INFRASTRUCTURE SELF-ASSESSMENT (ISA) For public and private stakeholders Chad Fullmer Critical Infrastructure Protection (CIP) Office: (907) Fall Preparedness Conference

‘C’ is for Critical Fall Preparedness Conference

‘I’ is for Infrastructure 2015 Fall Preparedness Conference3 “Study after study has shown that rebuilding infrastructure is the quickest way to put large numbers of people to work, and the return for each dollar invested in infrastructure renewal is significantly greater than all other investments in the nation’s economy.” Bob Herbert Deferred maintenance - Useable life MOST LOSS vs Infrastructure assessment + renewal BEST ROI

‘P’ is for Protection 2015 Fall Preparedness Conference4 “The caterpillar does all the work, but the butterfly gets all the publicity.” George Carlin

Benefits of CI Awareness 2015 Fall Preparedness Conference5 “If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle.” Sun Tzu, The Art of War

KNOW YOUR WEAKNESSES Why? (because someone else does) expedite recovery maximize improvements How? prioritize plan 2015 Fall Preparedness Conference6

Infrastructure Protection Principles 2015 Fall Preparedness Conference7

What is ISA? Infrastructure Self-Assessment (ISA) Purpose: Focus resilience improvement efforts on 1.The most critical vulnerabilities and 2.The widest preparedness gaps Results: 1.Understand 2.Prioritize 3.Act 2015 Full Preparedness Conference8

ISA Process: 2015 Fall Preparedness Conference9 PHASE 1: Pre-plan 1) Choose, 2) Coordinate, 3) Map PHASE 2: Prioritize (by Risk) 1) Critical, 2) Important, 3) Peripheral RISK = Probability x Impact PHASE 3: Site Visit 1) Common & restricted areas, 2) Interdependencies/Dependencies, 3) Plans, Processes & Pictures PHASE 5: Take Action 1)Critical, 2) Important, 3)Peripheral Look familiar? Phase 6: Follow Up No new steps – just start over PHASE 4: Re-plan 1) Re-choose, 2) Share, 3) Map

Phase 1: Choose 2015 Spring Preparedness Conference10 Tangible Assets Intangible Assets  Reputation  Culture Threats Vulnerabilities PHASE 1: Pre-plan 1) Choose, 2) Coordinate, 3) Map

Phase 1: Coordinate 2015 Spring Preparedness Conference11 PHASE 1: Pre-plan 1) Choose, 2) Coordinate, 3) Map

2015 Spring Preparedness Conference12 Phase 1: Map City Hall Public Safety DOT School Airport Water treatment PHASE 1: Pre-plan 1) Choose, 2) Coordinate, 3) Map

Phase 2: Prioritize 2015 Spring Preparedness Conference13 PHASE 2: Prioritize (by Risk) 1) Critical, 2) Important, 3) Peripheral RISK = Probability x Impact C. I. P. Probability x IMPACT = RISK

Phase 2: Prioritize 2015 Spring Preparedness Conference14

Phase 2: Prioritize Identify Threats Natural Human 2015 Spring Preparedness Conference15 PHASE 2: Prioritize (by Risk) 1) Critical, 2) Important, 3) Peripheral RISK = Probability x Impact

WHAT’S WRONG WITH THIS PICTURE? Phase 3: Common & Restricted Areas 2015 Fall Preparedness Conference16 PHASE 3: Site Visit 1) Common & restricted areas, 2) Interdependencies/Dependencies, 3) Plans, Processes & Pictures

Phase 3: Dependency & Interdependency 2015 Fall Preparedness Conference17 PHASE 3: Site Visit 1) Common & restricted areas, 2) Interdependencies/Dependencies, 3) Plans, Processes & Pictures

Phase 3: Plans & Pictures 2015 Spring Preparedness Conference18 Subject Matter Experts (SME) Asset Manager Police/Fire Medical Cyber/IT PHASE 3: Site Visit 1) Common & restricted areas, 2) Interdependencies/Dependencies, 3) Plans, Processes & Pictures

Phase 4: Re-plan 2015 Spring Preparedness Conference19 PHASE 4: Re-plan 1) Re-choose, 2) Share, 3) Map 1)Reexamine Plans 2)Share the information 3)Map

Phase 5: Take Action Most critical actions first! BASED ON…? 2015 Spring Preparedness Conference20 PHASE 5: Take Action 1) Critical, 2) Important, 3) Peripheral Look familiar? P x I = R

Phase 6: Follow Up 2015 Spring Preparedness Conference21 Phase 6: Follow Up No new steps – just start over

ISA Process: 2015 Fall Preparedness Conference22 PHASE 1: Pre-plan 1) Choose, 2) Coordinate, 3) Map PHASE 2: Prioritize (by Risk) 1) Critical, 2) Important, 3) Peripheral RISK = Probability x Impact PHASE 3: Site Visit 1) Common & restricted areas, 2) Interdependencies/Dependencies, 3) Plans, Processes & Pictures PHASE 5: Take Action 1) Critical, 2) Important, 3) Peripheral Look familiar? Phase 6: Follow Up No new steps – just start over PHASE 4: Re-plan 1) Re-choose, 2) Share, 3) Map

REMEMBER 1.Infrastructure is the best investment. 2.If CIP is done right, nothing happens. – Both success and failure are guaranteed. 3.P + I = R 4.Plan, prioritize, assess, rinse, and repeat Fall Preparedness Conference23

THE BEGINNING 2015 Spring Preparedness Conference24