Asis-Critical Infrastructure Resource Guide

118
ASIS International Critical Infrastructure Resource Guide

Transcript of Asis-Critical Infrastructure Resource Guide

ASIS International

Critical Infrastructure Resource Guide

Copyright 2007 by ASIS International ASIS International (ASIS) disclaims liability for any personal injury, property or other damages of any nature whatsoever, whether special, indirect, consequential or compensatory, directly or indirectly resulting from the publication, use of, or reliance on this document. In issuing and making this document available, ASIS is not undertaking to render professional or other services for or on behalf of any person or entity. Nor is ASIS undertaking to perform any duty owed by any person or entity to someone else. Anyone using this document should rely on his or her own independent judgment or, as appropriate, seek the advice of a competent professional in determining the exercise of reasonable care in any given circumstance. All rights reserved. Permission is hereby granted to individual users to download this document for their own personal use, with acknowledgement of ASIS International as the source. However, this document may not be downloaded for further copying or reproduction nor may it be sold, offered for sale, or otherwise used commercially.

Table of ContentsIntroduction ....................................................................................................................................................................1 Critical Infrastructure Working Group Contributors ...............................................................................................2 ASIS International Staff ........................................................................................................................................2 1.0 Agriculture and Food Sector.....................................................................................................................................3 1.1 Sector Overview ..................................................................................................................................................3 1.2 Professional Development Resources ................................................................................................................4 1.2.1 Government Resources...............................................................................................................................4 1.2.2 Government Resources Canada ..............................................................................................................5 1.2.3 Industry Resources......................................................................................................................................5 1.2.4 Best Practices and Assistance ....................................................................................................................6 2.0 Banking and Finance Sector ....................................................................................................................................9 2.1 Sector Overview ..................................................................................................................................................9 2.2 Professional Development Resources ..............................................................................................................10 3.0 Chemical Sector.....................................................................................................................................................13 3.1 Sector Overview ................................................................................................................................................13 3.2 Professional Development Resources ..............................................................................................................14 3.2.1 Web Links..................................................................................................................................................14 3.2.2 Government Agencies / Resources ...........................................................................................................15 3.2.3 Publications and Misc. Resources .............................................................................................................17 4.0 Commercial Facilities Sector..................................................................................................................................19 4.1 Sector Overview ................................................................................................................................................19 4.2 Professional Development Resources ..............................................................................................................20 4.2.1 Guides, Resources, and Documents by Organization ...............................................................................20 4.2.2 Web links ...................................................................................................................................................21 4.2.3 Security Management Articles (month, year, page) ...................................................................................21 4.2.4 Books.........................................................................................................................................................22 4.2.5 Videotapes / DVD: .....................................................................................................................................25 4.2.6 Seminar Sessions Audiotapes / CD-ROM / DVD (ASIS): ..........................................................................25 5.0 Dams Sector ..........................................................................................................................................................28 5.1 Sector Overview ................................................................................................................................................28 5.2 Professional Development Resources ..............................................................................................................29 6.0 Defense Industrial Base Sector..............................................................................................................................34 6.1 Sector Overview ................................................................................................................................................34 6.2 Professional Development Resources ..............................................................................................................35 7.0 Drinking Water and Water Treatment Sector .........................................................................................................37 7.1 Sector Overview ................................................................................................................................................37 7.2 Professional Development Resources ..............................................................................................................38 7.2.1 Federal Lead Agency Affiliation .................................................................................................................38 7.2.2 Industry Associations and Affiliations.........................................................................................................38 7.2.3 Academic and Research............................................................................................................................39 8.0 Emergency Services Sector ...................................................................................................................................40 8.1 Sector Overview ................................................................................................................................................40 8.2 Professional Development Resources ..............................................................................................................41 8.2.1 Resources: ................................................................................................................................................42 9.0 Energy Sector ........................................................................................................................................................43 9.1 Sector Overview ................................................................................................................................................43 9.2 Professional Development Resources ..............................................................................................................45 9.2.1 Electricity Sector Organizations (North America):......................................................................................46 9.2.2 Electricity Sector Support Organizations (North America) .........................................................................46 9.2.3 References: ...............................................................................................................................................47 9.2.4 Security Support Programs:.......................................................................................................................48 9.2.5 Oil and Natural Gas Professional Development Resources ......................................................................50

10.0 Government Facilities Sector ...............................................................................................................................55 10.1 Sector Overview ..............................................................................................................................................55 10.2 Professional Development Resources ............................................................................................................56 10.2.1 Guides, Resources, and Documents by Organization .............................................................................56 10.2.2 Web links .................................................................................................................................................57 10.2.3 Security Management Articles (month, year, page) .................................................................................57 10.2.4 Books.......................................................................................................................................................58 10.2.5 Videotapes / DVD ....................................................................................................................................61 10.2.6 Seminar Sessions Audiotapes / CD-ROM / DVD (ASIS) .........................................................................61 11.0 Information Technology Sector ............................................................................................................................64 11.1 Sector Overview ..............................................................................................................................................64 11.2 Professional Development Resources ............................................................................................................65 11.2.1 Web Sites ................................................................................................................................................65 11.2.2 Credit Bureaus:........................................................................................................................................67 11.2.3 Books:......................................................................................................................................................67 12.0 National Monuments and Icons Sector ................................................................................................................68 12.1 Sector Overview ..............................................................................................................................................68 12.2 Professional Development Resources ............................................................................................................69 12.2.1 Museums, Libraries, Cultural Properties and other National Icons: .........................................................70 12.2.2 Other Resources, Guides, etc..............................................................................................................71 13.0 Nuclear Reactors, Materials, and Waste Sector...................................................................................................72 13.1 Sector Overview ..............................................................................................................................................72 13.2 Professional Development Resources ............................................................................................................73 14.0 Postal and Shipping Sector ..................................................................................................................................75 14.1 Sector Overview ..............................................................................................................................................75 14.2 Professional Development Resources ............................................................................................................76 14.2.1 Regional Cargo Security Councils: ..........................................................................................................77 14.2.2 Cargo Theft Task Forces: ........................................................................................................................78 15.0 Public Health and Healthcare Sector ...................................................................................................................80 15.1 Sector Overview ..............................................................................................................................................80 15.2 Professional Development Resources ............................................................................................................81 15.2.1 Books, Publications, and News Clips:......................................................................................................82 16.0 Telecommunications Sector .................................................................................................................................83 16.1 Sector Overview ..............................................................................................................................................83 16.2 Professional Development Resources ............................................................................................................84 17.0 Transportation Systems Sector ............................................................................................................................85 17.1 Sector Overview ..............................................................................................................................................85 17.2 Professional Development Resources ............................................................................................................86 17.2.1 Books, Publications, and News Clips.......................................................................................................89 18.0 Additional Resources .........................................................................................................................................102 18.1 Universities / Colleges ...................................................................................................................................103 18.2 Government Organizations............................................................................................................................105 18.3 Government Publications / Newsletters.........................................................................................................107 18.4 Business Associations / Nongovernmental Organizations.............................................................................111 18.5 Resource Database.......................................................................................................................................113

IntroductionThe September 11, 2001, attacks demonstrated the extent of our vulnerabilities to the terrorist threat. In the aftermath of these tragic events, we, as a Nation, have demonstrated firm resolve in protecting our critical infrastructures and key assets from further terrorist exploitation. In this effort, government at all levels, the private sector and concerned citizens across the country have begun an important partnership and commitment to action. - President George W. Bush, The National Strategy for the Physical Protection of Critical Infrastructure and Key Assets, February 2003

The ASIS International Critical Infrastructure Working Group (CIWG) initially convened at the ASIS Annual Seminar and Exhibits in San Diego, CA in September 2006. As the CIWG structure and purpose evolved, it was determined that this particular working body could provide a specialized resource to ASIS members who serve the nations 13 critical infrastructures and four key assets as defined by the U.S. Department of Homeland Security (DHS). Moreover, it was envisioned that the CIWG would be a viable link to both private and public sector entities associated with issues relevant to critical infrastructure protection, disaster resilience, and continuity of operations. The organizational structure of the CIWG is representative of all 17 critical infrastructures and key assets. Members are ASIS volunteers who are generally nominated to serve this working group from the existing Councils. As such, the CIWG is a common mechanism for inter council cooperation in protecting the vital interests of our nation through information sharing, educational programs, and resources. This guide represents a work product that can be used as a current resource document for the critical infrastructures and key assets. It is not intended to supplant or supersede existing publications, resources, or documents that have been promulgated by government agencies or industry associations. Rather, it is a useful compendium of information that can be easily accessed and utilized in the critical infrastructure protection arena. This effort could not have been realized without the dedication and commitment of the CIWG volunteers and ASIS staff who worked tirelessly in producing this resource for the infrastructure communities and the Society at large. Our gratitude is extended to all who have been involved in supporting this project. We welcome your comments, suggestions and recommendations regarding this document and how we can best serve you.

