CIRAS FINAL CONFERENCE CIRAS OVERVIEW Katowice, June, 8th, 2016 Jaime Martín, Project Coordinator, ATOS

Security and Critical Infrastructures…what is being done? Authorities are investing more and more: more means and more cooperation Changes in laws at national and international level Sendai Framework (UNISDR) for Disaster Risk Reduction 2015-2030, one of its targets is: “ Substantially reduce disaster damage to critical infrastructure and disruption of basic services, among them health and educational facilities, including through developing their resilience by 2030. ” CIRAS is a European reserach project cofunded by the prevention ….. CIPS is designed Directorate-General (DG) Migration and Home Affairs Terrorism & other Security-related Risks (CIPS) The Prevention, Preparedness and Consequence Management of Terrorism and other Security-related Risks (CIPS) programme is designed to protect citizens and critical infrastructures from terrorist attacks and other security incidents. It does this by fostering prevention and preparedness, particularly by improving the protection of critical infrastructures. At the same time, projects address consequence management – a key component for the smooth coordination of crisis management and security actions, in particular following terrorist attacks. http://ec.europa.eu/dgs/home-affairs/financing/fundings/security-and-safeguarding-liberties/terrorism-and-other-risks/index_en.htm

What is being done at European level? EC’s DG HOME EPCIP CIPS programme FP7 - SEC programme H2020 – CIP01 and SEC01 Programmes of other dedicated directorates European Programme for Critical Infrastructure Protection (EPCIP)  sets the overall framework for activities aimed at improving the protection of critical infrastructure in Europe - across all EU States and in all relevant sectors of economic activity. The threats to which the programme aims to respond are not only confined to terrorism, but also include criminal activities, natural disasters and other causes of accidents. In short, it seeks to provide an all-hazards cross-sectoral approach. The EPCIP is supported by regular exchanges of information between EU States in the frame of the CIP Contact Points meetings. CIRAS is a European reserach project cofunded by the prevention ….. CIPS is designed Directorate-General (DG) Migration and Home Affairs Terrorism & other Security-related Risks (CIPS) The Prevention, Preparedness and Consequence Management of Terrorism and other Security-related Risks (CIPS) programme is designed to protect citizens and critical infrastructures from terrorist attacks and other security incidents. It does this by fostering prevention and preparedness, particularly by improving the protection of critical infrastructures. At the same time, projects address consequence management – a key component for the smooth coordination of crisis management and security actions, in particular following terrorist attacks. http://ec.europa.eu/dgs/home-affairs/financing/fundings/security-and-safeguarding-liberties/terrorism-and-other-risks/index_en.htm

Challenging decisions Need for effective solutions Finding a balance of: security improvement cost effectiveness social acceptance political compliance CIRAS is a European reserach project cofunded by the prevention ….. CIPS is designed Directorate-General (DG) Migration and Home Affairs Terrorism & other Security-related Risks (CIPS) The Prevention, Preparedness and Consequence Management of Terrorism and other Security-related Risks (CIPS) programme is designed to protect citizens and critical infrastructures from terrorist attacks and other security incidents. It does this by fostering prevention and preparedness, particularly by improving the protection of critical infrastructures. At the same time, projects address consequence management – a key component for the smooth coordination of crisis management and security actions, in particular following terrorist attacks. http://ec.europa.eu/dgs/home-affairs/financing/fundings/security-and-safeguarding-liberties/terrorism-and-other-risks/index_en.htm http://www.spiegel.de/international/world/civil-liberties-in-an-age-of-terror-how-to-balance-freedom-and-security-a-479668-druck.html

