Command and Control for Security, Port Operations, and IT Considerations for Planning and Implementation

Transcription

1 Command and Control for Security, Port Operations, and IT Considerations for Planning and Implementation Port Operations, Safety and Information Technology Seminar Gary Hicks, Science Applications International Corporation June 11, 2009

2 Presentation Summary Introduction Port Security C2 Requirements and Operational Considerations C2 Implementation Challenges and Standards Port C2 Example Architecture Application to Port Operations Summary 2 Energy Environment National Security Health Critical Infrastructure

3 Introduction Numerous ports and port regions are investigating and implementing COTS security C2 and Incident Management Systems Most major ports are moving to a new paradigm for security systems and domain awareness. The key requirements are: Integration of all sensor inputs Comprehensive situational awareness Integrated rules and tools for incident management More collaboration and coordination with stakeholders Integrating security C2 on IT networks introduces a new level of complexity Potential IT and Security turf war IT procedures, control, and security The network is the back bone of the security system There are standards and interfaces required Systems Engineering approach needed for implementation Growth from security only to operations is an emerging trend 3 Energy Environment National Security Health Critical Infrastructure

4 Overarching Goal To design and implement affordable C2 solutions that can provide total domain awareness and shape event response outcomes through better informed decisionmaking, coordinated response processes, and synchronized operations 4 Energy Environment National Security Health Critical Infrastructure

5 Notional Security / C2 System Diagram Waterside Surveillance and Facility Access Video Monitoring Wireless and Fiber Data Transcoding and Transport UPS Lighting Power Fixed Cameras Video F/O Encoder Field Cluster Data Next Level CC (POLA) WAN Cable Link SMP C2 Center F/O Encoder Thermal IR Cameras Back Up Generator Switch Router Data Support Dome PTZ Cameras Port Power F/O Encoder Inspection Badging Non Cable Link X-Ray Workstations Server(s) Intrusion Detection Video Control Panel Incident Management and Situational Awareness Radiation Computer Aided Dispatch Metal Biological Hand VACIS Facility Access Control VTS Interface Biometric Chemical Display Systems Advanced and R&D Control Panel Mobile Communications QuickTime and a TIFF (Uncompressed) decompressor are needed to see this picture. Portable Video / Radar Gate Management Control Panel Field Cluster Waterside Security Automatic Location GPS Response LPR Radio Radar Radio Link RFID Portable Video Field Cluster Barrier Sonar AIS 5 Energy Environment National Security Health Critical Infrastructure Laser

6 What Can the C2 System Do? Provide domain awareness and incident management, support recovery with an easy to use system Provide and accept information and alerts from all port sensors and ultimately, stakeholders Implement security SOP & CONOPS as part of incident management Continuous operational improvement and training Replay incidents, identify lessons learned, update rules/workflows Support recovery and business continuity Comprehensive situation management system to optimize situation planning, response, and debriefing View and manage all alarms and incidents Open architecture Integrate seamlessly with any of the Port s edge devices and systems Unified operations console and practices Easy to customize, configure, and modify to meet changing operational needs Sustainable and upgradeable software Adaptable as CONOPS changes as threats change and regional collaboration expands Comprehensive situation management system to optimize situation planning, response, and debriefing 6 Energy Environment National Security Health Critical Infrastructure

7 Optimal Situational Awareness Approach Combines 24 Real-Time Command Center Situational Awareness Madden Telestrator Response Collaboration and Coordination 7 Energy Environment National Security Health Critical Infrastructure

8 Implementation Team and Responsibilities Port Command center facilities Budget Staffing SOP definition Location of field devices on GIS They have to collect (and keep updated) all the employee data for selecting the first responders Leverage vendors like CAD/RMS for interfaces Integrator Validate requirements Select best SW product and lab/field test ID system issues Work with port to implement SOP into rules including regional multi-jurisdictional collaboration of all hazards incident response Assist in developing plans for training and exercises (including regional) Work with CAD to insure appropriate information sharing and documentation Ensure that all pieces of the system are working together C2 SW Vendor New Gateway development Continual product improvement to support evolving paradigm Actively support compatibility with and conformance to emerging data models and standards related to information sharing, data exchange, sensor management, infrastructure protection, and emergency management including: NIMS, NIEM, GJXDM (Global Justice XML Data Model) CTISS, ISE, EDXL, CAP, IEEE-1512, ISO-28000, ISO-20858, FIPS, H.264, CUI, SSI, PCII, SGI, CVI, UICDS, and many others Maintenance 8 Energy Environment National Security Health Critical Infrastructure