Robert D. Hulshouser, CPPASIS Critical Infrastructure Working Group Chair

ASIS International Critical Infrastructure Resource Guide

1

[Return to Table of Contents]

Critical Infrastructure Working Group ContributorsMichael A. Crane, CPP, IPC International Corporation, Council Vice-President Robert D. Hulshouser, CPP, Las Vegas Valley Water District, Chairman Deborah L. Allen, CPP, Potash Corporation Kent D. Bowen, AT&TAsset Protection Larry E. Brown, First Citizens Bank Ciro J. Cardelli, CPP, Shands Jacksonville Medical Center Scott R. Derby, Museum of Fine Arts, Boston James Keith Flannigan, International Dynamics Research Joseph R. Granger, CPP, United Space Alliance Gene P. Gwiazdowski, CPP, Calvert Cliffs Nuclear Power Plant J. Michael Harris, CPP, RDR, Inc. Mary B. Hostert, Allegheny Energy Keith L. Kambic, CPP, US Equities Asset Management, LLC Donald E. Knox, CPP, State Farm Insurance Ronald Lander, CPP, Ultrasafe Security Solutions Luis H. Morales, CPP, Duke Energy Corporation Ronald J. Niebo, NERC Henri R. Nolin, CPP, Sun State Specialty K-9s Kevin OBrien, The Bank of New York Mark OConnor, DHL Logistics Canada NE USA Bernard J. Scaglione, CPP, New York Presbyterian Hospital Michael J. Steinle, Tetra Tech EM, Inc. Ray VanHook, CPP, McCormick Place/Navy Pier Robert D. Voss, AGL Resources, Inc. John Walsh, U. S. Department of Homeland Security, Great Lakes Area Scott A. Watson, CPP, S.A. Watson & Associates, LLC Brit R. Weber, Michigan State University Terry F. Whitley, Shell Oil Company

ASIS International StaffSusan Melnicove Valerie Melencio O Evangeline Pappas Vinn Truong Education Department Director Council Manager Educational Publications Manager Educational Publications Assistant

ASIS International Critical Infrastructure Resource Guide

2

[Return to Table of Contents]

Agriculture and Food Sector

1.0 Agriculture and Food Sector1.1 Sector OverviewThe Agriculture and Food Sector has the capacity to feed and clothe people well beyond the boundaries of the Nation. The sector is almost entirely under private ownership and is composed of an estimated 2.1 million farms, and approximately 880,587 firms and 1,086,793 facilities. This sector accounts for roughly one-fifth of the Nations economic activity and is overseen at the Federal level by the U.S. Department of Agriculture (USDA) and the Department of Health and Human Services (HHS) Food and Drug Administration (FDA). The USDA is a multifaceted department that directly impacts the lives of all U.S. citizens. One of its key roles is to ensure that the Nations food and fiber needs are met. USDA is also the steward of our Nations 192 million acres of national forests and rangelands, and it is the countrys largest conservation agency, encouraging voluntary efforts to protect soil, water, and wildlife on the 70 percent of Americas lands that are in private hands. The FDA is responsible for the safety of 80 percent of all of the food consumed in the United States. While the FDAs mission is to protect and promote public health, that responsibility is shared with: Federal, State, and local agencies; regulated industry; academia; health providers; and consumers. FDA regulates $240 billion of domestic food and $15 billion of imported food. In addition, roughly 600,000 restaurants and institutional food service providers, an estimated 235,000 grocery stores, and other food outlets are regulated by State and local authorities that receive guidance and other technical assistance from FDA. The Agriculture and Food Sector is dependent upon the Drinking Water and Wastewater Treatment Systems Sector for clean irrigation and processed water; the Transportation Systems Sector for movement of products; the Energy Sector to power the equipment needed for agriculture production and food processing; and the Banking and Finance, Chemical, Dams and other sectors as well. *

*

Excerpt from U.S. Department of Homeland Security, National Infrastructure Protection Plan, 2006.

ASIS International Critical Infrastructure Resource Guide

3

[Return to Table of Contents]

Agriculture and Food Sector

1.2 Professional Development Resources1.2.1 Government ResourcesDepartmental agencies, regional locations, and links to vital information accompanied by a brief description of what information will be found. Animal and Plant Health Inspection Service (APHIS) , U.S. Department of Agriculture Contains information regarding potential disease outbreaks, response protocols, and mitigation strategies. Association of American Feed Control Officials (AAFCO) Provides information for developing and implementing uniform and equitable laws, regulations, standards and enforcement policies for regulating the manufacture, distribution and sale of animal feeds; resulting in safe, effective, and useful feeds. Association of American Plant Food Control Officials (AAPFCO) Promotes cooperation with members of the industry to promote the safe and effective use of fertilizers and protection of soil and water resources. Centers for Disease Control and Prevention (CDC) Contains pathogen-specific information to protect human health. Center for Food Safety & Applied Nutrition (CFSAN), U.S. Food and Drug Administration (FDA) Contains information regarding food safety incidents, recalls, and compliance obligations. Department of Homeland Security (DHS) Contains information regarding Homeland Security Presidential Directives, the National Incident Management System, the National Response Plan, and threat levels. Environmental Protection Agency (EPA) Contains information regarding chemical response issues. Federal Bureau of Investigation (FBI) Contains threat information and information for local law enforcement relative to agriculture. Transportation Security Administration (TSA) Contains relevant information regarding a broad base of transportation issues including air, pipelines, rail, and trucking. United States Department of Agriculture (USDA) Contains notices regarding agriculture and food security issues as well as best practices. United States Coast Guard Contains regulations and best practices for securing port facilities.

ASIS International Critical Infrastructure Resource Guide

4

[Return to Table of Contents]

Agriculture and Food Sector

1.2.2 Government Resources CanadaCanadian Food Inspection Agency Dedicated to safeguarding food, animals, and plants, which enhances the health and well-being of Canadas people, environment, and economy; and to ensure that food safety emergencies are effectively managed. Transport Canada Develops and administer policies, regulations, and services for the best transportation system for Canada; providing one that is safe and secure, efficient, affordable, integrated, and environmentally friendly.

1.2.3 Industry ResourcesSimilar to Government Resources cited above, but by the different industry associations/worldwide resources that may have developed. Agriculture and Food Transporters Conference (AFTC), American Trucking Association Promotes security of food and feed in transit via information exchange and best practices. Agriculture Retailers Association (ARA) Ensures that the legislative and regulatory issues of importance to ARA members are reported in a timely manner to the various audiences with whom the association relates. Within this section, viewers can read up-to-date news announcements on agriculture, retail, and distribution issues. AIB International Provides support to protecting the safety of the food supply chain and delivering high value technical and educational programs. American Feed Industry Association (AFIA) Supports the feed industry through information campaigns and best practices. American Meat Institute Provides best practices covering a broad range of issues relating to safety and security in the meat industry. Provides a forum for discussion and information exchange. CropLife America CropLife America is the national trade organization representing the nations developers, manufacturers, formulators, and distributors of plant science solutions for agriculture and pest management in the U.S. Food and Agriculture Sector Coordinating Council (FASCC) FASCC is comprised of up to 21 representatives from the Food and Agriculture Sector. The self-governing body represents the Food and Agriculture Sector to the government and makes policy and strategy recommendations to the Federal government. Food Processors Association (FPA) Promotes sound public policy, champions initiatives that increase productivity and growth, and helps protect the safety and security of the food supply through scientific excellence. Grocery Manufacturers Association (GMA) Promotes sound public policy, champions initiatives that increase productivity and growth, and helps to protect the safety and security of the food supply through scientific excellence.

