What is “national security”?  No longer defined only by threat of arms  It really is the economy  Infrastructure not controlled by the government

Presidential Decision Directive-63 May 1998 Presidential Decision Directive-63 May 1998 “ Critical infrastructures are those physical and cyber-based systems essential to the minimum operations of the economy and government.” Critical Infrastructures

Interconnectivity Interdependency Cascading Impact

Pipeline disruption Power outage Submarine cable lost Bomb threats in two buildings Threat to water supply Two bridges down Oil refinery fire Telephone service disrupted FBI phones jammed 911 unavailable Two regional ISP’s out of service What if…...

Cyber Threats  Insiders  Hackers  Virus Writers  Criminal Groups  Terrorists  Foreign Intelligence Services  Information Warfare

The Quandary  At the outset, intrusions often defy categorization  We traditionally respond based on the nature of the threat  Criminal?  Foreign intelligence?  Warfare?

NIPC  An interagency center  Mission: detect, warn, investigate, and respond to cyber intrusions  Training program for law enforcement  Clearinghouse for technological developments  24 hour / 7 day Watch and Warning capacity

Information from …  Law Enforcement Community  Intelligence Community  Defense Community  Private Sector  Foreign Liaison Services  Foreign Connectivity

The Answer  Public – Public Partnership  Public – Private Partnership

Other Government Agencies NIPC Sector Lead Agencies Federal, State, & Local Law Enforcement Infrastructure Owners & Operators Intelligence Community Department of Defense Warnings Threats & Incidents International entities Emergency Responders INFORMATION FLOW

Post September 11  Key Assets  Homeland Security  Physical Threat Information  USA Patriot Act  Information Sharing  State and local government  International

InfraGard  Established in consultation with private industry  Designed to give companies a means to provide information in a confidential way  On January 5, 2001 the AG announced chapters were established in all 56 field offices  March 1, ,500 members Mar 1, 2002

Locate Links Supporting Key Assets Key Asset

ISAC Initiative  Electric power  Banking and finance  Telecommunications  Information technology  Oil and gas  Water  Food Industry  Railroads  Chemical

Fire & Emergency Medical Services Fire and Emergency Medical Service are both Critical Infrastructures and defenders of CI’s Must protect Firefighter and EMS personnel, physical, cyber, and communication assets from attack Must protect ability to conduct response and Consequence Management operations Timely alerts, warnings and incident information are vital for preparing and appropriately responding to a threat or an attack A government / industry partnership makes sense

Warning Threat & Incidents Close & Timely Coordination NIPC USFA ( FEMA) Lead Agency OGA’s DoD Law Enforcement Federal, State, and Local Intelligence Community ISACs State Fire Marshals Fire & Emergency Medical Service Department EFS ISAC Information Sharing Concept

Sets goal of increased government security by the year 2000 and a secure information system infrastructure by the year 2003 Creates “Lead Agencies” for each sector Seeks participation of private industry Creates “National Coordinator for Security, Infrastructure Protection, and Counterterrorism”

E.O Office of Homeland Security  Mission - Develop and Coordinate national strategy to secure the United States from terrorist threats or attacks  Twelve functions to coordinate efforts to detect, prevent, protect against, respond to and recover from terrorist attacks in the United States  Work with Federal, state and local agencies

E.O Critical Infrastructure Protection in the Information Age  Policy - program to secure information systems for critical infrastructures  Establishes President’s Critical Infrastructure Protection Board  Ten committees to recommend policies and coordinate programs  NIPC co-chair of two committees  Establishes National Infrastructure Advisory Council (private sector, academia, state and local agencies)

National Infrastructure Protection Center JEH Building Room Pennsylvania Avenue, NW Washington, DC National Infrastructure Protection Center JEH Building Room Pennsylvania Avenue, NW Washington, DC (202) (202)