Transcript Slide 1
Be Informed. Be prepared. WaterISAC Be Informed. Be Prepared. Implemented in 2002, WaterISAC is an Internet-based rapid notification system and information resource about all threats and hazards to drinking and wastewater systems. It is the only centralized up-tothe-minute resource of its kind serving the water sector. Presidential Decision Directive NSC-63, issued on May 22, 1998 encouraged creation of the Information Sharing and Analysis Center, with the design and functions of the ISAC to be determined by the private sector in consultation with the federal government. What Does WaterISAC Do? Be Informed. Be Prepared. WaterISAC Gathers information on threats and solutions Analyzes information for credibility and relevancy Disseminates actionable information to utilities Operates securely 24/7 WaterISAC Options Be Informed. Be Prepared. WaterISAC Basic is free WaterISAC Pro is a subscription service WaterISAC Basic… Be Informed. Be Prepared. …a free service which provides up-to-date water-specific security alerts and information to more than 13,000 water and wastewater utilities. WaterISAC Pro… Be Informed. Be Prepared. …is a subscription service which goes beyond WaterISAC Basic by providing an unrivaled water sector-specific source of information, research and analysis concerning all hazards to water and wastewater systems. Summary of Features Be Informed. Be Prepared. Features Online database of contaminants and threat analysis Direct access to security products Nationwide networking forum of drinking water and wastewater utilities WaterISAC Basic WaterISAC Pro Be Informed. Be Prepared. Features Ultra secure portal 24/7 access to intelligence analysis Secure means of quickly reporting an incident WaterISAC Basic WaterISAC Pro Be Informed. Be Prepared. Features Security incident reports with analysis and trends Vulnerability assessment tools and resource Emergency preparedness and response plan tools and resources WaterISAC Basic WaterISAC Pro Be Informed. Be Prepared. Features Online library of security-related documents and reports Secure, searchable archive of federal Alerts, Advisories, Bulletins and Updates Notifications of cyber vulnerabilities WaterISAC Basic WaterISAC Pro Be Informed. Be Prepared. Features Technical fixes sent via e-mail and mobile devices Archive of federal Alerts, Advisories, Bulletins and Reports WaterISAC Basic WaterISA C Pro Scenario Be Informed. Be Prepared. Water system director on a business trip hears a rumor that a couple carrying bomb materials is headed towards his city. What would you do? What Really Happened? Be Informed. Be Prepared. Utility director called WaterISAC and asked for assistance. WaterISAC called DHS contacts. DHS confirmed rumor and verified that law enforcement was in pursuit. WaterISAC informed director who in turn briefed his local officials. Be Informed. Be Prepared. The Power to Assist Be Informed. Be Prepared. Water system devastated by Hurricane Katrina contacts WaterISAC to seek assistance in locating specialized equipment. WaterISAC puts the word out. Equipment and personnel from other utilities are dispatched to the water system. Threats Against Water Are Real Be Informed. Be Prepared. Iraq - Terrorists add water utility chlorine canisters to bomb attacks Mexico - Sodium cyanide drums stolen Australia - SCADA attack results in sewage discharge Afghanistan - U.S. water system architectural drawings found in terrorist hideout Be Informed. Be Prepared. South Carolina - Two alarm sensors found cut in attempted water plant break-in California - Attempted theft of large chlorine storage tanks Georgia - A granular substance is added to water following a plant break-in facilities Texas - Public works receives a letter threatening water supply contamination Consequences of Attacks and Other Hazards Be Informed. Be Prepared. Compromised public health Economic damages Loss of fire suppression flow Reduced water quality Diminished delivery capacity Decreased public confidence Legal fallout Political fallout WaterISAC Is Your Resource Be Informed. Be Prepared. Provides a comprehensive knowledge base on hazards to water utilities Supports utilities’ security strategies, assessments and emergency plans Operates securely Functions as the distribution center for threat alerts to utilities Helps subscribers demonstrates due diligence WaterISAC Is Secure Be Informed. Be Prepared. Hosted in U.S. Governmentcleared “top secret” facility Features state-of-the-art cyber security Monitored constantly for unauthorized attempts to use or alter the site Analysts and staff have government security clearances Be Informed. Be Prepared. Access requires USB key and secret passcode Each subscriber’s identity is verified Subscribers sign nondisclosure agreements Be Informed. Be Prepared. Under U.S. law, WaterISAC is a non-governmental entity and, as such, exempt from public disclosure laws Top-secret cleared analysts scrub data prior to any dissemination WaterISAC Analysts… Be Informed. Be Prepared. Assess Analyze Generate threat and vulnerability reports and summaries Interact with subscribers Interact with ISAC analysts from other critical infrastructure groups Interact with U.S. law enforcement, security, defense, and other government personnel Be Informed. Be Prepared. Information and Intelligence Partners Be Informed. Be Prepared. U.S. Federal Agencies Central Intelligence Agency Defense Intelligence Agency National Security Agency Department of Homeland Security Federal Bureau of Investigation Transportation Security Administration Regional Information Sharing System Be Informed. Be Prepared. Department of Defense First Information Operations Command Counterintelligence Field Activity Surface Deployment & Distribution Command NORTHCOM Be Informed. Be Prepared. U.S. State Agencies Virginia Fusion Center New Jersey OHSP Nevada Emergency Operations Maryland Coordination and Analysis Center Texas Fusion Center State Police Scenario: Dirty Bomb, Dirty Water Be Informed. Be Prepared. Emergency workers responding to a dirty bomb incident have been washed down. Contaminated runoff containing radioactive waste is streaming toward your wastewater plant. Keyword Search Be Informed. Be Prepared. Search Result Be Informed. Be Prepared. Search Result Be Informed. Be Prepared. Be Informed. Be Prepared. Be Informed. Be Prepared. Be Informed. Be Prepared. Secure Contaminant Databases Be Informed. Be Prepared. WaterISAC takes the user to two other secure sites with no additional sign-in required: WCIT: Water Contaminant Information Tool (U.S. EPA) UK W.I.R. – United Kingdom Water Industry Research (proprietary contaminant data base) Be Informed. Be Prepared. Be Informed. Be Prepared. The Power of Relationships Be Informed. Be Prepared. The structure and professional relationships cultivated by and through WaterISAC and the ISAC Council are valuable assets ISACs share information about interdependencies, providing a basis for the discernment of patterns or threats that exist on multiple fronts Be Informed. Be Prepared. ISAC Council and Other ISACs Be Informed. Be Prepared. Communications Electricity Sector Emergency Management and Response Financial Services Information Technology Multi-State Public Transportation Be Informed. Be Prepared. Maritime Research and Education Surface Transportation Trucking Supply Chain Chemical Water Be Informed. Be Prepared. Subscribe to WaterISAC Be Informed. Be Prepared. Call 202-331-0479 Michael Arceneaux [email protected]