly integrated into operations

of State DOTs

Existing Bridge Retrofit

(TMC Cybersecurity) =>

Detection, Surveillance, Message

Signing and Dynamic Routing

(Tunnel Cybersecurity) =>

1/2 of 1% of Bridge Construction

Cost (FHWA Verification)

- No ongoing cost. Completed.

(Cyber Security Systems are State

Emergency Management Agency)

Improvement of

State DOT

Emergency

Response

$5

9

Table 2: Annual and Six Year Total Costs Research Summary for Modal Transportation Security

Year 1 Year 2 Year 3 Year 4 Year 5 Year 6

TBD TBD TBD TBD TBD TBD TBD
















Aeronotics

Aeronotics Security ImprovementsTBD - Further Discussions and

Investigation Required

Aeronotics CybersecurityTBD - Further Discussions and


Maritime

Maritime Security ImprovementsTBD - Further Discussions and


Maritime CybersecurityTBD - Further Discussions and


Program

TBD - Further Discussions and


Transit CybersecurityTBD - Further Discussions and


Transit

Transit Security Improvements

Program Elements

Capital Costs (in Millions)

[Operating Costs] (in Millions)Six Year

Capital Costs

(in Millions)





Freight Rail

Freight Rail Security Improvements

Freight Rail Cybersecurity

Six Year

Operating Costs

(in Millions)

Comments

10

ALL HAZARDS

IMPLEMENTATION

PLAN

INTERIM DRAFT

6/23/2014

11

Changes Impacting SCOTSEM NATIONAL

• PPD-8 - National Preparedness

• PPD 21 – Critical Infrastructure Security & Resilience

• NIPP 2013 – Elevates Security & Resilience as new focus of CI Planning Efforts

• EO 13636 – Improving Critical Infrastructure Cybersecurity

• National Planning Frameworks—Prevention, Protection, Mitigation, Response, Recovery

STATE • Most recent major events have been weather emergencies not security related

• Major reorganization initiatives consolidating S&EM activities and staff

• Major improvements in collaborations and technology deployment

• Continued loss of dedicated resources (staff, $$, training, travel, etc.)

AASHTO/TRB • End of 20-59 Program

• SHRP 2 Being Deployed

• New AASHTO Strategic Plan

• New NOCoE agreement – FHWA-AASHTO –ITE-ITSA

• Major Focus on Operations

Moving Forward: Strategic Plan

Renewed emphasis on keeping system users safe and protecting

transportation investments in an all-hazards, all-mode context.

• Focuses on getting research implemented “on the ground” through

education and outreach

• Creates new subcommittee structure – Infrastructure Protection and

Emergency Management

• Highlights importance of partnering with other AASHTO groups that form

the nucleus of the TSM&O community - SCOH T1, TSM&O

• Strengthens partnership with TRB ABE40 committee for research

FUNDAMENTALS FOR

STATE DOTS Effective All-Hazards Resilience and Security Management

INTERIM DRAFT

6/23/2014

• Fundamental responsibilities of state DOTs for all hazards

resilience and security management.

• Technical capabilities required of a state DOT to meet its

fundamental responsibilities for all hazards infrastructure

protection, resilience and security.

• Future issues to be addressed.

15

Objectives

Changes Since 2007 Fundamentals

Research and Guidance

• Security 101: A Physical Security Primer for Transportation Agencies (2009)

• Guide to Emergency Response Planning at State DOTs (2010)

• Blast Resistant Highway Bridges: Design and Detailing Guidelines (2010)

• Costing Asset Protection: An All Hazards Guide for Transportation Agencies (CAPTA) (2009)

• Other recent transportation security & operations research

Federal Initiatives

• Presidential Policy Directive 8: National Preparedness (2011)

• Presidential Policy Directive-21: Critical Infrastructure Security and Resilience (2013)

• 2013 National Infrastructure Protection Plan: Partnering for Critical Infrastructure Security and Resilience

• Executive Order 13636: Improving Critical Infrastructure Cybersecurity (2013)

16

Incorporating

Security into

Planning

Risk-based designs

Redundant components

Support response

Facilitate recovery

Consider applicable

standards and best

practices for

incorporating

resilience into design.

17

Source: US DOT FWHA/FTA

http://www.planning.dot.gov/documents/Integrating_Security_into_Project_Planning.pdf

Discussion

• What should the relationship of

T-1 be with SCOTSEM?

• How does T-1 define Security?

• Fundamentals Updates

• Incorporating response during

planning and design

• Updates to:

• Blast Resistant Highway Bridges:

Design and Detailing Guidelines

(2010)

• Recommendations for Bridge and

Tunnel Security (2003)

18

CONTACT

INFORMATION

Meghann Valeo, P.E.