9 COTS SW Integration Model COTS SW Analysis COTS Identification COTS Capability Analysis COTS Performance Analysis COTS Cost Analysis Candidate COTS Selection Initial System Objectives Definition (RFP) Requirements Analysis COTS Integration Installation Configuration Feature Validation Performance Validation Port Goals and Vision Key Requirements Legacy Applications Architecture Design COTS Selection Software and Hardware Design, Implementation, and Test Acceptance testing Candidate SW Lab Tested Interfaces-AC, Video analytics, CBRN, radar, sonar, dispatch, CAD Developed, Tested and Confirmed others defined RESULTS Candidates Selected Integration and Bench Testing Completed 9 Energy Environment National Security Health Critical Infrastructure

10 Example Integrated Command Center Interagency Other Agencies Public Internet Coordination Alarm Display ACAMS (Port) Mobile and Remote Command Data Weather, Threat Level, etc. Map Data ESRI Map Server (PORT) Collaboration Web-Portal C2 Platform Incident Response Planning, Incident Management, Geographic Mapping & Display, Incident Reporting & Analysis Video Video Feeds (Satellite, Cable, VHF/UHF) Data Query Requests and Results Data Query Requests and Results RiverGlass. Smart Search Auto Info Query RealityVideo AVL/BFT and Mobile Video Video Feed (push/pull) and Asset Location Verint Nextiva/ Object Video Video Analytics Video Feed and Camera Control Emergency Notification Requests Roam Secure. Emergency Notification NC4 Data AIS and Radar Data NC4 Data (City ). AIS & Radar (Marine Exchange) Search DB Mobile Video DB Video DB Contact DB Dispatch Status CAD/RMS (City) KEY Bidirectional Unidirectional Legacy Comms CAD/RMS DB New 10 Energy Environment National Security Health Critical Infrastructure

11 Port Security C2 User Interface Example Sample Incident Process Planning Screen Easy to create and change incident response checklists Geographic Information Mapping 11 Energy Environment National Security Health Critical Infrastructure

12 Typical Operator Station Relevant Video/Sensor Feeds Geo-Referenced Display Incident Management Display 12 Energy Environment National Security Health Critical Infrastructure

13 Application to Port Operations Situation Management tool has application to total port situational awareness Streamline other processes Compliance audits Non security applications Asset tracking Route Management SCADA functions Recovery operations Auditing and Automatic Report Generation The goal of Port Security C&C implementation should be: Transition Port Security from dispatching to full Security and Business Operations Center (i.e., Situation Management). 13 Energy Environment National Security Health Critical Infrastructure

14 C2 Systems Integration Take Aways Highly capable COTS systems exist which are being implemented now Implementation is a team effort and requires careful consideration of the network and legacy systems Emergence of standards and reference architectures for safety, security systems and incident management. These mandates are starting to be reflected in Grant language The proliferation of data sources and functional capabilities that are of interest to Ports demands that future C2 systems incorporate a loosely coupled,open architectural model Four cornerstone capabilities of a next gen open, standards-based C2 platform: 1. Information Sharing Environment 2. Situational Awareness 3. Collaboration 4. Coordination Trust but verify when selecting C2 SW and integrators 14 Energy Environment National Security Health Critical Infrastructure

15 Questions 15 Energy Environment National Security Health Critical Infrastructure

16 Backup 16 Energy Environment National Security Health Critical Infrastructure

17 Next Generation C2 Information Sharing Requirements Access and render data from virtually any legacy data repository Operate in an open-systems standards Internet Protocol (IP) environment User-friendly, Web-based environment at the end user level Access and display real-time data streams from current and emerging (technology) sources, i.e., data bases, voice interoperability gateway devices, AVL, RFID, GIS, GPS, video, cameras, CBRN, etc. Achieve interoperability of diverse Computer Aided Dispatch (CAD) and records management systems Apply simultaneous, user specific business processes to the data and event management Restrict access to and sharing of data based on pre-defined rules Comply with and support DHS guidelines/mandates for defined standards and protocols on an open platform (NIMS/NIEM, cap, etc.) Auditing and automatic report generation 17 Energy Environment National Security Health Critical Infrastructure

18 How We Think About C2 and Standards STANDARDS NIEM (National Information Exchange Model) NIMS/ICS (National Incident Management System/Incident Command System) UICDS (Unified Incident Command and Decision Support 18 Energy Environment National Security Health Critical Infrastructure