CISA Releases Guidance on Essential Critical Infrastructure Workers During Covid-19

The Cybersecurity and Infrastructure Security Agency (CISA) released guidance to help state and local jurisdictions and the private sector identify and manage their essential workforce while responding to COVID-19.

As the Nation comes together to slow the spread of COVID-19, on March 16, the President issued updated Coronavirus Guidance for America. This guidance states that:

“If you work in a critical infrastructure industry, as defined by the Department of Homeland Security, such as healthcare services and pharmaceutical and food supply, you have a special responsibility to maintain your normal work schedule.”

CISA executes the Secretary of Homeland Security’s responsibilities as assigned under the Homeland Security Act of 2002 to provide strategic guidance, promote a national unity of effort, and coordinate the overall Federal effort to ensure the security and resilience of the Nation's critical infrastructure. The list of Essential Critical Infrastructure Workers was developed in coordination with Federal agencies and the private sector as a guide to help decision-makers within communities understand how to ensure continuity of essential functions and critical workforce as they consider COVID-related restrictions in certain communities (e.g., shelter-in-place). The list can also inform critical infrastructure community decision-making to determine the sectors, sub sectors, segments, or critical functions that should continue normal operations, appropriately modified to account for Centers for Disease Control (CDC) workforce and customer protection guidance. These critical functions include, but are not limited to, systems that support healthcare personnel (e.g., doctors, nurses, laboratory personnel, etc.), the food industry (e.g., retail groceries and pharmacies), communication providers (e.g., operator, call centers, IT data centers), defense systems support, law enforcement, public works, and other essential operations. Workers who support these critical functions are necessary to keep critical systems and assets working.

“As the nation comes together to slow the spread of COVID-19, everyone has a role to play in protecting public health and safety. Many of the men and women who work across our nation’s critical infrastructure industries are hard at work keeping the lights on, water flowing from the tap, groceries on the shelves, among other countless essential services,” said Christopher Krebs, CISA Director. “As the nation’s risk advisor, this list is meant to provide additional guidance to state and local partners, as well as industry, building on the President’s statement that critical infrastructure industries have a special responsibility to keep normal operations. We’re providing recommendations for these partners as they carry out their mission to keep their communities safe, healthy, and resilient. And on behalf of CISA, we thank the brave men and women who continue these essential jobs in challenging times.”

The list of Essential Critical Infrastructure Workers was developed using existing data and analysis, including publicly available analysis done by the President’s National Infrastructure Advisory Council in 2007. The list does not impose any mandates on state or local jurisdictions or private companies.

CISA will use this list to support federal, state, local, tribal, and territorial government response to COVID-19. To view the full list of Essential Critical Infrastructure Workers and to learn more about our efforts, visit www.cisa.gov/coronavirus.

Successful Critical Infrastructure Protection & Resilience Europe Delivers Great Discussions

Vice-Admiral Carlo Massagli, Italian Critical Infrastructures Secretariat - Presidency of the Council of Ministers and Roberto Baldoni, Deputy Director of the Department for Security Information (DIS), Italian Cybersecurity Agency contributed a great keynote to the excellent 3 days of discussions, with over 30 international expert speakers, on securing Europe's critical infrastructure in Milan.

The risk environment affecting critical infrastructure is both complex and uncertain. Threats, vulnerabilities and consequences have all evolved over a number of years and infrastructure that has long been subject to the dangers associated with physical threats and natural disasters are now increasingly exposed to cyber risks which stems from the growing integration of information and communications within their operations.

With changing dynamics so must our total approach to security and resilience. There is a continual need to review, develop and update policies, practices, procedures and technologies to meet those growing and changing demands.

The 3 day discussion addressed key issues from Regulations, Legislation & Standards to Resilience Strategies in CI and the Growth in Interoperability Between Critical Infrastructure Sectors and Enhancing Cross Industry Resilience.

The next CIPRE event will take place in Bucharest, Romania on 6th-8th October 2020. Further details at www.cipre-expo.com.

Critical Infrastructure Protection and Resilience North America opening keynote delivers highest profile messages

The opening of Critical Infrastructure Protection and Resilience North America in Tampa, Florida, supported by the International Association of CIP Professionals, enjoyed a fantastic keynote session - Brian Harrell Assistant Secretary for Infrastructure Protection, DHS setting out the priorities for CISA and highlighting the continued need to build partnerships. Dr. Daniel Kaniewski, Deputy Administrator Resilience, Federal Emergency Management Agency discussed the benefits of investing in up front mitigation measures stating that for every $1 invested in Federal Mitigation saves $6 in future disaster costs. Then Chauncia Willis Emergency Coordinator for Tampa delivered a powerful presentation on Diversity - Inclusion and Social Equity within CI Development.

