november 2008 michael smith (saic) steve lockwood (pb consult) nchrp project sp20-59 (17) capta...

24
November 2008 November 2008 Michael Smith (SAIC) Michael Smith (SAIC) Steve Lockwood (PB Consult) Steve Lockwood (PB Consult) NCHRP Project SP20-59 (17) NCHRP Project SP20-59 (17) CAPTA Costing Asset Protection: All Hazards Guide for Transportation Agencie

Upload: samuel-ralph-gardner

Post on 24-Dec-2015

214 views

Category:

Documents


0 download

TRANSCRIPT

November 2008November 2008

Michael Smith (SAIC)Michael Smith (SAIC)Steve Lockwood (PB Consult) Steve Lockwood (PB Consult)

NCHRP Project SP20-59 (17)NCHRP Project SP20-59 (17)

CAPTACosting Asset Protection:

An All Hazards Guide for Transportation Agencies

211/13/2008

Briefing OverviewBriefing Overview

Objectives EvolutionObjectives Evolution

Model OverviewModel Overview

DiscussionDiscussion

311/13/2008

EvolutionEvolution: Initial NCHRP SP2-59(17) Project : Initial NCHRP SP2-59(17) Project ObjectiveObjective

To develop a To develop a Guide to Risk Management of Guide to Risk Management of Multimodal Transportation InfrastructureMultimodal Transportation Infrastructure that that will provide state DOTs and other transportation will provide state DOTs and other transportation entities with a entities with a risk management methodologyrisk management methodology that can be used to conduct that can be used to conduct threatthreat, , vulnerabilityvulnerability, , and and criticalitycriticality assessments of their facilities and assessments of their facilities and to determine to determine cost-effective countermeasurescost-effective countermeasures to to prevent, detect, and reduce threats to assets on a prevent, detect, and reduce threats to assets on a multimodal basis.multimodal basis.

411/13/2008

EvolutionEvolution: Initial Approach to Multimodal : Initial Approach to Multimodal Transportation Risk Management MethodologyTransportation Risk Management Methodology

2) Intermodal Transportation Asset

CriticalityHow important is the asset

to the agency mission?(criticality score)

3) Threat CharacteristicsHow likely is an attack?

How attractive is the target?Will the threat be deterred?What are the likely attack

scenarios (weapon, mode, path, tactics)?

4) Vulnerability to Damage (VTD)

What damage will occur if the postulated attack

scenario is successful?(% loss)

5) Susceptibility to Attack (STA)

Will the threat be successful in accessing the asset without detection and

defeat?

6) Consequences What effect will the loss have

on the agency mission?(% loss x criticality score)

7) Relative LikelihoodFor a given threat scenario

and VTA, how likely is a successful attack?

(% successful)

8) Risk AssessmentHow likely is the attack to be successful and what are the

consequences of a successful attack?

Risk = Likelihood x Consequences

10) Risk Mitigation Countermeasures Cost

AnalysisWhat is the life cycle cost

of implementing, maintaining, and operating

the proposed measure?

9) Risk Mitigation Countermeasures

ü Structural hardeningü Access controlsü Intrusion detectionü Lightingü Fencing/barriersü Security patrolsü Response forceü Etc.

1) Asset CharacteristicsWhat are the salient features of the asset

(configuration, structure, and security)?

Asset criticality scores

Structural features by asset class

Existing security features

Design threatscenarios

Attack likelihood(by threat scenario)

% loss due to attack

Relative likelihood of successful attack

AttackConsequences

Score

ThreatLikelihood

Score

Relativerisks by

asset classMitigate damage

Mitigate attack

Risk mitigation “packages”

Physicalfeatures

Physicalfeatures

511/13/2008

EvolutionEvolution: Focus on Realistic View of Utility Context: Focus on Realistic View of Utility Context

Current available risk management strategies are asset, mode, threat/hazard Current available risk management strategies are asset, mode, threat/hazard specificspecific. . These These tacticaltactical approaches do not accommodate approaches do not accommodate strategic,strategic, high- high-level, multimodal, all-hazard considerations needed for overall agency-level level, multimodal, all-hazard considerations needed for overall agency-level planning, budgeting and allocating.planning, budgeting and allocating.

The full range of risks faced by a transportation owner/operator forms a The full range of risks faced by a transportation owner/operator forms a continuum. This range of risk requires a systematic, cohesive, risk continuum. This range of risk requires a systematic, cohesive, risk management approach that encompasses all modes. management approach that encompasses all modes.

