Home Information Sharing & Analysis Prevention & Protection Preparedness & Response Research Commerce & Trade Travel Security Immigration
About the Department Open for Business Press Room
Current National Threat Level is elevated

The threat level in the airline sector is High or Orange. Read more.

Page Tools

Share icon Share this page Email icon Email Updates Feed icon Subscribe to Feeds

Homeland Security Components

Comprehensive Reviews

Ambulance with lights on

Orchestrating Readiness and Response

Through the Comprehensive Review (CR) program, the Department of Homeland Security's Office of Infrastructure Protection (IP) works closely with federal, state, and local homeland security authorities, as well as private sector owners and operators, to identify security enhancements and protective measures of an identified CIKR facility. 

The CR considers potential terrorist actions, the consequences of such an attack, and the integrated preparedness and response capabilities of the facility's owner and operator, local law enforcement, and emergency response organizations.

Results are used to enhance the facility's overall security posture, including how an event would impact surrounding communities and the geographic region. Enhancements include short-term improvements and long-term risk-based investments in training, processes, procedures, equipment, and resources for the community.

This information is used not only to enhance the capabilities of CIKR owners and operators and community first responders, but also to provide risk data to inform federal investment and research and development decisions.

The Comprehensive Review Process

The CR process is a series of steps for planning, execution, and analysis. An interagency team conducts extensive discussions with facility security personnel, local law enforcement, and emergency response representatives to identify existing security and response postures.

In addition, IP planning experts explore the facility and the surrounding perimeter — known as the buffer zone — from which an attack could be planned or launched. Considered scenarios include:

  • Aerial assault
  • Bombings
  • Vehicle-borne improvised explosive device
  • Nuclear or radiological material used as a weapon
  • Biological material used as a weapon
  • Chemical material used as a weapon
  • Maritime threat
  • Direct assault
  • Cyber attack

Owners and operators, local law enforcement, and emergency response organizations are briefed on the results of the on-site review.

After the on-site visit, the federal team reconvenes to conduct a joint analysis of gaps, or differences between existing security and emergency response capabilities and additional capabilities needed to prevent, defend, mitigate, and respond to terrorist threat, attack, and consequence scenarios. These experts further analyze potential enhancements, additional security or response capabilities needed to reduce vulnerability, and potential consequences of a terrorist attack or all-hazards event. These are compiled into a final protective measures analysis.

CIKR data are subsequently analyzed for in-sector and cross-sector trends. As the CR program matures, this information may be used to inform future federal investment decisions or point to areas where research is required to develop or improve additional protective measures.

The CR already offers numerous benefits in terms of identifying readily adaptable, low-cost protective measures to mitigate the risk posed by a potential attack or natural disaster at the site and within the buffer zone.

Innovations of the Comprehensive Review

The CR differs from a traditional federal sequential inspection because it:

  • Is voluntary.
  • Takes a holistic approach to analyzing security and response postures from federal, state, and local preparedness and security capabilities across the multiple functions needed to prevent, defend, mitigate, and respond to a potential terrorist event.
  • Fosters candid, open dialogue to explore and coordinate capabilities rather than providing a regulatory function of a single industry.
  • Promotes meetings between federal agencies and industry representatives, local law enforcement, and emergency responders.

Although the CR process focuses primarily on the threat of terrorism, it is an opportunity for all security partners to identify and implement sound, effective practices for readiness and preparedness for any catastrophic event that may affect the facility.

Key Participants

The core federal team conducting a CR is led by IP's Protective Security Coordination Division and includes representatives from the federal agencies responsible for aspects of security and response. Team membership depends on the unique attributes of each CIKR sector. For example, core federal team members for the Nuclear and Chemical Sector's CRs included:

The federal team works cooperatively with the state Homeland Security Advisor; other state, county, and local emergency managers and planners; emergency response agencies; and private representatives and associations. State officials and industry-based Sector Coordinating Councils also participated in the Nuclear and Chemical CRs.


Contact

For additional information regarding CRs and other vulnerability identification and assessment programs at the Department, contact: ipassessments@dhs.gov.

This page was last reviewed/modified on December 11, 2008.