Homeland Security

Homeland 

Security 

CPM 2008 West 

(Contingency Planning and Management) 

NIPP, SSA, SCC, GCC, and HSIN: 

The New Language of Critical Infrastructure Protection 

Steven G. King 

US Department of Homeland Security 

May 2008



Background – Terrorist Attacks Targeting the United 

States 

‣ Predate 9/11 and include the first attack on the World Trade Center 

‣ PDD-63 was issued in May 1998 by President Clinton to address critical 

infrastructure vulnerabilities. Specifically, it established: 

• The National Infrastructure Protection Center 

• A National Counterterrorism Coordinator 

• Information Sharing & Analysis Centers 

• A National Infrastructure Assurance Council 

• A Critical Infrastructure Assurance Office 

‣ PDD-63 also laid out a framework for protecting 

infrastructure based on a strong partnership 

with the private sector 

WTC garage following 1993 bombing



Background – The September 11, 2001 Attacks 

‣ Added urgency to infrastructure protection efforts, leading to passage of 

The Homeland Security Act of 2002 and the creation of DHS 

‣ Homeland Security Presidential Directive (HSPD) – 7 was issued in Dec 03, 2003 

superseding PDD-63. This directive: 

• Served as a foundation for characterizing the 

17 critical infrastructure/key resource (CIKR) sectors 

• Requires development & implementation of a 

national plan for critical infrastructure protection 

• Requires the Federal government to work in 

partnership with State, local and private sector 

stakeholders 

• Established “Sector Specific Agencies” (SSAs), emphasizing 

their collaboration with Federal, State, local and private 

partners to facilitate undertaking vulnerability assessments, 

risk management strategies, and information sharing and 

analysis mechanisms to protect CIKR



The National Infrastructure Protection Plan 

Build a safer, more secure, and more resilient 

America by enhancing protection of the 

Nation’s critical infrastructure and key 

resources (CIKR) to prevent, deter, 

neutralize, or mitigate the effects of deliberate 

efforts by terrorists to destroy, incapacitate, or 

exploit them; and strengthening national 

preparedness, timely response, and rapid 

recovery in the event of an attack, natural 

disaster, or other emergency



Sector Partnership Model 

Critical infrastructure protection is the shared responsibility of the Federal, 

State, local, and tribal governments and the owners and operators of the 

Nation’s CIKR



Sector Coordinating Councils 

‣ Sector governance is assured through a Government Sector 

Coordinating Council (GCC) and a Private Sector Coordinating 

Council (SCC), with subcouncils chartered for specific issues 

‣ GCC membership typically includes: 

• DHS agencies 

• Other Federal departments and agencies 

• State agencies 

• Territorial, tribal, and local representatives, as appropriate 

‣ SCC membership includes: 

• Asset owners/operators 

• Trade associations


ecurity 



Sector Specialists 

‣ DHS designates a Sector Specialist with recognized 

authority and experience to support each CIKR sector 

‣ Sector Specialists fill numerous roles: 

• Serve as focal points of infrastructure expertise, 

knowledge, and analysis 

• Maintain operational awareness 

• Foster working level relationships with industry and 

Federal agencies 

• Protect proprietary and business sensitive data


ecurity 



Sector Specialist Contact Information 

• Banking and Finance: Casey Smoot 

(Casey.Smoot@dhs.gov) 

• Defense Industrial Base: Brian C. 

Scott (Brian.C.Scott@dhs.gov) 

• Energy: William Cummings 

(Bill.Cummins@dhs.gov) 

• Food and Agriculture: Lyle Jackson 

(Lyle.Jackson@dhs.gov) 

• Healthcare and Public Health: John 

Martin (John.D.Martin@DHS.gov) 

• Information Technology: Christina 

Watson 

(Christina.Watson@hq.dhs.gov) 

• Telecommunications: Christina Watson 

(Christina.Watson@hq.dhs.gov) 

• Transportation: Juan Figueroa 

(Juan.Figueroa@dhs.gov) 

• Waste and Water: John Laws 

(John.Laws2@dhs.gov) 

• Interdependencies/Nuclear/Electric: Mike 

Cohen (Michael.Cohen@dhs.gov) 

• Government Facilities: LaVerne Madison 

(LaVerne.Madison@dhs.gov) 

• Monuments and Icons: LaVerne Madison 

(LaVerne.Madison@dhs.gov) 

• Postal and Shipping: Daniel Shultz 

(Dan.Shultz@dhs.gov)