Many Transportation agencies have already internalized (1) natural hazards, Many Transportation agencies have already internalized (1) natural hazards, (2) unintentional events and (3) (2) unintentional events and (3) some some intentional threats (crime) in intentional threats (crime) in established design standards and operational planning. Adding terrorism as a established design standards and operational planning. Adding terrorism as a separate matterseparate matter

Agency threat management expertise is minimal, but risk awareness in terms Agency threat management expertise is minimal, but risk awareness in terms of consequence understanding is keen. CAPTA uses this knowledge as input of consequence understanding is keen. CAPTA uses this knowledge as input to the assessment process with minimal resort to “black box” methods to the assessment process with minimal resort to “black box” methods (multiple T x V x C methods)(multiple T x V x C methods)

Refocused on management of consequences and cost implications – an Refocused on management of consequences and cost implications – an objective frameworkobjective framework

611/13/2008

Evolution: Evolution: Capstone Role in State DOT Capstone Role in State DOT Methodology PortfolioMethodology Portfolio FIX

Costing Asset Protection: An All Hazards Guide for Transportation Agencies (CAPTA)

Surface Transportation Security, Volume 6: Guide for Emergency

Transportation Operations(NCHRP Report 525 Volume 6)

TCRP Report 86 Volume 11 Security Measures for Ferry

Systems

NCHRP 20-59(23), A Guide to

Emergency Response Planning at State Transportation Agencies

(NAS)

DHS Special Jurisdictions (DHS)

Transportation Security, Volume 12: Making Transportation Tunnels Safe

and Secure (NCHRP Report 525 Volume 12)

Report To Congress On Catastrophic Hurricane

Evacuation Plan Evaluation, (FHWA/DHS)

Other Asset, Mode, Threat, Hazard, or Sector Specific

Guidance

2002 AASHTO Guide to Highway Vulnerability Assessment for Critical Asset Identification and Protection

711/13/2008

EvolutionEvolution: Revised NCHRP SP2-59(17) : Revised NCHRP SP2-59(17) Project FocusProject Focus

To support To support mainstreamingmainstreaming an integrated, high an integrated, high level, all-hazard, NIMS-responsive, multimodal level, all-hazard, NIMS-responsive, multimodal consequence-driven, risk management process consequence-driven, risk management process into transportation agency programs and into transportation agency programs and activities by providing activities by providing a convenient and robust a convenient and robust planning tool for top-down estimation of both planning tool for top-down estimation of both capital and operating budget implications of capital and operating budget implications of measures intended to reduce risks to locally measures intended to reduce risks to locally acceptable levelsacceptable levels..

811/13/2008

Briefing OverviewBriefing Overview

Objectives EvolutionObjectives Evolution

Model OverviewModel Overview

DiscussionDiscussion

911/13/2008

ModelModel: Key Features: Key FeaturesApplication ContextApplication Context– Top-down, program levelTop-down, program level – to support resource allocation – to support resource allocation – Consequence-drivenConsequence-driven – based on user-selected thresholds – based on user-selected thresholds– IterativeIterative –use to compare/refine assumptions –use to compare/refine assumptions

Model AttributesModel Attributes– ObjectiveObjective – when possible use data rather than “best judgment” – when possible use data rather than “best judgment” – TransparentTransparent – avoid “weighting and rating” – avoid “weighting and rating”– ConsistentConsistent – uses simple, available data and criteria, standard data base, – uses simple, available data and criteria, standard data base,

default valuesdefault values– ReplicableReplicable – identify basis of all judgments – identify basis of all judgments

User FeaturesUser Features– ConvenientConvenient – uses available resources (people and software) and – uses available resources (people and software) and

imbedded data modelimbedded data model– ScaleableScaleable – support a range of user contexts, mode, hazards, – support a range of user contexts, mode, hazards, – Expandable – Expandable – to accommodate new threats/hazards, asset types, and to accommodate new threats/hazards, asset types, and

countermeasurescountermeasures

1011/13/2008

ModelModel: Ease of Use: Ease of Use

Uses language familiar to owner/operator communityUses language familiar to owner/operator community

Choices offered – “basic” or “enhanced” versionsChoices offered – “basic” or “enhanced” versions

Integrated data base and user interfaceIntegrated data base and user interface

No special hardware/software (Uses MSExcelNo special hardware/software (Uses MSExcel®®))

Simple identification of inputs and thresholdsSimple identification of inputs and thresholds

