1. FOR OFFICIAL USE ONLY 1 National Critical Infrastructure Prioritization Program Tier 1 and Tier 2 Program Overview Office of Infrastructure Protection National Protection and Programs Directorate

2. FOR OFFICIAL USE ONLY 2  The Homeland Security Act, Homeland Security Presidential Directive 7 (HSPD-7), and the National Infrastructure Protection Plan require the identification of the Nation’s most critical infrastructure.  The 9/11 Commission Act explicitly requires the Department of Homeland Security’s Office of Infrastructure Protection to create annual lists of critical infrastructure and key resources capable of “national or regional catastrophic effects.”  The Homeland Infrastructure Threat and Risk Analysis Center (HITRAC) executes these responsibilities through the National Critical Infrastructure Prioritization Program (NCIPP): ―Tier 1/Tier 2 Program (Domestic) ―Critical Foreign Dependencies Initiative – CFDI (International)  The success of the Program relies upon the contributions and cooperation of public- and private sector-security partners. The National Critical Infrastructure Prioritization Program

3. FOR OFFICIAL USE ONLY 3  Intended to identify the Nation’s most critical, highly consequential assets and systems.  The over 3,000 Tier 1 and Tier 2 assets and systems are those that, if disrupted, could create a combination of significant casualties, major economic loss, and/or widespread disruptions in governance and nationally critical missions.  The Tier 1 and Tier 2 Lists are the key components of the Urban Areas Security Initiative and State Homeland Security Grant Programs’ infrastructure index, as well as other key infrastructure protection programs.  The Tier 1 and Tier 2 Lists are also used in support of incident management to prioritize infrastructure protection, response, and recovery activities. The Tier 1 and Tier 2 Program

4. FOR OFFICIAL USE ONLY 4 The “New” Tier 1 and Tier 2 Program  Introduced a number of changes to increase the utility of the resulting lists for both incident and risk management purposes: ―Developing a “List of Lists” approach, expanding the original Tier 1 and Tier 2 layers to include distinct Sector and State/Territory Lists. ―Transitioning the Tier 2 List to consequence- based criteria. ―Allowing the inclusion of “critical clusters”. ―Extending the timeline to allow for greater coordination and collaboration.  The Lists will be finalized by 31 July 2009 in time for the key months of hurricane season.

5. FOR OFFICIAL USE ONLY 5 Executive Report Fiscal Year 2009 Process and Products