Securing the CNI

1
Securing the CNI

• Centre for the Protection of National
  Infrastructure

Phil H Information Security
2
Role of the CPNI

• The Centre for the Protection of National
  Infrastructure is the recognised UK government
  authority for protective security advice to the
  National Infrastructure.
• CPNI protects national security through
• Minimising risk to the National Infrastructure
  by
• Delivering authoritative advice to
• Reduce the vulnerability of the National
  Infrastructure to terrorist and
  other threats.

3
What is Critical in the National Infrastructure?

• The National Infrastructure delivers essential
  services
• 9 sectors
• Not everything is critical
• Each sector is different

FOOD
FINANCE
EMERGENCY SERVICES
GOVERNMENT
COMMUNCIATIONS
TRANSPORT
ENERGY
HEALTH
WATER
4
CPNI Remit
Integrated advice
PREVENT
PHYSICAL SECURITY
PURSUE
to reduce vulnerability in the national
infrastructure
CONTEST STRATEGY
ELECTRONIC SECURITY
PROTECT
PREPARE
PERSONNEL SECURITY BEHAVIOURAL ASSESSMENT
5
What Needs Protecting Most?
OVERSEAS
Crowded Places
People
Transport
CRITICAL NATIONAL INFRASTRUCTURE
Hazardous sites and substances
BORDERS
6
Protecting the CNI Our Approach

• Impact Driven
• Vulnerability Focused
• Threat Informed
• Underpinned by
• Tripartite Relationships
• International Relationships
• RD Programme

7
Advice Delivery

• Inputs
• Contest
• National Risk Assessment
• IA Strategy
• Knowledge
• Threats
• Sectors
• Technology
• People
• Criticalities
• Vulnerabilities

Processes Prioritisation of resources Advice
delivery plans CNI Self assessment Requirement
setting RD Programme Training Information sharing
Outputs Focused consultancy Better products
services Better skilled advisers Performance
management
Outcomes Reduced vulnerability in CNI Shaped
environment
External factors Terrorism Espionage
8
Functional Architecture
Knowledge
Strategy and Support
Physical Security
Information Security
Personnel security
Finance Transport
Telecomms Health Emergency Services
Energy Water Food
N. Ireland
ADVICE DELIVERY
Government
NaCTSO
9
Advice Delivery Mechanisms

• (Free) Consultancy
• One to many information exchanges
• Training
• RESTRICTED extranet for trusted contacts
• www.cpni.gov.uk

10
(No Transcript)
11
Extranet
12
CPNI Website
www.cpni.gov.uk
13
Thank you

• Questions?

Phil Point of Contact - Information Security
Providers