Critical Infrastructure Protection and Risk Management covers the history of risk assessment, crtical infrastructure protection, and the various structures that make up the homeland security enterprise. The authors examine risk assessment in the public and private sectors, the evolution of laws and regulations, and the policy challenges facing the 16 critical infrastructure sectors. The book will take a comprehensive look at the issues surrounding risk assessment and the challenges facing decision makers who must make risk assessment choices.

Critical infrastructures are the backbone of modern, interconnected economies. The disruption of key systems and essential services - such as telecommunications, energy or water supply, transportation or finance - can cause substantial economic damage. This report looks at how to boost critical infrastructure resilience in a dynamic risk landscape, and discusses policy options and governance models to promote up-front resilience investments.

According to the Dept. of Homeland Security (DHS), there are thousands of facilities in the U.S. that if destroyed by a disaster could cause casualties, econ. losses, or disruptions to national security. DHS issued the Nat. Infrastructure Protection Plan (NIPP) in June 2006 to provide the approach for integrating the nation's critical infrastructure and key resources. This report studied DHS's Jan. 2009 revisions to the NIPP in light of a debate over whether DHS has emphasized protection rather than resilience. The report discusses: (1) how the 2009 NIPP changed compared to the 2006 NIPP; and (2) how DHS addressed resiliency as part of their planning efforts. Charts and tables. This is a print on demand edition of an important, hard-to-find report.

This book presents the latest trends in attacks and protection methods of Critical Infrastructures. It describes original research models and applied solutions for protecting major emerging threats in Critical Infrastructures and their underlying networks. It presents a number of emerging endeavors, from newly adopted technical expertise in industrial security to efficient modeling and implementation of attacks and relevant security measures in industrial control systems; including advancements in hardware and services security, interdependency networks, risk analysis, and control systems security along with their underlying protocols. Novel attacks against Critical Infrastructures (CI) demand novel security solutions. Simply adding more of what is done already (e.g. more thorough risk assessments, more expensive Intrusion Prevention/Detection Systems, more efficient firewalls, etc.) is simply not enough against threats and attacks that seem to have evolved beyond modern analyses and protection methods. The knowledge presented here will help Critical Infrastructure authorities, security officers, Industrial Control Systems (ICS) personnel and relevant researchers to (i) get acquainted with advancements in the field, (ii) integrate security research into their industrial or research work, (iii) evolve current practices in modeling and analyzing Critical Infrastructures, and (iv) moderate potential crises and emergencies influencing or emerging from Critical Infrastructures.

Security protections for critical infrastructure nodes are intended to minimize the risks resulting from an initiating event, whether it is an intentional malevolent act or a natural hazard. With an emphasis on protecting an infrastructure's ability to perform its mission or function, Critical Infrastructure System Security and Resiliency presents a practical methodology for developing an effective protection system that can either prevent undesired events or mitigate the consequences of such events. Developed at Sandia National Labs, the authors’ analytical approach and methodology enables decision-makers and security experts to perform and utilize risk assessments in a manner that extends beyond the theoretical to practical application. These protocols leverage expertise in modeling dependencies—optimizing system resiliency for effective physical protection system design and consequence mitigation. The book begins by focusing on the design of protection strategies to enhance the robustness of the infrastructure components. The authors present risk assessment tools and necessary metrics to offer guidance to decision-makers in applying sometimes limited resources to reduce risk and ensure operational resiliency. Our critical infrastructure is vast and made up of many component parts. In many cases, it may not be practical or affordable to secure every infrastructure node. For years, experts—as a part of the risk assessment process—have tried to better identify and distinguish higher from lower risks through risk segmentation. In the second section of the book, the authors present examples to distinguish between high and low risks and corresponding protection measures. In some cases, protection measures do not prevent undesired events from occurring. In others, protection of all infrastructure components is not feasible. As such, this section describes how to evaluate and design resilience in these unique scenarios to manage costs while most effectively ensuring infrastructure system protection. With insight from the authors’ decades of experience, this book provides a high-level, practical analytical framework that public and private sector owners and operators of critical infrastructure can use to better understand and evaluate infrastructure security strategies and policies. Strengthening the entire homeland security enterprise, the book presents a significant contribution to the science of critical infrastructure protection and resilience.

Critical infrastructure provides essential services to citizens. The mutual dependencies of services between systems form a complex “system of systems” with a large perturbation surface, prone to be damaged by natural and anthropic events. Their intrinsic and extrinsic vulnerabilities could be overcome by providing them adaptive properties to allow fast and effective recovery from loss of functionality. Resilience is thus the key issue, and its enhancement, at the systemic level, is a priority goal to be achieved. This volume reviews recent insights into the different domains (resilience-enhancing strategies, impact and threats knowledge, and dependency-related issues) and proposes new strategies for better critical infrastructure protection.

Critical Infrastructure Protection: Update to National Infrastructure Protection Plan Includes Increased Emphasis on Risk Management and Resilience