ASIS International Critical Infrastructure Resource Guide

5

[Return to Table of Contents]

Agriculture and Food Sector

International Dairy Foods Association Provides Legislative Leadership, best practices, and promotion of dairy foods. National Cattlemens Beef Association Provides information regarding security relative to beef production as well as data regarding outbreaks and various types of pathogens. National Oilseed Processors Association (NOPA) Through its various committees, the Association cooperates with the U.S. Departments of Agriculture, State, and Commerce, as well as other independent and private organizations, both national and international, concerned with oilseed products. National Pork Producers Council Conducts public policy outreach on behalf of its 44 affiliated state association members. Enhances opportunities for the success of U.S. pork producers and other industry stakeholders by establishing the U.S. pork industry as a consistent and responsible supplier of high quality pork to the domestic and world market. The Fertilizer Institute (TFI) Provides safety and security best practices and promotes the safe use of fertilizer.

1.2.4 Best Practices and AssistanceSample checklists, audits, matrixes, etc. American Feed Industry Association (documents available through www.afia.org) Safe Feed/Safe Food Guidelines Guide to Biosecurity Awareness BSE Compliance Guide American Trucking Association USDA in partnership with Agriculture and Food Transporters Conference (updated 18 Dec 2006). Guide for Security Practices in Transporting Agriculture and Food Commodities. The Fertilizer Institute (documents available through www.tfi.org) "America's Security Begins With You" You, too, can work for a drug free America: Keep Anhydrous Ammonia Safe and Secure! Security Code of Management Practices

ASIS International Critical Infrastructure Resource Guide

6

[Return to Table of Contents]

Agriculture and Food Sector

U.S. Food and Drug Administration (FDA): Strategic Partnership Program Agroterrorism (SPPA) Initiative ALERT Food Defense Awareness Training Protecting the Food Supply from Intentional Adulteration: An Introductory Training Session to Raise Awareness This training is available online and is being hosted by the Food and Drug Administration (FDA). U.S. Department of Agriculture (USDA), Food Safety and Inspection Service (FSIS), Industry Security Guidelines: Developing a Food Defense Plan for Meat and Poultry Slaughter and Processing Plants | PDF | Developed in consultation with very small, small, and large meat and poultry processors, this guide provides an easy, practical, and achievable three-step method for creating a food defense plan. By completing pages 13 -16 of this guide, you will have a plan specific for your operation. Emergency Guidance for Retail Food Establishments | PDF | Practical guidance for retail grocery and food service establishments to plan and respond to emergencies that create the potential for an imminent health hazard. Elements of a Functional Food Defense Plan | PDF | This information serves as guidelines for completing the food defense plan profile extension questions. FSIS Model Food Security Plans The following plans identify the types of preventive steps that establishment operators may take to minimize the risk that their products will be subject to tampering or other malicious criminal activity: Egg Processing Facilities (Apr 2005) | PDF | Import Establishments (Apr 2005) | PDF | Meat and Poultry Processing Facilities (Apr 2005) | PDF | Meat and Poultry Slaughter Facilities (Apr 2005) | PDF | FSIS Notice 28-06, PBIS Profile Extension Instructions on Food Defense Plans for Meat and Poultry Establishments | PDF | FSIS Safety & Security Guidelines for the Transportation & Distribution of Meat, Poultry, & Egg Products | PDF | En Espanol | Chinese | Vietnamese | Korean | This brochure for the food industry provides recommendations to ensure the security of food products through all phases of the distribution process. FSIS Security Guidelines for Food Processors | PDF | En Espanol | Chinese | Vietnamese | Korean | These guidelines assist federal and state inspected plants that produce meat, poultry, and egg products in identifying ways to strengthen their biosecurity protection. Guidelines for the Disposal of Intentionally Adulterated Food Products and the Decontamination of Food Processing Facilities | PDF | This document is intended to serve as a resource guide for the U.S. Department of Agriculture's (USDA) Food Safety and Inspection Service (FSIS) and the Department of Health and Human Services' Food and Drug Administration (FDA) field personnel located in District Offices and at food processing facilities.

ASIS International Critical Infrastructure Resource Guide

7

[Return to Table of Contents]

Agriculture and Food Sector

Industry Self-Assessment Checklist for Food Security | PDF | FSIS created this selfassessment instrument to provide a tool for establishments to assess the extent to which they have secured their operations. Keep America's Food Safe | PDF | En Espanol | This guidance is designed to assist transporters, warehouses, distributors, retailers, and restaurants with enhancing their security programs to further protect the food supply from contamination due to criminal or terrorist acts.

ASIS International Critical Infrastructure Resource Guide

8

[Return to Table of Contents]

Banking and Finance Sector

2.0 Banking and Finance Sector2.1 Sector OverviewThe Banking and Finance Sector, the backbone of the world economy, is a large and diverse sector primarily owned and operated by private entities. In 2005, the sector accounted for more than 8.1 percent of the U.S. gross domestic product. Financial services firms provide a broad array of financial products for their customers. These products: (1) allow customers to deposit funds and make payments to other parties, (2) provide credit and liquidity to customers, (3) allow customers to invest funds for both long and short periods, and (4) transfer financial risks among customers. The financial institutions that provide these services are all somewhat different, each within a specific part or parts of the financial services marketplace. Financial institutions operate to provide customers the financial products that they want, ensure the institutions financial integrity, protect customers assets, and guarantee the integrity of the financial system. As such, financial institutions and financial markets that they organize manage a wide variety of financial and certain non-financial risks. In addition to the actions of financial institutions, direct financial regulation applies to many, but not all, financial services providers. The U.S. system of financial regulation is complex and exists at both the Federal and State levels. The regulatory systems for financial services firms manage and regulate various forms of risk and guard against prohibited practices. *

*

Excerpt from U.S. Department of Homeland Security, National Infrastructure Protection Plan, 2006.

ASIS International Critical Infrastructure Resource Guide

9

[Return to Table of Contents]

Banking and Finance Sector

2.2 Professional Development ResourcesThese links are to agencies that are government, private, and government/private partnerships. Additionally, most links are to pages that offer links to other agencies with Financial Institution security advice. American Bankers Association (ABA) Founded in 1875 and now based in Washington, DC, the American Bankers Association represents banks of all sizes on issues of national importance for financial institutions and their customers. The ABA, on behalf of the more than two million men and women who work in the nation's banks, brings together all categories of banking institutions to best represent the interests of this rapidly changing industry. Its membership--which includes community, regional and money center banks and holding companies, as well as savings associations, trust companies, and savings banks--makes ABA the largest banking trade association in the country. Bank Security Best Practices for New York City The New York Bankers Association (NYBA) and its members are committed to the safety of bank customers and employees. The association is also committed to working with law enforcement to help prevent bank robberies and when they occur to facilitate the timely apprehension and prosecution of criminals. As part of its efforts to ensure bank security in New York City, NYBAs New York City Bank Security Task Force has developed these Best Practices. These guidelines, however, are not intended to be an exclusive list of the various ways in which banks in New York City can develop and implement effective safety procedures. BITS Financial Services Roundtable BITS is a nonprofit, CEO-driven industry consortium whose members are 100 of the larges financial institutions in the United States. BITS was formed by the CEOs of these institutions to serve as the strategic brain trust for the financial services industry in the ecommerce, risk management, payments and technology arenas. BITS addresses emerging issues where financial services, technology and commerce intersect, acting quickly to address problems and galvanize the industry. Federal Deposit Insurance Corporation (FDIC) An independent agency created by the Congress that maintains the stability and public confidence in the nations financial system by insuring deposits, examining and supervising financial institutions, and managing receiverships. FDIC Quick Links The FDICs resource page contains links to FDIC Regulations, newsletter, and links to other agencies. FDIC Regulations The FDIC offers summery version of Regulation H, which defines the bank security officer and offers insight into the Bank Secrecy Act. This link will offer an overview of the Bank Secrecy Act as well as links to other Bank Secrecy Act resources. Additional information that can be found at www.fdic.gov/regulations/examinations/bsa is relative to the Patriot Act, Terrorist Financing and the Bank Secrecy Act statute.