Regional Director Bill Bailey to present at Asia Risk & Resilience

Dr Bill Bailey,  BA(Hons) MA, MCIL, PhD, Regional Director Australasia for the International Association of Critical Infrastructure Protection Processionals (IACIPP) and Adjunct Senior Lecturer, Edith Cowan University, Security Research Centre, Perth, Australia, will be presenting on 'PROTECTING CRITICAL INFASTRUCTURE: HOW TO USE A PROACTIVE SECURITY MANAGEMENT PROCESS TO ACHIEVE SUSTAINABLE RISK' at the 2019 Risk & Resilience Asia Conference in Singapore on 28th-30th August.

The protection of critical infrastructure assets is vital to every government, organisation, business and person. If the asset forms part of the essential critical infrastructure, then the loss can be catastrophic and far reaching with considerable national consequences. To avoid such damaging outcomes, requires a wide range of in-built security planning, structures, and operating procedures. A solution is to use a more adaptive, proactive, comprehensive security management process to: prevent, detect, deter, respond and defeat potential damaging events and incidents. Core to this security planning is a full understanding of the potential consequences of worst-case-scenarios as well as implementing a multi-layered intelligence gathering capabilities.  Adopting a process driven model is a more proactive approach and grounded upon current operational procedures used by major international companies in hostile and dangerous environments. By utilizing such a clearly defined comprehensive risk management tool, a more systematic security, threat, risk and vulnerability assessment (STRVA), process can be developed.

The Honorable Judge William H. Webster has been presented with Lifetime Achievement award by IACIPP

The Honorable Judge William H. Webster has been presented with Lifetime Achievement award by the International Association of Critical Infrastructure Protection Professionals (IACIPP)

The award recognises his incredible service, not only to his country but to the global security community. Chairman of the IACIPP, John Donlon QPM, said “There can be few more deserving candidates for this Award and it is our honour to recognise his achievements and service.”

The Award was presented on behalf of the IACIPP by Mr Jeff Gaynor, CIPRNA Conference Committee Member.

Judge Webster is a former Director of the Federal Bureau of Investigation, the Central Intelligence Agency and the United States Intelligence Community and Chairman, Homeland Security Advisory Council. He continues to serve America as the Chairman of the Homeland Security Advisory Council, U.S. Department of Homeland Security.

Judge Webster, proclaimed by Governor Tom Ridge the First Secretary of the U.S. Department of Homeland Security “A National Treasure,” was born on March 6, 1923, in St. Louis, Missouri. Judge Webster was awarded his Bachelor of Arts degree from Amherst College and received a Juris Doctor degree from Washington University in 1949. Judge Webster served as a United States Navy Lieutenant during World War II and the Korean War. A practicing attorney from 1949 to 1959, in 1960, Judge Webster became the United States Attorney for the Eastern District of Missouri and from 1964 to 1969 was a member of the Missouri Board of Law Examiners. In 1970 Judge Webster was elevated to the United States Court of Appeals for the Eighth Circuit.

In February 1978, Judge Webster was appointed by President Jimmy Carter as Director of the Federal Bureau of Investigation. Appointed by President Ronald Reagan, from May 1978 to August 1991 Judge Webster served as the Director of the Central Intelligence Agency and the Director, U.S. Intelligence Community. Judge Webster is the only person in U. S. History to serve in all three of these National Security positions. Upon his retirement from Federal service in 1991, Judge Webster practiced law in the Washington, DC offices of Milbank, Tweed, Hadley & McCloy, LLP. He has maintained an office there since his retirement.

In August 2005, Judge Webster was appointed by President George W. Bush as Chairman of the Homeland Security Advisory Council (HSAC). With the cascading consequences of the long-anticipated failure of the New Orleans Levee System still being inflicted, Judge Webster spearheaded an HSAC study into the adequacy of U.S. Critical Infrastructure Protection policies and programs. In January 2006, the HSAC’s “Report of the Critical Infrastructure Task Force” made public its principal recommendation: “Promulgate Critical Infrastructure Resilience as the top-level strategic objective — the desired outcome to drive national policy and planning.” The HSAC’s subsequent June 2011 “Community Resilience Task Force Recommendations” provided the vision and means to operationalize resilience in communities throughout America.

Judge Webster holds 18 honorary degrees and Doctorates and in further recognition of his singularly unique service to the Nation and among his many awards, Judge Webster is the recipient of the Presidential Medal of Freedom; the Distinguished Intelligence Medal; and the National Security Medal. In August 2017, the National Spy Museum presented to Former President George H. W. Bush The Honorable William H. Webster Distinguished Service Award.