SSA Requirements under the NIPP 

‣ The SSA serves as the primary Federal entity responsible for coordinating 

the unified effort to protect against and mitigate the effects of natural or 

man-made events against CIKR sectors 

‣ SSAs lead the effort to develop National Risk Profiles encompassing 

all CI/KR sectors 

‣ The NIPP levies 150+ requirements upon the SSA 

NIPP Risk Management Framework



Sector Specific Plans 

‣ Detail the application of the NIPP risk 

management framework across each 

sector 

‣ Are tailored to address the unique 

characteristics and risk landscapes of 

each sector 

‣ Sector-Specific Agencies (SSAs) 

partnered with SCCs and GCCs to 

develop the Sector Specific Plans 

(SSPs)



Sector Specific Agency Executive Management Office 

(SSA EMO) 

SSA EMO core mission processes 

enable IP effectiveness through: 

‣ Systematic NIPP Implementation 

‣ Targeted and consistent messaging 

‣ Leveraging critical relationships 

‣ Broad and deep subject matter 

expertise used to facilitate 

implementation of CIKR protection 

strategies 

‣ Bureaucratic viability due to robust 

constituency 

‣ Demonstrable, outcome-oriented 

results



IP Organizational Chart 

Office of the Assistant Secretary for Infrastructure Protection 

Resource 

Management and 

Planning 

Chief of Staff 

Administration 

Planning & 

Programming 

Procurement 

Financial 

Management 

Office 

Management, 

Facilities & 


Human Capital 

& Professional 

Development 

IPExecSec 

Chemical Security 

Compliance 

Division 

Infrastructure 

Information 

Collection 

Division (IICD) 


Analysis & 

Strategy Division 

(IASD) 

Protective 

Security Division 

(PSD) 

Contingency 

Planning & Incident 

Management 

Division (CPIMD) 

Partnership & 

Outreach Division 

(POD) 

SSA Executive 

Management 

Office 

(SSA EMO) 

Programs and 

Development 

Branch 

Inspections & 

Training Branch 

Adjudications 

Branch 

Information 

Management 

Branch 

Mission Support 

Branch 

IICP Branch 

Geospatial 

Branch 

HITRAC 


Strategies Branch 

Risk Integration & 

Analysis Branch 



NISAC 

Research & 

Development 


Field Operations 

Branch 

Vulnerability 

Assessment 

Branch 

Protective Security 

Outcomes Branch 

Office for Bombing 

Prevention Branch 

Contingency 

Planning Branch 

Incident 

Management Branch 

Readiness 

Branch 

Support 

Services Branch 

NICC 

NIPP Program 

Mgt Branch 

PCII Program 

Branch 


Programs Branch 


Coordination & 


Interagency 


Committee PMO 

Chemical Branch 

Commercial 

Facilities Branch 

Dams Branch 

Emergency 

Services Branch 

Nuclear Branch



Sector Specific Agency Executive Management Office 

W. Craig Conklin 

Director 


Deputy Director 

Chemical 

Branch 

Amy 

Freireich 

Commercial 

Facilities 

Branch 

Dave 

Crafton 

Dams 

Branch 

Dr. Enrique 

Matheu 

Emergency 

Services 

Branch 

Kory Whalen 

Nuclear 

Branch 

Marc Brooks



Chemical Sector 

‣ An integral part of the US economy, converting raw 

materials into more than 70,000 diverse products, 

many of which are critical to the health and well 

being of the Nation’s citizenry, security, and 

economy 

‣ SSA EMO works closely with IP’s Chemical Security 

Compliance Division which is charged with 

overseeing the implementation of the Chemical 

Facilities Anti-Terrorism Standards (CFATS) 

‣ The Chemical SSP covers all facilities within this 

sector, regardless of whether they belong/fall under 

any regulatory program



Chemical Sector Segments 

‣ Basic Chemicals 

• Large volume production w/homogeneous 

specifications 

• e.g., Petrochemicals, inorganic chemicals 

(chlorine) 

‣ Specialty Chemicals 

• Differentiated products manufactured in low 

volumes (e.g., Adhesives and coatings) 

‣ Agricultural 

• Fertilizers, pesticides, and herbicides 

‣Consumer Products 

• Employing simple chemicals and formulated along “brand lines” 