ASIS International Critical Infrastructure Resource Guide

10

[Return to Table of Contents]

Banking and Finance Sector

The Federal Reserve the Federal Reserve System is the central bank of the United States. It was founded by Congress in 1913 to provide the nation with a safer, more flexible, and more stable monetary and financial system. Over the years, its role in banking and the economy has expanded. Today, the Federal Reserves duties fall into four general areas: Conducting the nations monetary policy by influencing the monetary and credit conditions in the economy in pursuit of maximum employment, stable prices, and moderate long-term interest rates. Supervising and regulating banking institutions to ensure the safety and soundness of the nations banking and financial system and to protect the credit rights of consumers. Maintaining the stability of the financial system and containing systemic risk that may arise in financial markets. Providing financial services to depository institutions, the U.S. government, and foreign official institutions, including playing a major role in operating the nations payments system. The Financial and Banking Information Infrastructure Committee (FBIIC) FBIIC is chartered under the President's Working Group on Financial Markets, and is charged with improving coordination and communication among financial regulators, enhancing the resiliency of the financial sector, and promoting the public/private partnership. Treasury's Assistant Secretary for Financial Institutions chairs the committee. Financial Crimes Enforcement Network (FinCen) the mission of the Financial Crimes Enforcement Network is to safeguard the financial system from the abuses of financial crime, including terrorist financing, money laundering, and other illicit activity. Bank secrecy forms and filing requirements are available at www.fincen.gov/reg_bsaforms.html. Financial Services Information Sharing and Analysis Center (FS/ISAC) Launched in 1999, FS-ISAC was established by the financial services sector in response to 1998's Presidential Directive 63. That directive--later updated by 2003's Homeland Security Presidential Directive 7-mandated that the public and private sectors share information about physical and cyber security threats and vulnerabilities to help protect the U.S. critical infrastructure. Constantly gathering reliable and timely information from financial services providers, commercial security firms, federal, state, and local government agencies, law enforcement and other trusted resources, the FS-ISAC is now uniquely positioned to quickly disseminate physical and cyber threat alerts and other critical information to your organization. This information includes analysis and recommended solutions from leading industry experts. Financial Services Sector Coordinating Council The Financial Services Sector Coordinating Council for Critical Infrastructure Protection and Homeland Security is a group of more than 30 privatesector firms and financial trade associations that works to help reinforce the financial services sectors resilience against terrorist attacks and other threats to the nations financial infrastructure. Formed in 2002, FSSCC works with the Department of Treasury, which has direct responsibility for infrastructure protection and homeland security efforts for the financial services sector, while also serving under the overall guidance of the Department for Homeland Security. ID Theft the Presidents Task Force on Identity Theft was established by Executive Order 13402 on May 10, 2006, launching a new era in the fight against identity theft. Recognizing the heavy financial and emotional toll that identity theft exacts from its victims, and the severe burden it places on the economy, President Bush called for a coordinated approach among government agencies to combat this crime.

ASIS International Critical Infrastructure Resource Guide

11

[Return to Table of Contents]

Banking and Finance Sector

Identity Theft Assistance Center (ITAC) the Identity Theft Assistance Center is a cooperative initiative of the financial services industry to address and reduce the human and economic consequences of fraud and identity theft. Since 2004, ITAC has helped thousands of victims restore their financial identities. Interagency Guidelines Establishing Information Security Standards | PDF | This guide summarizes the obligations of financial institutions to protect customer information and illustrates how certain provisions of the Security Guidelines apply to specific situations. The appendix lists resources that may be helpful in assessing risks and designing and implementing information security programs. Securities Industry and Financial Markets Association (SIFMA) Represents the industry, which powers the global economy. Born of the merger between The Securities Industry Association and The Bond Market Association, SIFMA is the single powerful voice for strengthening markets and supporting investors the world over. Our dynamic, new organization is passionately dedicated to representing more than 650 member firms of all sizes, in all financial markets in the U.S. and around the world. We are committed to enhancing the publics trust and confidence in the markets, delivering an efficient, enhanced member network of access and forward-looking services, as well as premiere educational resources for the professionals in our industry and the investors whom they serve. U.S. Treasury the mission of the Department of the Treasury is to promote the conditions for prosperity and stability in the United States and encourage prosperity and stability in the rest of the world. Terrorist Financing the Office of Terrorism and Financial Intelligence (TFI) marshals the department's intelligence and enforcement functions with the twin aims of safeguarding the financial system against illicit use and combating rogue nations, terrorist facilitators, money launderers, drug kingpins, and other national security threats.

ASIS International Critical Infrastructure Resource Guide

12

[Return to Table of Contents]

Chemical Sector

3.0 Chemical Sector3.1 Sector OverviewThe Chemical Sector is an integral component of the U.S. economy, employing nearly 1 million people, and earning revenues of more than $460 billion per year. The Chemical Sector can be divided into one of four main segments, based on the end product produced: (1) basic chemicals, (2) specialty chemicals, (3) life sciences, and (4) consumer products. There are well over one hundred thousand chemical facilities in the United States, encompassing everything from production facilities to hardware stores. The great majority of Chemical Sector facilities are privately owned, requiring DHS to work closely with the private sector and its industry associations in order to identify assets, assess risks, prioritize assets, develop and implement protective programs, and measure program effectiveness. The Chemical Sector is dependent on, depended on by, and overlaps with a wide range of other sectors including: Transportation Systems for the movement of raw materials and finished products Energy for power and feedstock materials, as well as being a customer of certain chemicals Drinking Water and Water Treatment Systems for chemical process operations and as a customer for critical chemicals Agriculture and Food as a customer for fertilizers, pesticides, and other chemicals Information Technology and Telecommunications for critical services Many other CI/KR sectors

All of these sectors are working together to ensure that their efforts support each other. *

*

Excerpt from U.S. Department of Homeland Security, National Infrastructure Protection Plan, 2006.

ASIS International Critical Infrastructure Resource Guide

13

[Return to Table of Contents]

Chemical Sector

3.2 Professional Development Resources3.2.1 Web LinksAmerican Chemistry Council (ACC), Arlington, VA American Petroleum Institute (API), Washington, DC Association of Oil Pipelines (AOPL), Washington, DC Domestic Petroleum Council (DPC), Washington, DC Energy Security Council (ESC), Houston, Texas www.americanchemistry.com www.api.org www.aopl.org www.dpcusa.org www.energysecuritycouncil.org www.iadc.org www.ipaa.org www.noia.org www.npra.org

International Association of Drilling Contractors (IADC), Houston, Texas Independent Petroleum Association of America (IPAA), Washington, DC National Ocean Industries Association (NOIA), Washington, DC National Petrochemical and Refiners Association (NPRA), Washington, DC Offshore Operators Committee (OOC), Metairie, LA US Oil and Gas Association (USOGA), Jackson, MS Western States Petroleum Association (WSPA), Sacramento, CA United States Natural Gas, Propane, and Other American Gas Association (AGA), Washington, DC American Public Gas Association (APGA), Washington, DC Compressed Gas Association (CGA), Chantilly, VA Gas Processors Association (GPA), Tulsa, OK

www.offshoreoperators.com www.usoga.com www.wspa.org

www.aga.org www.apga.org www.cganet.com www.gasprocessors.com www.ingaa.org www.npga.org

Interstate Natural Gas Association of America (INGAA), Washington, DC National Propane Gas Association (NPGA), Washington, DC United States Retail National Association of Convenience Stores (NACS), Alexandria, VA Petroleum Marketers Association of America (PMAA), Arlington, VA

www.nacsonline.com www.pmaa.org

ASIS International Critical Infrastructure Resource Guide

14

[Return to Table of Contents]

Chemical Sector

Society of Independent Gasoline Marketers of America (SIGMA), Reston, VA United States Transportation Independent Liquid Terminals Association (ILTA), Washington, DC National Tank Truck Carriers (NTTC), Alexandria, VA United States Other American Society of Mechanical Engineers (ASME) International Organization for Standardization (ISO), Geneva, Switzerland National Mining Association (NMA), Washington, DC Canada Canadian Association of Petroleum Producers (CAPP), Calgary, Alberta Canadian Energy Pipeline Association (CEPA), Calgary, Alberta Canadian Gas Association (CGA), Ottawa, Ontario Transport Canada (TC), Ottawa, Ontario

www.sigma.org

www.ilta.org www.tanktruck.netl

www.asme.org www.iso.org www.nma.org

www.capp.ca www.cepa.com www.cga.ca www.tc.gc.ca

3.2.2 Government Agencies / ResourcesCentral Intelligence Agency The World Factbook Coast Guard (USCG) HomePort Customs and Border Protection (CBP): Customs Trade Partnership Against Terrorism Program (C-TPAT) Frequent Traveler Programs Department of Energy (DOE) Energy Sources Department of Homeland Security (DHS): Buffer Zone Protection Program (BZPP) | PDF | Critical Infrastructure Partnership Advisory Council (CIPAC) Homeland Security Information Network (HSIN)

