Transcript Chemical SSP Briefing

U.S. Department of Homeland Security
Overview of the
Chemical Sector-Specific
Agency
March 2011
1
National Infrastructure Protection Plan
(NIPP)
Sector-Specific Agency’s (SSA)
Primary Roles
 The SSA is the primary Federal entity responsible for coordinating
the unified effort to protect against and mitigate the effects of natural
or manmade events on critical infrastructure within that sector.
 SSAs work closely with government at all levels (Federal, State,
local, tribal, and territorial) and with private sector partners to:
•
•
•
•
Develop protective security programs and resiliency strategies;
Strengthen partnerships and improve information sharing;
Promote education, outreach, and training efforts across critical infrastructure
Sectors; and
Maintain awareness and communicate with critical infrastructure partners and
senior leadership during an incident.
 Implement the National Infrastructure Protection Plan specific to the
characteristics and risk landscapes of each of critical infrastructure
sector.
3
Chemical Sector Size
Program
~5k
~15k
The Chemical Sector-Specific Plan
(SSP) covers all facilities within the
Sector regardless of which, if any,
regulatory program(s) to which they
belong.
Chemical
Sector
(# of Facilities)
~550k
4
Coordinating Councils
Chemical GCC
Chemical SCC
Department of Commerce
Agricultural Retailers Association
Department of Defense
American Chemistry Council
Department of Energy
American Coatings Association
Department of Health and Human Services
Chemical Producers & Distributors Association
Department of Homeland Security
Compressed Gas Association
Department of Justice
CropLife America
Department of Labor
Institute of Makers of Explosives
Department of Transportation
International Institute of Ammonia Refrigeration
Environmental Protection Agency
International Liquid Terminals Association
Department of State
National Association of Chemical Distributors
Office of the Director of National
Intelligence
National Petrochemical & Refiners Association
Chemical Safety Board
The Chlorine Institute
State, Local, Tribal and Territorial
Government Coordinating Council Liaisons
The Fertilizer Institute
Society of Chemical Manufacturers and Affiliates
5
Sector Goals & Objectives
Sector partners revised Goals and Objectives as part of the SSP
triennial rewrite. The revised Goals for 2010 are listed below:
Goal 1 Evaluate the security posture of Chemical Sector high-risk assets
including physical, cyber, and human elements as needed.
Goal 2 Prioritize Chemical Sector critical infrastructure protection activities
based on risk.
Goal 3 Sustain risk-based, cost-effective sector-wide protective programs
that increase asset-specific resiliency without hindering the
economic viability of the sector.
6
Sector Goals & Objectives (cont’d)
Goal 4
Refine processes and mechanisms for ongoing Governmentprivate sector coordination to increase sector resiliency, as
necessary.
Goal 5
Support risk-based critical infrastructure protection research
and development projects that add value to the Chemical
Sector.
Goal 6
Measure the progress and effectiveness of sector critical
infrastructure protection activities.
 The Chemical Sector has also developed a Cyber Roadmap to
Secure Industrial Control Systems. A series of suggested
milestones have been developed to guide progress over the next
10 years.
7
Chemical Sector Programs
 Information Sharing
•
Annual Chemical Sector Security Summit – The Chemical SSA and the SCC
co-host Summit which consist of workshops, presentations and discussions for
400 attendees. Topics for the event include: CFATS implementation, multiagency harmonization, inspections process, local security resources,
cybersecurity, transportation security, theft and diversion, personnel surety, and
research and development activities.
• 2011 Summit: July 6 & 7
• Link to the summit website: http://www.dhs.gov/chemicalsecuritysummit
•
Monthly suspicious activity calls – SSA sponsors a monthly unclassified
teleconference where HITRAC and the U.S. Computer Emergency Readiness
Team (CERT) brief out on current physical and cyber threat information including
suspicious activity reporting and overseas activity when appropriate as well as
cyber vulnerabilities.
•
•
Date and Time: 4th Thursday of every month, at 11:00 AM EST.