• e.g., Soap, detergents, and bleaches 

‣Pharmaceutical 

• Prescription and over-the-counter drugs, and diagnostic substances


ecurity 



Example Program: Web-based Chemical 

Security Awareness Training 

‣ Voluntary web-based training program is an interactive 

initiative to increase security awareness in chemical facilities 

nationwide 

‣ Expected to reach about 400,000 employees directly 

involved in the manufacture, transportation, and storage of 

chemicals 

‣ Designed for all facility employees, not just those traditionally 

involved in security 

‣ Model applicable across other CIKR Sectors



Commercial Facilities Sector 

‣ Represents an enormous range of 

assets where large numbers of persons 

congregate to pursue business, conduct 

personal transactions or undertake 

recreational activities 

‣ Unique in that each owner/operator 

has distinct processes, assets and risk 

management approaches 

‣ It is critical that the CFS employ effective 

risk management programs that instill a 

positive sense of safety and security for the 

public as well as promote a favorable 

business environment



Commercial Facilities Subsectors 

‣ Sports Leagues 

‣ Entertainment/Media 

‣ Lodging 

‣ Public Assembly 

‣ Real Estate 

‣ Resorts 

‣ Retail 

‣ Outdoor Events


ecurity 



Example Program: NASCAR Mass 

Evacuation Template 

‣ Template created in partnership with NASCAR for 

evacuation, re-location or shelter in place response during 

NASCAR events 

‣ Includes participation from the private sector, Federal 

and State security officials; and county and local 

emergency responders (fire, EMS, police) 

‣ Provides consistent approach to security and safety 

‣ Can be replicated for other large-scale events



Dams Sector 

‣ Dams provide a wide range of economic, environmental, and social benefits, 

including hydroelectric power, river navigation, water management and supply, 

flood control, recreation, wildlife habitat, and waste management 

‣ Sector encompasses navigation locks, levees, mine tailing impoundments, and 

hydropower generation and control facilities 

‣ In a dam failure, the potential energy of the water stored is capable of causing 

massive immediate casualties, extensive property damage, severe long-term 

consequences due to loss of functions, and significant impacts to other sectors 

‣ Long-term disruption to the inland waterway navigation system by damage or 

malfunction of critical facilities could cause huge economic impacts



Dams Subsectors 

Current sector emphasis on development of four subsectors in recognition 

of the enormous scope and diversity of assets within this sector 

Levees 

Mine 

Tailings 

Locks 

Hydropower 

Facilities


ecurity 



Example Program: Pacific Northwest 

Region Pilot Study 

‣ The Northwest relies on hydropower dams for more than 

60% of its electricity 

‣ Partnership with Pacific Northwest Economic Region 

(PNWER) 

‣ Leverages Federal, State, local, and private-sector data 

resources to investigate infrastructure interdependencies and 

cascading effects along the Columbia River Basin



Emergency Services Sector (ESS) 

Oklahoma City Bombing - 1995 

‣ Encompasses the first-responder 

community and includes Federal, State, 

local, tribal, and private sector partners 

‣ Core capabilities of prevention, protection 

response and recovery 

• Federal Emergency Management Agency 

(FEMA) is a core DHS mission partner in 

this area although not part of the IP 

organization 

‣ The Emergency Management and Response 

Information Sharing and Analysis Center 

(EMR-ISAC) plays a key role within this 

sector



ESS Components 

‣ Law Enforcement 

‣ Firefighting 

‣ Search and Rescue 

‣ Urban Search and Rescue 

‣ Emergency Management 

‣ Emergency Medical Service 

‣ Special Weapons & Tactics/Tactical Operations 

‣ Explosive Ordnance Disposal 

‣ Hazardous Materials Response


ecurity 



Example Program: Best Practices Guide 

‣ Best Practices guidance is being developed to cover a wide 

range of issues that are of critical importance: 

• Incident management 

• Risk analysis 

• Exercises 

• Mutual aid 

• Other security related subject areas 

‣ Draws upon expertise from both the public and private sector 

in each of the nine disciplines included in the ESS 

‣ Positive cross-sector implications are significant



Nuclear Reactors, Materials & Waste Sector 

‣ This sector owns, oversees and operates nuclear power 

reactors, research and test reactors as well as 

associated uranium mines, enrichment facilities 

and disposal sites across the U.S. 

‣ 104 nuclear reactors provide 

approximately 20% of the nation’s 

electricity 

‣ There are 33 research and test reactors 

‣ There are 2,900 licensees of IAEA 

Category 1 and 2 sources 

accounting for approximately 

18,000 sources



Nuclear Subsectors 

‣ Nuclear power plants 

‣ Research and Test 

Reactors 

‣ Nuclear Fuel Cycle 

Facilities 

‣ Radioactive Source Production 

and Distribution Facilities 

‣ Nuclear Material Transport 

‣ Deactivated Nuclear Facilities 

‣ Radioactive Material Users 

‣ Radioactive Waste Management


ecurity 



Example Program: Prompt Notification 

‣ Protocol for quickly notifying critical infrastructure in all 

sectors in a given geographical area surrounding a critical 

infrastructure event (e.g., a terrorist attack) 

