Category: Agency News

Biden Announces $1 Billion in Project Selections to Make Communities More Resilient to Climate Change and Natural Hazards

Agency News, Industry News
President Joseph R. Biden, Jr., Department of Homeland Security Secretary Alejandro Mayorkas and FEMA Administrator Deanne Criswell today announced the 656 project selections for $1 billion in climate resilience funding as part of his Investing in America agenda. The selections through the Building Resilient Infrastructure and Communities program will help state, Tribal, local and territorial governments address current and future risks from natural disasters including extreme heat, wildfires, drought, hurricanes, earthquakes and increased flooding.
“Every American community faces risks from extreme weather, and the DHS workforce and our partners across the Administration will always be there for communities in their time of need,” said Secretary of Homeland Security Alejandro N. Mayorkas. “Investing in preparedness and resilience today can help keep our country safe tomorrow. Building Resilient Infrastructure and Communities program grants are a lifeline for communities across the country, funding projects big and small -- from major flood mitigation projects to shaded bus shelters. The impact of these projects will ultimately be measured in lives saved and disasters averted.”
“We’ve already seen an unprecedented level of extreme weather events this season, and with more expected on the way, we’re encouraged to see increased interest in communities applying for FEMA’s BRIC program,” said FEMA Administrator Deanne Criswell. “Thanks to extra funding from President Biden’s Bipartisan Infrastructure Law, FEMA is now better situated to help communities, especially those that are disadvantaged and disproportionately impacted by climate change, invest in resilience. FEMA will remain focused on getting these critical infrastructure dollars to the communities that need it the most.”
This effort highlights the importance of FEMA’s continued commitment to putting “people first” and helping communities, families, and businesses build climate resilience. It also aligns with the 2024 FEMA Year of Resilience theme to build capacity to withstand tomorrow’s hazards.
To strengthen America’s climate resilience, President Biden secured more than $50 billion for climate resilience and adaptation through the Bipartisan Infrastructure Law and Inflation Reduction Act and established a National Climate Resilience Framework, which is advancing locally tailored, community-driven climate resilience strategies. President Biden’s Bipartisan Infrastructure Law contributed approximately $398 million to today’s announcement. Overall, the President’s Investing in America agenda provides FEMA nearly $7 billion to help communities proactively reduce their vulnerability to climate-fueled events and natural hazards.
Of the approximately $674 million in 56 national competition selections, more than half of the selections use nature-based solutions and other natural ways to combat climate change, restore and protect wetlands and to harness nature to enhance climate resilience. FEMA announced this funding opportunity in October 2023 alongside an $800 million Flood Mitigation Assistance opportunity. Selections for Flood Mitigation Assistance will be made later this year.
This year’s selections cover a variety of natural hazards, including extreme heat, flooding and earthquakes. The top three funded project types are:
- Flood control for $395 million across 28 projects, designed to eliminate or reduce flood damage;
- Utility and infrastructure protection for $237 million across 30 projects, like elevating pumping stations, enhancing power poles, strengthening water towers and floodproofing utility plants;
- Building code-related projects for $55 million across 129 projects for enforcement and adoption of more modern, hazard-resistant building codes. This is the greatest number of projects FEMA has ever selected for building code-related activities in a grant cycle. These funds were reserved as a non-competitive set-aside for states, Tribes and territories, resulting in a 180% increase in requests for adoption and enforcement funding.
Leave a comment

Critical infrastructure: Blueprint for protecting EU citizens and the internal market

