be informed. be prepared.. be informed. be prepared. be informed. be prepared. waterisac implemented...

43
Be Informed. Be prepared.

Upload: christine-lloyd

Post on 16-Dec-2015

219 views

Category:

Documents


2 download

TRANSCRIPT

Be Informed. Be prepared.

Be Informed.Be Prepared.Be Informed.Be Prepared.

WaterISAC

Implemented in 2002, WaterISAC is an Internet-based rapid notification system and information resource about all threats and hazards to drinking and wastewater systems. It is the only centralized up-to-the-minute resource of its kind serving the water sector.

Presidential Decision Directive NSC-63, issued on May 22, 1998 encouraged creation of the Information Sharing and Analysis Center, with the design and functions of the ISAC to be determined by the private sector in consultation with the federal government.

Be Informed.Be Prepared.Be Informed.Be Prepared.

What Does WaterISAC Do?

WaterISACGathers information on threats and

solutionsAnalyzes information for credibility and

relevancyDisseminates actionable information

to utilitiesOperates securely 24/7

Be Informed.Be Prepared.Be Informed.Be Prepared.

WaterISAC Options

WaterISAC Basic is free WaterISAC Pro is a subscription

service

Be Informed.Be Prepared.Be Informed.Be Prepared.

WaterISAC Basic…

…a free service which provides up-to-date water-specific security alerts and information to more than 13,000 water and wastewater utilities.

Be Informed.Be Prepared.Be Informed.Be Prepared.

WaterISAC Pro…

…is a subscription service which goes beyond WaterISAC Basic by providing an unrivaled water sector-specific source of information, research and analysis concerning all hazards to water and wastewater systems.

Be Informed.Be Prepared.Be Informed.Be Prepared.

Summary of Features

Features WaterISAC Basic

WaterISAC Pro

Online database of contaminants and threat analysis

Direct access to security products

Nationwide networking forum of drinking water and wastewater utilities

Be Informed.Be Prepared.Be Informed.Be Prepared.

Features WaterISAC Basic

WaterISAC Pro

Ultra secure portal

24/7 access to intelligence analysis

Secure means of quickly reporting an incident

Be Informed.Be Prepared.Be Informed.Be Prepared.

Features WaterISAC Basic

WaterISAC Pro

Security incident reports with analysis and trends

Vulnerability assessment tools and resource

Emergency preparedness and response plan tools and resources

Be Informed.Be Prepared.Be Informed.Be Prepared.

Features WaterISAC Basic

WaterISAC Pro

Online library of security-related documents and reports

Secure, searchable archive of federal Alerts, Advisories, Bulletins and Updates

Notifications of cyber vulnerabilities

Be Informed.Be Prepared.Be Informed.Be Prepared.

Features WaterISAC Basic

WaterISAC Pro

Technical fixes sent via e-mail and mobile devices

Archive of federal Alerts, Advisories, Bulletins and Reports

Be Informed.Be Prepared.Be Informed.Be Prepared.

Scenario

Water system director on a business trip hears a rumor that a couple carrying bomb materials is headed towards his city.

What would you do?

Be Informed.Be Prepared.Be Informed.Be Prepared.

What Really Happened?

Utility director called WaterISAC and asked for assistance. WaterISAC called DHS contacts.

DHS confirmed rumor and verified that law enforcement was in pursuit.

WaterISAC informed director who in turn briefed his local officials.

Be Informed.Be Prepared.Be Informed.Be Prepared.

Be Informed.Be Prepared.Be Informed.Be Prepared.

The Power to Assist

Water system devastated by Hurricane Katrina contacts WaterISAC to seek assistance in locating specialized equipment.

WaterISAC puts the word out.

Equipment and personnel from other utilities are dispatched to the water system.

Be Informed.Be Prepared.Be Informed.Be Prepared.

Threats Against Water Are Real

Iraq - Terrorists add water utility chlorine canisters to bomb attacks

Mexico - Sodium cyanide drums stolen

Australia - SCADA attack results in sewage discharge

Afghanistan - U.S. water system architectural drawings found in terrorist hideout

Be Informed.Be Prepared.Be Informed.Be Prepared. South Carolina - Two alarm sensors found cut in

attempted water plant break-in

California - Attempted theft of large chlorine storage tanks

Georgia - A granular substance is added to water following a plant break-in facilities

Texas - Public works receives a letter threatening water supply contamination

Be Informed.Be Prepared.Be Informed.Be Prepared.

