The National Strategy for Physical Protection of Critical Infrastructures and Key Assets serves as a critical bridge between the National Strategy for Homeland Security and a national protection plan to be developed by the Department of Homeland Security.
This publication defines the road ahead for a core mission area identified in the President's National Strategy for Homeland Security—reducing the Nation's vulnerability to acts of terrorism by protecting our critical infrastructures and key assets from physical attack. This publication, the National Strategy for the Physical Protection of Critical Infrastructures and Key Assets, the Strategy, identifies a clear set of national goals and objectives and outlines the guiding principles that will underpin our efforts to secure the infrastructures and assets vital to our national security, governance, public health and safety, economy, and public confidence. This Strategy also provides a unifying organization and identifies specific initiatives to drive our near-term national protection priorities and inform the resource allocation process. Most importantly, it establishes a foundation for building and fostering the cooperative environment in which government, industry, and private citizens can carry out their respective protection responsibilities more effectively and efficiently. This Strategy recognizes the many important steps that public and private entities across the country have taken in response to the September 11, 2001, attacks to improve the security of their critical facilities, systems, and functions. Building upon these efforts, this document provides direction to the federal departments and agencies that have a role in critical infrastructure and key asset protection. It also suggests steps that state and local governments, private sector entities, and concerned citizens across America can take to enhance our collective infrastructure and asset security. In this light, this Strategy belongs and applies to the Nation as a whole, not just to the federal government or its constituent departments and agencies.
The 9/11 attacks have drawn attention to the security of many institutions, facilities, and systems in the U.S., incl. the nation¿s water supply and water quality infrastructure. These systems have long been recognized as being potentially vulnerable to terrorist attacks of various types, including physical disruption, bioterrorism/chem. contamination, and cyber attack. Damage or destruction by terrorist attack could disrupt the delivery of vital human services in this country, threatening public health and the environment, or possibly causing loss of life. This report presents an overview of this large and diverse sector, describes security-related actions by the government and private sector since 9/11, and discusses additional policy issues and responses. Illus.
This book describes the risk management methodology as a specific process, a theory, or a procedure for determining your assets, vulnerabilities, and threats and how security professionals can protect them. Risk Management for Security Professionals is a practical handbook for security managers who need to learn risk management skills. It goes beyond the physical security realm to encompass all risks to which a company may be exposed. Risk Management as presented in this book has several goals: Provides standardized common approach to risk management through a framework that effectively links security strategies and related costs to realistic threat assessment and risk levels Offers flexible yet structured framework that can be applied to the risk assessment and decision support process in support of your business or organization Increases awareness in terms of potential loss impacts, threats and vulnerabilities to organizational assets Ensures that various security recommendations are based on an integrated assessment of loss impacts, threats, vulnerabilities and resource constraints Risk management is essentially a process methodology that will provide a cost-benefit payback factor to senior management. Provides a stand-alone guide to the risk management process Helps security professionals learn the risk countermeasures and their pros and cons Addresses a systematic approach to logical decision-making about the allocation of scarce security resources
This edited volume uses a ‘constructivist/reflexive’ approach to address critical infrastructure protection (CIP), a central political practice associated with national security. The politics of CIP, and the construction of the threat they are meant to counter, effectively establish a powerful discursive connection between that the traditional and normal conditions for day-to-day politics and the exceptional dynamics of national security. Combining political theory and empirical case studies, this volume addresses key issues related to protection and the governance of insecurity in the contemporary world. The contributors track the transformation and evolution of critical infrastructures (and closely related issues of homeland security) into a security problem, and analyze how practices associated with CIP constitute, and are an expression of, changing notions of security and insecurity. The book explores aspects of ‘securitisation’ as well as at practices, audiences, and contexts that enable and constrain the production of the specific form of governmentality that CIP exemplifies. It also explores the rationalities at play, the effects of these security practices, and the implications for our understanding of security and politics today.
The National Strategy for Physical Protection of Critical Infrastructures and Key Assets serves as a critical bridge between the National Strategy for Homeland Security and a national protection plan to be developed by the Department of Homeland Security.
Countering Cyber Sabotage: Introducing Consequence-Driven, Cyber-Informed Engineering (CCE) introduces a new methodology to help critical infrastructure owners, operators and their security practitioners make demonstrable improvements in securing their most important functions and processes. Current best practice approaches to cyber defense struggle to stop targeted attackers from creating potentially catastrophic results. From a national security perspective, it is not just the damage to the military, the economy, or essential critical infrastructure companies that is a concern. It is the cumulative, downstream effects from potential regional blackouts, military mission kills, transportation stoppages, water delivery or treatment issues, and so on. CCE is a validation that engineering first principles can be applied to the most important cybersecurity challenges and in so doing, protect organizations in ways current approaches do not. The most pressing threat is cyber-enabled sabotage, and CCE begins with the assumption that well-resourced, adaptive adversaries are already in and have been for some time, undetected and perhaps undetectable. Chapter 1 recaps the current and near-future states of digital technologies in critical infrastructure and the implications of our near-total dependence on them. Chapters 2 and 3 describe the origins of the methodology and set the stage for the more in-depth examination that follows. Chapter 4 describes how to prepare for an engagement, and chapters 5-8 address each of the four phases. The CCE phase chapters take the reader on a more granular walkthrough of the methodology with examples from the field, phase objectives, and the steps to take in each phase. Concluding chapter 9 covers training options and looks towards a future where these concepts are scaled more broadly.
The nation¿s health, wealth, and security rely on the production and distribution of certain goods and services. The array of physical assets, functions, and systems across which these goods and services move are called critical infrastructures (CI) (e.g., electricity, the power plants that generate it, and the electric grid upon which it is distributed). The national security community is concerned about the vulnerability of CI to both physical and cyber attack. This report discusses the evolution of a national CI policy and the institutional structures established to implement it. The report highlights five issues of Congressional concern: identifying critical assets; assessing vulnerabilities and risks; allocating resources; info. sharing; and regulation. Illustrations.