CIP
Critical Infrastructure Protection in the Communications Industry Don Carson ESRI - Professional Services Division
What is Critical Infrastructure Protection? (CIP) • CIP has been around a long time • More focused awareness driven by: – Terrorist Events on 9/11 – Presidential Directive in May 1998 • Part of it covers physical and cyber protection of the Nation’s Telecommunications Sector • Established various funds & grants
– U.S. Dept of Homeland Security (DHS) programs
• Telecommunications Industry Association (TIA) www.tiaonline.org
Who is Involved in CIP? • Cross cutting initiative: – – – –
12 federal agencies All 50 states Every major city Most major industry segments
Why Do I Want to Talk About CIP? • CIP has great acronyms: – – – –
• • •
CIP - Critical Infrastructure Protection COP - Common Operating Picture C2 - Command & Control SA - Situational Awareness
Recent experiences in the last year Carriers are starting to implement CIP programs Leveraging your existing GIS investment
Communications Industry & CIP • Most carriers are traditionally more reactive than proactive • There are a number of reasons why…
Traditional CIP Call Before Dig • GIS Benefits: – – – –
Automated CBUD ticket processing Address geocoding Reduce ticket processing Only performing locates when really required
Traditional CIP Network Management • GIS Benefits: – –
Provides a geographical view of the logical network Valuable during outage management / emergency restoration conditions
CIP Areas Telecom View Key CIP Areas: • Risk Assessment & Planning • Mitigation • Preparedness • Response • Recovery GIS has a role in each of these areas…
Risk Assessment & Planning ¾ Activities necessary to analyze and document the possibility of an emergency or disaster, and the potential consequences or impacts upon your communications network and employees. • Hazards - What network or other resources at risk? • Values - What is the importance and significance if the network is damaged or destroyed? • Probability of Occurrence - What are the chances that the event may occur resulting in damage or loss?
Risk Assessment & Planning Hazard = Areas Subject to Flooding
Risk Assessment & Planning Value = Proximity to Critical Facilities
Risk Assessment & Planning Values and Relationship to Hazard (Risk Area)
Mitigation
¾ Activities that actually eliminate or reduce the probability or consequences of a disaster.
Mitigation Identify areas that not subject to flooding Low Risk Network Locations
Mitigation Identify network facilities in earthquakes areas
Mitigation Identify network facilities in hurricane areas
Mitigation Identify network facilities in hurricane areas
Mitigation Identify network facilities in hurricane areas
Preparedness
¾ A case when mitigation measures cannot prevent disasters. ¾ Carriers develop contingency plans to minimize disaster damage.
Preparedness Hurricane Event • Identify storm path • Identify probable affected areas of the network • Determine proximity of field personnel and restoration equipment to storm path • Position field personnel to a strategic area based on proximity to affect areas
Response
¾ These activities are designed to provide restoration of the network after an emergency or disaster.
Response Train Derailment - Chemical Spill Event Norfolk Train Derailment Graniteville, South Carolina January 6, 2005
Central Office Graniteville, SC
• Identify incident location relative to the network • Identify probable affected areas of the network – plume analysis • Determine proximity of employees at risk • Position field / HAZMAT personnel to strategic location based on proximity to affected areas
Approximately 200 yards
Chemical Spill Site
Common Operating Picture Real-time Situational Awareness
Security Event anyone…
Site Weather Outage Please don’t tell Data This is not sophisticated
This is not sophisticated GIS
Emergency Alerts
Network Restoration
Common Operating Picture Real-time Situational Awareness
Common Operating Picture Real-time Situational Awareness
Network Restoration
Common Operating Picture Real-time Situational Awareness
Security Event
Common Operating Picture Real-time Situational Awareness
Site Outage
Wrap Up GIS Benefits: Key CIP Areas: • Risk Assessment & Planning • Mitigation • Preparedness • Response • Recovery
• Assess risks to network infrastructure. • Establish specific mitigation/protection plans. • Determine the scale of an emergency. • Identify and evacuate at-risk employees. • Expedite and direct network restoration efforts. • Provide accurate damage assessment. • Prioritize recovery efforts.
• Your customers depend on you to be prepared • Not if… BUT When….
Food for Thought…
Ask yourself… Does your company effectively respond to emergency events? Tell your management about how GIS can add value is this strategic area…
Questions?
