Homework Wk 5

Please prepare a response to each of the attached documents for total of 2 responses. The responses need to be at least 150 words each. The responses should be as if you are talking directly to the person.

Due in 36 hrs.

The foundation of The National Infrastructure Protection Plan (NIPP) is the framework of its risk management plan and execution.  Analyzing risk is essential to prioritizing the mitigation efforts for both private and government sectors.  The NIPP risk management framework meshes and plans strategies, capabilities, and governance to help agencies make risk-informed decision making related to the Nation’s Critical Infrastructure and Key Resources (CIKR) (NIPP, 2009).  

The Department of Homeland Security (DHS), the Federal Sector-Specific Agency (SSA), as well as public and private partners work to share the responsibility of implementing the NIPP risk management framework.  More specifically, the SSAs are responsible for leading sector-specific risk management programs and ensure that the application of the risk management framework is tailored to fit each sector’s demands. DHS works to support SSA’a efforts by providing analytical guidance and support to the SSAs and other partners if needed. DHS, and other partners will use the best available information to conduct cross-sector risk analysis and management activities (NIPP, 2009).  

The NIPP risk management is always tailored towards the resource(s) in which it protects.  Resources range from fixed assets, information systems, information technology, as well as food and agriculture.  Depending on the resource the risk management approach will change.  For resources like fixed assets or physical facilities, CIKR sectors would most likely take an asset to asset type approach and manage risks as they revealed themselves.  For resources such as Communication, Information technology, information systems, the approach would be more holistic and cover the resource systematically and not asset by asset.

The activities included in the NIPP framework include…
-Setting goals and objectives for each infrastructure or resource
-Identifying assets, systems, and networks,
-Assessing the risks
-prioritizing the risks
-Implementing programs and strategies to combat the risks
-Measuring the effectiveness and results 

Each of these activities are applied by both government and private sectors to help ensure a clear, and successful protection plan is implemented for maximum effectiveness.  NIPP development of these activities and the effectiveness of working alongside both private and public agencies has led to a sustained level of success as it continues to evolve with time and enhanced technologies.

Our critical infrastructure and key resources (CIKR) are our nation’s components, which affect our everyday lives. Critical infrastructure can include agriculture, food, energy, health care, financial institutions, water, and transportation. An attack on these facilities could have devastating impact on security, economy, health, and or safety. Homeland Security Presidential Directive-7 (HSPD-7) provides the framework for federal agencies on how to protect against attacks against CIKR. Through HSPD-7, the Nation Infrastructure Protection Plan (NIPP) outlines the agencies, which are responsible for oversight of protecting CIKR. Through identifying assets, managing risks, and prioritizing resources, the NIPP is able to implement programs with physical and logical security measures. The goal of the NIPP is to, “Build a safer, more secure, and more resilient America…and to strengthen national preparedness, timely response, and rapid recovery of CIKR …” (National Infrastructure Protection Plan: Partnering to enhance protection and resiliency, 2009, p. 9). The NIPP utilizes a network approach to enable cross talk between deferent agencies and provide information sharing on subjects such as, threat assessments, warning, incident reports, and best practices to mitigate threat and vulnerability. While this information under the protection of, the Protected Critical Infrastructure Information Program (PCII), CIKR owner / operators give it on a voluntary basis. CIKR’s are mainly owned by the private sector, which makes it imperative that the public sector provides up to date business strategy, business continuity, and emergency management coordination in order to reduce impacts across the CIKR spectrum. The amount of investment for security measures as it relates to the private sector is based on two factors, “(1) what is known about the risk environment, and (2) what is economically justifiable and sustainable in a competitive marketplace or within resource constraints.”  (2009, p. 24). The Department of Homeland security along with other Federal agencies enable the private sector to make the best decision on security upgrades by providing mitigating strategies to reduce vulnerabilities. Through DHS strategies, relief, and assistance, private sectors are enabled to make the best decision in utilizing resources. Private sector security measures vary across the sector, some are voluntary while others are mandated through regulatory or statutory guidance. Regardless, the private sector can collaborate with the public sector and protect CIKR assets by conducting risk assessments, identifying vulnerabilities, implementing strategies, which encompass local and state emergency responses, and information sharing.

Reference:

National Infrastructure Protection Plan: Partnering to enhance protection and resiliency. (2009). Washington, D.C.: U.S. Dept. of Homeland Security.