ASIS International Critical Infrastructure Resource Guide

15

[Return to Table of Contents]

Chemical Sector

Homeland Security Operations Center (HSOC) National Infrastructure Advisory Council (NIAC) National Infrastructure Protection Plan (NIPP) National Response Plan (NRP) Department of Transportation (DOT): Maritime Administration Pipeline and Hazardous Materials Safety Administration National Pipeline Mapping System Office of Hazardous Materials Safety Office of Pipeline Safety Energy Information Administration (EIA) - Energy Security Environmental Protection Agency (EPA) Federal Bureau of Investigation (FBI): Infragard Program Internet Crime Complaint Center (ICCC) Houston Private Sector Information Sharing Joint Terrorism Task Force Los Angeles Private Sector Information Sharing National Petroleum Council (NPC) , Washington, DC Overseas Security Advisory Council (OSAC) , Washington, DC Transportation Security Administration (TSA) Pipeline Security Division Canada Government Agencies/Resources Canadian Security Intelligence Service , Ottawa, ON Natural Resources Canada Royal Canadian Mounted Police (RCMP)

ASIS International Critical Infrastructure Resource Guide

16

[Return to Table of Contents]

Chemical Sector

3.2.3 Publications and Misc. ResourcesIndustry / Association American Chemistry Council (ACC), Responsible Care Security Code American Petroleum Institute (API): Security Guidelines for the Petroleum Industry | PDF | American Petroleum Institute (API) / National Petrochemical and Refiners Association (NPRA): NPRA Security Vulnerability Assessment Methodology for the Petroleum and Petrochemical Industries | PDF | ASTM International Standards The Illuminating Engineering Society of North America (IESNA) IESNA Lighting Handbook National Fire Protection Association (NFPA): NFPA 730 Guide for Premises Security NFPA 731 Standard for the Installation of Electronic Premises Security Systems U.S. Government Chemical Facility Anti-Terrorism Standards (CFATS) 6 CFR Part 27 (DHS) Department of Transportation (DOT) 49 CFR: Hazardous Materials Security Liquefied Natural Gas Facilities: Federal Safety Standards 49 CFR Part 193 Subpart J Protection of Security Sensitive Information (SSI) 49 CFR Part 1520 Maritime Transportation Security Act (MTSA) 33 CFR: Part 101 General Provisions Part 103 Area Maritime Security Part 104 Vessel Security Part 105 Facility Security

ASIS International Critical Infrastructure Resource Guide

17

[Return to Table of Contents]

Chemical Sector

National Archives and Records Administration (NARA) Code of Federal Regulations Protection of Information Critical Energy Infrastructure Information (CEII) Navigation and Inspection Circular (NVIC) 10-04: Guidelines for Handling Security Sensitive Information (SSI) | PDF | Protected Critical Infrastructure Information Program (PCII) Protection of Sensitive Security Information 49 CFR Part 1520 USCG, Sensitive Security Information (SSI) Regulation FAQ | PDF | Rail Security Rail Transportation Security, DHS Proposed Rule 49 CFR Parts 1520 and 1580 Surface Transportation and Rail Security Act of 2007 | PDF | Transportation Worker Identification Credential (TWIC) 49 CFR Parts 10, 12, and 15 - USCG

ASIS International Critical Infrastructure Resource Guide

18

[Return to Table of Contents]

Commercial Facilities Sector

4.0 Commercial Facilities Sector4.1 Sector OverviewFacilities associated with the Commercial Facilities Sector operate on the principle of open public access, meaning that the general public can move freely throughout these facilities without the deterrent of highly visible security barriers. The majority of the facilities in this sector are owned and operated by the private sector, with minimal interaction with the Federal Government and other regulatory entities. For the most part, commercial facility owners and operators must be responsible for assessing and mitigating their specific facility vulnerabilities and practicing prudent risk management and mitigation measures. The Commercial Facilities Sector consists of the following eight subsectors: 1. Public Assembly (e.g., arenas, stadiums, aquariums, zoos, convention centers); 2. Sports Leagues (e.g., professional sports leagues and federations); 3. Resorts (e.g., casinos); 4. Lodging (e.g., hotels, motels, conference centers); 5. Outdoor events (e.g., theme and amusement parks, fairs, campgrounds, parades); 6. Entertainment and Media (e.g., motion picture studios, broadcast media); 7. Real Estate (e.g., office and apartment buildings, condominiums, self-storage); and 8. Retail (e.g., retail centers and districts, shopping malls). *

*

Excerpt from U.S. Department of Homeland Security, National Infrastructure Protection Plan, 2006.

ASIS International Critical Infrastructure Resource Guide

19

[Return to Table of Contents]

Commercial Facilities Sector

4.2 Professional Development Resources4.2.1 Guides, Resources, and Documents by OrganizationGuidance for Protecting Building Environments from Airborne Chemical, Biological, or Radiological Attacks (NIOSH) Risk Management Guidance for Health, Safety, and Environmental Security under Extraordinary Incidents (ASHRAE) A Guide to Strengthen Emergency Management of High-Rise and High-Risk Buildings (Ontario Fire Marshal) Security and Safety in Los Angeles High-Rise Buildings After 9/11 (RAND) FEMA: Risk Management Series: 426: Reference Manual to Mitigate Potential Terrorist Attacks against Buildings 427: Primer for Design of Commercial Buildings to mitigate terrorist attacks 429: Insurance, Finance and Regulation primer for terrorism risk management in buildings E155: Building Design for Homeland Security, Student manual Comparison of structural performance of multi-story buildings under extreme events (American Institute of Steel Construction, Inc.) Evacuation Planning for Occupants with Disability (National Research Council Canada) Precautions to minimize effects of a Chemical, Biological, Radiological or Nuclear Event on Buildings and Infrastructure: (Office of Deputy Prime Minister, UK) Task Force on Tall Buildings: The Future. (Council on Tall Buildings and Urban Habitat) Suspicious Package Response Planning Guide: (Solicitor General Canada) Protecting Buildings from a Biological or Chemical Attack: Actions to be taken before or during a release DoD Minimum Anti-Terrorism Standards for Buildings: Unified Facilities Criteria: Dept. of Defense Building Air Quality: A Guide for Property Owners and Facility Owners: CDC Facilities Standard for the Public Buildings Service Balancing Security and Openness: General Services Administration

ASIS International Critical Infrastructure Resource Guide

20

[Return to Table of Contents]

Commercial Facilities Sector

Sustainable Building Technical Manual: Green Building Design, Construction and Operations, EPA Guide to Threat and Risk Assessment Involving On-Site Physical Security Examination: RCMP Strategic National Guidance: The Decontamination of Buildings and Infrastructure Exposed to Chemical, Biological, Radiological, or Nuclear (CBRN) substances or material: Office of the Deputy Prime Minister: UK.

4.2.2 Web linksAmerican Hotel & Lodging Association ASIS International Commercial Real Estate Council Building Owners and Managers Association International Building Security Council Construction Specifications Institutes (CSI) Council on Tall Buildings and Urban Habitat FacilitiesNet International Council of Shopping Centers International Facility Management Association (IFMA) National Apartment Association National Association of Industrial and Office Properties National Association of Realtors National Fire Protection Association (NFPA) National Multi Housing Council The Real Estate ISAC The Real Estate Roundtable www.ahla.com www.asisonline.org/councils/CRE.xml www.boma.org www.buildingsecuritycouncil.org www.csinet.org www.ctbuh.org www.facilitiesnet.com www.icsc.org www.ifma.org www.naahq.org www.naiop.org www.realtor.org/commercial www.nfpa.org www.nmhc.org www.reisac.org www.rer.org

4.2.3 Security Management Articles (month, year, page)Spotlight on Security for Real Estate Managers, Second Edition (Book Review). March 2006, 112. The Challenge of Making Safer Structures. March 2005, 42. High Rise Security and Fire Life Safety, Second Edition (Book Review). July 2004, 144. Kilroy Has Left the Building (Working Wise) [Penn Plaza, New York]. June 2004, 31.

