Transportation Security: Transportation Security: Three Years After 9/11Three Years After 9/11

Eva Lerner-Lam and Monica IsbellEva Lerner-Lam and Monica IsbellPalisades Security Consulting Team Palisades Security Consulting Team

Presented at thePresented at theITS Washington Annual MeetingITS Washington Annual MeetingTuesday, September 21, 2004Tuesday, September 21, 2004

Overview of PresentationOverview of Presentation

What is being done todayWhat is being done today 3 years after attack on our homeland3 years after attack on our homeland 9/11 Commission Report9/11 Commission Report Legislative Initiatives in the 108Legislative Initiatives in the 108thth Congress Congress

Emerging IssuesEmerging Issues Process vs. technology (both are important, but Process vs. technology (both are important, but

technology is not the “magic bullet”)technology is not the “magic bullet”) ““I can tell you, but then I’d have to shoot you…”I can tell you, but then I’d have to shoot you…” Who’s going to pay for all this?Who’s going to pay for all this?

What is Being Done Today: What is Being Done Today: Better Integrated PlanningBetter Integrated Planning

DHS is developing a DHS is developing a National Response Plan National Response Plan (NRP) that consolidates and (NRP) that consolidates and reconciles multiple national-reconciles multiple national-level incident response level incident response plans into a single, focused, plans into a single, focused, universally understood universally understood strategystrategy

What is Being Done Today: CargoWhat is Being Done Today: Cargo

Every port in America has Every port in America has submitted a security plansubmitted a security plan

The Coast Guard is The Coast Guard is overseeing physical and overseeing physical and procedural security procedural security improvements through improvements through federal grants and self-federal grants and self-funding by portsfunding by ports

What is Being Done Today: CargoWhat is Being Done Today: Cargo

U.S. Customs and Border U.S. Customs and Border Protection (CBP) screens Protection (CBP) screens data and documents of all data and documents of all imports and physically imports and physically inspects 100% of cargo inspects 100% of cargo identified as “high risk.”identified as “high risk.”

CBP continues to CBP continues to introduce new voluntary introduce new voluntary and mandatory programs and mandatory programs covering imported cargo covering imported cargo

What is Being Done Today: CargoWhat is Being Done Today: Cargo Customs-Trade Customs-Trade

Partnership Against Partnership Against Terrorism (voluntary)Terrorism (voluntary)

Container Security Container Security Initiative (CSI) Initiative (CSI) (voluntary)(voluntary)

Random Non-Random Non-Intrusive Inspections Intrusive Inspections (NII) and Vehicle and (NII) and Vehicle and Cargo Inspection Cargo Inspection Systems (VACIS)Systems (VACIS)

What is Being Done Today: CargoWhat is Being Done Today: Cargo

48-hour Port Entry 48-hour Port Entry application and notice to application and notice to the Coast Guard for all the Coast Guard for all vesselsvessels

Advance Manifest Advance Manifest requirement for key data requirement for key data elements to enable CBP elements to enable CBP to perform risk to perform risk assessment assessment Ocean cargo - before Ocean cargo - before

cargo loading at foreign cargo loading at foreign portport

Airfreight, rail and truck Airfreight, rail and truck shipments - prior to shipments - prior to entering U.S. bordersentering U.S. borders

What is Being Done Today: CargoWhat is Being Done Today: Cargo ““Smart” technologies for cargo containers are Smart” technologies for cargo containers are

being developedbeing developed High security sealsHigh security seals Container sensor devices to detect Container sensor devices to detect

tampering, radiation, explosives, etc.tampering, radiation, explosives, etc. Costs must go down to encourage wide-Costs must go down to encourage wide-

spread usespread use

What is Being Done Today: What is Being Done Today: PassengersPassengers

Air TravelAir Travel Vulnerability Vulnerability

assessments assessments Hardened cockpit Hardened cockpit

doors on 100% of doors on 100% of large passenger large passenger aircraftaircraft

100% of all 100% of all checked baggage checked baggage is screenedis screened

What is Being Done Today: What is Being Done Today: PassengersPassengers

TransitTransit Bus, Rail and Ferry Bus, Rail and Ferry

Operators have Operators have performed vulnerability performed vulnerability assessments of assessments of operations and operations and facilitiesfacilities

What is Being Done Today: What is Being Done Today: PassengersPassengers

ImmigrationImmigration US-VISIT system links US-VISIT system links

databases databases TSA Secure Flight TSA Secure Flight

ProgramProgram

What is Being Done Today: What is Being Done Today: HazMatHazMat

Trucking and RailTrucking and Rail American Chemical American Chemical

Council and others Council and others have required security have required security vulnerability vulnerability assessment of all assessment of all aspects including the aspects including the accountability of accountability of security of chemicals security of chemicals in transit. in transit.

What is Being Done Today: What is Being Done Today: Information SharingInformation Sharing

The Homeland The Homeland Security Information Security Information Network (HSIN)Network (HSIN)

New 24-hour New 24-hour Homeland Security Homeland Security Operations Center co-Operations Center co-locates 35 different locates 35 different Federal agenciesFederal agencies

What is Being Done Today: What is Being Done Today: ResponseResponse

Interoperability: Interoperability: DHS’s Safecom DHS’s Safecom

and RapidCom and RapidCom programsprograms

Developing a Developing a patch-panel patch-panel devicedevice

What is Being Done Today: What is Being Done Today: TrainingTraining

450,000+ first 450,000+ first responders trained responders trained since FY2002 since FY2002

What is Being Done Today: What is Being Done Today: CitizensCitizens

Citizen Preparedness: Citizen Preparedness: National Preparedness National Preparedness

