Department of Energy

1
Department of Energy

• Critical Infrastructure Protection Program
• Focus Energy Infrastructure Assurance
• Ira Stern
• Critical Infrastructure Protection Program Office
• December 2001

2
DOE Critical Infrastructure Assurance Mission

• Work with state and local governments and
  industry to develop and implement infrastructure
  assurance plans
• Fulfill responsibilities as the lead federal
  agency for assuring the continuity and viability
  of the Nations critical electric, oil, and gas
  infrastructures
• Providethrough its National Laboratoriestechnolo
  gies, tools, and expertise to promote
  infrastructure assurance

3
DOE Critical Infrastructure Assurance Mission
(Contd)

• Work with infrastructure stakeholders to assess
  cyber and physical vulnerabilities of the energy
  sector
• Assist infrastructure stakeholders in
  identifying, understanding, and addressing
  infrastructure risks
• Assist in development of plans to mitigate
  significant vulnerabilities
• Work with state and local governments and
  industry to develop/enhance plans for response
  and reconstitution of essential capabilities and
  services

4
DOE Critical Infrastructure Assurance Mission
(Contd)

• Implement an infrastructure assurance awareness
  and education program
• Facilitate development of information and
  knowledge sharing mechanisms
• Provide necessary research and development and
  technical assistance
• Pursue international outreach and develop
  collaborative activities

5
Major Challenges

• Energy security challengesa new, dynamic world
• Impact of advanced technologies and Information
  Age
• Importance of infrastructure linkages and
  dependencies
• Widening universe of vulnerabilities and risks
• Need to understand forces at work, range of
  threats, vulnerabilities, and consequences
• Need to improve risk assessment approaches
• Provide assistance to states for homeland
  security responsibilities

6
Major Challenges

• Need for information sharing among and across
  stakeholders
• Need to address barriers to information sharing
• Must raise awareness and understanding of
  emerging security and reliability concerns
• Need to address what types of standards and
  incentives are necessary to help secure and
  assure infrastructure
• Identification of regulations and legislation
  that can impede infrastructure security or
  assurance
• Identification of regulatory and legislative
  needs for enhancement of infrastructure security
  and assurance
• Find ways to address global, cross-border
  infrastructure protection issues

7
Our Critical National Infrastructures Are
Mutually Dependent and Interconnected
Interdependencies refers to the physical,
cyber, logical, and geographic linkages among
critical infrastructures
8
Critical Infrastructure Protection

• DOE
• Critical Infrastructure Protection Initiatives

9
Energy Sector Awareness and Collaboration
Activities with Sector Coordinators

• National Petroleum Council (NPC)
• Co-Chaired NPC CIP Committee
• Providing broad technical assistance
• Four workshops
• Vulnerability assessment and information sharing
• Response and recovery
• RD needs
• Options for Information Sharing and Analysis
  Centers
• Assisted in developing sector action
  plan (Securing the Oil and Natural Gas Industries
  in the New Economy)

• North American Electric
• Reliability Council (NERC)
• Business case development
• Pilot project on indications and warning with
  National Infrastructure Protection Center
• Vulnerability assessments/studies
• Participating in CIP Working Group
• Providing broad technical assistance
• Assisted in developing sector
  action plan (An Approach
  to Action for the Electric
  Power Sector)

10
Regional Infrastructure Assurance Activities

• Chicago Metropolitan Area
• MOA signed in January 2000 between DOE/OCIP and
  Chicago Department of Environment
• Activity includes Commonwealth Edison, City, and
  surrounding 270 municipalities
• Assisting local governments in better
  understanding the threats to and vulnerabilities
  of critical infrastructures and facilities in the
  region
• Developed CIP Preparedness Guidelines for dealing
  with electric power outages
• Working with communities to apply guidelines
• Natural gas disruption guidelines being developed
• Helped to establish Critical Infrastructure Task
  Force in Chicago Metropolitan Area

11
Regional Infrastructure Assurance Activities
(Contd)

• Salt Lake City Winter Olympics
  and State of Utah
• Assisting Utah Olympic Public Safety Command and
  Division of Comprehensive Emergency Management
• Collaborative effort by regional gas/electric
  utilities, other infrastructures,
  local/county/state/federal agencies, local
  stakeholders
• Prepared regional Infrastructure Assurance
  Implementation Plan
• Developed and facilitated Black Ice
  Infrastructure Interdependencies Exercise (225
  participants/65 organizations)
• Helped stakeholders develop and implement an
  Action Plan to address infrastructure assurance
  needs
• Developed statewide guidelines for electric power
  disruptions held awareness workshops
• Worked with utilities in identifying
  interdependencies

12
Regional Infrastructure Assurance Activities
(Contd)

• California and West
• Worked with energy utilities to define regional
  planning and analysis needs for multiple
  contingency events involving interdependent
  infrastructures
• Prepared a legislative concept paper in
  collaboration with the California Energy
  Commission (CEC) to address infrastructure
  assurance needs
• Developed and facilitated interactive workshop
• Focused on enhancing preparedness for
  infrastructure disruptions
• Co-sponsored by DOE/OCIP and California Utility
  Emergency Association

13
Objectives of Technical Support Initiatives

• Work with infrastructure stakeholders to develop
  cost-effective technologies and methods that can
  be used to
• Increase understanding of physical and cyber
  disruptions (natural, accidental, deliberate) to
  the energy infrastructure
• Develop energy infrastructure assurance best
  practices through vulnerability and risk
  assessments
• Detect, reduce the impacts of, and improve the
  ability to recover from disruptive incidents
  within the energy infrastructure
• Develop and implement regional infrastructure
  assurance plans to help ensure disaster
  resistant communities

• Needed Technologies
• Databases
• Processes
• Methodologies
• Architectures
• Models and simulations
• Decision support systems
• Analytic tools
• Software
• Hardware

Coordination and partnership (e.g., with energy
industry, DOE Program Offices, interagency, state
and local governments, local responders, and
private sector)
14
Critical Infrastructure Protection

• Looking Toward the Future

15
Near-Term Objectives

• Work closely within DOE and collaborate with
  states and other stakeholders to develop and
  implement infrastructure assessment and assurance
  plans
• Assist states and localities to conduct
  infrastructure vulnerability and risk assessments
• Develop infrastructure security and assurance
  standards
• Help stakeholders develop information exchange
  mechanisms
• Build upon current regional infrastructure
  assurance activities and identify additional
  opportunities for collaboration in various
  regions of the country
• Develop greater understanding of unique energy
  infrastructure assurance needs

16
Near-Term Objectives (Contd)

• Work with other relevant federal agencies and
  industry to enhance infrastructure assurance
  programs
• Establish collaborative CIP activities with
  international partners
• Pursue appropriate RD initiatives
• Transfer vulnerability and risk assessment
  lessons and methods to states

17
For Further Information, Contact
Ira Stern U.S. Department of Energy 1000
Independence Avenue, GH060 Washington, DC
20585 2025867873 202-586- 7221 fax e-mail
ira.stern_at_hq.doe.gov