ASIS International Critical Infrastructure Resource Guide

21

[Return to Table of Contents]

Commercial Facilities Sector

Take the Guesswork Out of Guest Control. June 2003, 60. Make Planning a Priority. May 2003, 71. Emergency Preparedness (Book Review). Dec 2002, 124. Los Angeles Tackles High-Rise Security (News and Trends). Sept 2002, 20. A New Forum for Security. June 2002, 71. The Jewel in the Crown [Crown Center Plaza, Kansas City, MO]. Sept 2000, 108. Condo Can Do [Capri Gardens Condominium Association, Miami, FL]. Jan 2000, 68. Tenants Anyone? (Spotlight). April 1999, 15. Security Planning Guidebook: Safeguarding Your Tenants and Property (Book Review). Aug 1996, 118. Building Security Relationships. July 1996, 103. Taking Life Safety to New Heights (Amoco Building, Chicago, IL). June 1996, 40.

4.2.4 BooksArchibald, R., & Medby, J. Security and Safety in Los Angeles High-rise Buildings After 9/11 . Santa Monica, CA: Rand Corporation, 2002. This analysis, commissioned by the Building Owners and Managers Association of Greater Los Angeles, includes Key Considerations for Building Security; Learning from Three Case Studies; Key Resource Guide on High-Rise Building and Multi-Tenant Security. December 2006, ASIS International . Planning Considerations for High-Rise Buildings; Potential Roles for Government; and Recommendations for Los Angeles. Azano, Harry J. Fire Safety and Security for High-Rise Buildings . Crete, IL: Abbott, Langer & Associates, 1995. TH/9445/H63A99/1995. Available to borrow from the ASIS Resources Center. Contents: 1) Recent high-rise disasters; 2) The challenge of high-rise buildings; 3) The role of the security force; 4) Understanding fire; 5) Attacking fire; 6) Sprinkler and standpipe systems; 7) Fire extinguishers and fixed systems; 8) Fire alarm systems; 9) The threat of arson and bombs; 10) High-rise safety program; Conclusion. Craighead, Geoff. High-Rise Security and Fire Life Safety, 2nd Ed . Woburn, MA: Butterworth-Heinemann, 2003. TH/9445/H63C88/2003. Available for purchase from the ASIS Online Bookstore. Includes how to conduct security and fire life safety surveys, effectively manage security programs, and prepare for high-rise emergencies. This new edition includes an analysis of the September 11, 2001, attacks on, and the collapse of, the Word Trade Center towers. Topics include high-rise building

ASIS International Critical Infrastructure Resource Guide

22

[Return to Table of Contents]

Commercial Facilities Sector

development and utilization, building emergency planning; laws, codes, and standards; liaison with law enforcement and fire authorities; high-rise assets; and security and fire life safety threats. DoD Minimum Anti-Terrorism Standards for Buildings: Washington, DC: Department of Defense, 2003. Unified Facilities Criteria .

This document seeks to minimize the likelihood of mass casualties from attacks against DoD personnel in the buildings in which they work and live. Guidance for Filtration and Air-Cleaning Systems to Protect Building Environments from Airborne Chemical, Biological, or Radiological Attacks . Washington, DC. National Institute for Occupational Safety and Health, 2003. This document provides detailed, comprehensive information on selecting and using filtration and aircleaning systems in an efficient and cost-effective manner. Guidance for Protecting Building Environments from Airborne Chemical, Biological, or Radiological Attacks . Washington, DC: National Institute for Occupational Safety and Health, 2002. Prevention is the cornerstone of public and occupational health. This document provides preventive measures that building owners and managers can implement promptly to protect building air environments from a terrorist release of chemical, biological, or radiological contaminants. A Guide to Emergency Evacuation Procedures for Employees with Disabilities. Sacramento, CA: State of California, 1999. Prepared by the Emergency Response Task Force and the California Highway Patrol for the State of California, State Personnel Board, Statewide Disability Advisory Council. Fennelly, Lawrence J., Handbook of Loss Prevention and Crime Prevention, 4th Ed. New York: Butterworth-Heinemann, 2004. HV/8290/H23/2004. This revised volume brings together the expertise of more than 40 security and crime prevention experts who provide practical information and advice. This new edition covering the latest on topics ranging from community-oriented policing to physical security, workplace violence, information security, homeland security, and a host of special topics. See pp. 370-387 for Chapter 25, High-Rise Security and Fire Life Safety and Chapter 26, Multiresidential Security. Fennelly, Lawrence J,. Spotlight on Security for Real Estate Managers . Chicago, IL: Institute for Real Estate Management, 2005. HV/8290/F33/2005. The goal of this book is to help real estate managers understand the issues that form the basis of liability claims and provide some tools than can be used to minimize the likelihood of crime occurring on the properties they manage and be prepared to deal with the consequences in the event a crime occurs at or near their property. The information here will assist the real estate manager in evaluating the security needs of a property and identifying security measures that will meet those needs within the available budget. While some chapters focus on a single property type, most of the strategies presented in the text can be adapted of considered for all types of properties.

ASIS International Critical Infrastructure Resource Guide

23

[Return to Table of Contents]

Commercial Facilities Sector

Kitteringham, Glen. Security and Life Safety for the Commercial High-Rise. Alexandria, VA: ASIS International, 2006. TH/9445/H6K62/2006. Since September 11, 2001, the high-rise industry has been reviewing security and life safety procedures and practices and taking steps to improve security based on building size and importance, geographic location, potential risk to occupants, and risk of attacks. The risk assessment guidelines presented in this book are oriented toward protection of a site's personnel and physical assets. They would also generally apply to protection of computer data, hardware, and software. The security guidance discussed in this book will assist individual companies to assess their properties and determine how best to protect their assets. Ontario Office of the Fire Marshal. A Guide to Strengthen Emergency Management of High-Rise and High- Risk Buildings, Ontario, Canada: Ontario Office of the Fire Marshal, 2002. This guide has been developed as part of the provincial government's commitment to improve Ontario's emergency preparedness and to help owners and operators of large buildings improve occupant safety and security. Protection of Assets Manual. ASIS International, Alexandria, VA. 2004 (with revisions and updates), Volume 4, Chapter 1, pp. 1-35. HV/8290/P975/VOL 4. This comprehensive source covers all aspects of security including access control, training, employee awareness, internal and external theft and fraud, security and civil law, investigations, ethics, alcohol and drug abuse, and more. All business managers and protection professionals with an assets protection responsibility will find this information pertinent in each subject area, and helpful in effectively tackling critical security issues and organizing special research projects. This manual also serves as a central library reference for students pursuing a program in security or assets protection. Risk Management Series: Primer for Design of Commercial Buildings to Mitigate Terrorist Attacks . Washington, DC, Federal Emergency Management Agency, Washington, DC, 2003. This primer introduces a series of concepts that can help building designers, owners, and State and local governments mitigate the threat of hazards resulting from terrorist attacks on new buildings. FEMA 427 specifically addresses four high-population, private-sector building types: commercial office, retail, multifamily residential, and light industrial. This manual contains extensive qualitative design guidance for limiting or mitigating the effects of terrorist attacks, focusing primarily on explosions, but also addressing chemical, biological, and radiological attacks. Sampson, Rana. Drug Dealing in Privately Owned Apartment Complexes . ProblemOriented Guides for Police: Problem-Specific Guides Series, No. 4. Washington, DC: Department of Justice, 2006. This guide focuses on drug dealing in privately owned apartment complexes. The guide makes a clear distinction between open- and closed-drug markets, provides information on what is known about each market type, and provides questions to ask when analyzing each market. It also proposes various responses designed to closed-drug markets and provides a full range of problem-specific measures to determine the effectiveness of those responses.

ASIS International Critical Infrastructure Resource Guide

24

[Return to Table of Contents]

Commercial Facilities Sector

Security Planning Guidebook: Safeguarding your Tenants and Property. Washington, DC: Building Owners and Managers Association International, 1995. HV/7431/S42/1995. Available to borrow from the ASIS Resources Center. Contents: Introduction; Security incidents; Evaluating your security needs; In-house vs. contract security? Working with police, fire dept and others; Tenant communications; Liability and insurance issues; Developing a security and safety communication plan; Putting the plan into action; Appendices: sample plan, crisis communications plan, bomb threats.