E-mail: [email protected]

Cell : 609-731-9699

19

mailto:[email protected]

Table X: National Highway -Related Security Cost Structure Definitions

Program Assets Coverage Capital Costs Operations &

Maintenance Costs Dual Use Comments

Improvement of

State DOT All-

Hazards

Resilience

Improvement of

State DOT

Emergency

Response

Protection of

Critical Mobility

Assets

Enhancement of

Traffic

Management

Capabilites

Facilites that directly relate to

highways. Does not include

State DOT or Maintenaince

facilities

• Systems Maintenance

• Non-structural

countermeasures

• Limited structural

mitigation

• Critical facilities

with national

economic, defense &

emergency route

importance

• Critical bridges

• Critical tunnels

• Transportation

Management Centers

(TMCs)

• Commercial Vehicle

Terminals

All-Hazards Resilience

including security training and

planning included

-

• State DOT

Capabilities and

Systems

• State DOT

Capabilities and

Systems

• Major metropolitan

and inter-urban

freeway & arterial

networks

• System Maintenance • Urban Mobility

• Communication

system upgrades

• Staffing

• Planning

• Training

• Exercising

• Security upport System

Does not include Sate

Emergency Management Cost

or Operations

• Surveillance &

detection systems

• Traveler information

systems

• Top 102 Metro

Areas

• All State DOTs

• All State DOTs

• Safety

• Urban Mobility

• Incident and emergency

management

• Includes Training and

Assessments for

transporation security

facilites building all-

hazards resilience

capability in a State

• Assessments

• Planning

• Training

20

Fundamental DOT Responsibilities

• Prevent incidents within DOT

control and responsibility.

• Protect transportation users,

agency personnel, and critical

infrastructure.

• Reduce all hazards vulnerability

through risk assessment and

management.

• Support regional, state, and

local emergency responders

with resources .

• Recover swiftly from incidents.

• Evaluate response(s) and

continually improve plans,

training, skills, and protocols.

23

Reflect National Preparedness goals and frameworks.

Embrace security and resilience for critical infrastructure.

Integrate cyber, physical, and human elements in managing risk.

Fundamental DOT Capabilities Prevention Protection Mitigation Response Recovery

Planning

Public Information and Warning

Operational Coordination

Intelligence &

Information Sharing

Access Control Long-Term

Vulnerability

Reduction

Critical

Transportation

Infrastructure

Systems

Screening, Search,

& Detection

Physical Protective

Measures

Risk & Disaster

Resilience

Assessment

Operational

Communications

Risk Management Threat & Hazard

Identification

Situational

Assessment

Supply Chain

Integrity & Security

Cybersecurity

Training and Exercises

Prevention: Capabilities necessary to avoid, prevent, or stop a threatened or actual act of terrorism.

Protection: Capabilities necessary to secure against acts of terrorism and manmade or natural disasters.

Mitigation: Capabilities necessary to reduce loss of life and property by lessening the impact of disasters.

Response: Capabilities necessary to save lives, protect property and the environment, and meet basic human

needs after an incident has occurred.

Recovery: Capabilities necessary to assist communities affected by an incident to recover effectively.

24

Fundamentals: Planning

• Integrate security into planning.

• Ensure consistency with national planning programs.

• Coordinate with regional partner plans and processes.

25

• Types of Plans

Conduct a systematic process engaging the whole community, as appropriate,

in the development of executable strategic, operational, and/or community-

based approaches to meet defined objectives, and are implementable within

the time frame contemplated in the plan using available resources.

Expand the planning advisory team to include law enforcement,

fire, emergency medical services, and emergency management.

Involve these agencies from beginning and keep them involved.

Fundamentals: Mitigation

• Conduct vulnerability

assessments to identify known

and future risks

• Identify key dependencies and

interdependencies, including

mapping potential cascading

effects from potential

infrastructure disruptions.

• Collaborate with regional

partners and stakeholders.

• Consider applicable standards

and best practices for

mitigation plans and for

incorporating resilience into

asset and system design.

• Determine whether physical or

environmental buffers can be

incorporated into the

infrastructure design to mitigate

the effects of natural disasters.

26

What can be done to reduce risks and mitigate consequences?

Fundamentals: Response Provide transportation (including infrastructure access and accessible

transportation services) for response priority objectives, including the

evacuation of people and animals, and the delivery of vital response personnel,

equipment, and services to the affected areas.

• Develop skilled DOT rapid

response teams equipped to

handle tunnel emergencies or

bridge failures.

• Develop Memorandum of

Understanding with other Local

and State Agencies.

• Ensure agency formalizes its

approach to evacuation

management, including plans,

policies, and procedures for

evacuations with/without

notice.

27

What can be done to facilitate response? E.g. Providing easier access for local emergency responders.

E.g. Incorporating standpipes on bridges to facilitate firefighting.

What potentially interferes with capability to respond?

Fundamentals: Recovery Provide transportation (including infrastructure access and accessible transportation

services) for response priority objectives, including the evacuation of people and animals,

and the delivery of vital response personnel, equipment, and services to the affected

areas.

• Develop COOP to ensure rapid

recovery from incidents/events.

• Establish trained skilled teams

for rapid clean up, repair, and

inspection of an incident area

or event.

• Conduct damage assessments,

debris removal, hazardous

materials disposal, and repair

to restore essential services to

the affected area.

• Develop an approach to

infrastructure repair and/or

replacement and

decontamination.

• Identify lessons learned

through After-Action Review .

• Incorporate recommendations

into existing plans and

procedures.

28

What can we do to expedite the recovery process?

nchrp 20-59 (14b) project updatesp.bridges.transportation.org/documents/2014 scobs...

Documents