Critical Infrastructure Protection (CIP)V2010 Governance and Legal Issues

Lynne Genik, MScOperational Research Team

DRDC Centre for Security SciencePresentation for PST2010 Panel

August 17, 2010

Critical Infrastructure (CI)

“The essential underlying systems and facilities upon which our standard of life relies”

Public Safety Canada has identified 10 CI sectors:

2

Information and Communication Technology

Energy and utilities

Water Transportation

Health Food

Finance Safety

Manufacturing Government

V2010 CIP Problem

• Damage to CI had the potential to disrupt goods and services – Impacts on Games, safety, and security

• Ensure adequate critical infrastructure protection• Common view: The problem is too big, complicated,

resource intensive, and overwhelming

3

Governance of CIP for V2010

Major V2010 Players:

• Province of British Columbia

• Public Safety Canada

• Integrated Security Unit

• Canadian Forces

• VANOC

• Asset owners (private companies)

4

No clear lead… And who pays?

Note: Asset owners identified are examples and not an exhaustive list

V2010 Legal Issues

• No legal obligation of asset owners to share information

• V2010 Non-Disclosure Agreement with ISU

– Type and quantity of data voluntary

– Data classification

– Data destruction post Games

• Security safety information sharing

– “We’ll tell you if there’s something you need to know”

• Trust/personal relationships become extremely important

5