Iterative analysis (simple enough to assess multiple options)Iterative analysis (simple enough to assess multiple options)

Default values provided for “quick look” analysis (threats Default values provided for “quick look” analysis (threats and hazards/asset data/countermeasure selection and and hazards/asset data/countermeasure selection and analysis)analysis)

Ends with summary report showing committed resources Ends with summary report showing committed resources across assetsacross assets

1111/13/2008

ModelModel: Products: Products

Project report that documents research activity Project report that documents research activity and methodology development and methodology development

User Guide that explains and illustrates the User Guide that explains and illustrates the CAPTA methodology and its implementation CAPTA methodology and its implementation and applicationand application

Computer-based tool that implements the Computer-based tool that implements the methodology (“CAPTool”)methodology (“CAPTool”)

Embedded data model (updatable)Embedded data model (updatable)

1211/13/2008

Model DemonstrationModel Demonstration: Interactions: Interactions

Master Countermeasures Data BaseDescription of generic countermeasures considered effective in mitigating risks by asset class, hazard or threat, and consequence.

Risk Management MethodologySix step methodology implemented using Microsoft Excel® spreadsheet to capture inputs and display intermediate outputs

User Inputs· Asset Classes of Interest· Threats/Hazards of Concern· Consequence Thresholds· Asset Attributes within Classes· Countermeasure Selection

Candidate Countermeasure Configurations· List of selected countermeasures that will

reduce risks to asset classes of interest against threats/hazards of concern to avoid exceeding specified consequence threshold

· Description of selected countermeasures including rough order of magnitude costs and selected functional characteristics

Potential Countermeasures

Consolidated User Inputs

Countermeasure attributes

Candidate Countermeasures

User Inputs

1311/13/2008

Model Demonstration: Model Demonstration: Overview of CAPTA ImplementationOverview of CAPTA Implementation

Fee

db

ack

& I

tera

tion

1411/13/2008

Color Key

Y X

Road Bridges Road Tunnels Transit/Rail Station

Blu

e R

iver

Bri

dg

e

Sta

te L

ine

Bri

dg

e

Vet

era

n's

Bri

dg

e

Do

wn

tow

n T

un

ne

l

Up

tow

n T

un

nel

Me

mo

ria

l Tu

nn

el

No

rth

Sta

tio

n

So

uth

Sta

tio

n

Ba

y S

tati

on

Do

wn

tow

n S

tati

on

Ma

rket

Sta

tio

n

Par

k S

tre

et S

tati

on

Go

vern

men

t C

en

ter

Sta

te S

tree

t

Co

lleg

e S

tati

on

Su

bu

rban

Sta

tio

n

Air

po

rt S

tati

on

All

oth

er

abo

veg

rou

nd

All

oth

er

bel

ow

gro

un

d

Quantity of Named Asset 1 1 1 2 4 1 1 1 1 1 1 1 1 3 20 13LightingBarriers & BermsFences

CCTV

Intrusion Detection Devices

Physical Inspection of asset

ID CardsBiometricsBackground ChecksMetal DetectorsRestricted ParkingRandom InspectionsVisible BadgesLimited Access PointsVisitor Control & EscortLocksExplosive DetectionEstablish Clear ZonesVisible SignsSeismic RetrofittingFire Detection & Supression

Encasement, Wrapping, Jacketing

PatrolsWX/Seismic InformationIntelligence NetworkingHAZMAT MitigationSecurity Awareness TrainingEmergency Response TrainingEmergency Evacuation PlanningPlanned Redundancy (e.g., detours)Public Information and Dissemination

High EffectivenessMedium Effectiveness

Ass

et

De

sig

n/E

ng

r

Op

erat

ion

al

Co

un

term

easu

res

Ac

cess

Co

ntr

ol

Co

un

term

easu

res

Ph

ysic

al S

ecu

rity

C

ou

nte

rmea

sure

sSelect Candidate CountermeasuresInstructionsThe following is a list of countermeasure opportunities for each critical asset -- orange indicates medium effectiveness and red indicates high effectiveness.

To analyze an asset more closely, click on the name of the asset in row 15, and then click "Analyze Asset." A new sheet will pop up that details the effectivness of the countermeasure against every relevant threat and hazard. The sheet will also tell you how many units of countermeasure you have selected so far for the asset, and the estimated cost.

To add units of countermeasure, enter the desired number of units into any cell. Alternatively, the "Analyze Asset" sheet also has a field for adding units of countermeasure. When you are satisfied with your CM allocation, click "Continue."

