Federal Liaison Advisory Group (FLAG)
Resource Guide for Critical Infrastructure Protection

The Geospatial Information & Technology Association is working to support its members and the Department of Homeland Security (DHS) in cooperative efforts to protect the nation’s critical infrastructure assets.  GITA is particularly focused on infrastructure assets in utilities (gas, electric, water), the energy, transportation, and communications sectors, and infrastructure in local government agencies.
In addition, GITA recognizes that the interdependencies of these infrastructure sectors are important to a better understanding of how to protect critical infrastructure. Geospatial data and information are key elements for identifying and understanding the various interdependencies of critical infrastructures.

Through the ongoing efforts of its Federal Liaison Advisory Group (FLAG), GITA seeks to build a strong relationship with key federal agencies charged with protecting our nation’s critical infrastructure.  The purpose of these efforts is to establish and nurture a productive dialog between the federal government and GITA’s members and constituents.  The overall objective is facilitate GITA membership contributions to the national efforts of DHS to protect our infrastructure.

As an initial step, a number of DHS documents and Internet links have been identified to provide GITA’s members and constituents with a resource to develop a better understanding of DHS critical infrastructure protection programs.  These documents and links have been grouped in three categories: Organization and Programs, Plans and Strategies, and Tools. 

The FLAG Resource Guide for Critical Infrastructure Protection is intended to be a dynamic resource for the GITA community and will be updated periodically. Your comments and questions are welcome at any time!

Organization and Programs

These documents and links address organizational roles and responsibilities for key DHS organizations in critical infrastructure protection and how these programs and key policy objectives are structured.

Infrastructure Information Collection Division (IICD) of DHS
http://www.dhs.gov/xabout/structure/gc_1227556492382.shtm
The Office of Infrastructure Protection's Infrastructure Information Collection Division (IICD) leads the Department’s efforts to gather and manage vital information regarding the nation’s critical infrastructure and key resources (CIKR). IICD helps ensure needed infrastructure data is available to homeland security partners by identifying information sources and developing applications to use and analyze CIKR data. 
IICD equips federal, state, and local governments with tools for the collection, management, and visualization of infrastructure data to support national preparedness, response, and recovery efforts.  
This site has videos on IICD, PCII, iCAV and ACAMS

     IICD one-page summary
    DHS Earth one-page summary

Protected Critical Infrastructure Information Program (PCII)
http://www.dhs.gov/xinfoshare/programs/editorial_0404.shtm
The Protected Critical Infrastructure Information (PCII) Program is an information-protection program that enhances information sharing between the private sector and the government. The Department of Homeland Security and other federal, state and local analysts use PCII to:

• Analyze and secure critical infrastructure and protected systems,
• Identify vulnerabilities and develop risk assessments, and
• Enhance recovery preparedness measures.

     PCII one-page summary

Critical Infrastructure and Key Resources (CIKR)
http://www.dhs.gov/xprevprot/programs/gc_1189168948944.shtm
Protecting and ensuring the continuity of the critical infrastructure and key resources (CIKR) of the United States are essential to the nation's security, public health and safety, economic vitality, and way of life.

• Critical Infrastructure are the assets, systems, and networks, whether physical or virtual, so vital to the United States that their incapacitation or destruction would have a debilitating effect on security, national economic security, public health or safety, or any combination thereof.
• Key Resources are publicly or privately controlled resources essential to the minimal operations of the economy and government.

Homeland Security Presidential Directive 7 (HSPD-7)  established U.S. policy for enhancing CIKR protection by establishing a framework for National Infrastructure Protection Plan (NIPP) partners to identify, prioritize, and protect the nation's CIKR from terrorist attacks. The directive identified 17 CIKR sectors and designated a federal Sector-Specific Agency (SSA) to lead CIKR protection efforts in each.
Each of the Sector-Specific Agencies developed a Sector-Specific Plan that details the application of the NIPP framework to the unique characteristics of their sector.

Plans and Strategies

DHS has developed a comprehensive strategic approach for critical infrastructure protection.  These strategies are supported by Plans for the overall critical sector protection program and more detail plans for specific sectors.  The following includes Sector Specific Plans for those Sectors which are the focus of GITA Members along with several other sectors that are closely related to GITA Member interests.

National Infrastructure Protection Plan (NIPP) - Summary
http://www.dhs.gov/xlibrary/assets/nipp_consolidated_snapshot.pdf
The National Infrastructure Protection Plan provides the unifying structure for the integration of a wide range of efforts for the enhanced protection and resiliency of the nation's critical infrastructure and key resources (CIKR) into a single national program.
The overarching goal of the NIPP is to build a safer, more secure, and more resilient America by preventing, deterring, neutralizing, or mitigating the effects of deliberate efforts by terrorists to destroy, incapacitate, or exploit elements of our nation's CIKR and to strengthen national preparedness, timely response, and rapid recovery of CIKR in the event of an attack, natural disaster, or other emergency.

     National Infrastructure Protection Plan - April 2009

Sector-Specific Plans
http://www.dhs.gov/xprevprot/programs/gc_1179866197607.shtm#2
http://www.dhs.gov/xprevprot/programs/gc_1189168948944.shtm
The Sector-Specific Plans (SSPs) detail the application of the National Infrastructure Protection Plan (NIPP) risk management framework to the unique characteristics and risk landscape of each sector and provide the means by which the NIPP is implemented across all critical infrastructure and key resources (CIKR) sectors. Each Sector-Specific Agency developed an SSP through a coordinated effort involving their public and private sector CIKR partners.

