Critical Infrastructure Assessment

Similar documents
Energy Assurance Plans

FLOOD VULNERABILITY ASSESSMENT FOR CRITICAL FACILITIES

Why you should adopt the NIST Cybersecurity Framework

CRITICAL INFRASTRUCTURE AND KEY RESOURCES

WELCOME TO A SILVER JACKETS WEBINAR ON:

Building A Disaster Resilient Quebec

PD 7: Homeland Security Presidential Directive 7: Critical Infrastructure Identification, Prioritization, and Protection

Emergency Support Function #12 Energy Annex. ESF Coordinator: Support Agencies:

EMERGENCY SUPPORT FUNCTION (ESF) 13 PUBLIC SAFETY AND SECURITY

Cybersecurity Presidential Policy Directive Frequently Asked Questions. kpmg.com

Building strong relationships within a jurisdiction by utilizing Geographic Information

Appendix M. Lifeline Sector Coordination

Critical Infrastructure

Emergency Management & Disaster Planning

The Confluence of Physical and Cyber Security Management

FY Bay Area UASI Risk and Grants Management Program Update. November 14, 2013

THINK RESILIENCY 2.0 WITH VIZONOMY

Appendix A: Risk Assessment for Divisions of DEM

National Incident Management System and National Response Plan. Overview

Homeland Security and Geographic Information Systems

National Cyber Incident Response - Architectural Concepts

Drinking Water Emergency Management Ministry of the Environment 2012 Drinking Water Leadership Summit October 25, 2012

Past employee questionnaires showed the perception of security measures to be unfavorable with employees.

ArcGIS Solutions for Community Resilience. Matthew S Deal

Emergency Management BC Update

Kodagu District Disaster Management Plan

Strategic Investment Prioritization for Management of Risk of Land Development Adjacent to Critical Private Infrastructure Networks

Recovery and Reconstruction. towards disaster resilient communities - from lessons learnt in Japan - 24 August 2004.

The Office of Infrastructure Protection

Page G Wilkin County Multi-Hazard Mitigation Plan, 2017

Resilience Planning in San Francisco

The Federal Council s Basic Strategy. for Critical Infrastructure Protection

Strategic Foresight Initiative (SFI)

South East Region THIRA

California Cybersecurity Integration Center (Cal-CSIC)

Alternative Fuel Vehicles in State Energy Assurance Planning

Resilient Energy Solutions for Community Needs

The J100 RAMCAP Method

About Issues in Building the National Strategy for Cybersecurity in Vietnam

NIGERIA SECURITY AND CIVIL DEFENCE CORPS INSTITUTE OF SECURITY OF NIGERIA

CRITICAL INFRASTRUCTURE AND CYBER THREAT CRITICAL INFRASTRUCTURE AND CYBER THREAT

Actions to Improve Chemical Facility Safety and Security A Shared Commitment Report of the Federal Working Group on Executive Order 13650

Local Government Disaster Planning and what can be learned from it.

GIS in Situational and Operational Awareness: Supporting Public Safety from the Operations Center to the Field

Critical Infrastructure Sectors and DHS ICS CERT Overview

ANRC II. Eligibility requirements Authority Requirements for accreditation Review of application...

IEEE 2014 T&D Conference Paper 14TD Storm & Flood Hardening of Electrical Substations

How AlienVault ICS SIEM Supports Compliance with CFATS

Quadrennial Homeland Security Review (QHSR) Ensuring Resilience to Disasters

Critical Infrastructure Analysis and Protection - A Case for Secure Information Exchange. August 16, 2016

The Office of Infrastructure Protection

DRAFT Capital Facilities and Infrastructure Technical Bulletin

Chapter 18 SaskPower Managing the Risk of Cyber Incidents 1.0 MAIN POINTS

Introduction to the National Response Plan and National Incident Management System

*** THIS DOCUMENT IS CLASSIFIED FOR PUBLIC ACCESS ***

National Policy and Guiding Principles

STANDARD OPERATING PROCEDURE Critical Infrastructure Credentialing/Access Program Hurricane Season

SENATE, No STATE OF NEW JERSEY. 217th LEGISLATURE INTRODUCED DECEMBER 12, 2016

FEMA Update. Tim Greten Technological Hazards Division Deputy Director. NREP April 2017

Critical Infrastructure Resilience

Office of Infrastructure Protection Overview

Presentation on the Community Resilience Program

Request for Proposals. Information Technology Consultant and Network & Information Technology Support Services

STRATEGY ATIONAL. National Strategy. for Critical Infrastructure. Government

HAMILTON COUNTY EMERGENCY OPERATIONS PLAN ANNEX L - EMERGENCY SUPPORT FUNCTION #12 ENERGY

Santa Clara County. San Francisco City and County. Marin County. Napa County. Solano County. Contra Costa County. San Mateo County

This guide will tell you all you need to know about the new Front Desk application which can be found on the main Peoria County GIS website.

