Critical infrastructure: homeland security and emergency preparedness

347 Pages·2019·14.865 MB·English

by  McDougall, Allan, Radvanovsky, Robert

Critical Infrastructure
Homeland Security and
Emergency Preparedness
Fourth Edition
http://taylorandfrancis.com
Critical Infrastructure
Homeland Security and
Emergency Preparedness
Fourth Edition
Robert Radvanovsky
Allan McDougall
CRC Press
Taylor & Francis Group
6000 Broken Sound Parkway NW, Suite 300
Boca Raton, FL 33487-2742
© 2019 by Taylor & Francis Group, LLC
CRC Press is an imprint of Taylor & Francis Group, an Informa business
No claim to original U.S. Government works
Printed on acid-free paper
International Standard Book Number-13: 978-1-138-05779-1 (Hardback)
This book contains information obtained from authentic and highly regarded sources. Reasonable efforts
have been made to publish reliable data and information, but the author and publisher cannot assume
responsibility for the validity of all materials or the consequences of their use. The authors and publishers
have attempted to trace the copyright holders of all material reproduced in this publication and apologize
to copyright holders if permission to publish in this form has not been obtained. If any copyright material
has not been acknowledged please write and let us know so we may rectify in any future reprint.
Except as permitted under U.S. Copyright Law, no part of this book may be reprinted, reproduced, trans-
mitted, or utilized in any form by any electronic, mechanical, or other means, now known or hereafter
invented, including photocopying, microfilming, and recording, or in any information storage or retrieval
system, without written permission from the publishers.
For permission to photocopy or use material electronically from this work, please access www.copyright
.com (http://www.copyright.com/) or contact the Copyright Clearance Center, Inc. (CCC), 222 Rosewood
Drive, Danvers, MA 01923, 978-750-8400. CCC is a not-for-profit organization that provides licenses and
registration for a variety of users. For organizations that have been granted a photocopy license by the
CCC, a separate system of payment has been arranged.
Trademark Notice: Product or corporate names may be trademarks or registered trademarks, and are
used only for identification and explanation without intent to infringe.
Library of Congress Cataloging-in-Publication Data
Names: Radvanovsky, Robert, author. | McDougall, Allan, author.
Title: Critical infrastructure : homeland security and emergency preparedness /
Robert Radvanovsky and Allan McDougall.
Description: Fourth edition. | Boca Raton, FL : CRC Press/Taylor & Francis Group,
[2019] | Includes bibliographical references and index.
Identifiers: LCCN 2018018467| ISBN 9781138057791 (hardback : alk. paper) |
ISBN 9781315164687 (ebook)
Subjects: LCSH: Civil defense--United States. | War damage, Industrial--United States. |
Emergency management--United States.
Classification: LCC UA927 .R34 2019 | DDC 363.34/70973--dc23
LC record available at https://lccn.loc.gov/2018018467
Visit the Taylor & Francis Web site at
http://www.taylorandfrancis.com
and the CRC Press Web site at
http://www.crcpress.com
From Bob
This book is dedicated to my loving wife, Tammy, who has always supported
and been patient with me, especially while this book was being written.
From Allan
This work is dedicated to my wife, Angela, and those who make great
efforts to continuously improve the overall critical infrastructure
protection domain. My particular thanks to Martin and those who
work across the academic, professional, and practitioner communities
to keep our communities and societies safe and secure.
http://taylorandfrancis.com
Contents
Preface ...............................................................................................................xv
Authors’ Notes .................................................................................................xvii
Synopsis ............................................................................................................xix
Acknowledgments ..........................................................................................xxiii
Authors ............................................................................................................xxv
1 Introduction to Critical Infrastructure Assurance and Protection ........1
1.1 Introduction ......................................................................................1
1.2 What Is Critical Infrastructure? ........................................................3
1.3 What Is the Private Sector? ................................................................4
1.4 What Is the Public Sector? .................................................................5
1.5 What Is CIP? .....................................................................................7
1.6 What Is CIA? ....................................................................................8
1.7 What Are Public-Private Partnerships? ............................................11
1.8 Critical Infrastructure Functions .....................................................11
1.9 Evolution of Critical Infrastructure .................................................12
2 Demand, Capacity, Fragility, and the Emergence of Networks ............15
2.1 Introduction ....................................................................................15
2.2 What Are We Trying to Protect? The Concept of Capacity .............15
2.3 Demand: The Reason for Capacity ..................................................16
2.3.1 The Concept of Performance ...............................................16
2.3.2 Local Impact and the Influence on Capacity .......................17
2.3.3 Results of a Local Impact in the Immediate Sense ..............18
2.3.4 Relevance to CIP ................................................................20
2.3.5 Push, Pull, Lag, and Delay in the Network Environment ...20
2.4 At the Regional (Small System) Level ..............................................21
2.4.1 Influence at the Small System Level ....................................21
2.4.2 Current Efforts and Research ..............................................22
2.4.3 The Interdependency Hydra ................................................23
2.4.4 Network Fragmentation and Dissolution ............................23
vii
viii ◾ Contents
2.5 Cyberterrorism ................................................................................24
2.5.1 The Pendulum of Convergence ...........................................26
2.5.2 Convergence and the Understanding of Threat ...................27
2.5.3 Setting the Stage for Fragility..............................................29
2.5.4 Fragility and Destabilization of Systems .............................31
2.5.5 Fragmentation and Dissolution of Networks .......................31
