Energy Assurance Energy Assurance and Interdependency Workshop Fairmont Hotel, Washington D.C. December 2 3, 2013

Similar documents
Alternative Fuel Vehicles in State Energy Assurance Planning

Energy Assurance State Examples and Regional Markets Jeffrey R. Pillon, Director of Energy Assurance National Association of State Energy Officials

Don t Fail to Prepare for Failure Key Issues in Energy Assurance and Cybersecurity and Related NGA Center Activities

The J100 RAMCAP Method

All-Hazards Approach to Water Sector Security & Preparedness ANSI-HSSP Arlington, VA November 9, 2011

Critical Infrastructure Resilience

EPRO. Electric Infrastructure Protection Initiative EPRO BLACK SKY SYSTEMS ENGINEERING PROCESS

CIPMA CRITICAL INFRASTRUCTURE PROTECTION MODELLING & ANALYSIS. Overview of CIP in Australia

Department of Homeland Security Updates

Toward All-Hazards Security and Resilience for the Power Grid

STRATEGY ATIONAL. National Strategy. for Critical Infrastructure. Government

ARRA State & Local Energy Assurance Planning & Implementation

NATIONAL DEFENSE INDUSTRIAL ASSOCIATION Homeland Security Symposium

December 10, Statement of the Securities Industry and Financial Markets Association. Senate Committee on Banking, Housing, and Urban Development

Shared Responsibility: Roles and Responsibilities in Emergency Management Geoff Hay

Doug Couto Texas A&M Transportation Technology Conference 2017 College Station, Texas May 4, 2017

Cybersecurity Presidential Policy Directive Frequently Asked Questions. kpmg.com

Emergency Support Function #12 Energy Annex. ESF Coordinator: Support Agencies:

Energy Assurance Plans

National Policy and Guiding Principles

The Australian Government s Approach to Critical Infrastructure Resilience

The Office of Infrastructure Protection

Brussels, 19 May 2011 COUNCIL THE EUROPEAN UNION 10299/11 TELECOM 71 DATAPROTECT 55 JAI 332 PROCIV 66. NOTE From : COREPER

UNCLASSIFIED. National and Cyber Security Branch. Presentation for Gridseccon. Quebec City, October 18-21

Overview of NIPP 2013: Partnering for Critical Infrastructure Security and Resilience October 2013

June 5, 2018 Independence, Ohio

Statement for the Record

Applying Mitigation. to Build Resilient Communities

Business Continuity: How to Keep City Departments in Business after a Disaster

Member of the County or municipal emergency management organization

System-of-systems framework for global infrastructure vulnerability assessment

Homeland Security Institute. Annual Report. pursuant to. Homeland Security Act of 2002

STATE ENERGY RISK ASSESSMENT INITIATIVE ENERGY INFRASTRUCTURE MODELING AND ANALYSIS. National Association of State Energy Of ficials

Executive Order on Coordinating National Resilience to Electromagnetic Pulses

Area Business Continuity Management Scalable Cross Sector Coordination Framework of Disaster Management for Business Continuity

Regional Resilience: Prerequisite for Defense Industry Base Resilience

HOTEL RESILIENT Plan ahead stay ahead. With support from the German Government through

Outreach and Partnerships for Promoting and Facilitating Private Sector Emergency Preparedness

Securing Industrial Control Systems

FEMA Update. Tim Greten Technological Hazards Division Deputy Director. NREP April 2017

South East Region THIRA

Developing a Holistic Strategy To Achieve Community Health Resilience

Community-Based Water Resiliency

Infrastructure PA Stephen Lecce

The Office of Infrastructure Protection

COMESA CYBER SECURITY PROGRAM KHARTOUM, SUDAN

COUNTERING IMPROVISED EXPLOSIVE DEVICES

Emergency Management Response and Recovery. Mark Merritt, President September 2011

AGENCY: National Weather Service, National Oceanic and Atmospheric Administration, U.S.

Reliability & Resiliency in the US Capitol Region/Hardening the Grid One Year after Hurricane Sandy

Marine Transportation System Resilience: A Federal Agency Perspective

NATIONAL STRATEGY FOR GLOBAL SUPPLY CHAIN SECURITY

NGA Governor s Energy Advisors Energy Policy Institute Resiliency Panel

The NIS Directive and Cybersecurity in

National Infrastructure Resilience

COUNTERING IMPROVISED EXPLOSIVE DEVICES

PIPELINE SECURITY An Overview of TSA Programs

Sustainable Networks: Challenges and Opportunities. Anne Meltzer

Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure

ISAO SO Product Outline

DOE s Roles and Responsibilities for Energy Sector Cybersecurity

NASEO Central Regional Meeting

S&T Stakeholders Conference

What Every CEO Needs to Know

Florida State University

March 21, 2016 MEMORANDUM FOR THE HEADS OF EXECUTIVE DEPARTMENTS AND AGENCIES. Building National Capabilities for Long-Term Drought Resilience

