U.S. Department of Homeland Security Brief to the Inter Agency Board Incident Management and Communications Subgroup Oct 22, 2010 Pete Owen, PSA San Diego

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 2 Goal for this morning Who we are How we can help you protect critical infrastructure Tools in our toolbox

Who we are

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 4 DHS Protective Security Coordination Division Office for Bombing Prevention (OBP) DHS’ lead for bombing prevention activities Seeks to reduce the Nation’s risk to terrorist bombing attacks Vulnerability Assessments Branch (VAB) Conducts vulnerability assessments in partnership with Federal, State, local, and private sector security partners to prevent, deter, and mitigate the risk of a terrorist attack. Field Operations Branch (FOB) Protective Security Advisors (PSAs) in all 50 States and 1 Territory

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 5 DHS Office of Bombing Prevention Coordinates national efforts Analyzes IED incidents worldwide Analyzes counter-IED requirements and capabilities Promotes information sharing and IED awareness and vigilance –TRIPWire

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 6 DHS Vulnerability Assessments Man-hours Detail Enhanced Critical Infrastructure Protection visit Regional Resiliency Assessment Buffer-Zone Protection Program Computer Based Assessment Tool + Site Assist Visit

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 7 7 PSAs – Who we are Link to DHS infrastructure protection resources Risk assessment Information sharing Incident support

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 8 8 Who We Are Not Grant administrators Regulators or inspectors Law enforcement

How we can help you protect critical infrastructure

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 10 DHS Protective Security Coordination Division Everything we do is voluntary Everything we do is free We do everything in partnership with state & local agencies Everything we collect is safeguarded –PCII

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 11 What’s Critical Infrastructure? Critical Infrastructure: “Infrastructure so vital that its incapacitation, exploitation, or destruction, through terrorist attack, could have a debilitating effect on security and economic well-being.” Key Resources: “Resources, whose exploitation or destruction by terrorists could cause catastrophic health effects or mass casualties comparable to those from the use of a weapon of mass destruction, or could profoundly affect our national prestige and morale.” (HSPD-7)

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 12 Critical Infrastructure and Key Resources Critical Infrastructure : Agriculture and Food Banking and Finance Chemical Critical Manufacturing Defense Industrial Base Water Emergency Services Energy Information Technology Nat’l Monuments & Icons Postal and Shipping Public Health & Healthcare Telecommunications Transportation Systems Key Resources Commercial Facilities Commercial Nuclear Reactors, Materials, and Waste Dams Government Facilities

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 13 “Risk” is a function of –Consequences –Vulnerability –& Threat DHS and our state partners: –Identify and prioritize CIKR according to consequences –Perform detailed vulnerability assessments of CIKR –Assess threats How We Assess Risk

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 14 On Site Assess consequences –Life, health, & safety –Cascading effects –National security Assess vulnerability Recommend protective measures –Devalue –Deter –Detect –Defend

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 15 Push intelligence & best practices to our local partners Conduct intelligence analysis –Regionally at the fusion center –Reach-back to DHS Participate in hazard mitigation planning Provide local context to DHS Coordinate security training and exercises How We Share Information

Tools in Our Tool Box

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 17 Developed in partnership with FBI Focus of DHS effort is training and equipping state and local law enforcement and fire fighters. Local officers conduct outreach to commercial retailers, service providers, and chemical distributors & wholesalers. Educates private sector on suspicious behavior, hazardous materials, precursor chemicals, and other bomb- making information. Bomb-Making Material Awareness Program (BMAP)

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 18 Assessing Risk: Automated Critical Asset Management System (ACAMS) Originally developed by LAPD as “Archangel” –Now administered and funded by DHS Conducted by state in partnership with fusion centers and local law enforcement –Not all states & local agencies use this Facilitates emergency planning + response Helps assess consequence + vulnerability

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 19 Assessing Risk: Infrastructure Surveys aka “Enhanced Critical Infrastructure Protection” (ECIP) Helps DHS build the national risk picture Provides comparison to similar facilities Based on consistent, objective criteria

Vulnerability Dashboard Random Security Measures Physical Security Overall Facility and Sector Protective Measures Index

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 21 Assessing Risk: Buffer Zone Protection Program (BZPP) An infrastructure protection grant program targeted to first responders. Builds terrorism prevention and protection capabilities through planning and equipment acquisition by local law enforcement and first responders. Develops protective measures that make it more difficult for terrorists to conduct surveillance or launch attacks from the immediate vicinity of CIKR.

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 22 Assessing Risk: Site Assistance Visits (SAVs) Conducted with federal, state, and local government agencies, and CIKR owners/ operators. Identifies CIKR dependencies, interdependencies, resiliency characteristics, and regional capability gaps. Increases owner/operator awareness of vulnerabilities and provides options for enhancing protective measures. Provides detailed reports to private sector partners used to make security enhancements.

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 23 Computer-Based Assessment Tool (CBAT) 360-degree imagery Integrates assessment data with video, stills, and maps. A planning and response tool

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 24 Cyber Assessments Cyber Security Evaluation Tool (CSET) –A desktop software tool –For both control systems and business/enterprise systems –Guides the user through a step-by- step process –Assesses cyber systems and network security practices against recognized industry standards Cyber Resiliency Review –A technical assist visit –Assesses key process areas of cyber security management –Facilitated Q&A that identifies and substantiates cyber security performance To learn more: or

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 25 Information Sharing Resources Intelligence HSIN TRIPwire Infragard Best practices Training

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 26 Intelligence Threat Briefs and RFIs CIKR Information Private Sector Clearances Najibullah Zazi September 25, 2009 Zazi purchasing chemicals (CNN)

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 27 Homeland Security Information Network Secure and trusted web-based platform Sensitive But Unclassified (SBU) information Used by federal, state, local, tribal, private sector Request membership via to or

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 28 TRIPWire (Technical Resource for Incident Prevention) Secure, online information-sharing network For law enforcement, bomb squads, and other first responders Current terrorist bombing tactics, techniques, and procedures, including IED design and emplacement. Request membership or info at our TRIPwire Help Desk,

SENSITIVE BUT UNCLASSIFIED FOR OFFICIAL USE ONLY 29 Surveillance Detection 3-day course Developing, applying, & employing surveillance detection measures Developing a surveillance detection plan For law enforcement: San Diego Nov 1-3 sdrttac.org

Pete Owen Protective Security Advisor District of San Diego (619) (Bb)