4.2.5 Videotapes/DVD:Emergency Response: Life Safety and Evacuation [videotape: 20 min.]. Emotion Pictures, LLC. 2002. VHS//E543/2002. Demonstrates what the person in charge of life safety for building occupants needs to know, and how to conduct a thorough and complete evacuation. Includes interactions with emergency responders, practicing the plan and ensuring that building occupants understand it, checking life safety systems and exit paths, and more. Also includes a 26-page Instructor's Guide. High-rise Evacuation [videotape: 22 min.]. Quincy, MA: National Fire Protection Association, 2002. VHS//H638/2002. Includes a 12-page instructor's pamphlet. This program is intended to be used regularly as part of a complete evacuation training course that includes a review of building emergency plans. It emphasizes the important role people can take in ensuring fire safety in high rises and in their ability to evacuate safely if fire occurs. The film presents safety features of high-rise buildings and how they contribute to safe evacuation in a fire emergency. The narrator gives the viewer a tour through the building, demonstrating its potential to contain a fire and limit its spread. Because a fire safety plan is dependent upon proper human response, a fire emergency scenario is presented, in which a good plan is carried out quickly and correctly. Lessons From Ground Zero: Evacuation [videotape: 23 min.]. Virginia Beach, VA: Coastal Human Resources, 2002. VHS//L641/2002. This video is the first part of a Lessons From Ground Zero training documentary. It provides first-hand accounts from those who experienced the World Trade Center evacuations on February 26, 1993 and September 11, 2001. It shows how critical changes implemented after the 1993 bombing expedited the evacuation on September 11th and highlights the importance of evacuation plans and fire drills, proper use of fire extinguishers, and necessity of working radios, operational flashlights, fully stocked first aid kits and accurate building maps.

4.2.6 Seminar Sessions Audiotapes / CD-ROM / DVD (ASIS): Building a National Response Plan (2005) Session ID: S10 Participants: Carlos Villarreal (speaker), Geoffrey T Craighead, CPP (moderator) Large companies that have many locations across the United States must have a robust and flexible plan in place to prevent, respond to, and recover from an incident. This session details what one commercial real estate company did to create a national response plan to critical incidents. Hear how the program got started, how it was implemented and tested, and how it is being maintained. Examples of emergency plans, monitoring systems, and notifications protocols will be given.

ASIS International Critical Infrastructure Resource Guide

25

[Return to Table of Contents]

Commercial Facilities Sector

CPTED & Security in the Commercial High-Rise (2004) Session ID: S37 Participants: Glen W Kitteringham, CPP (speaker), William J McShane, CPP (moderator) Security basics are covered including a discussion of policies and procedures, an examination of the physical facilities (3 buildings), a discussion of building residents and users, and a CPTED review and analysis of three specific areas of study within the properties. The First 90 Days After 9/11 (2002) Session ID: S71 Participants: Mark E Raybould, CPP (speaker), Mark T Wright (speaker), Charles J Mattes, CPP (speaker) Hear first-hand from four security professionals who have direct responsibilities for billion dollar assets in major markets like New York Chicago Los Angeles and Houston what immediate challenges they faced and the escalation strategies they implemented during the first 90 days following 9/11 and beyond to protect lives and buildings. You will walk away with valuable and practical information to help you manage facilities after catastrophic events. High-Rise Environments - Protection and Survivability (2002) Session ID: S23 Participants: Phillip Banks, CPP (speaker), Arik S Garber, CPP (moderator), The aftermath of the terrorist events of September 2001 as well as the continuing nation-wide threat environment has resulted in a demand for increased high-rise building security and safety planning. This response includes among other things increased screening of tenants and visitors as well as deliveries coming into the building and advanced emergency planning and preparedness. This session highlights methodologies that will increase your level of survivability from a terrorist attack or a naturally occurring disaster. High Rise Fire - Lessons Learned in Chicago (2004) Session ID: S6 Participants: Carlos Villarreal (speaker), Nancy A. Renfroe, CPP (moderator) This session is two-fold. First, there is a review of the tragic fire that occurred in a downtown Chicago high-rise office building, taking six lives. Then, the next section teaches how to take training to a higher awareness. There is a discussion of new methods to better train personnel to handle fire conditions and what type of fire safety training really works for building occupants. Detailed fire safety presentations do not always communicate the right message. High Rise Fire Simulations: Moving Beyond Fire Drills (2004) Event: 50th Annual Seminar Session ID: S23 Participants: Steve Cichon (speaker), Charles K Hutchinson (speaker), Michael Crocker, CPP (moderator) The theme of this presentation is high-rise fire safety. This training moves beyond the conventional fire drill to a new training platform. This is a simulation conducted in real buildings in a training platform. This includes a zero visibility environment with a building in fire mode. Responders must use building systems and equipment, elevator and fire panel operations, and traffic management. The fire simulation tests all levels of the responder abilities. This presentation is an overview of a highly intense training format that brings together the private and public sector in a unique cross-training environment. Securing an Office Building (2003) Session ID: S24 Participants: Mark E Raybould, CPP (speaker), Louis G Caravelli, CPP (speaker), Carlos Villarreal (moderator)

ASIS International Critical Infrastructure Resource Guide

26

[Return to Table of Contents]

Commercial Facilities Sector

Learn what best practices are being used to address the new threat issues everyone in commercial real estate security is facing. This session will review past standards and discuss the new way of securing an office building. Issues including threat levels, access control systems, CCTV coverage, emergency planning and staffing will be discussed in great detail. Best practices on how to build and review your building's plan also will be discussed during this every informative program. Security and Safety Concerns: High Rise Buildings After 9/11 (2003) Session ID: S32 Participants: Robert A Cizmadia, CPP (speaker), Robert L Pearson (moderator) The density of populations and high-rise buildings within our cities provides the motivation for considering the assessment of security and safety of these architectural wonders. This presentation is targeted towards security and facility managers, property owners, tenants, and architects of such buildings. The content of this presentation will focus on taking an integrated approach in addressing security of high-rise buildings from a security management operational administrative technological and educational awareness perspective.

ASIS International Critical Infrastructure Resource Guide

27

[Return to Table of Contents]

Dams Sector

5.0 Dams Sector5.1 Sector OverviewThe Dams Sector encompasses major infrastructure assets that harness the water resources of the Nation and enable water management, balancing droughts and floods throughout the U.S. These dams, locks, pumping plants, canals, and levees provide water supply, power generation, navigable waterways, flood protection, and unique environmental stability and enhancement to habitats across the country. Ten percent of American cropland is irrigated using water stored behind dams. Hydropower facilities generate more than 60 percent of the electricity used along the Pacific coast. More than 12,000 miles of navigable waterways in the U.S. provide routes for transportation of mass quantities of commodities within the country and more than $70 billion worth of cargo is shipped along the waterways annually. There are approximately 78,000 dams included in the National Inventory of Dams, and almost 60 percent of them are privately owned. The Dams Sector has interdependencies with a wide range of other sectors, including: The Agriculture and Food Sector as a continued source of water for irrigation and water management The Transportation Systems Sector uses dams and locks to manage navigable waters throughout inland waterways The Drinking Water and Water Treatment Systems Sector by supplying potable water to concentrated populations and commercial facilities in the U.S. The Energy Sector by providing approximately 8 to 12 percent of the Nations power needs with hydropower dams The Emergency Services Sector relies on Dams Sector assets for firefighting water supply, emergency water supply, and waterborne access in the event of a significant disaster *

*

Excerpt from U.S. Department of Homeland Security, National Infrastructure Protection Plan, 2006.

ASIS International Critical Infrastructure Resource Guide

28

[Return to Table of Contents]

Dams Sector

5.2 Professional Development ResourcesAmerican National Standards Institute-Homeland Security Standards Panel (ANSI-HSSP) ANSI-HSSP has as its mission to identify existing consensus standards, or, if none exist, assist the Department of Homeland Security (DHS) and those sectors requesting assistance to accelerate development and adoption of consensus standards critical to homeland security. The ANSI-HSSP promotes a positive, cooperative partnership between the public and private sectors in order to meet the needs of the nation in this critical area. American Public Works Association (APWA) An international educational and professional association of public agencies, private sector companies, and individuals dedicated to providing high quality public works goods and services. Association of State Dam Safety Officials (ASDSO) A national non-profit organization of state and federal dam safety regulators, dam owners and operators, engineering consultants, manufacturers and suppliers, academia, contractors and others interested in dams safety. Our vision is to lead the US dam safety community with a strong, unified voice and effective programs and policies toward the furtherance of dam safety. Dam Safety Program Management Tools (DSPMT) The purpose of the DSPMT is to provide dam safety program managers with the answers to the following questions: How well are our dam safety programs being implemented? Are we doing too much in some areas and not enough in others? Are we spending our scarce resources in the right places? Are we improving? Earthquake Engineering Research Institute (EERI) A national, nonprofit, technical society of engineers, geoscientists, architects, planners, public officials, and social scientists. EERI members include researchers, practicing professionals, educators, government officials, and building code regulators. Electric Power Research Institute (EPRI) With major locations in Palo Alto, California; Charlotte, North Carolina; and Knoxville, Tennessee, was established in 1973 as an independent, nonprofit center for public interest energy and environmental research. EPRI brings together members, participants, the Institute's scientists and engineers, and other leading experts to work collaboratively on solutions to the challenges of electric power. These solutions span nearly every area of electricity generation, delivery, and use, including health, safety, and environment. EPRI's members represent over 90 percent of the electricity generated in the United States. International participation represents nearly 15 percent of EPRI's total research, development, and demonstration program. (Membership required) Federal Bureau of Investigation (FBI) Our mission is to help protect you, your communities, and your businesses from the most dangerous threats facing our nationfrom international and domestic