Next

Analyze AssetFilter

Countermeasures

Clear All Countermeasure

Quantities

Basic CAPTool

Expanded CAPTool

1 5432 6

1 55c5b4321a 65a

CAPTool Look and FeelCAPTool Look and Feel

Step indicators

Description of this step & instructions Reset

Buttons

Color code key

User Options

1511/13/2008

Step 1: Relevant Risk and Asset ClassesStep 1: Relevant Risk and Asset Classes

Road Bridges Road TunnelsTransit/Rail

StationTransit/Rail

BridgesTransit/Rail

TunnelsAdmin & Support

FacilitiesFerry Fleet

THREATSSmall Explosives Y Y Y Y Y Y Y YLarge Explosives Y Y Y Y Y Y Y YChemical/Biological/Radiological Y Y Y Y Y Y Y YCriminal Acts Y Y Y Y Y Y Y YUNINTENTIONAL HAZARDSFire Y Y Y Y Y Y Y YStruct. Failure Y Y Y Y Y Y Y YHAZMAT Y Y Y Y Y Y Y YNATURAL HAZARDSFlood Y Y Y Y Y Y Y YEarthquake Y Y Y Y Y Y Y YExtreme Weather Y Y Y Y Y Y Y YMud/Landslide Y Y Y Y Y Y Y YADDITIONALUser entered threat/hazard 1 N N N N N N N NUser entered threat/hazard 2 N N N N N N N N

Identify Relevant Risks and Asset ClassesInstructions:It is highly recommended that you save this as a new project. The "Save" button to the right will rename the file as a time and date-stamped copy to your default folder with the filename: "TransRiskManagementYYYY-MM-DD HH.MM.SS.xls"

For the asset classes of interest, please indicate the threats/hazards that you wish to include in your analysis by toggling the response from "N" to "Y" for each cell. Threat/hazard and asset combinations that are likely to result in serious loss will be considered in subsequent steps. When done, click "Next."

Expanded CAPTool

Basic CAPTool

1611/13/2008

Step 2: Establish Consequence Thresholds Step 2: Establish Consequence Thresholds Category Critical Threshold Explanation

ROAD BRIDGE Potentially Exposed Population 0 Potentially exposed population thresholdProperty Loss $5,000 Replacement costMission Importance Level I Demand percentile for ADT * Detour Length

Level I 29000 Level II 68000 Level III 241000

ROAD TUNNEL Potentially Exposed Population 0 Potentially exposed population thresholdProperty Loss $5,000 Replacement costMission Importance Yes Do you consider all road tunnels to be mission critical?

TRANSIT/RAIL Potentially Exposed Population 0 Potentially exposed population thresholdSTATION Property Loss Yes Do you consider below-ground stations to be property critical?

Mission Importance Yes Do you consider all transfer stations to be mission critical?

TRANSIT/RAIL Potentially Exposed Population 0 Potentially exposed population thresholdBRIDGE Property Loss $5,000 Replacement cost

Mission Importance 0 What % of ridership does a bridge need to serve in order to be mission critical?

TRANSIT/RAIL Potentially Exposed Population 0 Potentially exposed population thresholdTUNNEL Property Loss $5,000 Replacement cost

Mission Importance 0 What % of ridership does a tunnel need to serve in order to be mission critical?

ADMIN & SUPPORT Potentially Exposed Population 0 Potentially exposed population thresholdFACILITIES Property Loss $5,000 Replacement cost

Mission Importance Yes Do you consider all administrative and support facilities to be mission critical?

FERRY BOATS Potentially Exposed Population 0 Potentially exposed population thresholdProperty Loss $5,000 Replacement costMission Importance Yes Do you consider all ferry boats to be mission critical?

TRANSIT FLEETS Potentially Exposed Population 0 Potentially exposed population thresholdProperty Loss $5,000 Replacement costMission Importance Yes Do you consider all transit fleets to be mission critical?

The default threshold values for ADT * detour length are taken from the 75th, 85th, and 95th percentiles for the U.S. If these are inappropriate for your state, enter different values in the appropriate fields to the left.

Establish Consequence Thresholds InstructionsFor each asset class, set the appropriate thresholds.When done, click "Next.""Reset" sets all thresholds to their lowest levels.