Agency News, Industry News
Because disruptions to critical infrastructure may have repercussions in many EU member states, the Council today adopted a recommendation on a Blueprint to coordinate a response at EU level to disruptions to critical infrastructure with significant cross-border relevance.
The recommendation puts in place an EU Critical Infrastructure Blueprint. The objective of the Blueprint is: to promote shared situational awareness of the origin and consequences of an incident, to reinforce the coordination of public communications and to strengthen an effective response.
The Blueprint recommends several actions such as information sharing, coordination with other EU crisis and emergency mechanisms, exchanges on public communication approaches, the preparation of incident reports and technical support provided by other member states or relevant EU institutions to the affected member states.
Specifically, when the member states affected by a critical infrastructure incident with significant cross-border relevance activate this Blueprint, they are recommended to share with the rotating presidency of the Council and the European Commission relevant information on that incident.
According to the recommendation, a critical infrastructure incident with significant cross-border relevance takes place when an incident involving critical infrastructure:
- significantly disrupts the provision of essential services, as assessed by six or more affected member states
- has a significant disruptive effect on the provision of essential services by a critical entity of particular European significance
- significantly disrupts the provision of essential services to or in two or more member states and requires, in agreement with the affected countries, a response at EU level
Next steps
The recommendation encourages all relevant actors to practise and test the functioning of the EU Critical Infrastructure Blueprint at national, regional and EU level.
The Commission will organise the exercise at EU level not later than 18 months after the adoption of the recommendation.
Background
As of 18 October 2024, the resilience of critical entities (CER) directive will apply throughout the EU. Its aim is to reduce the vulnerabilities and strengthen the resilience of critical entities. Critical entities are entities providing essential services in sectors such as transport, energy and health that are crucial for the maintenance of vital societal functions, economic activities, public health and safety, and the environment.
The directive will oblige member states to put in place a national strategy to enhance the resilience of critical entities, carry out risk assessments and identify those critical entities that provide essential services. Critical entities will need to identify the relevant risks that may significantly disrupt the provision of essential services, take appropriate measures to ensure their resilience and notify the competent authorities of any disruptive incidents.
In the aftermath of the Nord Stream pipeline attack, and complementing the CER directive, the Council adopted a recommendation in December 2022 on a Union-wide coordinated approach to strengthen the resilience of critical infrastructure, which invited the European Commission to table a draft for a blueprint to coordinate an EU-level response to disruptions of critical infrastructure with significant cross-border relevance.
Leave a comment

EPA Outlines Enforcement Measures to Help Prevent Cybersecurity Attacks and Protect the Nation’s Drinking Water

Agency News, Industry News, Water sector
The U.S. Environmental Protection Agency issued an enforcement alert outlining the urgent cybersecurity threats and vulnerabilities to community drinking water systems and the steps these systems need to take to comply with the Safe Drinking Water Act. The alert is part of a government-wide effort – led by the National Security Council and the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency – to reduce the nation’s infrastructure and cybersecurity vulnerabilities. EPA is issuing this alert because threats to, and attacks on, the nation’s water system have increased in frequency and severity to a point where additional action is critical.
“Protecting our nation’s drinking water is a cornerstone of EPA’s mission, and we are committed to using every tool, including our enforcement authorities, to ensure that our nation’s drinking water is protected from cyberattacks,” said EPA Deputy Administrator Janet McCabe. “EPA’s new enforcement alert is the latest step that the Biden-Harris Administration is taking to ensure communities understand the urgency and severity of cyberattacks and water systems are ready to address these serious threats to our nation’s public health.”
Recent EPA inspections have revealed that the majority of water systems inspected – over 70 percent – do not fully comply with requirements in the Safe Drinking Water Act and that some of those systems have critical cybersecurity vulnerabilities, such as default passwords that have not been updated and single logins that can easily be compromised. As EPA and its state and federal security and intelligence partners continue to identify vulnerabilities, informed by successful cyberattacks to water systems across the United States, the agency remains committed to working with state and sector organization partners to successfully protect drinking water for communities.
Today's alert emphasizes the importance of EPA’s ongoing inspection and enforcement activities under Safe Drinking Water Act section 1433. The agency will increase the number of planned inspections and, where appropriate, will take civil and criminal enforcement actions, including in response to a situation that may present an imminent and substantial endangerment. Inspections will ensure that water systems are meeting their requirements to regularly assess resilience vulnerabilities, including cybersecurity, and to develop emergency response plans. In addition, EPA, CISA, and the FBI strongly recommend system operators take steps outlined in Top Actions for Securing Water Systems:
- Reduce exposure to public-facing internet.
- Conduct regular cybersecurity assessments.
- Change default passwords immediately.
- Conduct an inventory of OT/IT assets.
- Develop and exercise cybersecurity incident response and recovery plans.
- Backup OT/IT systems.
- Reduce exposure to vulnerabilities.
- Conduct cybersecurity awareness training.
EPA Administrator Michael S. Regan and National Security Advisor Jake Sullivan also recently sent a letter to the nation’s governors on the urgency of the threats and the importance of collaboration across federal and state partners to develop comprehensive strategies to close gaps in cyber-resilience. Following the meeting, the National Security Council encouraged each state to prepare an action plan presenting the state’s strategy to mitigate the most significant cybersecurity vulnerabilities in the states’ water and wastewater systems by late June. EPA is also moving forward with the Water Sector Coordinating Council and Water Government Coordinating Council to establish a Task Force to identify additional near-term actions and strategies to reduce the risk of water and wastewater systems nationwide to cyberattacks.
Leave a comment

