No Slide Title

Download Report

Transcript No Slide Title

Water System
Security
National Activities
AWWA WebCast - May 9, 2002
Diane VanDe Hei
Executive Director
Association of Metropolitan Water
Agencies
AWWA Security Webcast
May 9, 2002
Critical Foundations
 Protecting America’s Infrastructures
 The Report of the President’s
Commission on Critical Infrastructure
Protection
Eight Critical Infrastructures
 Banking and Finance
 Oil and Gas
 Telecommunications
 Electric Power
 Water Supply
 Emergency Services
 Information Technology
 Transportation
Water Sector
Presidential Decision Directive 63 (PDD 63) May 1998
 Goals:
 Assure continuity and viability of critical infrastructure
 Swiftly eliminate significant vulnerability to both physical
and cyber attacks
 Identified 8 critical sectors, including the Water Sector
 EPA is the lead federal agency for Water Sector
 EPA named AMWA as Sector Coordinator
 Strongly encourages private sector Information Sharing
and Analysis Center (ISAC)
Water Sector (con’t)
 Bush Executive Order 13231
 October 16, 2001
 Expands on PDD 63
 Establishes “Presidential Critical
Infrastructure Protection Board”
Overview of Federal Involvement
Agencies involved:
 Office of Homeland Security (OHS)
 Critical Infrastructure Assurance Office
(CIAO)
 FBI’s National Infrastructure Protection
Center (NIPC)
 Federal Emergency Management Agency
(FEMA)
 Environmental Protection Agency (EPA)
Federal Security Efforts
White
House
Office of
Homeland
Security
(T. Ridge)
National
Security
Council
(C. Rice)
Critical Infrastructure
Protection Board (Richard
Clarke)
CIP Board Staff
- NSC, OMB,
and CIAO
Dept. of
Commerce
FBI
EPA
Critical
Infrastructure
Assurance
Office
(J. Tritak)
National
Infrastructure
Protection
Center
(R. Dick)
Water
Protection Task
Force (Janet
Pawlukiewicz)
Water Sector
Coordinator
(AMWA)
CIP Advisory Group
 AMWA formed Critical Infrastructure
Protection Advisory Group (CIPAG)
 Established January 2001
 10 members from public/private utilities
and state administrator offices
 Liaisons from EPA, FBI (NIPC), state
administrators and other national drinking
water and wastewater associations
CIPAG Goals
 Coordinate and integrate efforts on
critical infrastructure protection issues
 Develop policy and project
recommendations on water and
wastewater security needs
 Assess security needs for water systems
 Coordinate with other sectors
Challenges
 Conduct vulnerability assessments
 Need better threat information
 Revise Emergency Response Plans
 Federal FOIA and local/state sunshine laws
 Understanding interdependencies
 Address security in new designs and
upgrades
Water ISAC Objectives
 Disseminate early warnings of physical and
cyber system threats
 Share security incident information
between water utilities
 Provide trending and other analysis for
security planning
 Distribute current proven security practices
and suggestions
Water ISAC Features
 Highly secure, Internet-based
communications tool
 Available to all drinking water and
wastewater utilities
 Ready access to water security information
 Timely advisories and alerts of regional and
national interest
ISAC: Key Questions
 What functionality should the ISAC
include?
 What type of info should be included?
 What are the critical sources of info?
 What analyses and interpretation should
be done?
 How to communicate between ISAC
members?
Possible ISAC Models
 Implementation from scratch
 Contract with a secure service provider
that hosts these types of portals
 Contract with secure service provider that
hosts portal and provides analysis
 Develop a government – to – business
partnership
ISAC: Key Decisions
 ISAC model and implementation plan
 Establishment of governance structure
 Membership requirements, fees and
verification process
 Development of Business Plan
 Marketing and Promotion
Water ISAC Status
 EPA helping to fund ISAC development
 AMWA managing implementation project
 Support and input provided by water and
wastewater utilities, EPA, States, CDC
and Sandia National Laboratories
 Next step: Implementation of design
Water ISAC Information
 Visit www.amwa.net/ISAC
 E-mail [email protected]
 Call 202-331-2820