Restore Defaults

Basic CAPTool

Expanded CAPTool

1711/13/2008

Step 3: Describe Infrastructure Assets Step 3: Describe Infrastructure Assets (Separate list for each mode/asset type)(Separate list for each mode/asset type)

Asset ID Quantity ADT Length (ft) Lanes Detour (mi)Replacement Cost Per Asset

(Optional) Manually mark as critical? Manual Override

Fair St. Bridge 1 1469 2389 2 76 Yes YES Rhodes Bridge 1 9753 3409 2 54 No

Peck Bridge 1 234000 1428 8 21 No YTucker Channel Bridge 1 4967 671 2 89 No

Broad Bridge 1 56099 4530 4 43 No YShaw Bridge 4 45032 7927 4 78 No Y YI-95 Bridge 1 2390 801 2 65 No

High Bridge 1 89345 5609 4 92 No Y YLittle River Bridge 1 50345 10478 4 23 No Y YMcDonald Bridge 1 42000 12093 6 56 $50,000,000 No Y

ROAD BRIDGES

Describe Infrastructure Assets (Road bridges)Instructions:Enter all road bridge assets below, along with the necessary data. If you wish to manually mark certain assets as definitely critical, toggle the "Manual Override" button on, and indicate the assets you deem to be critical by toggling from "No" to "Yes" in the manual override column.

To add comments, toggle the "Comments" button on, and insert any desired comments for each asset. To hide the comments column, toggle the "Comments" button off.

Click "Calculate Criticality" to view a summary of criticality areas for your assets. When done, click "Next."

Basic CAPTool

Expanded CAPTool

1811/13/2008

Step 4: Identify Critical Assets Across Modes Step 4: Identify Critical Assets Across Modes

(Partial list of critical assets)

Asset Type # of critical assets # of assets consideredRoad bridges 7 10Road tunnels 4 7Stations 0 0Rail bridges 0 0Rail tunnels 0 0Facilities 10 13Ferry 0 0Fleet 0 0Other 0 0

Y X Total 21 30

Road Bridges Road Tunnels Admin & Support Facilities

Fai

r S

t. B

rid

ge

Pec

k B

rid

ge

Bro

ad B

rid

ge

Sh

aw B

rid

ge

Hig

h B

rid

ge

Lit

tle

Riv

er B

rid

ge

McD

on

ald

Bri

dg

e

Wal

ker

Tu

nn

el

Do

wn

tow

n

Po

st R

oad

Bri

dg

e T

un

nel

Wo

od

bu

ry B

rid

ge

Tu

nn

el

SW

Reg

ion

TM

C

NW

Reg

ion

TM

C

Cen

tral

Off

ice

Potentially Exposed Population Y Y Y Y Y Y Y Y Y Y Y Y Y

Property Loss Y Y Y Y Y

Mission Importance

Manual Override Y Y

Small Explosives X X X X

Large Explosives X X X X X X X X X X X X X X X

Chemical/Biological/Radiological X X X X X X X X X X X X X X X

Criminal Acts X

Fire X X X X X X X X X X X X X X X

Struct. Failure X X X X X X X X X X X X X X X

HAZMAT X X

Flood X X X X

Earthquake X X X X X X X X X X X

Extreme Weather X X X X X X X X X X X

Mud/Landslide X X X XUser entered threat/hazard 1 X X X X X X X X X X X X X X X

User entered threat/hazard 2 X X X X X X X X X X X X X X X

CR

ITIC

AL

ITY

RE

LE

VA

NT

TH

RE

AT

S/ H

AZ

AR

DS

Identify Critical Assets Across ModesInstructionsThe following is a list of all critical assets, their thresholds of interest, and their relevant threats or hazards.

If you wish to modify the relevant risks for an asset, delete an "X" from any cell to remove that as a risk for the corresponding asset. Likewise, add an "X" to any field where you believe a threat/hazard is relevant to the asset.

In particular, look closely at assets that have been manually marked critical (these cells are highlighted yellow), as you may wish to adjust the threats or hazards associated with these assets. When done, click "Next."