MonthMonth Citizen Corps CouncilsCitizen Corps Councils

Transit WatchTransit Watch

What is Being Done Today: PeopleWhat is Being Done Today: People

BioShield Act of 2004: BioShield Act of 2004: BioShield ensures BioShield ensures

vaccines, drugs and vaccines, drugs and medical supplies are medical supplies are ready for rapid ready for rapid distributiondistribution

BioWatch monitors air BioWatch monitors air samples frequently in samples frequently in major urban cities major urban cities nationwidenationwide

What is Being Done Today: What is Being Done Today: Emerging TechnologiesEmerging Technologies

Homeland Security Homeland Security Advanced Research Advanced Research Projects Agency Projects Agency (HSARPA) (HSARPA)

University-based University-based partnershipspartnerships

What is Being Done Today: What is Being Done Today: Emerging TechnologiesEmerging Technologies

ITS methods and ITS methods and technologies and technologies and enhancements for:enhancements for: Tracking of hazmats Tracking of hazmats

and other and other weapons/targetsweapons/targets

System Security against System Security against terrorist interferenceterrorist interference

What is Being Done Today: What is Being Done Today: FundingFunding

Congressional Congressional Funding: Funding: $19.8 billion in FY03$19.8 billion in FY03 $31.2 billion in FY04$31.2 billion in FY04 $40.2 billion in FY05 $40.2 billion in FY05

Is this enough? If not, Is this enough? If not, from where will the from where will the money come?money come?

0

5

10

15

20

25

30

35

40

45

Fiscal Year

FY03

FY04

FY05

9/11 Commission Report: 9/11 Commission Report: Key FindingKey Finding

““Lack of Imagination” Lack of Imagination” by people and by people and organizations with organizations with responsibility for responsibility for public safety and public safety and securitysecurity

9/11 Commission Report Findings9/11 Commission Report Findings ““Fighting terrorism was not a high priority”Fighting terrorism was not a high priority” Capabilities of Intelligence, Defense and Capabilities of Intelligence, Defense and

other agencies were constrained by other agencies were constrained by antiquated and ineffective policies and antiquated and ineffective policies and processesprocesses

Inefficient management of government: Inefficient management of government: “The enemy made mistakes; our “The enemy made mistakes; our government wasn’t able to capitalize on government wasn’t able to capitalize on them.”them.”

9/11 Commission Report 9/11 Commission Report RecommendationsRecommendations

DHS should develop an integrated plan to DHS should develop an integrated plan to focus resources in a manner to best focus resources in a manner to best protect all the transportation modesprotect all the transportation modes

Seek improvements in technologies with Seek improvements in technologies with applications across transportation modesapplications across transportation modes

Standardize equipment, data, processesStandardize equipment, data, processes

Pending Congressional LegislationPending Congressional Legislation

9/11 Commission 9/11 Commission Report Report Implementation Act of Implementation Act of 20042004

Pending Congressional LegislationPending Congressional Legislation Fifty other bills related to “Transportation Fifty other bills related to “Transportation

Security” including:Security” including: Intermodal Shipping Container Security Act Intermodal Shipping Container Security Act

(S.2297.IS)(S.2297.IS) Rail Security Act of 2004 (S.2273.RS)Rail Security Act of 2004 (S.2273.RS) Safe TRAINS Act (H.R.4361.IH)Safe TRAINS Act (H.R.4361.IH) Rail Transit Security and Safety Act of 2004 Rail Transit Security and Safety Act of 2004

(H.R.4476.IH)(H.R.4476.IH) Public Transportation Terrorism Prevention Public Transportation Terrorism Prevention

Act of 2004 (S.2453.RS/H.5082)Act of 2004 (S.2453.RS/H.5082)

Emerging Issue #1:Emerging Issue #1:Over-Reliance on Technology Over-Reliance on Technology

Technology can only go so far; must Technology can only go so far; must address Processaddress Process

Process improvements include:Process improvements include: ““Layered” security throughout the systemLayered” security throughout the system Employee duties adapted for securityEmployee duties adapted for security Companies securing their supply chainsCompanies securing their supply chains Interoperability of systemsInteroperability of systems

Standards, protocols, interfaces are very Standards, protocols, interfaces are very critical!critical!

Emerging Issue #2:Emerging Issue #2:Increasing Reluctance to Share Information Increasing Reluctance to Share Information

and Best Practicesand Best Practices

Notion that security-related projects must be Notion that security-related projects must be kept secret, even among peers and colleagues, kept secret, even among peers and colleagues, for fear of information falling into the “wrong for fear of information falling into the “wrong hands” (or those of a competitor)hands” (or those of a competitor)

Need to Need to find a wayfind a way to exchange knowledge or to exchange knowledge or we risk unnecessary duplication of effort--or we risk unnecessary duplication of effort--or worseworse

To “win the war” we need to find ways to To “win the war” we need to find ways to communicate with each other on the “battlefield”!communicate with each other on the “battlefield”!

Emerging Issue #3:Emerging Issue #3:Who’s paying for all this security?Who’s paying for all this security?

Partnership between government, private sector Partnership between government, private sector and usersand users

Contributors and ReviewersContributors and Reviewers

Donald Estes, Sonalysts, Inc.Donald Estes, Sonalysts, Inc. Ric Finn, Sonalysts, Inc.Ric Finn, Sonalysts, Inc. George Kovatch, Kovatch ConsultingGeorge Kovatch, Kovatch Consulting Ronald S. Libengood, CPP, Securacomm, Inc.Ronald S. Libengood, CPP, Securacomm, Inc. Tom McPherson, Sonalysts, Inc.Tom McPherson, Sonalysts, Inc. William C. Nicholson, Widener University School William C. Nicholson, Widener University School

of Law of Law Pete Sklannik, Jr., Chief Operating Officer, Pete Sklannik, Jr., Chief Operating Officer,

Trinity Railway ExpressTrinity Railway Express