Judge Webster was married to the late Drusilla Lane Webster for 34 years and is the father of three children. In 1990, Judge Webster married Lynda Clugston. Residing in the Washington, DC area, they enjoy seven grandchildren, a golden retriever, a tabby cat and three horses.

IACIPP Participate in NATO supported Workshop

With respect to the significance of cyber defence of energy sector, with the support of NATO Science for Peace and Security Program, a five-day course was conducted in Ukraine under the hosting of the Ukrainian institute of Center for Security and Defence Studies (CSDS) with the partnership of the Institute for Security and Safety, Brandenburg University of Applied Sciences based in Germany. As being a part of the organizational committee, IACIPP also supported the event.

The Association's Caspian and MENA Region Director, Ayhan Gücüyener, participated the event as a lecturer and present on the "Cyber Defence in the Energy Security Context: Understanding the Vulnerabilities, Taking the Actions".

In a modern World of rapid technological changes it is an existential matter for every nation to strengthen its cyber defence. In addition, in case of a broad and sophisticated cyber attack targeting our vital critical infrastructures, the result would be catastrophic. In a rapidly digitalized world our telecommunication networks, water systems and energy infrastructures are becoming more and more vulnerable to cyber threats. However, among those, energy infrastructures are the most favourite target for hackers who know well that a big black out could cause a massive chaos and create a significant economic damage.

As a result, cyber vulnerabilities of energy infrastructures emerges as a crucial topic. The high significance of cyber defence for energy security is caused by twofold reasons. On the one hand, there is strong dependence of economy and society from energy sector. On another hand, there is an increasing trend of sophisticated cyber-attacks directed on energy companies and particular facilities all around the globe. Therefore, cyber security should be precisely considered beside physical protection that was dominated in last century, and comprehensive approach of cyber-physical protection should be implemented on critical infrastructure facilities.

IACIPP responds to UN Security Council call to protect ‘critical infrastructure’ from terrorist attacks

Earlier this month the UN Security Council urged joint measures to protect ‘critical infrastructure’ from terrorist attacks

Given the importance of critical infrastructure for a country’s prosperity and security and against the backdrop of increasingly diverse physical and cyber threats from terrorist groups, the United Nations Security Council underlined the need for international collaboration – both domestically and across borders – to ensure their protection.

In a resolution adopted unanimously the 15-member Security Council reiterated “the need to strengthen efforts to improve security and protection of particularly vulnerable targets, such as infrastructure and public places.”

Attacks against objects and sectors such as banking and finance, telecommunications, emergency services, air, maritime and rail transportation, and energy and water supply – perceived as ‘attractive targets’ for terrorist groups – can result not only in civilian casualties, but also damage property on a large scale, disrupt proper functioning of public services, and create chaos in societies.

It called upon UN Member States “to share information […] to prevent, protect, mitigate, investigate, respond to and recover from damage from terrorist attacks on critical infrastructure facilities, including through joint training, and use or establishment of relevant communication or emergency warning networks.”

In response to this call to action the International Association of Critical Infrastructure Protection Professionals (IACIPP) has today announced the launch of the www.IACIPP.net a global extranet designed for critical infrastructure professionals to share information with other members, keep up-to-date with the latest threats, best practise, training opportunities and much more.

Chairman of the IACIPP John Donlon QPM, FSI said “We fully endorse the UN resolution and we have already been working hard to do our part to make that aspiration a reality. The extranet is now live and operational for members. The association is open to all CIP professionals including operator site managers, security officers as well as first responders, government agency officials, officers and policy makers. Membership of the association is still free and we encourage colleagues around the world to join us.”

He went on to say: “We look forward to welcoming new members and will be demonstrating the www.IACIPP.net platform for the first time at the Critical Infrastructure Protection and Resilience, Europe conference and expo in The Hague from the 9th to 11th May 2017, where CIP professionals from across Europe and beyond will gather once again to discuss the burning issues.”

IACIPP responds to UN Security Council call to protect ‘critical infrastructure’ from terrorist attacks

In February this year UN Security Council urged joint measures to protect ‘critical infrastructure’ from terrorist attacks

Given the importance of critical infrastructure for a country’s prosperity and security and against the backdrop of increasingly diverse physical and cyber threats from terrorist groups, the United Nations Security Council underlined the need for international collaboration – both domestically and across borders – to ensure their protection.

In a resolution adopted unanimously the 15-member Security Council reiterated “the need to strengthen efforts to improve security and protection of particularly vulnerable targets, such as infrastructure and public places.”

Attacks against objects and sectors such as air, maritime and rail transportation, banking and finance, telecommunications, emergency services, and energy and water supply – perceived as ‘attractive targets’ for terrorist groups – can result not only in civilian casualties, but also damage property on a large scale, disrupt proper functioning of public services, and create chaos in societies.