Next

Previous

Return to Thresholds SheetBasic CAPTool

Expanded CAPTool

1 5432 6

1 55c5b4321a 65a

1911/13/2008

Step 5: Select Candidate Countermeasures Step 5: Select Candidate Countermeasures

Color Key

Y X

Road Bridges Road Tunnels Transit/Rail Station

Blu

e R

iver

Bri

dg

e

Sta

te L

ine

Bri

dg

e

Vet

eran

's B

rid

ge

Do

wn

tow

n T

un

nel

Up

tow

n T

un

nel

Mem

ori

al T

un

nel

No

rth

Sta

tio

n

So

uth

Sta

tio

n

Bay

Sta

tio

n

Do

wn

tow

n S

tati

on

Mar

ket

Sta

tio

n

Par

k S

tree

t S

tati

on

Go

vern

men

t C

ente

r

Sta

te S

tree

t

Co

lleg

e S

tati

on

Su

bu

rban

Sta

tio

n

Air

po

rt S

tati

on

All

oth

er a

bo

veg

rou

nd

All

oth

er b

elo

wg

rou

nd

Quantity of Named Asset 1 1 1 2 4 1 1 1 1 1 1 1 1 3 20 13LightingBarriers & BermsFences

CCTV

Intrusion Detection Devices

Physical Inspection of asset

ID CardsBiometricsBackground ChecksMetal DetectorsRestricted ParkingRandom InspectionsVisible BadgesLimited Access PointsVisitor Control & EscortLocksExplosive DetectionEstablish Clear ZonesVisible SignsSeismic RetrofittingFire Detection & Supression

Encasement, Wrapping, Jacketing

PatrolsWX/Seismic InformationIntelligence NetworkingHAZMAT MitigationSecurity Awareness TrainingEmergency Response TrainingEmergency Evacuation PlanningPlanned Redundancy (e.g., detours)Public Information and Dissemination

High EffectivenessMedium Effectiveness

Ass

et

Des

ign

/En

gr

Op

erat

ion

al

Co

un

term

easu

res

Acc

ess

Co

ntr

ol

Co

un

term

easu

res

Ph

ysic

al S

ecu

rity

C

ou

nte

rmea

sure

sSelect Candidate CountermeasuresInstructionsThe following is a list of countermeasure opportunities for each critical asset -- orange indicates medium effectiveness and red indicates high effectiveness.

To analyze an asset more closely, click on the name of the asset in row 15, and then click "Analyze Asset." A new sheet will pop up that details the effectivness of the countermeasure against every relevant threat and hazard. The sheet will also tell you how many units of countermeasure you have selected so far for the asset, and the estimated cost.

To add units of countermeasure, enter the desired number of units into any cell. Alternatively, the "Analyze Asset" sheet also has a field for adding units of countermeasure. When you are satisfied with your CM allocation, click "Continue."

Next

Analyze AssetFilter

Countermeasures

Clear All Countermeasure

Quantities

Basic CAPTool

Expanded CAPTool

1 5432 6

1 55c5b4321a 65a

2011/13/2008

Color Key

Y X

Road Bridges Road Tunnels

Fai

r S

t. B

rid

ge

Pec

k B

rid

ge

Bro

ad B

rid

ge

Sh

aw B

rid

ge

Hig

h B

rid

ge

Lit

tle

Riv

er B

rid

ge

McD

on

ald

Bri

dg

e

Wal

ker

Tu

nn

el

Do

wn

tow

n

Po

st R

oad

Bri

dg

e T

un

nel

Wo

od

bu

ry B

rid

ge

Tu

nn

el

Quantity of Named Asset 1 1 1 4 1 1 1 1 1 1 1Lighting 2 2 22 2 2 22 2 2 2 2 2Barriers & BermsFences

CCTV

Intrusion Detection Devices

Physical Inspection of asset

ID CardsBiometricsBackground ChecksMetal DetectorsRestricted ParkingRandom Inspections 1 1 1 1 1 1 1 1 1 1 1Visible BadgesLimited Access PointsVisitor Control & EscortLocksExplosive DetectionEstablish Clear ZonesVisible SignsSeismic RetrofittingFire Detection & Supression 1 1 1 1 1 1 1 1 1 1 1

Encasement, Wrapping, Jacketing

PatrolsWX/Seismic InformationIntelligence NetworkingHAZMAT MitigationSecurity Awareness TrainingEmergency Response TrainingEmergency Evacuation PlanningPlanned Redundancy (e.g., detours)Public Information and Dissemination

High EffectivenessMedium Effectiveness

Ass

et

Des

ign

/En

gr

Op

erat

ion

al

Co

un

term

easu

res

Acc

ess

Co

ntr

ol

Co

un

term

easu

res

Ph

ysic

al S

ecu

rity

C

ou

nte

rmea

sure

s

Select Candidate CountermeasuresInstructionsThe following is a list of countermeasure opportunities for each critical asset -- orange indicates medium effectiveness and red indicates high effectiveness.

