Wednesday, December 22, 2010

Enhancing Critical Infrastructure Resilience

Written by: Todd M. Keil, Assistant Secretary for Infrastructure Protection

There can be no doubt that the nature of our world today is one of constant, rapid change. Events and disruptions to everyday operations happen—some that we can predict or forecast, others that we cannot.  As a result, the owners and operators of the Nation's critical infrastructure need to be resilient and able to recover from any type of hazard.

Resilience
"What do we really mean when we talk about resilience?"  What actions can the homeland security enterprise take to promote greater resilience?"   The 2010 DHS Quadrennial Homeland Security Review identifies four strategic goals of resilience: (1) Enhanced preparedness, (2) Effective emergency response, (3) Rapid recovery, and (4) hazard mitigation. These four goals encompass the actions that will be necessary to manage the consequences of any incident and to quickly restore operations. 

Based on these goals and the strategic direction provided by the QHSR, I initiated an IP Resilience Initiative in August to unify critical infrastructure activities around this important document. I am encouraged by what we have found so far, though there is surely more that we and our partners can and must do. I would like to talk briefly about three current IP programs that help our government and private sector partners to strengthen the resilience of critical infrastructure throughout the Nation.

(1) RRAP
One of our most important resilience initiatives is the Regional Resiliency Assessment Program. The RRAP evaluates critical infrastructure in specific geographic regions to examine vulnerabilities, threats, and potential consequences from an all-hazards perspective. RRAP assessments identify regional critical infrastructure dependencies that could be affected by events or disasters, and also evaluate a system’s ability to quickly recover. This practical, real-world approach to resilience is leading to tangible, on-the-ground results. For example, we are pairing Protective Security Advisors with Regional Directors and mission collaboration teams to help regions uncover critical infrastructure dependencies, cascading effects, and gaps in capabilities, as well as synergies derived from tapping into shared resources that they may not have known were available to them.  My hope is that the RRAP will continue to grow and become a model for how to implement meaningful critical infrastructure security activities.

(2) PS-Prep
I also want to acknowledge another Department-wide effort of which IP is a part—the Private Sector Preparedness Accreditation and Certification Program, or PS-Prep. PS-Prep, codified in the 9/11 Act, establishes a remarkable public-private partnership. It's a voluntary program that enables private sector entitites to be certified - by objective third party entities - as meeting DHS preparedness standards. PS-Prep provides a tangible way for DHS and its partners to identify and recognize specific companies as compliant with resilience-based standards—and we are excited about the feedback we have been receiving from the private sector.  The three standards of PS-Prep go right to the heart of resilience, addressing organizational preparedness, and emergency and business continuity. Given that companies of all kinds are eligible for certification, this program goes well beyond critical infrastructure security and demonstrates how raising awareness of critical infrastructure resilience can spill over into resilience among all types of companies and their communities.

 (3) Information Sharing
In my view, part of critical infrastructure resilience is empowering owners and operators to make decisions in an evolving threat environment. This requires DHS to share security and risk information. IP has long recognized the importance of information sharing to maintaining strong partnerships. We have built an entire critical infrastructure information sharing environment to support the critical infrastructure community, and this environment can—and will—be a key component of IP’s resilience programs. Recently, IP hosted several webinars, briefings, and other events across the country to ensure that our partners have the information that they need about the risks we face—and about how to manage those risks. More about critical infrastructure information sharing. 

The Future of the IP Resilience Initiative
Through the RRAP, PS-PREP, and our information sharing programs, IP is promoting resilience among our critical infrastructure partners. We also know that this handful of programs is not enough. Accordingly, the Resilience Initiative is, in part, focusing on developing further efforts that support rapid recovery of critical infrastructure and identifying gaps in programming so that we will be better able to develop solutions to address those gaps with the help of our partners. This organic approach to resilience, in my view, is not an academic exercise done in a vacuum. Instead, it utilizes the Department-driven definitions of resilience, as well as information and feedback from our partners and other stakeholders.