Dial: 1800-501-9384. Pin: 4754043
8
Chemical Sector Programs

Information Sharing (Continued)
•
Biannual Classified Briefing – The SSA sponsors a classified briefing
for cleared industry representatives twice a year. The intelligence
community provides briefings on both physical and cyber threats, as well
as other topics of interest for chemical supply chain professionals.
•
Security Awareness Guide – to assist owner/operators in their efforts to
improve security at their chemical facility and to provide information on
the security threat presented by explosive devices and cyber
vulnerabilities.
•
Chemical Sector Training Resources Guide - The guide contains a list
of free or low-cost training, web-based classes, seminars, and documents
that are routinely available through one of several component agencies
within DHS.
•
Homeland Security Information Network – HSIN-CS is the primary
information-sharing platform for the Chemical Sector. The Sector does
not have an Information Sharing Analysis Center. The Sector uses HSIN
during incidents. Positive feedback during Hurricanes Gustav and Ike.
9
HSIN
10
Chemical Sector Programs
 Voluntary Chemical Assessment Tool (VCAT)
•
Developed to provide the means for owner/operators of non-tiered facilities to
identify their current risk level.
•
The web-based tool facilitates a cost-benefit analysis allowing users to select
best combination of physical security countermeasures and mitigation strategies
to reduce overall risk.
11
Chemical Sector Programs
 Training
• Web-Based Chemical Security Awareness Training –
An interactive tool available free to chemical facilities
nationwide to increase security awareness. The training
is designed for all facility employees, not just those
• Status: ~9,800 completions
• To access the training, visit https://ChemicalSecurityTraining.dhs.gov
• Chemical Sector Explosive Threat Awareness Training –
A series of one day training sessions to increase the Sector’s awareness of the threat
of improvised explosive devices (IED), provide safety
precautions for security professionals dealing with explosive
incidents, and enable Chemical Sector professionals
to
deter, prevent, detect, protect against, and respond
to the
terrorist use of VBIEDs.
• Six location nationwide in 2011 Puerto Rico – January 25; Orlando, FL – March
10; Long Beach, CA – April 20; New Orleans, LA – May 11; Cedar Rapids, IA –
June 17; Baltimore, MD – July 8.
• Registration Link: http://guest.cvent.com/d/gdqt1z
12
Chemical Sector Programs
 Training (Continued)
•
Security Seminar and Exercise Series with State Chemical Industry
Councils – A collaborative effort between various
state chemical industry councils aimed at fostering
communication between facilities and their local
emergency response teams by encouraging
representatives to share their insight, knowledge,
and experiences during a facilitated tabletop exercise.
13
Active Shooter TTX (Sample Scenario)
Event so far
8:00 AM  Security receives a telephone call
that there is a man with a gun and he
is shooting everywhere
• Report indicates one victim laying in
the parking lot
8:02 AM  911 center receives emergency call
from Security
8:03 AM  Security makes announcement over
the PA
8:05 AM  Security notifies site emergency
coordinator
• External gates opened
• Main gate house appointed the initial
staging area for public safety
responders
Issues so far
 Are employees trained for this type of
emergency?
 Does your site emergency plan include
active shooter response?
 How do you control access to the site?
 Do you have the security technology to
assist law enforcement in locating the
victims and shooter?
 Do employees shelter in place or
evacuate?
 Should you deactivate card readers (i.e.
no access)?
 How do you manage visitors and
contractors that are on site?
 Are critical phone calls getting through to
Security?
14
Chemical Sector Programs
 Exercises/Incident Management
•
Cyberstorm III – Congressionally-mandated exercises that examine the Nation’s
cybersecurity preparedness and response capabilities.
•
Incident Teleconferences with Sector – SSA holds daily teleconferences with
Sector. Provides avenue to push and pull information.
•
IP Sector Specific TTX Exercise Program (IP-SSTEP) – provide NLE
09 materials to owner/operators to hold their own TTX.