It called upon UN Member States “to share information […] to prevent, protect, mitigate, investigate, respond to and recover from damage from terrorist attacks on critical infrastructure facilities, including through joint training, and use or establishment of relevant communication or emergency warning networks.”

In response to this call to action the International Association of Critical Infrastructure Protection Professionals (IACIPP) has today announced the launch of the www.IACIPP.net a global extranet designed for critical infrastructure professionals to share information with other members, keep up-to-date with the latest threats, best practise, training opportunities and much more.

Chairman of the IACIPP John Donlon QPM, FSI said “We fully endorse the UN resolution and we have already been working hard to do our part to make that aspiration a reality. The extranet is now live and operational for members. The association is open to all CIP professionals including operator site managers, security officers as well as first responders, government agency officials, officers and policy makers. Membership of the association is still free and we encourage colleagues around the world to join us.”

He went on to say: “We look forward to welcoming new members and will be demonstrating the www.IACIPP.net platform for the first time at the Critical Infrastructure Protection and Resilience, Europe conference and expo in The Hague from the 9th to 11th May 2017, where CIP professionals from across Europe and beyond will gather once again to discuss the burning issues.”

From the Chairman

As a new year starts to unfold the IACIPP looks forward to further developing our activities and encouraging new members from around the globe.

2016 saw the launch of the association and a wide range of events being delivered focusing in on the threats and dangers that critical national infrastructures continue to face whether it be from natural and man made disasters or cyber attacks and espionage.

The conferences that we support, CIPRE in The Hague in March last year and CIPRA in Bangkok in October were extremely well attended. They provided a platform to connect like minded people together to share information, innovation and experiences in order to further enhance a collective response to the many challenges within the protection and resilience of our critical infrastructure.

IACIPP will continue to support such events in 2017 as it develops its international reach and enhances the services available to infrastructure professionals. We have been working on the launch of a global intranet which will allow our members to communicate in a secure network and I am pleased to say that the last stages of our test processes are now underway and all is looking good for its introduction within the next few weeks.

We also continue to develop our network of Regional Directors. We currently have:

Dr Frederic Petit covering North America
Dr Bill Bailey looking after Australasia
Dr Robert Mikac in Eastern Europe and
Ayhan Gucuyener, who is based in Turkey with responsibility for the Caspian, Middle East & North African regions.

We have also identified a Regional Director for the ASEAN area and hope to see that individual appointed within a few weeks and we will interview a candidate for Western Europe in February.
We look forward with great enthusiasm to 2017 being a year where the IACIPP continues to develop and contributes to the reduction of vulnerabilities of Critical Infrastructure and Information.

New Regional Director for Australasia

The International Association of Critical Infrastructure Protection Professionals (IACIPP) is delighted to announce the appointment of Dr Bill Bailey, BA(Hons) MA, MCIL, PhD. as Regional Director – Australasia

Bill Bailey is currently a security management consultant working in the oil and gas industry predominately in Papua New Guinea. Bill also remains an Adjunct Senior Lecturer with Edith Cowan University, Security Research Centre, Perth, Australia after having taught in the Security Science Department, specialising in: counter insurgency, terrorism and countering terrorism, critical infrastructure protection, security management, physical security, security, health and safety, business continuity, strategic risk and emergency management.

Bill served as an Inspector with the Royal Hong Kong Police, Tactical Unit and was a trained Terrorist Negotiator before becoming a security and risk management specialist in Africa for the Oil and Gas industry. Bill has extensive experience of managing security in hostile and difficult environments having dealt with numerous disaster situations, including coup d’états in Equatorial Guinea 2004, Mauritania in 2004/2005 and a ‘Hi-Jack’ at Hong Kong Airport in 1978. Contracts include: Exxon Mobil in Kenya, Cameroon and Equatorial Guinea; with Woodside Australian Energy in Australia, Mauritania and Senegal. In Algeria: First Calgary Petroleum, BP-Amoco, Bechtel, Halliburton Energy, and Amerada-Hess. Further contracts with: Control Risks Group, Stirling FMC, Triton Energy, Jet Air, Hess Energy; Pride Forasol, Virgin Atlantic, Schlumberger, ABB Group, PTTEP, Oil Search Ltd and Talisman Energy

His primary role will be to develop closer relationships with the Regional authorities and stakeholders and raise the profile organisation throughout the Australasian region.

John Donlon QM Chairman of the IACIPP said: “We are extremely pleased to have a new director of Bill’s calibre. His depth of experience in both the public and private sector worldwide will be of tremendous value to us as we continue to develop the range of programmes we offer the CIP community.”

1 52 53 54 55