Physical Protection of Infrastructures and Assets

Michael Erbschloe, Republished from SafetyIssues Vol 2 Issue 21, August 2003

Volume 4 Issue 44

July 2005

The September 11, 2001, attacks illustrated the immense vulnerability of the United States to terrorist threats. Since then there has been considerable efforts to develop plans and methods to protect critical infrastructures and key assets.

The government at all levels, private sector organizations, as well as concerned citizens have begun to establish partnerships and to develop action plans. But there are many questions yet to be answered about what organizations should actually do to protect their assets and their people while participating in national efforts to improve security.

The Department of Homeland Security (DHS) began formal operations in early 2003. DHS was formed as a result of the September 11, 2001 terrorist attacks on the World Trade Center and the Pentagon.

In February of 2003, DHS published The National Strategy for the Physical Protection of Critical Infrastructures and Key Assets, which outlines national goals, objectives, and principles to help physically secure critical infrastructures. The strategy calls for cooperation between government, industry, and private citizens and is designed to protect:

  • Agriculture and Food
  • Water
  • Public Health
  • Emergency Services
  • Defense Industrial Base
  • Telecommunications
  • Energy
  • Transportation
  • Banking and Finance
  • Chemical Industry and Hazardous Materials
  • Postal and Shipping
  • National Monuments and Icons
  • Nuclear Power Plants
  • Dams
  • Government Facilities
  • Commercial Key Assets
Chapters one through five provide business planners with an analysis of the principles and call for action from the The National Strategy for the Physical Protection of Critical Infrastructures and Key Assets. There are several points about the physical protection of computer systems and telecommunications systems that planners should address. First and foremost is that the United States government expects the cooperation in the prevention events that could damage the private sector 's ability to function and delivery essential services.

One of the key steps that the United States Government wants to accomplish is "Taking stock of our most critical facilities, systems, and functions and monitoring their preparedness across sectors and governmental jurisdictions."

To fully participate in this effort the type of exposure inventory and mitigation analysis describe in earlier chapters will need to be executed for all assets owned or controlled by an organization to determine if they are critical to the national infrastructure. Federal agencies are to assist state and local governments and private companies in their efforts to:

  • Organize and conduct protection and continuity of operations planning, and elevate awareness and understanding of threats and vulnerabilities to critical facilities, systems, and functions.
  • Identify and promote effective sector-specific, risk-management policies and protection practices and methodologies; and
  • Expand voluntary, protection-related information sharing among private entities within sectors, as well as between government and private entities.
It is uncertain how government security and disaster recovery requirements for organizations that are identified as holding assets that are considered critical to the economy and security of the United States will evolve. However, given all of the priorities and principles detailed in the strategy documents the following steps apply:
  • Conduct an exposure inventory.
  • Assess mitigation and protection steps that are in place.
  • Perform a risk analysis.
  • Adjust mitigation and protection steps based on outcome of risk analysis.
  • Maintain vigilance in monitoring detecting incidents.
  • Detect incidents and verify occurrence.
  • Report to law enforcement or appropriate government agency.
  • Assess damage.
  • Restore systems.
  • Evaluate similar systems or environments for vulnerability.
  • Adjust mitigation and protection steps based on occurrence of incidents.
  • Return to monitoring mode.

Email this article to a friend

Email a friend a link to our web site

Next..
Previous
 
Back to Safety Issues...

Have you seen a safety device you think our readers should know about?
Does your company make or sell a safety device you would like to see featured in this column?
If so, please e-mail the information about the device to Safety Issues.
The purpose of this column is to make your life safer with the use of the latest technology.
Neither Safety Issues nor its affiliated companies are responsible for any opinions expressed in this column.
Thank you for reading this column.

  © 2008 SafetyIssues.com, Inc. All Rights Reserved.