Consequences of Attacks and Other Hazards

Compromised public healthEconomic damagesLoss of fire suppression flowReduced water qualityDiminished delivery capacityDecreased public confidenceLegal falloutPolitical fallout

Be Informed.Be Prepared.Be Informed.Be Prepared.

WaterISAC Is Your Resource

Provides a comprehensive knowledge base on hazards to water utilities

Supports utilities’ security strategies, assessments and emergency plans

Operates securelyFunctions as the distribution center for

threat alerts to utilitiesHelps subscribers demonstrates due

diligence

Be Informed.Be Prepared.Be Informed.Be Prepared.

WaterISAC Is Secure

Hosted in U.S. Government-cleared “top secret” facility

Features state-of-the-art cyber security

Monitored constantly for unauthorized attempts to use or alter the site

Analysts and staff have government security clearances

Be Informed.Be Prepared.Be Informed.Be Prepared.

Access requires USB key and secret passcode

Each subscriber’s identity is verified

Subscribers sign nondisclosure agreements

Be Informed.Be Prepared.Be Informed.Be Prepared.

Under U.S. law, WaterISAC is a non-governmental entity and, as such, exempt from public disclosure laws

Top-secret cleared analysts scrub data prior to any dissemination

Be Informed.Be Prepared.Be Informed.Be Prepared.

WaterISAC Analysts…

AssessAnalyzeGenerate threat and vulnerability

reports and summaries Interact with subscribers Interact with ISAC analysts from other

critical infrastructure groups Interact with U.S. law enforcement,

security, defense, and other government personnel

Be Informed.Be Prepared.Be Informed.Be Prepared.

Be Informed.Be Prepared.Be Informed.Be Prepared.

Information and Intelligence Partners

U.S. Federal AgenciesCentral Intelligence AgencyDefense Intelligence AgencyNational Security AgencyDepartment of Homeland SecurityFederal Bureau of InvestigationTransportation Security AdministrationRegional Information Sharing System

Be Informed.Be Prepared.Be Informed.Be Prepared.

Department of DefenseFirst Information Operations CommandCounterintelligence Field ActivitySurface Deployment & Distribution

CommandNORTHCOM

Be Informed.Be Prepared.Be Informed.Be Prepared.

U.S. State AgenciesVirginia Fusion CenterNew Jersey OHSPNevada Emergency OperationsMaryland Coordination and Analysis

CenterTexas Fusion CenterState Police

Be Informed.Be Prepared.Be Informed.Be Prepared.

Scenario: Dirty Bomb, Dirty Water

Emergency workers responding to a dirty bomb incident have been washed down. Contaminated run-off containing radioactive waste is streaming toward your wastewater plant.

Be Informed.Be Prepared.Be Informed.Be Prepared.

Keyword Search

Be Informed.Be Prepared.Be Informed.Be Prepared.

Search Result

Be Informed.Be Prepared.Be Informed.Be Prepared.

Search Result

Be Informed.Be Prepared.Be Informed.Be Prepared.

Be Informed.Be Prepared.Be Informed.Be Prepared.

Be Informed.Be Prepared.Be Informed.Be Prepared.

Be Informed.Be Prepared.Be Informed.Be Prepared.

Secure Contaminant Databases

WaterISAC takes the user to two other secure sites with no additional sign-in required:

WCIT: Water Contaminant Information Tool (U.S. EPA)UK W.I.R. – United Kingdom Water Industry Research (proprietary contaminant data base)

Be Informed.Be Prepared.Be Informed.Be Prepared.

Be Informed.Be Prepared.Be Informed.Be Prepared.

Be Informed.Be Prepared.Be Informed.Be Prepared.

The Power of Relationships

The structure and professional relationships cultivated by and through WaterISAC and the ISAC Council are valuable assets

ISACs share information about interdependencies, providing a basis for the discernment of patterns or threats that exist on multiple fronts

Be Informed.Be Prepared.Be Informed.Be Prepared.

Be Informed.Be Prepared.Be Informed.Be Prepared.

ISAC Council and Other ISACs

Communications Electricity Sector Emergency Management and

ResponseFinancial ServicesInformation Technology Multi-StatePublic Transportation

Be Informed.Be Prepared.Be Informed.Be Prepared. Maritime

Research and EducationSurface TransportationTruckingSupply ChainChemicalWater

Be Informed.Be Prepared.Be Informed.Be Prepared.

Be Informed.Be Prepared.Be Informed.Be Prepared.

Subscribe to WaterISAC

Call 202-331-0479

Michael Arceneaux

[email protected]