ASIS International Critical Infrastructure Resource Guide

29

[Return to Table of Contents]

Dams Sector

terrorists to spies on U.S. soilfrom cyber villains to corrupt government officialsfrom mobsters to violent gangsfrom child predators to serial killers. Learn more here about our work with law enforcement and intelligence partners across the country and around the globe. Federal Emergency Management Administration (FEMA), National Dam Safety Program Although the Federal Government owns or regulates only about 5 percent of the dams in the United States, many of these dams are significant in terms of size, function, benefit to the public, and hazard potential. Since the implementation of the Federal Guidelines for Dam Safety in 1979, the federal agencies have done an exemplary job in ensuring the safety of dams within their jurisdiction. They accomplish this by sharing resources whenever and wherever possible to achieve results and improvements in dam safety. Many of the federal agencies also maintain very comprehensive research and development programs and training programs, and have now incorporated security considerations and requirements into these programs to protect their dams against terrorist threats. National Dam Safety Review Board The Review Board provides the Director of FEMA with advice in setting national dam safety priorities and considers the effects of national policy issues affecting dam safety. Review Board members include FEMA, the Chair of the Board, and representatives from four federal agencies that serve on the Interagency Committee on Dam Safety (ICODS), five state dam safety officials, and one member from the private sector. Interagency Committee on Dam Safety (ICODS) Established in 1980, encourages the establishment and maintenance of effective federal programs, policies, and guidelines to enhance dam safety and security. ICODS serves as the permanent forum for the coordination of federal activities in dam safety and security. FEMA also chairs ICODS. ICODS Agencies: Department of Agriculture Agricultural Research Service Natural Resources Conservation Service Forest Service Department of Defense, Army Corps of Engineers Department of Energy Department of the Interior Bureau of Indian Affairs Bureau of Land Management Bureau of Reclamation Fish and Wildlife Service National Park Service Department of Labor, Mine Safety and Health Administration Federal Energy Regulatory Commission Department of State, International Boundary and Water Commission Nuclear Regulatory Commission Tennessee Valley Authority

ASIS International Critical Infrastructure Resource Guide

30

[Return to Table of Contents]

Dams Sector

Federal Energy Regulatory Commission (FERC) Hydropower The Commission's responsibilities include: Issuance of licenses for the construction of a new project; Issuance of licenses for the continuance of an existing project (relicensing); and Oversight of all ongoing project operations, including dam safety inspections and environmental monitoring. Homeland Security Information Center (HSIC) The Homeland Security Information Center at NTIS is an invaluable resource for scientific and technical information from the U.S. Government, its contractors, and complementary material from international sources. The HSIC is categorized into these major security concerns: health & medicine, food & agriculture, bio and chemical warfare, preparedness and response, and safety training. Products are available in a variety of formats: electronic download, online access, computer products, multimedia, microfiche, and paper. International Association of Emergency Managers (IAEM) The International Association of Emergency Managers (IAEM) is a non-profit educational organization dedicated to promoting the goals of saving lives and protecting property during emergencies and disasters. The International Journal on Hydropower and Dams A bi-monthly publication, read in 176 countries, dealing with all technical, environmental, social and economic aspects of hydro plants and multipurpose water resources development projects. It combines business news with state-of-the-art technology. Each issue has a regional focus, and special technical themes of interest to engineers in all the related disciplines. National Emergency Management Association (NEMA) NEMA is the professional association of and for state emergency management directors. National Hydropower Association (NHA) The National Hydropower Association, founded in 1983, is the only trade association in the United States dedicated exclusively to advancing the interests of hydropower energy in North America. Located in Washington, D.C., NHA is a member-driven association that accomplishes its policy work and outreach through the initiatives of its standing committees. National Performance of Dams Program Formally launched in 1994, the NPDP is an effort to establish within the dam engineering and safety community the ability to learn from the in-service performance of dams, supporting improvements in dam design, operation, engineering, and public policy. National Society of Professional Engineers (NSPE) The National Society of Professional Engineers (NSPE) is the recognized voice and advocate of licensed Professional Engineers. Founded in 1934, NSPE strengthens the engineering profession by promoting engineering licensure and ethics, enhancing the engineer image, advocating and protecting PEs' legal rights at the national and state levels, publishing news of the profession, providing continuing education opportunities, and much more. NSPE serves some 50,000 members and the public through 53 state and territorial societies and more than 500 chapters. Sandia National Laboratories, Security Risk Assessment Methodology for Dams (RAM-D) Developed by Sandia National Laboratories for the Interagency Forum for Infrastructure Protection (IFIP). The IFIP is a consortium chartered in 1997 to promote information exchange among dam owners and operators for the focused purpose of identifying effective means of countering the potential threat to the security of our nation's more than 75,000 dams. The RAM-DSM is an adaptation of the security

ASIS International Critical Infrastructure Resource Guide

31

[Return to Table of Contents]

Dams Sector

principles, processes, and procedures developed to protect nuclear materials. The RAM-DSM includes tools developed to address issues that are specific to dam facilities. Security Management Solutions (SMS) Dam Assessment Matrix for Security and Vulnerability Risk (DAMSVR) methodology was developed under the direction of FERC. SMS was contracted to pull together existing methodologies from FERC and Bureau of Reclamation, develop a new methodology, and field test the product. Since the completion of the process, SMS has developed a full range of training to support DAMSVR studies. The Infrastructure Security Partnership (TISP) A national public-private partnership, TISP is the recognized leader promoting collaboration to improve the resilience of the nation's critical infrastructure against the adverse impacts of natural and man-made disasters. U.S. Army Corps of Engineers, Institute for Water Resources (IWR) IWR was established to provide the U.S. Army Corps of Engineers with forward-looking insights and analyses on emerging national water resources issues Risk Assessment Methodology for Dams (RAM-D) The Corps has been integrally involved in the creation and implementation of this unique assessment tool designed to help operators of dams, hydroelectric facilities, and power plants make their sites less attractive targets to terrorists. RAM-D helps operators identify who might attack a facility, what resources they might have available, and what steps might be taken to prevent an attack. Operators can use RAM-D to determine where to place sensors, cameras, or lights, or whether to invest in walls, barriers, higher fences, better doors, extra training, or improved policies. The Corps is working to improve the use of RAM-D, while also evaluating other tools and concepts to improve risk assessment efforts and reduce vulnerabilities. U.S. Coast Guard (USCG) a military, multi-mission, maritime service and one of the nations five Armed Services. Its mission is to protect the public, the environment, and U.S. economic interests in the nations ports and waterways, along the coast, on international waters, or in any maritime region as required to support national security. U.S. Department of Agriculture (USDA), USDA Dam Safety Committee (USDADSC) Establishment is in the public's interest in that it will strengthen dam safety efforts in the Department and support the Executive Branch in the implementation of the "Federal Guidelines for Dam Safety." U.S. Department of Energy (DOE), Infrastructure Security and Energy Restoration (ISER) A division of the DOEs Office of Electricity Delivery and Energy Reliability leads the federal government's effort to ensure a robust, secure, and reliable energy infrastructure. United States Society on Dams (USSD) To be the nation's leading organization of professionals dedicated to advancing the role of dams for the benefit of society. USSD is dedicated to: Advancing the knowledge of dam engineering, construction, planning, operation, performance, rehabilitation, decommissioning, maintenance, security, and safety; Fostering dam technology for socially, environmentally, and financially sustainable water resources systems;

ASIS International Critical Infrastructure Resource Guide

32

[Return to Table of Contents]

Dams Sector

Prov