As Critical Infrastructure Protection Month 2010 draws to a close, I am looking forward to our work on this exciting initiative in 2011.

For more information about critical infrastructure programs, visit www.dhs.gov/criticalinfrastructure

Friday, December 17, 2010

Computer Society Recognizes DHS Master of Software Assurance Curriculum

By: Joe Jarzombek, Director for SwA, National Cyber Security Division

At a major IT conference earlier this year, Sec. Napolitano challenged the industry to monitor the integrity of their manufacturing processes.  “I am asking you today to redouble your efforts to increase the security, reliability and quality of the products that enter the global supply chain,” she said.  “We must have more secure hardware and software, and using that to create an information technology ecosystem that is fundamentally more resilient.”

Earlier this month, the IEEE Computer Society, the world’s leading organization of computing professionals, took a step in that direction by formally recognizing the Master of Software Assurance (MSwA) Reference Curriculum as a certified master’s degree program in software assurance—the first curriculum of its kind to focus on assuring the functionality, dependability, and security of software and systems. 

Researchers in the Computer Emergency Response Team (CERT) Program at Carnegie Mellon University’s Software Engineering Institute collaborated with a team of educators from Embry-Riddle Aeronautical University, Monmouth University, and Stevens Institute of Technology to develop this software assurance program, which DHS-sponsored through its Software Assurance (SwA) Curriculum Project.  The MSwA Reference Curriculum materials are available at http://www.cert.org/mswa/.

This project recognizes the emergence of software assurance as an important multi-discipline body of knowledge, and the IEEE seal of approval is a testament to the significance of the public-private collaboration that DHS, along with our government, industry, and academic partners, have put into the effort.

The SwA Curriculum Project, which produced the MSwA curriculum and undergraduate course outlines, is a recent NCSD effort to co-sponsor public-private collaboration for government, industry, and academia through its SwA Forum.  The forum also sponsors working groups, including one on Workforce Education and Training that has provided foundational, peer-reviewed material, such as the SwA Common Body of Knowledge. 

To facilitate implementation, the MSwA project team is offering assistance, free of charge, to educational institutions looking to launch an MSwA degree program.  For more information on the SwA Curriculum Project and the MSwA, log on to https://buildsecurityin.us-cert.gov/bsi/1165-BSI.html.

Tuesday, December 14, 2010

First female service academy superintendent named

Cross-posted from Coast Guard Compass
Friday, December 14, 2010
Written by: LTJG Stephanie Young


Rear Adm. Sandra Stosz
Rear Admiral Sandra L. Stosz currently 
serves as Director of Reserve and 
Leadership. She is responsible for
developing  policies to recruit, train and 

support over 8,000 Coast Guard Reservists.
Photo by: USCG

Earlier today, the Coast Guard announced that Rear Adm. Sandra Stosz will be the first female Superintendent of the United States Coast Guard Academy. Stosz, currently the Director of Reserve and Leadership, will become the first, and only female to lead a U. S. service academy when she assumes command of USCGA next summer. Today’s announcement came with the release of the 2011 flag officer assignment list, detailing key leadership positions across the service.
“Rear Admiral Stosz has dedicated her career to developing professional Coast Guard men and women,” said Adm. Bob Papp, commandant, U.S. Coast Guard. “We are also extremely proud to be the first service with a woman at the helm of our academy. The Coast Guard has always led by allowing men and women equal access to all career fields and assignments.”
Stosz, a 1982 graduate of the Coast Guard Academy, is the first female Coast Guard Academy graduate to achieve the rank of flag officer and is a surface operations officer with 12 years at sea, including command of two cutters – an icebreaking tug on the Great Lakes and a medium endurance cutter that patrolled North Atlantic and Caribbean waters.
The smallest of the five federal service academies, the Coast Guard Academy was the first military service academy to accept women among their Corps of Cadets in 1976, which now includes over 1,000 officers in training.

