Emergency Preparedness - More Information
Preparedness Activities for Infrastructure Security
The Energy Sector already has substantial information sources in place to support Critical Infrastructure and Key Resources (CI/KR) protection, planning, and analysis. Collected by owners and operators, trade associations, and government organizations, this information identifies energy assets, systems, and networks. Procedures have been established to ensure if the information is protected. Established communication channels among the sector security partners will enable such critical information to be shared whenever necessary to facilitate protection and recovery of CI/KR.
- CI/KR Assessment and Prioritization
Historically, the Energy Sector has been proactive in developing and applying vulnerability assessment methodologies, although no single methodology is universally applicable. Because of the diversity of assets and systems in the Energy Sector, a multitude of methodologies are used to assess risks, vulnerabilities, and consequences. The Energy Sector's threat analysis encompasses natural events, criminal acts, and insider threats, as well as foreign and domestic terrorism. Currently, a number of tools are being used to assess vulnerabilities, and the vast majority of significant facilities have already undergone assessments using one or more of the tools. As the Energy Sector is characterized by very diverse assets and systems, prioritization of sector assets and systems is highly dependent upon changing threats and consequences. The significance of many individual components in the network is highly variable, depending on location, time of day, day of the week, and season of the year. Owners and operators of the Energy Sector have well-developed protocols in place to identify priorities and ensure business continuity and operational reliability. Therefore, prioritization of assets and systems in the Energy Sector needs to be flexible according to circumstances. Further dialogue with DHS and other stakeholders is necessary to examine cross-sector needs and approaches to support DHS programs. 
- Protective Programs and Performance Measurement
With partnership as the cornerstone of its overall strategy, the Energy Sector already has numerous programs sponsored by dozens of public and private organizations that support the sector's security vision and goals. The programs fall within four main categories: information sharing and communication, physical and cyber security, coordination and planning, and public confidence.
The Energy Sector will continue to implement effective protective measures as it assesses the sector's security needs, develops programs, and finds long-term solutions, including research and development (R&D). The Energy Sector is in the process of developing an effective performance measurement system that identifies appropriate metrics for measuring progress, collects relevant data on each metric, and uses those data to improve performance and provide accountability.
Security metrics are divided into two classes; core metrics established by DHS to be used across all sectors, and sector-specific metrics. Energy sector-specific metrics will be developed by the security partners. In addition, qualitative and quantitative measures to track progress toward the sector goals are currently being developed and will be periodically reviewed and modified as necessary. The Energy Sector has established action items, most of which are already underway, and they will continue to be executed in coordination with all energy security partners.
Energy asset owners and operators have been working with government, national laboratories, universities, industry organizations, and other key stakeholders to drive technological innovation throughout the Energy Sector, including infrastructure and cyber security. The 2006 Roadmap to Secure Control Systems in the Energy Sector established four main security goals and addresses the spectrum of cyber security priorities within the sector. The four goals are: measure and assess security posture; develop and integrate protective measures; detect intrusion and implement response strategies; and sustain security improvements. As improved infrastructure security and resiliency have become an increasingly significant objective of the Energy Sector's technology R&D, Federal R&D investments must be coordinated with the private sector to create an effective national R&D strategy for CIP.
Preparedness Activities for ESF #12
 In cooperation with the Energy Sector, ESF #12 develops and implements methodologies and standards for physical, operational, and cyber security for the energy industry.
ESF #12 conducts energy emergency exercises with the energy industry, Federal partners, States, and tribal and local governments to prepare for energy and other emergencies. The private sector owns and operates the majority of the Nation's energy infrastructure and participates along with the DOE in developing best practices for infrastructure design and operations.
DOE assists the States in the preparation of State Energy Assurance Plans to improve the reliability and resiliency of the Nation's energy systems. ESF #12 works with the DHS/FEMA regions, the private sector, States, and tribes to develop procedures and products that improve situational awareness to effectively respond to a disruption of the energy sector. DOE monitors the energy infrastructure and shares information with Federal, State, tribal, local, and industry officials
In anticipation of a disruption to the energy sector, DOE analyzes and models the potential impacts to the electric power, oil, natural gas, and coal infrastructures; analyzes the market impacts to the economy; and determines the effect the disruption has on other critical infrastructure and key resources (CIKR).
|
 |