Overview of the Federal Interagency Operational Plans

The Need for Operational and Cyber Resilience in Transportation Systems

RESILIENT AMERICA ROUNDTABLE: PARTNERING WITH COMMUNITIES TO BUILD RESILIENCE

The European Policy on Critical Information Infrastructure Protection (CIIP) Andrea SERVIDA European Commission DG INFSO.A3

Summary of Cyber Security Issues in the Electric Power Sector

DHS Cybersecurity: Services for State and Local Officials. February 2017

JOINT UNITED STATES-CANADA ELECTRIC GRID SECURITY AND RESILIENCE STRATEGY

New Madrid Earthquake Catastrophic Planning Project Overview

WELCOME TO A SILVER JACKETS WEBINAR ON:

INTRODUCING RESILIENT LOS ANGELES

MULTI-YEAR TRAINING AND EXERCISE PLAN. Boone County Office of Emergency Management

Future Resilience of the UK Electricity System Are we resilient to meet the needs of this rapidly changing world?

United States Space Weather Strategy and Action Plan. Terry Onsager Physicist, NOAA Space Weather Prediction Center

TURNING STRATEGIES INTO ACTION DISASTER MANAGEMENT BUREAU STRATEGIC PLAN

Presidential Documents

Public and Private Interdependencies Filling a Gap in Most Continuity Plans

Critical Infrastructure

Mississippi Emergency Management Agency. Shawn Wise. Office Of Preparedness

National Preparedness System (NPS) Kathleen Fox, Acting Assistant Administrator National Preparedness Directorate, FEMA April 27, 2015

BCP At Bangkok Bank, Thailand

The Office of Infrastructure Protection

Office of Infrastructure Protection Overview

Building A Disaster Resilient Quebec

The NIST Cybersecurity Framework

MSB s roles, responsibilities, and interaction

Presentation on the Community Resilience Program

Long-Term Power Outage Response and Recovery Tabletop Exercise

Electric Power Industry s Approach to Grid Security

Improving Electric Grid Reliability and Resilience. Lessons Learned from Superstorm Sandy and Other Extreme Events

Cybersecurity Overview

Department of Homeland Security Science and Technology Directorate

Implementing the Administration's Critical Infrastructure and Cybersecurity Policy

COMMENTARY. Federal Banking Agencies Propose Enhanced Cyber Risk Management Standards

Transmission Resiliency & Security

Transcription:

+ Energy Assurance Energy Assurance and Interdependency Workshop Fairmont Hotel, Washington D.C. December 2 3, 2013 Jeffrey R. Pillon, Director, Energy Assurance Programs National Association of State Energy Officials

+ Energy Assurance is the Capability to: 2 Plan and Respond to events that disrupt energy supply and assuring a rapid return to normal conditions. This is a coordinated effort involving the private energy sector s response, augmented by Local, State and Federal governments as needed; and Mitigate Risks through policies, programs and investments that provide for a more secure and resilient energy infrastructure that also reduces interdependencies impacts. Where risk is a function of consequences, vulnerabilities and threats.

+ State & Local Energy Assurance Program 3 ARRA Grant Awards (issued in 2009 and 2010) to 48 States, 2 Territories, 43 Cities Activities: Develop new or update existing State Energy Assurance Plans Create State level expertise on Smart Grid systems, cyber security, interdependencies, and communications Develop processes for tracking energy supply disruptions Conduct energy emergency exercises Revise State policies, procedures and practices Benefits for States and Cities: New or updated energy assurance plans Improved coordination across State agencies, among States, and regions Improved recovery and restoration capabilities and response times http://energy.gov/oe/services/energy assurance/emergency preparedness/state and local energyassurance planning

+ Energy Assurance Plans Common planning elements 4 Description of energy sources, infrastructure, distribution, system capacity, utilization, flows and end uses Organizational roles, responsibilities and legal authorities Emergency communications procedures (internal and external) Methods for tracking supply disruption and historical events Contingency plans for responding to petroleum, natural gas and electrical shortages Energy Infrastructure risk and vulnerability assessments Policies, programs and regulations that contribute to the security and resiliency of energy infrastructure and reduce risks

+ Consequence 5 Consequence analysis should address both direct and indirect effects of any hazards including: natural disaster, infrastructure failure, pandemic, cyber or terrorist attack or other disruptive events. Under the National Infrastructure Protection Plan, the U.S. Department of Homeland Security works with Sector Specific Agencies and security partners to examine the inherent characteristics of assets, systems, or networks to identify worstcase consequences. Consequences for the national level comparative risk assessment can be divided into four main categories: Human impact, fatalities and injuries Economic impacts, primary/secondary Impact on public confidence Impact on government capability Coffeyville Refinery Kansas July 2007

+ Examples of Risk Management for Cybersecurity Risk is a function of: [Consequence x Vulnerability x Threat] Loss of revenue Economic losses Public safety Physical damage Loss of confidence Decline in stock value Interdependencies operational (customers/suppliers) Interdependencies cascading, etc. Modification of data in transit Zero day vulnerability exploits Denial of service attacks Theft of information Spoofing Sniffing Human engineering User Errors Equipment Failure Malicious Actors Viruses/worms Natural hazards Hurricanes Floods Sever Storms Earthquakes Solar Flairs Pandemics Etc.