What is Critical Infrastructure Protection? (CIP) • CIP has been around a long time • More focused awareness driven by: – Terrorist Events on 9/11 – Presidential Directive in May 1998 • Part of it covers physical and cyber protection of the Nation’s Telecommunications Sector • Established various funds & grants
– U.S. Dept of Homeland Security (DHS) programs
• Telecommunications Industry Association (TIA) www.tiaonline.org
Who is Involved in CIP? • Cross cutting initiative: – – – –
12 federal agencies All 50 states Every major city Most major industry segments
Why Do I Want to Talk About CIP? • CIP has great acronyms: – – – –
• • •
CIP - Critical Infrastructure Protection COP - Common Operating Picture C2 - Command & Control SA - Situational Awareness
Recent experiences in the last year Carriers are starting to implement CIP programs Leveraging your existing GIS investment
Communications Industry & CIP • Most carriers are traditionally more reactive than proactive • There are a number of reasons why…
Traditional CIP Call Before Dig • GIS Benefits: – – – –
Automated CBUD ticket processing Address geocoding Reduce ticket processing Only performing locates when really required
Traditional CIP Network Management • GIS Benefits: – –
Provides a geographical view of the logical network Valuable during outage management / emergency restoration conditions
CIP Areas Telecom View Key CIP Areas: • Risk Assessment & Planning • Mitigation • Preparedness • Response • Recovery GIS has a role in each of these areas…
Risk Assessment & Planning ¾ Activities necessary to analyze and document the possibility of an emergency or disaster, and the potential consequences or impacts upon your communications network and employees. • Hazards - What network or other resources at risk? • Values - What is the importance and significance if the network is damaged or destroyed? • Probability of Occurrence - What are the chances that the event may occur resulting in damage or loss?
Risk Assessment & Planning Hazard = Areas Subject to Flooding
Risk Assessment & Planning Value = Proximity to Critical Facilities
Risk Assessment & Planning Values and Relationship to Hazard (Risk Area)
Mitigation
¾ Activities that actually eliminate or reduce the probability or consequences of a disaster.
Mitigation Identify areas that not subject to flooding Low Risk Network Locations
Mitigation Identify network facilities in earthquakes areas
Mitigation Identify network facilities in hurricane areas
Mitigation Identify network facilities in hurricane areas
Mitigation Identify network facilities in hurricane areas
Preparedness
¾ A case when mitigation measures cannot prevent disasters. ¾ Carriers develop contingency plans to minimize disaster damage.
Preparedness Hurricane Event • Identify storm path • Identify probable affected areas of the network • Determine proximity of field personnel and restoration equipment to storm path • Position field personnel to a strategic area based on proximity to affect areas
Response
¾ These activities are designed to provide restoration of the network after an emergency or disaster.
Response Train Derailment - Chemical Spill Event Norfolk Train Derailment Graniteville, South Carolina January 6, 2005
Central Office Graniteville, SC
• Identify incident location relative to the network • Identify probable affected areas of the network – plume analysis • Determine proximity of employees at risk • Position field / HAZMAT personnel to strategic location based on proximity to affected areas
Approximately 200 yards
Chemical Spill Site
Common Operating Picture Real-time Situational Awareness
Security Event anyone…
Site Weather Outage Please don’t tell Data This is not sophisticated
This is not sophisticated GIS
Emergency Alerts
Network Restoration
Common Operating Picture Real-time Situational Awareness
Common Operating Picture Real-time Situational Awareness
Network Restoration
Common Operating Picture Real-time Situational Awareness
Security Event
Common Operating Picture Real-time Situational Awareness
Site Outage
Wrap Up GIS Benefits: Key CIP Areas: • Risk Assessment & Planning • Mitigation • Preparedness • Response • Recovery
• Assess risks to network infrastructure. • Establish specific mitigation/protection plans. • Determine the scale of an emergency. • Identify and evacuate at-risk employees. • Expedite and direct network restoration efforts. • Provide accurate damage assessment. • Prioritize recovery efforts.
• Your customers depend on you to be prepared • Not if… BUT When….
Food for Thought…
Ask yourself… Does your company effectively respond to emergency events? Tell your management about how GIS can add value is this strategic area…
Questions?