To analyze an asset more closely, click on the name of the asset in row 15, and then click "Analyze Asset." A new sheet will pop up that details the effectivness of the countermeasure against every relevant threat and hazard. The sheet will also tell you how many units of countermeasure you have selected so far for the asset, and the estimated cost.

To add units of countermeasure, enter the desired number of units into any cell. Alternatively, the "Analyze Asset" sheet also has a field for adding units of countermeasure. When you are satisfied with your CM allocation, click "Continue."

Basic CAPTool

Expanded CAPTool

Step 5: Select Candidate Step 5: Select Candidate Countermeasures Countermeasures

2111/13/2008

Step 6: Summary Report (Tabular) Step 6: Summary Report (Tabular) Report Date and Time:

8/19/2008 21:00

Road Bridges Road Tunnels Transit/Rail Station Transit/Rail Bridges Transit/Rail Tunnels Admin & Support Facilities Ferry Fleet Other

Small Explosives X X XLarge Explosives X X X X X X XChemical/Biological/Radiological X X X X X X XCriminal Acts X X X XFire X X X X X X XStruct. Failure X X X X X XHAZMAT X X X X X X XFlood X X X XEarthquake X X X X X X XExtreme Weather X X X X X X XMud/Landslide X X XUser entered threat/hazard 1 X X X X X X XUser entered threat/hazard 2 X X X X X X X

Persons Persons Persons Persons Persons Persons Persons Persons --

200 101 100 200 200 101 305 50 --

Damage DamageBelow Ground Stations

Critical? Damage Damage Damage Damage Damage--

$101,699,661 $101,699,661 Yes $100,004,750 $100,004,750 $101,699,661 $101,699,661 $100,004,750 --

ADT * Detour Length Road tunnels critical? Transfer Stations Critical?% of ridership that causes

mission criticality % of ridership that

causes mission Facilities critical? Ferries critical? Fleets critical? --

Demand Percentile II No Yes 20 20 No No No --

# of Unique Countermeasures 3 3 0 0 0 0 0 0 0

Total # of Countermeasures 68 16 0 0 0 0 0 0 0

Physical Security Countermeasures (x1000) $610.2 $90.4 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0

Access Control Countermeasures (x1000) $210.0 $120.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0

Asset Design/Engr Countermeasures (x1000) $3,219.9 $1,840.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0

Operational Countermeasures (x1000) $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0

Other Countermeasures (x1000) $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0

Total Countermeasure Expenditures (x1000) $4,040.1 $2,050.4 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0

Physical Security Countermeasures $700,600Access Control Countermeasures $330,000Design/Engr Countermeasures $5,059,912Operational Countermeasures $0Other Countermeasures $0Overall Total $6,090,501

Rel

evan

t R

isks

Potentially Exposed Population

Property Loss

To

tals

# of Unique Critical Assets

Mission Importance

Th

resh

old

sE

xpen

dit

ure

sC

ou

nts

7 00 0 0 0104 0

Road BridgesTransit/Rail

StationsTransit/Rail

BridgesAdmin & Support

FacilitiesOther

Save Time-Stamped Copy to Default Folder

Ferries Fleets

Summary ReportClick Heading for Detailed

Expenditure Report

Return to Beginning

Road Tunnels Transit/Rail Tunnels

Edit Countermeasure

Selection

Save Results Only

Basic CAPTool

Expanded CAPTool

1 5432 6

1 55c5b4321a 65a

2211/13/2008

Step 6: Summary Report (Allocation) Step 6: Summary Report (Allocation)

• Shows how available funds could be allocated across all asset types

• Shows funding required to implement selected countermeasures

• Shows distribution of resources among modes

• Shows distribution of funds among countermeasure types

• Provides a record of analysis results for comparison to future iterations

Report Date and Time:

8/19/2008 21:00

Road Bridges Road Tunnels Transit/Rail Station Transit/Rail Bridges Transit/Rail Tunnels Admin & Support Facilities Ferry Fleet Other

Small Explosives X X XLarge Explosives X X X X X X XChemical/Biological/Radiological X X X X X X XCriminal Acts X X X XFire X X X X X X XStruct. Failure X X X X X XHAZMAT X X X X X X XFlood X X X XEarthquake X X X X X X XExtreme Weather X X X X X X XMud/Landslide X X XUser entered threat/hazard 1 X X X X X X XUser entered threat/hazard 2 X X X X X X X

