Civil Air Patrol Critical Infrastructure Austin Worcester 15 Jul 2019

Purpose & Agenda Critical Infrastructure BLUF – What is Critical Infrastructure 16 Critical Infrastructure Sectors Location Sensitivity Three Tiered Criticality Index Based Open Source Mitigation Mission Planners

BLUF – Critical Infrastructure BACKGROUND: Essential Services that serve as the backbone of our nation's economy, security, and health. Power, Water, Transportation, Stores, Communication Systems FOCUS: 16 Critical Infrastructure Sectors Three Tiered Criticality Index Based High, Medium, Low Risk WAY AHEAD: Mission Planners Crew ENGAGEMENT: Reasonable Efforts to minimize any photography or other data collection on critical infrastructure Coordinate Any Data Collection When in doubt, coordinate prior to flight

Critical Infrastructure What Is Critical Infrastructure? The nation's critical infrastructure provides the essential services that underpin American society and serve as the backbone of our nation's economy, security, and health. We know it as the power we use in our homes, the water we drink, the transportation that moves us, the stores we shop in, and the communication systems we rely on to stay in touch with friends and family.

Critical Infrastructure 16 Critical Infrastructure Sectors DHS has identified 16 critical infrastructure sectors whose assets, systems, and networks, whether physical or virtual, are considered so vital to the United States that their incapacitation or destruction would have a debilitating effect on security, national economic security, national public health or safety, or any combination thereof.

Critical Infrastructure Chemical Sector Commercial Facilities Sector Communications Sector Critical Manufacturing Sector Dam Sector Defense Industrial Base Sector Emergency Services Sector Energy Sector

Critical Infrastructure 9. Financial Services Sector 10. Food and Agriculture Sector 11. Government Facilities Sector 12. Healthcare and Public Health Sector 13. Information Technology Sector 14. Nuclear Reactors, Materials, and Waste Sector 15. Transportation Systems Sector 16. Water and Wastewater Systems Sector

Critical Infrastructure Location Sensitivity. CAP sUAS will operate only over non-critical infrastructure UNLESS required for missions. Implement a mission planning requirement to assess sensitivity of each mission area. The training are to be conducted over non-DoD terrain and away from Critical Infrastructure UNLESS prior approval is given. All missions, regardless of location, will require a documented terrain analysis of the surrounding area within 3 miles.

Critical Infrastructure Critical Infrastructure will be defined in a three tiered criticality index based on Department of Homeland Security (DHS) and other federal agency definitions (HIGH Risk, MEDIUM Risk, and LOW Risk). The criticality of nearby infrastructure will be documented as a part of the Mission Risk Assessment. At appropriate levels, all risk acceptance based on mission risk exposure.

Critical Infrastructure High Risk – All DHS Critical Infrastructure activities and facilities that are within a three (3) nautical mile (NM) radius of the mission plan will be documented as part of the Mission Risk Assessment on CAP Form 109. The Critical Infrastructure activities and facilities will be considered HIGH Risk unless mitigated by one tier (to MEDIUM Risk) or both tiers (to LOW Risk).

Critical Infrastructure Distance & Avoidance Mitigation – If a mission is conducted within 3 NM of DHS Critical Infrastructure but outside a one thousand (1,000) meter radius of the activity/facilities, and the mission plan has documented requirements to specifically avoid capturing imagery or other information (cyber, signal, etc.) of the activity/facility then the Critical Infrastructure will be mitigated by one tier (MEDIUM). NOTE: Flights within 1,000 meters of Critical Infrastructure require documented prior coordination with Infrastructure security managers to determine criticality risk.

Critical Infrastructure Open Source Mitigation – If open source data about the infrastructure is available then concern of compromise of information is mitigated, but not eliminated. Existence of open source data does not remove the need for careful mission preparation and execution and post-mission data handling. Open source data of the same resolution or quality of the payload capability mitigates the Criticality by one tier.

Critical Infrastructure Mission planners will make reasonable efforts to minimize any photography or other data collection on critical infrastructure. Planners and crews are responsible to coordinate any data collection with the facility or activity security managers prior to mission execution when operations will be within 1,000 meters or when considered necessary by crews, DOUs or mission approvers. When in doubt, coordinate prior to flight!

Review - Critical Infrastructure BLUF – What is Critical Infrastructure 16 Critical Infrastructure Sectors Location Sensitivity Three Tiered Criticality Index Based Open Source Mitigation Mission Planners

Questions?