The SSPs are the culmination of a national planning effort that reflects thousands of hours of outreach and collaboration between the Department of Homeland Security and other federal, state, local, tribal, territorial, and private sector partners. There are sector-specific plans for the following:  Agriculture and Food; Banking and Finance; Chemical; Commercial Facilities; Communications; Critical Manufacturing; Dams; Defense Industrial Base; Emergency Services; Energy; Government Facilities; Healthcare and Public Health; Information Technology; National Monuments and Icons; Nuclear Reactors, Materials and Waste; Postal and Shipping; Transportation Systems; and Water.

The NIPP relies on the sector partnership model as the primary organizational structure for coordinating the nation’s CIKR protection mission. For each critical infrastructure and key resources sector, a Sector Coordinating Council representing the private sector and a Government Coordinating Council have been created to share data, techniques, best practices, and to support systematic risk-based planning. The Department provides guidance, tools, and support to assist these sector-specific groups in working together to carry out their responsibilities.

     MTI one-page summary

Tools

In order to carry out its critical infrastructure program in an efficient and consistent way across the nation DHS has assembled a number of data and technology support tools and practices.   The National Infrastructure Exchange Model, DHS Infrastructure Taxonomy and the Homeland Security Information Program all provide a structure for organizing critical infrastructure information and actual geospatial data for critical infrastructure protection.  While these documents are complex and require effort to understand and use, they provide a framework for implementing geospatial standards and for implementing spatial data infrastructure policies and practices. 

DHS Infrastructure Taxonomy
http://www.dhs.gov/xinfoshare/publications/gc_1226595934574.shtm (Overview)
The Department of Homeland Security uses an Infrastructure Taxonomy to enable transparent and consistent communication about CIKR between government and private sector partners. The Infrastructure Taxonomy also facilitates more efficient data integration and transfer of information between systems; thus, it is the foundation for multiple Department tools and systems that focus on the identification, collection, sharing and cataloguing of national CIKR.

With its structured terminology, the Infrastructure Taxonomy allows its users to designate an asset as belonging to a particular group, and then apply additional, associated taxonomy levels to detail the specifics of the asset and describe its functions.

By applying a detailed, structured system of categorization to assets that includes sectors, sub-sectors, segments, sub-segments and asset type, the Infrastructure Taxonomy minimizes potential confusion and enhances transparency about CIKR.

National Infrastructure Exchange Model (NIEM)
http://www.niem.gov/whatIsNiem.php
The National Information Exchange Model (NIEM) is a Federal, State, Local and Tribal interagency initiative providing a foundation for seamless information exchange. NIEM is a framework to:

• Bring stakeholders and Communities of Interest together to identify information sharing requirements in day-to-day operational and emergency situations;
• Develop standards, a common lexicon and an on-line repository of information exchange package documents to support information sharing;
• Provide technical tools to support development, discovery, dissemination and re-use of exchange documents; and
• Provide training, technical assistance and implementation support services for enterprise-wide information exchange.

NIEM was launched on February 28, 2005, through a partnership agreement between the U.S. Department of Justice (DOJ) and the U.S. Department of Homeland Security (DHS) and signed by Chief Information Officers.

Homeland Security Information Program (HSIP) - Gold and Freedom
http://www.nsgic.org/hottopics/FAQ_HSIP_Freedom.pdf

Constellation/Automated Critical Asset Management System (C/ACAMS)
http://www.dhs.gov/xinfoshare/programs/gc_1190729724456.shtm
The Constellation/Automated Critical Asset Management System (C/ACAMS) is a Web-enabled information services portal that helps state and local governments build critical infrastructure/key resource (CIKR) protection programs in their local jurisdictions.
C/ACAMS provides a set of tools and resources that help law enforcement, public safety and emergency response personnel

• Collect and use CIKR asset data,
• Assess CIKR asset vulnerabilities,
• Develop all-hazards incident response and recovery plans, and
• Build public-private partnerships.

Using C/ACAMS also provides state and local jurisdictions with a practical way to implement the National Infrastructure Protection Plan (NIPP), including the NIPP Risk Management Framework.
 ACAMS is a secure, online database and database management platform that allows for the collection and management of CIKR asset data; the cataloguing, screening and sorting of this data; the production of tailored infrastructure reports; and the development of a variety of pre- and post-incident response plans useful to strategic and operational planners and tactical commanders.

     C/ACAMS one-page summary

Integrated Common Analytical Viewer (iCAV)
http://www.dhs.gov/xinfoshare/programs/gc_1217445858859.shtm
iCAV is a secure, Web-based, geospatial visualization tool that integrates commercial and government-owned data and imagery from multiple sources.

Using iCAV, homeland security partners can establish a comprehensive situational and strategic awareness across the nation and around the globe to better prepare, prevent, respond and recover from natural and man-made disasters.
iCAV allows users to see critical infrastructure information in a dynamic map form and provides access to numerous data sources in one central location. Through iCAV, the Department connects previously stove-piped information sources providing consistent, mission-specific common operating pictures (COPs) across organizational boundaries, thereby fostering information sharing.

     iCAV one-page summary