20.3 million of EU Funds for major flood protection project in Eisenach

Agency News, Industry News, Water sector
EU funds will be used to build flood protection along the section of the river Hörsel which goes from Langensalzaer to Karolinenstraße. The project in this challenging section addresses existing infrastructure, traffic management, and urban integration. In addition, the region is also planning a new Karolinen Bridge.
Currently, flood protection measures near the "Auf dem Gries" industrial area, including the cycling path connection to Stedtfeld, are nearing completion.
Support of €16 million in previous programming period
Thanks to substantial financial support from the EU, the flood protection efforts in Eisenach have been progressing systematically since 2015. Initial measures began in the district of Stedtfeld, with completion achieved by 2017. Next, the flood dike near the Stedtfeld wastewater treatment plant was replaced.
Construction started in 2020 along the Hörsel river. Additionally, from August 2021 to August 2022, flood protection measures were implemented in the Hörschel district.
In 2023, an EU-funded project completed flood protection measures near the Opel factory in Eisenach.
These ambitious projects show the EU's commitment to boosting the region's flood resilience. They will protect residents and critical infrastructure.
Leave a comment

UK-led Joint Expeditionary Force rehearses undersea critical infrastructure protection from the North Atlantic to the Baltic Sea

Agency News, Industry News, Transport sector

The Joint Expeditionary Force (JEF) has begun a month-long Response Option  activity Nordic Warden this week for strengthening security of the critical undersea infrastructure in the area from the North Atlantic to the Baltic Sea.

JEF partner nations, including Lithuania, will train at  Nordic Warden exchanging information and provide a synchronized and coordinated response to ensure security of critical undersea infrastructure.

Operation activities will include reconnaissance flights and patrols in cooperation with the JEF air forces and navies. Partner nations will also enhance information exchange and coordination to ensure better situation awareness to ships in the JEF area of responsibility. Operation Nordic Warden is controlled from the JEF headquarters in Northwood, UK.

The Response Option activity Nordic Warden is similar to the first JEF activity conducted in December 2023 in response to the critical infrastructure damage in the Baltic and North Sea regions, namely, the damage to the cable connecting Sweden and Estonia, as well as the pipeline between Finland and Estonia, with real capabilities.

From Lithuania’s perspective, partnership in the JEF is one of the initial means of response to any crisis, including damage to undersea infrastructure. It enables resource sharing, intelligence exchange and joint solutions to mutual regional issues.

The JEF is led by the United Kingdom, its comprises maritime, air and land capabilities contributed by the ten Northern European partners: UK, Denmark, Estonia, Latvia, Lithuania, Netherlands, Norway, Sweden, Finland and Iceland.  Geographical proximity, shared sea borders and economy means cooperation on undersea infrastructure security is not just effective but also vital.