Friday, December 10, 2010

December Is Critical Infrastructure Protection Month

critical infrastructure

For the second year in a row, President Obama has designated December as Critical Infrastructure Protection Month, stating: “My Administration is committed to delivering the necessary information, tools, and resources to areas where critical infrastructure exists in order to maintain and enhance its security and resilience.”

So, what exactly is Critical infrastructure?  Quite simply, critical infrastructure is something that touches your every day life. From the bridges you cross, to the food you eat, to the water you drink, to the buildings you work in. Critical infrastructure encompasses the assets, networks, and functions—both physical and virtual—that are essential to the security, economic welfare, public health, and safety of the United States.  This includes:
  • Emergency Services
  • Energy
  • Postal and Shipping
  • National Monuments and Icons
  • Commercial Facilities
  • Dams
  • Government Facilities
  • Transportation Systems, including Bridges and Tunnels
  • And so much more...
Here at DHS, the Office of Infrastructure Protection oversees the national program created to protect our critical infrastructure and strengthen its resilience and ability to recover quickly from catastrophic events.

Because most U.S. critical infrastructure is privately owned, this federal effort is an unprecedented network of public-private partnerships involving thousands of stakeholders in the United States and abroad.
President Obama's proclamation calls upon “the people of the United States to recognize the importance of protecting our Nation’s resources and to observe this month with appropriate events and training to enhance our national security and resilience.”

Through the leadership of the Office of Infrastructure Protection, DHS is honoring President Obama's proclamation with a host of initiatives and resources, including the expansion of essential programs such as the Regional Resiliency Assessment Program, Chemical Facility Anti-Terrorism Standards, bombing prevention programs and tools, commercial facilities training and resources, risk management and analysis, contingency planning and incident management, and much more.

Throughout the month of December, the Office of Infrastructure Protection will be providing updates, comprehensive overviews, and tons of helpful information.  Please visit us at http://www.dhs.gov/criticalinfrastructure to sign up for updates and to learn more about what we're doing at DHS to protect the critical infrasture that ensures the security, welfare, and safety of your community.

-- Guest Blog from the Office of Infrastructure Protection, External Communications, DHS

Monday, December 6, 2010

DHS and Walmart: Partners in Promoting “If You See Something, Say Something” Campaign



Secretary Napolitano has teamed up with the nation's largest retailer, Walmart, to promote the “If You See Something, Say Something” campaign. Beginning today, more than 230 Walmart stores will play this video at select checkout lanes.  In the coming weeks, a total of 588 stores will show the video featuring Secretary Napolitano reminding shoppers to contact local law enforcement to report suspicious activity.

“Homeland security starts with hometown security, and each of us plays a critical role in keeping our country and communities safe” the Secretary said today, adding “I applaud Walmart for joining the ‘If You See Something, Say Something’ campaign. This partnership will help millions of shoppers across the nation identify and report indicators of terrorism, crime and other threats to law enforcement authorities.”

The “If You See Something, Say Something” campaign is our way of engaging and empowering the public and key front line employees to take an active role in identifying and reporting indicators of terrorism, crime, and threats. As the busy holiday shopping season ramps up, this video will serve as a dynamic way to encourage the public to remain vigilant and play an active role in keeping our country safe.

For more information on the ‘If You See Something, Say Something” campaign, visit us at http://www.dhs.gov/

Guardian of the Week – LT James O’Mara

Cross-posted from Coast Guard Compass
Friday, December 3, 2010
Written by: LTJG Stephanie Young



CGC Farallon
Homeported in San Juan, Puerto Rico, Farallon patrols the Caribbean and executes counter-narcotics,
 alien migrant interdiction and homeland security missions.   Photo by: USCG
 
Whether in corporate culture or the military, buzzwords are often used to describe the success of an organization. One of these buzzwords is “teamwork,” but for Coast Guard Cutter Farallon, and LT James O’Mara, teamwork isn’t just another word. It’s a way to achieve mission excellence.

