Transcript Slide 1
Be Informed. Be prepared.
WaterISAC
Be Informed.
Be Prepared.
Implemented in 2002, WaterISAC is an Internet-based
rapid notification system and information resource
about all threats and hazards to
drinking and
wastewater systems. It is the only centralized up-tothe-minute resource of its kind serving the water
sector.
Presidential Decision Directive NSC-63, issued on May
22, 1998 encouraged creation of the Information
Sharing and Analysis Center, with the design and
functions of the ISAC to be determined by the private
sector in consultation with the federal government.
What Does WaterISAC Do?
Be Informed.
Be Prepared.
WaterISAC
Gathers information on threats and
solutions
Analyzes information for credibility
and relevancy
Disseminates actionable information
to utilities
Operates securely 24/7
WaterISAC Options
Be Informed.
Be Prepared.
WaterISAC Basic is free
WaterISAC Pro is a subscription
service
WaterISAC Basic…
Be Informed.
Be Prepared.
…a free service which provides
up-to-date water-specific security
alerts and information to more
than 13,000 water and
wastewater utilities.
WaterISAC Pro…
Be Informed.
Be Prepared.
…is a subscription service which
goes beyond WaterISAC Basic by
providing an unrivaled water
sector-specific source of
information, research and analysis
concerning all hazards to water
and wastewater systems.
Summary of Features
Be Informed.
Be Prepared.
Features
Online database of contaminants and
threat analysis
Direct access to security products
Nationwide networking forum of
drinking water and wastewater utilities
WaterISAC
Basic
WaterISAC
Pro
Be Informed.
Be Prepared.
Features
Ultra secure portal
24/7 access to intelligence analysis
Secure means of quickly reporting an
incident
WaterISAC
Basic
WaterISAC
Pro
Be Informed.
Be Prepared.
Features
Security incident reports with analysis
and trends
Vulnerability assessment tools and
resource
Emergency preparedness and response
plan tools and resources
WaterISAC
Basic
WaterISAC
Pro
Be Informed.
Be Prepared.
Features
Online library of security-related
documents and reports
Secure, searchable archive of federal
Alerts, Advisories, Bulletins and Updates
Notifications of cyber vulnerabilities
WaterISAC
Basic
WaterISAC
Pro
Be Informed.
Be Prepared.
Features
Technical fixes sent via e-mail and mobile
devices
Archive of federal Alerts, Advisories,
Bulletins and Reports
WaterISAC
Basic
WaterISA
C Pro
Scenario
Be Informed.
Be Prepared.
Water system director on a
business trip hears a rumor that a
couple carrying bomb materials is
headed towards his city.
What would you do?
What Really Happened?
Be Informed.
Be Prepared.
Utility director called WaterISAC and
asked for assistance. WaterISAC
called DHS contacts.
DHS confirmed rumor and verified
that law enforcement was in pursuit.
WaterISAC informed director who in
turn briefed his local officials.
Be Informed.
Be Prepared.
The Power to Assist
Be Informed.
Be Prepared.
Water system devastated by
Hurricane Katrina contacts WaterISAC
to seek assistance in locating
specialized equipment.
WaterISAC puts the word out.
Equipment and personnel from other
utilities are dispatched to the water
system.
Threats Against Water Are Real
Be Informed.
Be Prepared.
Iraq - Terrorists add water utility chlorine
canisters to bomb attacks
Mexico - Sodium cyanide drums stolen
Australia - SCADA attack results in sewage
discharge
Afghanistan - U.S. water system architectural
drawings found in terrorist hideout
Be Informed.
Be Prepared.
South Carolina - Two alarm sensors found cut in
attempted water plant break-in
California - Attempted theft of large chlorine storage
tanks
Georgia - A granular substance is added to water
following a plant break-in facilities
Texas - Public works receives a letter threatening
water supply contamination
Consequences of Attacks and
Other Hazards
Be Informed.
Be Prepared.
Compromised public health
Economic damages
Loss of fire suppression flow
Reduced water quality
Diminished delivery capacity
Decreased public confidence
Legal fallout
Political fallout
WaterISAC Is Your Resource
Be Informed.
Be Prepared.
Provides a comprehensive knowledge
base on hazards to water utilities
Supports utilities’ security strategies,
assessments and emergency plans
Operates securely
Functions as the distribution center for
threat alerts to utilities
Helps subscribers demonstrates due
diligence
WaterISAC Is Secure
Be Informed.
Be Prepared.
Hosted in U.S. Governmentcleared “top secret” facility
Features state-of-the-art cyber
security
Monitored constantly for
unauthorized attempts to use or
alter the site
Analysts and staff have
government security clearances
Be Informed.
Be Prepared.
Access requires USB key and
secret passcode
Each subscriber’s identity is
verified
Subscribers sign nondisclosure
agreements
Be Informed.
Be Prepared.
Under U.S. law, WaterISAC is a
non-governmental entity and, as
such, exempt from public
disclosure laws
Top-secret cleared analysts scrub
data prior to any dissemination
WaterISAC Analysts…
Be Informed.
Be Prepared.
Assess
Analyze
Generate threat and vulnerability
reports and summaries
Interact with subscribers
Interact with ISAC analysts from other
critical infrastructure groups
Interact with U.S. law enforcement,
security, defense, and other
government personnel
Be Informed.
Be Prepared.
Information and Intelligence Partners
Be Informed.
Be Prepared.
U.S. Federal Agencies
Central Intelligence Agency
Defense Intelligence Agency
National Security Agency
Department of Homeland Security
Federal Bureau of Investigation
Transportation Security Administration
Regional Information Sharing System
Be Informed.
Be Prepared.
Department of Defense
First Information Operations Command
Counterintelligence Field Activity
Surface Deployment & Distribution
Command
NORTHCOM
Be Informed.
Be Prepared.
U.S. State Agencies
Virginia Fusion Center
New Jersey OHSP
Nevada Emergency Operations
Maryland Coordination and Analysis
Center
Texas Fusion Center
State Police
Scenario: Dirty Bomb, Dirty Water
Be Informed.
Be Prepared.
Emergency workers responding to
a dirty bomb incident have been
washed down. Contaminated runoff containing radioactive waste is
streaming toward your wastewater
plant.
Keyword Search
Be Informed.
Be Prepared.
Search Result
Be Informed.
Be Prepared.
Search Result
Be Informed.
Be Prepared.
Be Informed.
Be Prepared.
Be Informed.
Be Prepared.
Be Informed.
Be Prepared.
Secure Contaminant Databases
Be Informed.
Be Prepared.
WaterISAC takes the user to two
other secure sites with no additional
sign-in required:
WCIT: Water Contaminant
Information Tool (U.S. EPA)
UK W.I.R. – United Kingdom Water
Industry Research (proprietary
contaminant data base)
Be Informed.
Be Prepared.
Be Informed.
Be Prepared.
The Power of Relationships
Be Informed.
Be Prepared.
The structure and professional
relationships cultivated by and through
WaterISAC and the ISAC Council are
valuable assets
ISACs share information about
interdependencies, providing a basis
for the discernment of patterns or
threats that exist on multiple fronts
Be Informed.
Be Prepared.
ISAC Council and Other ISACs
Be Informed.
Be Prepared.
Communications
Electricity Sector
Emergency Management and
Response
Financial Services
Information Technology
Multi-State
Public Transportation
Be Informed.
Be Prepared.
Maritime
Research and Education
Surface Transportation
Trucking
Supply Chain
Chemical
Water
Be Informed.
Be Prepared.
Subscribe to WaterISAC
Be Informed.
Be Prepared.
Call 202-331-0479
Michael Arceneaux
[email protected]