Persons Persons Persons Persons Persons Persons Persons Persons --

200 101 100 200 200 101 305 50 --

Damage Damage Damage Damage Damage Damage Damage--

$101,699,661 $101,699,661 Yes $100,004,750 $100,004,750 $101,699,661 $101,699,661 $100,004,750 --

ADT * Detour Length Road tunnels critical? Transfer Stations Critical? Facilities critical? Ferries critical? Fleets critical? --

Demand Percentile II No Yes 20 20 No No No --

# of Unique Countermeasures 3 3 0 0 0 0 0 0 0

Total # of Countermeasures 68 16 0 0 0 0 0 0 0

Physical Security Countermeasures (x1000) $610.2 $90.4 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0

Access Control Countermeasures (x1000) $210.0 $120.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0

Asset Design/Engr Countermeasures (x1000) $3,219.9 $1,840.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0

Operational Countermeasures (x1000) $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0

Other Countermeasures (x1000) $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0 $0.0

Expenditures by Asset Class

66%

34%

0%0%0%0%0%0%0%

Road Bridges

Road Tunnels

Transit/Rail Station

Transit/Rail Bridges

Transit/Rail Tunnels

Admin & Support Facilities

Ferry

Fleet

Other

Expenditures by CM Type

12%

5%

83%

0%

0%

Physical SecurityCountermeasuresAccess ControlCountermeasuresDesign/EngrCountermeasuresOperationalCountermeasuresOtherCountermeasures

Basic CAPTool

Expanded CAPTool

2311/13/2008

Additional OptionsAdditional OptionsAdd threats or hazardsAdd threats or hazardsModify default threat/hazard vs. asset combinationsModify default threat/hazard vs. asset combinationsAdd or modify the countermeasures data base (cost, effectiveness, Add or modify the countermeasures data base (cost, effectiveness, application)application)Apply countermeasure “filters”Apply countermeasure “filters”

BasicEnhancedBoth

Road Bridges Road TunnelsTransit/Rail

StationTransit/Rail

BridgesTransit/Rail

TunnelsAdmin & Support

FacilitiesFerry Fleet Other

PREDICT Is prediction a desirable countermeasure function? Y Y Y Y Y Y Y Y YDETER Is deterrence a desirable countermeasure function? Y Y Y Y Y Y Y Y Y

DETECT Is detection a desirable countermeasure function? Y Y Y Y Y Y Y Y YINTERDICT Is interdiction a desirable countermeasure function? Y Y Y Y Y Y Y Y Y

RESPONSE PREP. Is response preparedness a desirable countermeasure function? Y Y Y Y Y Y Y Y YDESIGN/ENGINEERING Are countermeasures related to design/engineering desirable? Y Y Y Y Y Y Y Y Y

Area -Wide and Asset-Specific

Do you wish to consider only area-wide countermeasures, only asset-specific countermeasures, or both?

Both Both Both Both Both Both Both Both Both

Temporary/Redeployable Do you wish to consider temp/redeployable countermeasures? Y Y Y Y Y Y Y Y Y

Multipurpose Potential Are you willing to consider CMs that are NOT multipurpose? Y Y Y Y Y Y Y Y Y

Basic and EnhancedDo you wish to consider only basic countermeasures, only enhanced countermeasures, or both?

Both Both Both Both Both Both Both Both Both

Threat ResponsiveDo you wish to consider threat responsive countermeasures? (Answer "N" if only want permanent countermeasures.)

Y Y Y Y Y Y Y Y Y

Cos

t

Max Unit Cost (x1000)What is the maximum per unit countermeasure cost you are willing to pay?

$999,999.0 $999,999.0 $999,999.0 $999,999.0 $999,999.0 $999,999.0 $999,999.0 $999,999.0 $999,999.0

Func

tions

Impl

emen

tatio

nPa

ckag

e

Set Countermeasure Filters based on User PreferenceInstructionsIn order to better identify useful countermeasures for critical assets, answer the filtering questions below. When done, click "Continue."

"Reset" restores the defaults.

Reset to Most Inclusive Filters

NextPrevious

Expanded CAPTool1 55c5b4321a 65a

2411/13/2008

Next StepsNext Steps

CAPTool version 1.0 – updates and CAPTool version 1.0 – updates and enhancementsenhancements

Roll-out – how to get to states and other Roll-out – how to get to states and other owner/operatorsowner/operators

Access – CDROM, Server, etc.Access – CDROM, Server, etc.

Possible AASHTOWarePossible AASHTOWare®®