Creating A More Robust Facility Risk Assessment

Quality Infrastructure Investment: Resilient Approaches and Examples from East Asia and the Pacific

National Preparedness System (NPS) Kathleen Fox, Acting Assistant Administrator National Preparedness Directorate, FEMA April 27, 2015

Resilient Chicago & A Flood Vulnerability Assessment for Critical Facilities

Energy Assurance Energy Assurance and Interdependency Workshop Fairmont Hotel, Washington D.C. December 2 3, 2013

cybersecurity in Europe Rossella Mattioli Secure Infrastructures and Services

Florida Regional Domestic Security Task Forces

AT&T Dynamic Traffic Management Public Safety Attachment Effective 01/24/2018

STAFF REPORT. January 26, Audit Committee. Information Security Framework. Purpose:

CIP Cyber Security Recovery Plans for BES Cyber Systems

MULTI-YEAR TRAINING AND EXERCISE PLAN. Boone County Office of Emergency Management

HOTEL RESILIENT Plan ahead stay ahead. With support from the German Government through

Local Emergency Planning Committee (LEPC)

MULTI-AGENCY COORDINATION SYSTEM PUBLICATION RESOURCE DESIGNATION SYSTEM FORMS PACKET MACS 400-3

Member of the County or municipal emergency management organization

New York Department of Financial Services Cybersecurity Regulation Compliance and Certification Deadlines

Presented by Joe Burns Kentucky Rural Water Association July 19, 2005

LEGAZPI CITY: DISASTER RESPONSE AND RESILIENCY INITIATIVES

Standard Development Timeline

FHWA RESILIENCE PRIMER

Long-Term Power Outage Response and Recovery Tabletop Exercise

Critical Infrastructure Protection (CIP)

Business Continuity Management Standards A Side-by-Side Comparison

Critical Infrastructure Protection and Suspicious Activity Reporting. Texas Department of Public Safety Intelligence & Counterterrorism Division

BCP At Bangkok Bank, Thailand

TSA/FTA Security and Emergency Management Action Items for Transit Agencies

Intelligence Support to Critical Infrastructure Protection Table of Contents

CIP Cyber Security Systems Security Management

The State of Missouri

Service Plan for Infrastructure Engineering

Business Continuity Planning

TVA Response to the Fukushima Event and Lessons Learned from Recent Natural Disasters

Introduction to Homeland Security

Transcription:

Critical Infrastructure Assessment Everyday the products and services that support our standard of living flow, almost seamlessly, to and from our homes, communities, and government. Making this possible are the systems and networks (the roads, airports, power plants, communication facilities, etc.) that make up the critical infrastructure of our society. This analysis focuses on determining the vulnerability of key individual facilities, lifelines, or resources within the county. It is important to protect critical infrastructure to ensure that service interruption is kept to a minimum, reduced, or eliminated because many of these facilities play a central role in disaster response and recovery. Since it is not usually feasible to conduct such an analysis for every structure in a community, focus should be placed on identifying the categories of structures that are considered "critical" for purposes of conducting individual facility assessments. The objective of this assessment is to identify the vulnerability of critical infrastructure so as to take the necessary actions to deter or mitigate potential hazards 1. Critical Infrastructure Inventory This inventory consists of a database of facilities considered to be critical. The information collected identifies the facility type and location. It is important to collect accurate information about these facilities and their locations as this data will be essential for GIS mapping and completing the individual facility assessments in the next step of this analysis. Information collected for each critical facility includes, but is not limited to the following: Facility Name Facility Type Facility Point of Contact (POC) Physical Street Address Municipality Latitude and Longitude Elevation Tax Parcel data Flood Insurance Identify Critical Infrastructure Categories The completion of a critical facilities analysis is one of the most important elements in a countywide/community-wide vulnerability assessment. The first step in this analysis is to determine which facilities are considered critical. 1 NOAA Coastal Services Center, National Oceanic and Atmospheric Administration. Risk and Assessment Tool Risk and Assessment Steps Critical Facilities Analysis Extended Discussion, http://www.csc.noaa.gov/rvat/criticaledd.html The NOAA model was utilized by the Delta Planning Team to develop the Infrastructure Assessment Tool. Delta tailored the NOAA model and further expanded upon it in order to meet Huntingdon County s needs. July 2007 G-1