•
Developed, with a purpose of creating an opportunity for public and private
Critical Infrastructure stakeholders and their public safety partners to address
gaps, threats, issues, and concerns identified in previous exercises and their
after-action processes affecting the Chemical Sector.
•
Allows participants the opportunity to gain an understanding of issues faced
prior to, during, and after a terrorist threat/attack and the coordination with
other entities, both private and government, regarding their facility.
15
IP-SSTEP (Sample Scenario)
Details of the overseas attacks are:
 May 27: Water Borne Improvised
Explosive Device (WBIED) attack
against a US vessel off the coast of
Nigeria resulting in 35 killed and 40
injured.
 June 1: Two chemical plants in
Germany, a coal power plant in
Belgium, and oil pipelines in France
are attacked with Large Vehicle
Borne Improvised Explosive Device
(LVBIED).
• In the Germany attacks, 190 tons of
chlorine is released causing
evacuation of the nearby towns. All
four attacks resulted in total casualties
of approximately 1000; over 300
civilians die.
 June 4: German authorities thwart an
attack against a pipeline in Eastern
Germany.
Key Questions

With the successful execution of
overseas terrorist attacks on critical
infrastructure how would you receive
unclassified information regarding the
incident?
•
Which, if any, information-sharing
mechanisms would be utilized?
•
What information would your
facility require? Who would you
contact to obtain this information
and how would you contact them?
•
What should you expect to see, if
anything, on HSIN-CS at this
time?
•
Does your company/facility have
mechanisms in place to share
information with international
partners? And if so, what are the
various procedures currently in
place?
16
Chemical Sector Programs
 Cybersecurity
•
Roadmap to Secure Control Systems in the Chemical Sector was published in
September 2009. The Roadmap proposes a comprehensive plan, which includes
goals and milestones, for improving the security, reliability, and functionality of
industrial control systems over the next 10 years.

•
Awareness Campaign includes: a Call to Action; Security Training Resource;
Incident Management Resource; Standards, Guidelines, and References
Resource; Overview of Procurement Language
Cybersecurity Evaluation Tool (CSET) – Provides users with a systematic and
repeatable approach for assessing the cybersecurity posture of their industrial
control system networks. This tool also includes both high-level and detailed
questions applicable to all industrial control systems.
17
Chemical Sector Programs
 Research and Development
•
Integrated Project Team (IPT) - Involved in two Capstone IPTs :
Chemical/Biological and Infrastructure Protection. SSA Co-Chairs the Chemical
Sub-IPT with S&T and OHA. Three thrust areas for Chemical-Sub IPT: Chemical
Analysis; Chemical Detection; & Chemical Response and Recovery.
•
SCC R&D Working Group – Formed in 2009. Priorities are: studying toxicity;
tracking toxic chemicals during transport; mitigating chemical releases; developing
effective decontamination methods; and reducing the explosive potential of certain
chemicals. SCC has ranked current projects and has been briefed on all projects.
 International Activities
•
Strategy - The SSA has developed an international strategy with the mission to
develop and foster partnerships with the international community in order to
promote a global culture of protection and resiliency in the Chemical Sector.
18
Chemical SSA Team
Amy Graydon - 703-603-5169
Babatope Dada – 703-603-5115
Robbie Kirk – 703-603-5113
Esther Langer – 703-603-5112
Theresa Miller (CTR) – 703-603-5127
Michael Sweet (CTR) -703-603-5178
Vanessa Thebaud (CTR) – 703-603-5114
Nohemi Zerbi – 703-603-5117
Web site: www.dhs.gov/chem-voluntary-resources
Email: [email protected]
19
Chemical SSA Team
Amy Graydon
Babatope Dada
[email protected]
[email protected]
Robbie Kirk
[email protected]
Esther Langer
[email protected]
Nohemi Zerbi
[email protected]
Theresa Miller (CTR)
[email protected]
Michael Sweet (CTR) [email protected]
Vanessa Thebaud (CTR) [email protected]
20