2.6 Dissolution and Convergence: An Emerging Risk ...........................32
2.6.1 Convergence, Network Expansion, Open Architecture,
and Common Criteria .........................................................33
2.7 Marking the Journey .......................................................................33
2.7.1 Overview ...........................................................................34
2.7.2 Legislation: 107th Congress (2001–2002) ..........................34
2.7.3 Legislation: 108th Congress to 109th Congress ..................35
2.7.4 The State Today: A Recap ...................................................35
2.7.5 Research and Understanding ..............................................36
2.8 Authors’ Notes .................................................................................36
3 Beyond National Frameworks ..............................................................37
3.1 Introduction ....................................................................................37
3.2 Meeting the Dragons on the Map ...................................................37
3.3 Who Owns the Treasure? ................................................................41
3.4 What Value? ...................................................................................42
3.5 Target Audiences .............................................................................45
3.6 Expanding Beyond the Traditional Response ..................................48
3.7 Areas of Potential Risk or Concern ..................................................56
4 Public-Private Partnerships ..................................................................59
4.1 Introduction ....................................................................................59
4.2 What Is a Public-Private Partnership (P3)? ......................................59
4.3 The P3 Spectrum .............................................................................60
4.4 Establishment of New Capacity .......................................................62
4.5 Maintenance of Existing Capacity ..................................................64
4.6 The Coming Financial Crisis ...........................................................65
4.7 Other Forms of Public-Private Cooperation and the Erosion
of Governance .................................................................................67
4.8 Balancing Points ..............................................................................69
4.9 Authors’ Notes .................................................................................71
5 The Reinvention of Information Sharing and Intelligence...................73
5.1 Introduction ....................................................................................73
5.2 Data vs. Information vs. Intelligence ...............................................74
5.3 The Importance of Background to Context .....................................75
5.4 Context Affecting Sensitivity ...........................................................78
5.5 Enter the Cloud ...............................................................................82
Contents ◾ ix
5.6 The Cloud as an Amplifier ..............................................................84
5.7 Clouds and Concealed Conduits .....................................................85
5.8 Linking the Trusted Computing Base and User Communities ........87
5.9 Barriers to Information Sharing ......................................................90
5.10 The Rise of Open Sources ................................................................91
5.11 Open-Source Information and Intelligence .....................................92
5.12 An Approach to Information Sharing—The Consequence-Benefit
Ratio ................................................................................................93
6 Critical Infrastructure Information .....................................................95
6.1 Introduction ....................................................................................95
6.2 What Is Critical Infrastructure Information (CII)? .........................96
6.3 How Does the Government Interpret CII? ......................................98
6.4 Exemption 3 of the FOIA ..............................................................100
6.5 Exemption 4 of the FOIA ..............................................................102
6.6 Section 214 of the Homeland Security Act ....................................102
6.7 Enforcement of Section 214 of the Homeland Security Act ...........105
6.8 What Does “Sensitive but Unclassified” Mean? .............................106
6.9 Information Handling Procedures .................................................108
6.10 Freedom of Information Act ..........................................................109
6.11 Need to Know ...............................................................................109
6.12 “For Official Use Only” .................................................................111
6.13 Enforcement of FOUO Information..............................................112
6.14 Reviewing Web Site Content .........................................................112
6.15 Export-Controlled Information .....................................................116
6.16 Enforcement of Export-Controlled Information ............................117
6.17 Within the Contracting Process ....................................................117
6.18 Enforcement of Source Selection Data ...........................................118
6.19 Privacy Information .......................................................................119
6.20 Enforcement of Privacy Information .............................................120
6.21 Unclassified Controlled Nuclear Information ................................121
6.22 Enforcement of UCNI ...................................................................122
6.23 Critical Energy Infrastructure Information ...................................122
6.24 Enforcement of CEII .....................................................................123
6.25 Controlled Unclassified Information .............................................123
6.26 Lessons Learned Programs .............................................................125
6.27 Infragard .......................................................................................125
6.28 Sensitive Unclassified Nonsafeguards Information (SUNSI) .........126
6.29 Safeguards Information (SGI) .......................................................127
6.30 Authors’ Notes ...............................................................................127
7 Supervisory Control and Data Acquisition ........................................129
7.1 Introduction ..................................................................................129
7.2 What Are Control Systems? ...........................................................129