Per the National Infrastructure Protection Plan (Department of Homeland Security, 2006), critical infrastructure categories include: Agriculture Banking and Finance Chemical Commercial Facilities Dams Defense Drinking Water Waste Water Treatment Emergency Services Energy Government Facilities Information Technology National Monuments and Icons Nuclear Reactors and Waste Postal and Shipping Public Health and Healthcare Telecommunications Transportation System Assessment For each critical facility that has been prioritized, an individual assessment addressing the location of the facility and the potential impacts of each hazard was completed. The result is a systematic assessment of the vulnerability of critical lifelines or key resources to various hazard impacts. Mitigation projects for critical facilities can now be identified and prioritized. To determine which hazards pose the greatest threat, each of the sections below will be added together for each individual hazard. The result will be the Critical Infrastructure Score 2. Section 1: Risk Risk areas identify geographically those areas most likely to be affected by a given hazard. These scores are based on the degree of potential damage. For example, a higher risk score would be assigned to a facility that is below the base flood elevation (BFE) located in a 100-year floodplain versus an area that is in the 500-year floodplain. Enter the scores for each hazard risk area wherein the facility is located. Section 2: Damage History 2 NOAA Coastal Services Center, National Oceanic and Atmospheric Administration. Risk and Assessment Tool Risk and Assessment Steps Critical Facilities Analysis Extended Discussion, http://www.csc.noaa.gov/rvat/criticaledd.html July 2007 G-2

Based on historical records or personal accounts, any known previous damages caused specifically by each of the hazards were identified. This should help estimate vulnerability based on past damage experience. The scoring range in this category is higher than that in the structural and operational categories described below because the determination is less subjective and serves as direct proof of vulnerability. If no damages have historically occurred, it implies that the level of vulnerability is reduced or has already been mitigated. Keep in mind however, that a damage-free past does not guarantee a damage-free future. This score ranges from "0" for no damage history to "6" for major or repetitive loss (RL). minor equal to or less than 25 percent of the structure's fair market value moderate from 26 to 49 percent of the structure's fair market value major 50 percent of or greater than the structure's fair market value Section 3: Structural This section requires some knowledge about the construction of the facility and the existing building codes governing local construction. While this assessment is rather subjective, it is a first-level effort at identifying facilities that require more thorough structural investigation. Lower numbers in sections 3 and 4 could potentially indicate reduced vulnerability. Conversely, higher numbers in these sections could potentially indicate increased vulnerability of the facility itself, as well an increase in its operational vulnerability. The Uniform Construction Code (UCC) ended much of the confusion brought about by the various requirements of obsolete and conflicting standards. In November 1999, Governor Tom Ridge signed Act 45, which established the UCC throughout Pennsylvania. The UCC provides uniform standards for new construction and renovations throughout the state. The code applies to almost all buildings, excluding manufactured and industrialized housing (which are covered by other laws), agricultural buildings, and certain utility and miscellaneous buildings. The UCC has many advantages. It will require builders to use materials and methods that have been professionally evaluated for quality and safety. Inspectors are required to ensure compliance. The initial election period, during which all of Pennsylvania s 2,565 municipalities were allowed to decide whether the Uniform Construction Code (UCC) would be administered and enforced locally, officially closed on August 7, 2004 3. The codes adopted for use under the UCC are the 2003 International Codes issued by the International Code Council. No supplements to the 2003 codes are adopted for use. If a municipality has opted in, all UCC enforcement is local, except where municipal (or third party) code officials lack the certification necessary to approve plans and inspect commercial construction for compliance with UCC accessibility requirements 4. 3 Pennsylvania Department of Labor and Industry, Building Codes: Uniform Construction Code, http://www.dli.state.pa.us/landi/cwp/view.asp?a=310&q=21089, Accessed 06/2006. 4 Pennsylvania Department of Labor and Industry, Building Codes: Uniform Construction Code, http://www.dli.state.pa.us/landi/cwp/view.asp?a=310&q=21089, Accessed 06/2006. July 2007 G-3

If a municipality has opted out, the Department of Labor and Industry is responsible for all commercial code enforcement in that municipality. The Department of Labor and Industry also has sole jurisdiction for all state-owned buildings no matter where they are located 5. Section 4: Operational This section requires knowledge of where daily activities are conducted within the structure. This is necessary to determine which areas of the structure are important to conducting critical daily activities. For example, if the first floor of a fire station sustains major flood damage, which includes the destruction of the firefighters' sleeping quarters and fire trucks, it would greatly hamper fire response capabilities. Therefore, the operational vulnerability score would be defined as having "life-threatening impacts," as firefighters would not be readily available to respond to a call. Loss of facilities alone does not necessarily constitute significant loss of operational capability. For example, if only the fire station garage was damaged, but the trucks and equipment had been relocated to higher ground before the flooding occurred, and the sleeping quarters and kitchen were located on the second floor this would not have as great an effect on operations. Determination Based on all of the scores for an individual facility, the threshold established for determining low, moderate, and high vulnerability is represented in the table below. These thresholds will help to establish a focused list of the most vulnerable critical facilities. Critical Infrastructure Rating Low Moderate Moderate High High Overall Score 0 14 15 29 30 44 45 57 5 Pennsylvania Department of Labor and Industry, Building Codes: Uniform Construction Code, http://www.dli.state.pa.us/landi/cwp/view.asp?a=310&q=21089, Accessed 06/2006. July 2007 G-4

July 2007 G-5

July 2007 G-6