‣ Upon notification by the NICC of an incident, CIKR 

owners/operators can increase security posture to mitigate 

the effects of a geographically coordinated attack 

‣ 2007 pilot demonstrated successful coordination among 

DHS, NICC, NRC, and other, surrounding CIKR 

owners/operators 

‣ Positive cross-sector implications are significant


ecurity 



Critical Manufacturing Sector 

‣ HSPD-7 directs DHS to evaluate the need for 

coverage of additional CIKR categories 

‣ On March 3, 2008, the DHS Secretary 

authorized establishment of Critical 

Manufacturing as the 18th CIKR sector 

• Manufacturing characteristics, e.g., complex 

supply chains, create vulnerabilities 

• No other sector addresses manufacturing 

• Shares interdependencies with many 

sectors 

‣ SSA EMO will stand-up the new sector and 

integrate it into the NIPP structure


ecurity 



Critical Manufacturing Sector 

Critical manufacturing industries designated for the new sector: 

Manufacturing Industry Element 

Primary Metal Manufacturing • Iron and Steel Mills and Ferro Alloy Manufacturing 

• Alumina and Aluminum Production and Processing 

• Non-Ferrous Metal Production and Processing 

Machinery Manufacturing • Engine, Turbine, and Power Transmission 

Equipment Manufacturing 

Electrical Equipment, • Electrical Equipment Manufacturing 

Appliance, and Component 

Manufacturing 

Transportation Equipment • Motor Vehicle Manufacturing 

Manufacturing 

• Aerospace Product and Parts Manufacturing 

• Railroad Rolling Stock Manufacturing 

• Other Transportation Equipment Manufacturing


ecurity 



Interagency Security Committee (ISC) 

‣ After the Oklahoma City bombing, E.O. 12977 

established the ISC in 1995 

‣ ISC was transferred to DHS in 2003 and to the 

SSA EMO in 2008 

‣ Chaired by the Assistant Secretary for IP, the ISC 

is comprised of 21 primary members (including all 

cabinet-level departments) and 19 associate 

members 

‣ ISC’s mandate: to develop standards, policies, 

and best practices for enhancing the quality and 

effectiveness of physical security in nonmilitary 

Federal facilities


ecurity 



Homeland Security Information Network (HSIN) 

‣ A computer-based counterterrorism communications system 

connects all states and major urban areas: 

• Supports collection and dissemination of information 

between Federal, State, and local security partners 

• Helps provide situational awareness 

• Provides advanced analytic capabilities 

• Enables real time sharing of threat information 

‣ Secure system handles Sensitive-but-Unclassified info now but 

can support SECRET


ecurity 



Homeland Security Information Network (HSIN)


ecurity 



Emergency Response Information System (E-Plan) 

‣ Provides first responders with on-site hazardous chemical 

information for US facilities via the Internet 

‣ Available information includes: 

• Tier II reporting data 

• Maps of the area surrounding a facility 

• Chemical Hazards Response Information System data 

• Material Safety Data Sheets 

• Chemical profiles 

• Facility Emergency Response Plans, 

• Federal Area Contingency Plans 

• Chemical data from Risk Management Plans


ecurity 



Emergency Response Information System (E-Plan)


ecurity 



Integrated Common Analytical Viewer (iCAV) 

‣ Geospatial analytical tool unites Homeland Security mission 

partners through an integrated web-based architecture for 

information dissemination, analysis, and visualization 

‣ Imagery, data layers, and dynamic mission specific information 

feeds (e.g., threats, situation reports, weather, etc.) provide users 

with situational awareness with regard to threatened CIKR and 

population centers and response assets 

‣ Supports mission partners at all levels with an integrated 

geographic and common operating picture


ecurity 



Integrated Common Analytical Viewer (iCAV)


ecurity 



CIKR Private Sector Security Clearance Program 

‣ Sharing information with security partners is critical to DHS’s 

mission. While most information is unclassified, there are 

instances when the information being shared is classified 

‣ The Private Sector Security Clearance Program provides a 

process for private sector officials to be cleared for a Federal 

security clearance 

‣ Private sector officials must be nominated by a Sector 

Specialist or a Protective Security Advisor who determines the 

official’s “need to know”


ecurity 



CIKR Private Sector Security Clearance 

Program Process 

‣ Once a determination is made, the applicant 

will receive: 

• Questionnaire for National Security 

Positions; electronic version (eQIP) 

• Authorization Pertaining to Consumer 

Reports to the Fair Credit Reporting Act 

• FD-258 Applicant fingerprint cards 

‣ A background investigation and records will 

undergo adjudication to determine eligibility by 

DHS 

‣ Since 2004, hundreds of private sector officials 

across the sectors have been cleared to view 

SECRET level information



Questions 


Deputy Director, 

SSA Executive Management Office 

steven.king1@dhs.gov

Homeland Security

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?