CIRAS: Critical Infrastructure Risk Assessment Support CIRAS rationale CIRAS: Critical Infrastructure Risk Assessment Support Project: EC’s DG HOME CIPS programme - Co-funded by the Prevention, Preparedness and Consequence Management of Terrorism and other Security-related Risks Programme of the European Commission (CIPS) Aim: support decision-making processes to protect citizens and CIs from terrorist attacks and other security incidents. Duration: 2 years (Sept, 2014 – Sept, 2016) CIRAS is a European reserach project cofunded by the prevention ….. CIPS is designed Directorate-General (DG) Migration and Home Affairs Terrorism & other Security-related Risks (CIPS) The Prevention, Preparedness and Consequence Management of Terrorism and other Security-related Risks (CIPS) programme is designed to protect citizens and critical infrastructures from terrorist attacks and other security incidents. It does this by fostering prevention and preparedness, particularly by improving the protection of critical infrastructures. At the same time, projects address consequence management – a key component for the smooth coordination of crisis management and security actions, in particular following terrorist attacks. http://ec.europa.eu/dgs/home-affairs/financing/fundings/security-and-safeguarding-liberties/terrorism-and-other-risks/index_en.htm

Madrid, Spain (Coordinator) Consortium Consortium partners: Madrid, Spain (Coordinator) Katowice, Poland Munich, Germany CIRAS project is carried out by 3 partners The Institute of Innovative Technologies EMAG The Centre for European Security Strategies  CESS

Support of decision making processes by: Project´s goals Support of decision making processes by: Providing a methodology and toolset for the assessment of risks in a range of CIs considering several assets and threats Comparing security alternatives from different perspectives, assessing: risks reduction costs and benefits qualitative criteria (society, politics , ethics ,laws, environment…) Qualitative criteria are defined as criteria of relevance for a decision which cannot be quantified by a certain physical or logical dimension in the way costs or quantities of damages can be quantified. The qualitative criteria tool tries to integrate the different non-tangible decision parameters into an evaluation process. (VS’ D4.2 annex)

Management & Coordination (ATOS) Requirements & Concept (CESS) CIRAS Workflow Management & Coordination (ATOS) Requirements & Concept (CESS) Design (EMAG) Implementation (ATOS) Validation (CESS) Dissemination & Exploitation (EMAG)

Security measures (alternatives) CIRAS in a nutshell Integrated results Comparison #1 Transport Use Cases #2 Energy Use Cases Assets RRA – Risk Reduction Assessment CBA – Cost-Benefit Assessment QCA – Qualitative Criteria Assm. Threats Societal, ethical, political, … Economical Security measures (alternatives) to be compared Decision context Scenarios Impact

Project´s outcomes CIRAS provides a methodology and toolset for the assessment and management of risks in a wide range of CIs exposed to threats and incidents. The CIRAS Decision Support System (DSS) provides a comparison of different Security Measures Alternatives. Qualitative criteria are defined as criteria of relevance for a decision which cannot be quantified by a certain physical or logical dimension in the way costs or quantities of damages can be quantified. The qualitative criteria tool tries to integrate the different non-tangible decision parameters into an evaluation process. (VS’ D4.2 annex)

Project´s outcomes Risk Reduction Assessment: for measuring the risk reduction capability of the different Security Measures and the Alternatives that include them Cost and Benefit Assessment: for assessing the different alternatives based on the cost and future benefits of the Security Measures considered during a certain period of years. Qualitative Criteria Assessment: for the assessment of “social” and other non-tangible criteria related to the Security Measures  thus putting into numbers these criteria that are, otherwise, difficult to measure objectively. Aggregate Results are provided to compare all the alternatives individually and together using any number of assessments. Qualitative criteria are defined as criteria of relevance for a decision which cannot be quantified by a certain physical or logical dimension in the way costs or quantities of damages can be quantified. The qualitative criteria tool tries to integrate the different non-tangible decision parameters into an evaluation process. (VS’ D4.2 annex)

Thank you for your attention! Jaime Martín Pérez CIRAS Project Coordinator Deputy head of Homeland Security and Defence Sector ATOS Spain jaime.martinp@atos.net www.cirasproject.eu Co-funded by the Prevention, Preparedness and Consequence Management of Terrorism and other Security-related Risks Programme of the European Union (HOME/2013/CIPS/AG/4000005074)