CRITICAL INFRASTRUCTURE RISK ASSESSMENT SUPPORT CIRAS PROJECT OVERVIEW 2nd Stakeholders’ Workshop Aschaffenburg, November, 26th, 2015 Jaime Martín, Project coordinator

Introduction Project: EC’s DG HOME CIPS programme - Co-funded by the Prevention, Preparedness and Consequence Management of Terrorism and other Security-related Risks Programme of the European Union - Grant Agreement: CIRAS (HOME/2013/CIPS/AG/ ) Aim: support decision-making to protect CIs and citizens from terrorist attacks and other security incidents. Duration: 2 years (Sept, 2014 – Sept, 2016) Total funding: circa 700k Eur

Consortium Consortium partners: Madrid, Spain (Coordinator) Katowice, Poland Munich, Germany

Where does CIRAS come from? ValueSec Project FP7-Topic SEC Cost-benefit analysis of the present and future security measures in Europe Duration: 3 years (Feb, 2011 – Jan, 2014) Budget: 4.5 Million Eur (10 partners) Aim: support decision making processes with a toolset assessing security measures from different perspectives  including risk, costs and societal, ethical and political points of view

What will be new with CIRAS ? ValueSec is revisited to focus on CIs Specific detailed use cases for CIs for testing focus on CIs

CIRAS Project goals Provide a methodology and toolset for the assessment of risks in a range of CIs considering several assets and threats – Identification of needs  large acceptance – Help harmonisation of CIP processes in Europe

CIRAS Project goals (II) Main aim  Support of decision making processes by comparing security alternatives including effects of: – Interdependencies, cascading effects – Escalation of consequences

CIRAS approach Aggregated results  Comparison #1 Transport Use Case #2 Energy Use Case RRA – Risk Reduction Assessment CBA – Cost-Benefit Assessment QCA – Qualitative Criteria Assm. Threats Assets Societal, ethical values, laws Economical Security measures (alternatives) to be compared Decision contexts impact

CIRAS Workflow Requirements & Concept (CESS) Design (EMAG) Implementation (ATOS) Validation (CESS) Dissemination & Exploitation (EMAG) Management & Coordination (ATOS)

WP0: Management and Coordination of the Project Coordination and overall legal, financial, and administrative management of the project: – set a management process for the project and the consortium – to review and assess the progress done according to the defined aims  Quality and Risk Assurance – Reporting and communication with the EC

WP1: Requirements and Concepts Identify needs and expectations of Cl stakeholders in the range of tools and methods Specify requirements for the CIRAS tool for risk assessment and management, Plan the use cases and their development for experimentation

WP2: Design of the CIRAS tool Tool architecture design – to integrate model and results Functional design based on: – requirements defined in WP1 – stakeholders’ needs – analysis of existing solutions Software design – Definition of uses cases, data structures, data mechanisms, user interface solutions – software engineering tools

WP3: Implementation of the CIRAS tool Software development – Development of components – Integration in the framework, scripts, configuration… Test plan: unit & overall testing Preparation of user documentation

WP4: Use Cases and Validation Use Cases definition Experiments potentially in co-operation with external stakeholders from the given sector – Input data – Experiment setup and testing Evaluation of results: Performance, Flexibility, Usability  User Acceptance

WP5: Dissemination and Exploitation To promote of the project, activities and results To develop dissemination means and strategies To actively involve external stakeholders, To disseminate results via conference papers, presentations and publications To provide maximum exploitation of project results by project partners in their regular business To provide sustainability of project results.

Thank you for your attention! Jaime Martín Pérez Project Coordinator ATOS Spain Co-funded by the Prevention, Preparedness and Consequence Management of Terrorism and other Security- related Risks Programme of the European Union