what is “national security”? no longer defined only by threat of arms it really is the economy...

What is “national What is “national security”?security”?

No longer defined only by threat of arms

It really is the economy

Infrastructure not controlled by the government

PresidentialDecision

Directive-63

May 1998

PresidentialDecision

Directive-63

May 1998

“Critical infrastructures are those physical and cyber-based systems essential to the minimum operations of the economy and government.”

“Critical infrastructures are those physical and cyber-based systems essential to the minimum operations of the economy and government.”

Critical InfrastructuresCritical Infrastructures

Critical InfrastructuresCritical Infrastructures

Interconnectivity

Interdependency

Cascading Impact

Pipeline disruption

Poweroutage

Submarine cable lost

Bomb threats in two buildings

Threat to water supply

Two bridges down

Oil refinery fire

Telephone service

disrupted

FBI phones jammed

911 unavailabl

e

Two regional

ISP’s out of service

What if…...What if…...

Cyber ThreatsCyber Threats

InsidersHackersVirus WritersCriminal GroupsTerroristsForeign Intelligence ServicesInformation Warfare

The QuandaryThe Quandary

At the outset, intrusions often defy categorization

We traditionally respond based on the nature of the threat

Criminal?Foreign intelligence?Warfare?

NIPCNIPC An interagency center Mission: detect, warn,

investigate, and respond to cyber intrusions

Training program for law enforcement

Clearinghouse for technological developments

24 hour / 7 day Watch and Warning

capacity

Information from … Information from …

Law Enforcement Community Intelligence CommunityDefense Community Private SectorForeign Liaison ServicesForeign Connectivity

The AnswerThe Answer

Public – Public Partnership

Public – Private Partnership

Other Government

Agencies

NIPC

SectorLead Agencies

Federal, State, & Local

Law Enforcement

InfrastructureOwners & Operators

IntelligenceCommunity

Department ofDefense

Warnings

Threats & Incidents

Internationalentities

Emergency Responders

INFORMATION FLOW

Post September 11Post September 11

Key AssetsHomeland SecurityPhysical Threat InformationUSA Patriot ActInformation Sharing State and local government International

InfraGardInfraGard

Established in consultation with private industry

Designed to give companies a means to provide information in a confidential way

On January 5, 2001 the AG announced chapters were established in all 56 field offices

March 1, 2002 - 3,500 members

Mar 1, 2002

Locate Links SupportingLocate Links SupportingKey AssetsKey Assets

Key Asset

ISAC InitiativeISAC Initiative

Electric powerBanking and finance TelecommunicationsInformation technology Oil and gasWaterFood IndustryRailroadsChemical

Fire & Emergency Fire & Emergency MedicalMedicalServicesServices

Fire and Emergency Medical Service are both Critical Infrastructures and defenders of CI’s

Must protect Firefighter and EMS personnel, physical, cyber, and communication assets from attack

Must protect ability to conduct response and Consequence Management operations

Timely alerts, warnings and incident information are vital for preparing and appropriately responding to a threat or an attack

A government / industry partnership makes sense

Warning

Threat &Incidents

Close & Timely

Coordination

NIPCNIPC

USFA ( FEMA)Lead Agency

OGA’s

DoD

Law EnforcementFederal, State, and

Local

IntelligenceCommunity

ISACs

State Fire MarshalsFire & Emergency Medical

Service Department

EFSISAC

Information Sharing Information Sharing ConceptConcept

National Infrastructure Protection National Infrastructure Protection CenterCenter

JEH BuildingJEH BuildingRoom 5835Room 5835

935 Pennsylvania Avenue, NW935 Pennsylvania Avenue, NWWashington, DC 20535Washington, DC 20535

National Infrastructure Protection National Infrastructure Protection CenterCenter

JEH BuildingJEH BuildingRoom 5835Room 5835

935 Pennsylvania Avenue, NW935 Pennsylvania Avenue, NWWashington, DC 20535Washington, DC 20535

www.nipc.govwww.nipc.gov

e-mail: nipc.watch@fbi.gove-mail: nipc.watch@fbi.gov(202) 323-3205(202) 323-3205

www.nipc.govwww.nipc.gov

e-mail: nipc.watch@fbi.gove-mail: nipc.watch@fbi.gov(202) 323-3205(202) 323-3205