As Commanding Officer of Farallon, O’Mara has the responsibility to create a positive culture aboard his unit. At no time was that teamwork more evident than during a seven-day period where his crew stopped two drug smuggling ventures and one migrant smuggling attempt.

Farallon’s mission-filled week began with the report of an unidentified air contact. When the aircraft began acting suspiciously, Farallon detected two surface contacts moving into the area and attempting to pull contraband from the water, apparently dropped by the aircraft.

The cutter’s small boat, joined by a small boat from Coast Guard Station San Juan and British authorities, intercepted the first vessel involved in the airdrop while the second vessel fled south and unloaded their contraband into the bushes of a nearby island. While those smugglers evaded authorities, the eight bales of cocaine they attempted to conceal were recovered. Three suspects aboard the intercepted vessel were transferred to British authorities for prosecution and overall, the inter-agency, multi-national effort disrupted a major drug trafficking route and prevented an estimated $7.2 million of cocaine from hitting the streets.
 
migrant interdiction off Puerto Rico
This photo, from a Customs and Border Protection aircraft
shows the vessel Farallon interdicted with 15 Dominican nationals
 attempting to gain illegal entry to the United States.
Photo by: USCG
Later that week the crew again found themselves at the forefront of homeland security when they received notification from Customs and Border Protection (CBP) of a possible migrant vessel. Aided by CBP and Puerto Rican authorities, Farallon boarded a vessel with 15 Dominican nationals attempting to gain illegal entry to the U.S. and one smuggler. All 16 individuals were brought aboard the cutter and using biometrics a suspect was positively identified and linked to a known human trafficking organization.

“This case put Farallon’s teamwork on display,” said O’Mara. “It was the middle of the night, other agency assets were on scene, lives were at stake on an overcrowded vessel. Puerto Rico’s lights were literally in sight, this vessel was that close to ‘making it.’ My crew did a fantastic job managing law enforcement interactions on scene, including a challenging three-hour tow of the vessel back to port for evidence. The case was textbook and I was proud of every single one of my Shipmates.”

Farallon was not done with their missions though. The next night, a U.S. Customs aircraft reported two suspicious vessels dead in the water where the exclusive economic zones of Puerto Rico and the Dominican Republic meet.

The crew, fatigued from the week’s previous missions, kicked into high gear once again to perform at their best. At this high operational tempo, with back-to-back-to-back missions, Farallon found out who they were as a team.

CGC Farallon Crew
The Farallon crew, under the command of LT O’Mara, has
redefined what it means to work together as a team as
they set the example for mission excellence.
Photo courtesy of LTJG Christopher O’Meara.
 “This is where our motto makes its mark: ‘Deal Justice,’” said O’Mara. “That’s what this unit, this crew and this team does every time we take in lines and head out there because we know we are being counted on to deal justice. This team steps up, comes together and delivers every time.”

Working with U.S. Customs aircraft support, the Farallon monitored the vessels as they transferred contraband at sea. The loaded vessel was then tracked covertly as it headed towards Puerto Rico, back into U.S. waters. On the Farallon’s mark, the cutter, boarding team and aircraft moved in.

“As soon as we closed in, the smuggling vessel increased speed, began to maneuver erratically and jettisoned the contraband,” said O’Mara. “My coxswain had positioned the small boat and boarding team perfectly – the smugglers had no choice but to stop. The quick end to the chase enabled the cutter to remain in the vicinity of the jettisoned contraband. This positioning was crucial to my crew’s ability to detect and recover individual bricks of cocaine floating on the surface of the water – not an easy task in the middle of the night, but my Shipmates focused, searched for hours and made it happen.”

Farallon detained the vessel, two drug smugglers and recovered a total of 77 cocaine bricks worth an estimated street value of $2.64 million.

These high-pressure situations demanded teamwork, and the Farallon brought it. When so much was at stake, O’Mara and his crew were able to perform as a team.

Congratulations LT O’Mara on your crew’s mission excellence!