Kenneth Watson Partnership for Critical Infrastructure Security Partnership for Critical Infrastructure Security

PCIS: Focus on Cross-Sector Coordination “Cooperative Processes and Structures/ National Mobilization Models Across Critical Infrastructure Sectors” “Cooperative Processes and Structures/ National Mobilization Models Across Critical Infrastructure Sectors”

Outline  Business case  Mission  Relationships  Organization and priorities  National Strategy process

PCIS Mission Coordinate cross-sector initiatives and complement public-private efforts to promote and assure reliable provision of critical infrastructure services in the face of emerging risks to economic and national security.

National Security Interest  First national security threat government can not handle alone  Malicious attacks can come from hackers inside and outside the United States  National security apparatus limitations:  Little ownership or control of the networks  No jurisdiction in the case of foreign threats  Limited intelligence on threats and vulnerabilities  Insufficient research and development to stay ahead of the threat

Business Case  Businesses dependent for their survival on the Internet  Vulnerabilities threaten economic survivability and competitiveness  Infrastructures are themselves interdependent  Individual companies and sectors are addressing CIP issues  Interdependencies and national security mandate a more coordinated approach

Operating Principles  Build on and complement sector activities  Support efficiency and add value for sectors  Address common and shared issues  Share knowledge to avoid duplication and speed learning and application  Only take on work that otherwise cannot be done  Act as a catalyst for action

Functions  Provide a forum for cross-sector dialogue and action  Provide a forum for cross-sector coordination with government  Facilitate and coordinate cross-industry input to National Strategy  Provide a means to contribute to appropriate government advisory bodies

Goals and Objectives  Increase awareness and understanding of Critical Infrastructure Assurance  Achieve strategic coordination across sectors and government  Identify cross-sector dependencies, vulnerabilities, and risk management techniques  Effectively share information across sectors  Foster cross-sector actions for resolution  Encourage active engagement and interest

Development  PDD-63, May 22, 1998  Recognized need for public-private partnership  PCIS Kickoff, Dec 8, 1999  Industry accepted challenge  Planning Retreat, Feb 22, 2000  Working Groups organized, initial work began  Incorporated Jan 8, 2001  501(c)6 non-profit corporation  Annual Conference, Mar 20-22, 2001  Sector Coordinators represent majority of Board

Relationships State and Local ISACISACISACISACISACISACISACISACISACISACISACISACISACISAC ISACISAC PCISPCIS NIACNIAC Info & Comms Banking & Finance Oil & Gas Electric Transport Water Emergency Services Sector Coordinators NSTACNSTAC Law Enforcement Industry Sector Liaisons Dept of Justice Dept of Justice FBIFBI CIAOCIAO President of the United States NIPCNIPC Dept of Commerce Dept of Commerce Dept of Transport Dept of Treasury Dept of Energy Dept of Energy Dept of Defense National Security Council EPA Health and Human Services FEMA Federal Homeland Security Office

Current Priorities  National Strategy for Critical Infrastructure Assurance  Digital Control Systems Security R&D Clearinghouse  Effective Practices Compendium  Critical Infrastructure Assurance Awareness Materials and Support  Risk Assessment Guidebook  Cross-Sector Information Exchange

National Strategy Process NSANSA CIACIA StateState GSAGSA WaterWater Law Enforcement RailroadsRailroads Banking and Finance Electric Power Oil and Gas Info and Comms TreasuryTreasury EnergyEnergy CommerceCommerce TransportationTransportation JusticeJustice FEMAFEMA H&HSH&HS DefenseDefense CIAOCIAO National Strategy for Critical Infrastructure Assurance 2002 PCISPCIS EPAEPA

Areas of Common Interest  Interdependency issues  Research and development  Education and workforce development  Information sharing  International issues  Public policy and legal/legislative barriers