Leave a comment

Hybrid threats: Council paves the way for deploying Hybrid Rapid Response Teams

Agency News, Cyber Security CII sector, Industry News, Power/Energy/Oil & Gas sector, Space Sector, Telecomms sector, Transport sector
The European Council has approved the guiding framework for the practical establishment of the EU Hybrid Rapid Response Teams. This paves the way for such teams to be deployed upon request, to prepare against and counter hybrid threats and campaigns.
Hybrid Rapid Response Teams are one of the key instruments to support EU member states and partner countries in countering hybrid threats as part of the EU Hybrid Toolbox. As one of the key deliverables of the Strategic Compass, they will provide tailored and targeted short-term assistance to member states, Common Security and Defence Policy missions and operations, and partner countries in countering hybrid threats and campaigns.
In a deteriorating security environment, with increasing disinformation, cyber-attacks, attacks on critical infrastructure, instrumentalised migration, and election interference by malign actors, the Hybrid Rapid Response Teams will be an important new capability of the EU to counter new and emerging threats.
Leave a comment

ICYMI – FEMA Sign MOU to Strengthen Cooperation with Swedish Civil Contingencies Agency

Agency News, Industry News

FEMA signed a Memorandum of Understanding (MOU) with The Swedish Civil Contingencies Agency. This MOU formalizes our countries’ mutual commitment to advancing global resilience and sharing emergency management strategies. FEMA Administrator Deanne Criswell joined the Director General of the Swedish Civil Contingencies Agency Charlotte Petri Gornitzka and Sweden’s Minister of Civil Defence Carl-Oskar Bohlin at the Swedish embassy.

“2024 is FEMA’s Year of Resilience, an opportunity to highlight the important work we do to help communities mitigate risk, so they can respond faster and recover more effectively,” said Administrator Criswell. “The emergency management field is becoming more complex and our disaster tempo continues to increase and we know that we cannot solve these problems alone. With this partnership, Sweden and the U.S. can share best practices on how we incentivize individuals and communities to mitigate their risks.”

The MOU recognizes that the United States and Sweden face growing national security threats and natural disaster risks. The memorandum builds upon our existing cooperation and Sweden’s recent ascension to NATO, to foster greater collaboration on plans and priorities. It also helps us encourage readiness, civil protection and disaster risk reduction within our respective territories.

Leave a comment

TSA announces appointment of members to Surface Transportation Security Advisory Committee

Agency News, Industry News, Transport sector
The Transportation Security Administration (TSA) appointed nine people as voting members of the Surface Transportation Security Advisory Committee (STSAC). With these appointments, two new and seven reappointed, the STSAC now includes 30 voting members.
The STSAC was established by Congress in 2019 to advise the TSA Administrator on surface transportation security matters, including recommendations for the development, refinement and implementation of policies, programs, initiatives, rulemakings, and security directives pertaining to the surface transportation sector.
The new members are:
- Christopher Hand, Director of Research, Brotherhood of Railroad Signalmen
- Kaitlyn Holmecki, Senior Manager, International Trade & Security Policy, American Trucking Association
The reappointed members are:
- Jared Cassity, Chief of Safety and Alternate National Legislative Director, SMART Transportation
- James Cook, Assistant Chief of Police, AMTRAK
- Brian Harrell, Vice President & Chief Security Officer, AVANGRID
- Norma Krayem, Vice President, Chair, Cybersecurity, Privacy & Digital Innovation Practice Group, Van Scoyoc Associates
- Robert Mims, Director, Technology Security, Southern Company Gas
- Christopher Trucillo, Chief of Police, New Jersey Transit Police Department
- Lowell Williams, Chief Executive Officer, Cold Iron Security
The STSAC members represent each mode of surface transportation, such as freight rail, highways, mass transit, over-the-road bus, passenger rail, pipelines, school bus industry and trucking among others. For a complete list, please see the STSAC Charter. The Committee also has 14 non-voting members who serve in an advisory capacity for two-year terms from the Departments of Defense, Energy, Homeland Security, and Transportation, as well as the Federal Bureau of Investigation.
Leave a comment