+ 7 For those who said we could have never envisioned the events of 9/11 The World Trade Center (WTC) suffered it first serious bomb damage on February 26, 1993. This fictional photo was published in a magazine in December 1993 and seems to show an explosion that might be caused by an aircraft flying into the WTC. After the 1993 bombing the Port Authority spent $100 million to make physical, structural, and technological improvement to the WTC and enhanced its fire safety plan.

+ Why Invest in Reliability and Resilience? To reduce human and economic consequences 8 Weather related power outages are estimated to have cost the U.S. economy an inflation adjusted annual average of $18 $33 billion. Since 1980, the United States has sustained 144 weather disasters whose damage costs reached, or exceeded, $1 billion and seven of the ten costliest storms in U.S. history occurred between 2004 and 2012. Annual costs fluctuate significantly and are greatest in the years of major storms such as Hurricane Ike in 2008, a year in which cost estimates range from $40 $75 billion, and Superstorm Sandy in 2012, a year in which cost estimates range from $27 $52 billion. The Economic Benefits of Increasing Electric Grid Resilience to Weather Outages, The White House Council of Economic Advisers and the U.S. Department of Energy, August 12, 2013 http://energy.gov/articles/white-house-council-economic-advisers-and-energy-department-release-new-report-resiliency

+ Private Sector Investments in Energy Infrastructure 9 Enbridge Pipeline Replacement Project $1.6 billion in Indiana and Michigan Marathon Refinery, Detroit MI Expanded Capacity at a cost of $2.2 billion in 2012

+ 10 Interdependencies in State Energy Assurance Plans Final State Energy Assurance Plans have been submitted to the U.S. Department of Energy. NASEO assisted States in developing their plans by providing guides and frameworks, conducted webinars and conference call on various planning issues, provided direct technical assistance and reviewed plans to identify well developed, unique and innovative planning elements. 80% of the State Energy Assurance Plans reviewed to date have references the importance of considering interdependencies in the planning process and response plans. Nine of the plans had specific sections or discussions on interdependencies and relationships. Other plans discussed interdependencies as a reoccurring theme that appeared in various sections of the plan. The discussion of interdependencies was frequently associated with the analysis of risk and vulnerabilities which is important to both energy emergency response plans and plans for investments in a secure and resilient energy infrastructure.

+ North Carolina Energy Assurance Plan (August 2013) Figure 3 1 Geographic interdependencies

+ 12 Oregon State Energy Assurance Plan (August 2012)

+ Colorado Energy Assurance Emergency Plan (June 2012) 13 Figure IX 52 Power Interdependencies with Other Critical Infrastructures Source: OECD/IFP Futures Project on Future Global Shocks Geomagnetic Storms CENTRA Technology, Inc., for the Office of Risk Management and Analysis, United States Department of Homeland Security. http://www.oecd.org/governance/risk/46891645.pdf

+ Earthquake Risk Study for Oregon's Critical Energy Infrastructure Hub

+ Texas Energy Assurance Plan (November 2012) Oil Transportation Electric Power Natural Gas Water Telecom

+ 16 H = High M=Medium L= Low

+ Resiliency and Risk Reduction How do we address interdependencies? 17 By retaining the institutional knowledge and capability to identify interdependencies within the energy sector and across the other sectors and recognize how they change over time. By assuring effective and rapid emergency response plans that help to more quickly return to normal or near normal conditions and that in turn reduces consequences both human and economic impacts. Understanding Interdependencies allows for better sequencing of priorities restoration efforts. By make longer term energy infrastructure investments, and pursuing policies and programs that enhances resiliency, and security and mitigate risks and potentially provide additional benefits.

+ National Infrastructure Advisory Council Report on Regional Resilience Recommendations 1. Form partnerships with senior executives from the lifeline sectors. 2. Identify or develop regional, public private, cross sector partnerships, led by senior executives. 3. Designate the energy, communications, water, and transportation sectors as lifeline sectors and direct all agencies to recognize the priority of these sectors and the individuality of regions. 4. Integrate social media into public alert and warning systems and work with state and local government partners to develop social media training programs and information sharing capabilities to inform response. 5. Develop solutions to site access, waiver, and permit barriers during disaster response. 6. Create a strong value proposition for investment in resilient lifeline infrastructures and accelerate the adoption of innovative technologies in major infrastructure projects. 18 Source: Strengthening Regional Resilience through National, Regional, and Sector Partnerships, Report and Recommendations, November 21, 2013

+ On the microscale, making an up front investment in safeguards that mitigate risk and consequences is far more cost effective than paying for response and recovery after a foreseeable hazard. On the macro scale, a society s level of resilience contributes to its global competitiveness. Dr. Stephen Flynn Founding co director of the George J. Kostas Research Institute for Homeland Security at Northeastern University (Flynn and Burke 2011)

+ Thank you! Jeff Pillon, Director, Energy Assurance Program jpillon@naseo.org * Phone 517 580 7626