1 Appendix B Initial Briefing Template

2 Site X Vulnerability Assessment (VA) Presenter name Presenter organization Presenter phone Presenter phone/

3 Overview Purpose Scope Assumptions VA Methodology Schedule Questions

4 Purpose & Scope Complete a VA of Site X Evaluate the PPS as required by Establish baseline performance of the system and propose functional upgrades if not effective

5 Assumptions/Limitations (examples) Uses previously defined threats and assets Risk level must be less than Considers installed system, not planned upgrades Limited time for VA—5 days

6 Defined Threat Describe threat spectrum or single defined threat. For example: LevelTacticWeapons/EquipmentNumber LowTheftUnarmed, Hand Tools1-2, no insider MediumSabotagehandguns, Hand & Power Tools 2-4, possible insider HighSabotageArmed, Hand/Power Tools, Thermal tools, Explosive Charges 3-5, possible insider

7 Assets List assets that are targets of VA: Target 1 Target 2 etc

8 VA Methodology

9 Concepts Defined protection objectives Performance-based Evaluate PPS Detection Delay Response Analyze integrated system, not individual components

10 Benefits of Performance-based Assessments Based on performance, not mere presence, of components Clearly shows effects of vulnerabilities Links solutions to effectiveness Better risk management and resource utilization

11 Protection Principles Detection before delay Alarm assessment ends detection Balanced protection Protection-in-depth Immediate response required for critical assets

12 Relationship of PPS Functions Begin Action Task Complete First Alarm Detect Respond T 0A T C TT I Time Alarm Assessed Adversary Interrupted Adversary Task Time PPS Time Required Delay

13 Analysis Qualitative or quantitative analysis Performance measure Interruption, neutralization, system effectiveness, risk Tools used Data collection Tests Path analysis Scenario analysis

14 VA Schedule Day 1 Initial briefing Facility tour Workspace setup Day 2 Collect necessary maps & drawings Data collection—sensors, video system Day 3 Data collection—entry control and AC&D Begin analysis

15 VA Schedule Day 4 Data collection—delay and response Finish analysis Prepare briefing Day 5 Brief results Depart site

16 Questions/Discussion ???