Your latest issue of Critical Infrastructure Protection & Resilience News has arrived

Agency News, Association News, Cyber Security CII sector, Power/Energy/Oil & Gas sector, Telecomms sector, Transport sector
Download your copy now at www.cip-association.org/CIPRNews
Please find here your downloadable copy of the Spring 2024 issue of Critical Infrastructure Protection & Resilience News, the official magazine of the International Association of CIP Professionals (IACIPP), for the latest views, features and news, including a Review of the recent Critical Infrastructure Protection & Resilience North America conference and exhibition in Lake Charles, LA.
Critical Infrastructure Protection & Resilience News in this issue:
- Protecting Life - Securing Agriculture
- Protect our Electric Grid – Before it’s Too Late
- Connecting Unrelated Industries Strengthens All Sectors
- Why Airspace Awareness Matters for Critical Infrastructure Security
- Critical Infrastructure Resilience: Are we addressing the real challenges? In the right way?
- Break down cyber and physical security silos to improve protection and operations
- An Interview with CITGO
- Is Cybersecurity As Enchanted as Sleeping Beauty?
- CIPRE Review
- Agency News
- Industry News
Download your copy at www.cip-association.org/CIPRNews
Leave a comment

Custom-made Awareness Raising to enhance Cybersecurity Culture

Agency News, Association News, Cyber Security CII sector, Industry News
The European Union Agency for Cybersecurity (ENISA) empowers organisations by publishing the updated version of the ‘Awareness Raising in a Box’.
Advanced protection of systems and a robust cybersecurity strategy have become a priority for all kinds of organisations, as cybersecurity issues and threats have evolved to be increasingly sophisticated and pervasive. Thus, awareness raising activities and having a relevant methodology in place are a fundamental to integrating cybersecurity in the organisational culture. With a view to achieve this goal, applying game design elements in cybersecurity awareness activities can simplify familiarisation with terms and concepts through a hands-on experience and motivate employees’ participation.
To test the new edition of the all-in-one toolkit, ENISA piloted the Awareness Raising in a Box (AR-in-a-BOX) with the Cypriot Digital Security Authority and the Cypriot National Coordination Centre.
The Head of the Cypriot Digital Security Authority, Diamantis Zafeiriades, highlighted that "The Digital Security Authority (DSA) and the Cyprus National Coordination Centre for Cybersecurity (NCC-CY) is proud to be working along with the European Union Agency for Cybersecurity (ENISA) to test and promote the Awareness Raising in a Box’ (AR-in-a-BOX), which aims to boost knowledge on cybersecurity awareness techniques. Acknowledging that cyber resilience is a constant training journey for the unpredictable, we are committed to support such initiatives on an ongoing basis."
AR-in-a-Box allows professionals from small and medium (SMEs) to big enterprises and public or private entities, to improve their knowledge on cybersecurity awareness techniques. This comprehensive toolkit offers a blend of theoretical frameworks and practical resources, enabling organisations to craft tailored cybersecurity awareness programmes, including gamification of content.
Notably, the updated version features an online Cyber Awareness Game accessible through the EU ACADEMY.
The updated version of AR-in-a-Box includes the existing catalogue of instructions, games and activities but has also been enriched with the addition of a new guide for the development of internal and external cyber crisis communication plans.
The cyber crisis communication guide aims to help organisations and experts improve their communicational preparedness and response, in times of a cybersecurity crisis. As such incidents may impact several aspects of their operations, the guide provides a holistic approach on their protection and mitigation of risks and damages.
Leave a comment
1 … 4 5 6 7 8 … 44