1. Module 1 Introduction to Critical Infrastructure

2. Lesson Objectives
Define critical infrastructure, protection, and resilience in the context of the National Infrastructure Protection Plan (NIPP).
Describe critical infrastructure in communities and the impact Lifeline sector assets have on a community’s resiliency.
Describe the processes that support critical infrastructure security and resilience.
Identify strategies and methods for achieving results through critical infrastructure partnerships.
Describe the roles and responsibilities of entities such as the DHS, sector-specific agencies, and state, local, tribal, and territorial governments.
Discuss common standards bodies, such as the North American Electricity Reliability Council (NAERC) and the National Institute of Standards and Technology (NIST).
Understand which certifications are required to protect critical infrastructure.

3. What is Critical Infrastructure?
Critical infrastructure can be defined as the assets, systems, and networks, whether physical or virtual, that are vital to the United States such that the loss of these services would have a debilitating effect on national security, public health, and human safety.

4. CI Sectors/Lifeline Sectors
Presidential Policy Directive 21 (PPD-21) advances a national policy to strengthen and maintain secure, functioning, and resilient infrastructure, and identifies 16 critical infrastructure sectors.
Five of these 16 sectors are considered “Lifeline” functions, essential to the operation of most critical infrastructure.
While the Department of Homeland Security, Presidential Policy Directive 21 (PPD-21) identifies a total of 16 critical infrastructure sectors, the National Infrastructure Protection Plan identifies five “Lifeline” sectors as being the most critical.

5. Chemical Sector Majority are privately owned.
Divided into five segments, based on end product production:
Basic chemicals
Specialty chemicals
Agricultural chemicals
Pharmaceuticals
Consumer products
Chemical Sector:
The Department of Homeland Security is designated as the sector-specific agency for the Chemical Sector.
Image source:
Public Domain image. Source:

6. Commercial Facilities Sector
Sites that draw large crowds for shopping (malls), business, entertainment, or lodging. They operate under principle of open public access, and the majority are privately owned and operated.
Eight subsectors:
Entertainment and Media
Gaming
Lodging
Outdoor Events
Public Assembly
Real Estate
Retail
Sports Leagues
Commercial Facilities Sector:
The Department of Homeland Security is designated as the sector-specific agency for the Chemical Sector.
The Commercial Facilities Sector includes a diverse range of sites that draw large crowds of people for shopping, business, entertainment, or lodging. Facilities within the sector operate on the principle of open public access, meaning that the general public can move freely without the deterrent of highly visible security barriers. The majority of these facilities are privately owned and operated, with minimal interaction with the federal government and other regulatory entities.
The Commercial Facilities Sector consists of eight subsectors:
Entertainment and Media (e.g., motion picture studios, broadcast media)
Gaming (e.g., casinos)
Lodging (e.g., hotels, motels, conference centers)
Outdoor Events (e.g., theme and amusement parks, fairs, campgrounds, parades)
Public Assembly (e.g., arenas, stadiums, aquariums, zoos, museums, convention centers)
Real Estate (e.g., office and apartment buildings, condominiums, mixed use facilities, self-storage)
Retail (e.g., retail centers and districts, shopping malls)
Sports Leagues (e.g., professional sports leagues and federations)
Source:
Public Domain image. Source:
On what other CI sectors do most commercial facilities rely for successful operation?

7. Communications Sector (Lifeline)
Enabling function for all other sectors
Includes voice and data communications across a diverse telecommunications infrastructure
Largely owned and operated by private companies
How do some of the other sectors support the Communications Sector?
Communications Sector: An enabling function across all CI sectors. The Department of Homeland Security is the sector-specific agency for the Communications Sector.
The Communications Sector is closely linked to other sectors, including:
The Energy Sector, which provides power to run cellular towers, central offices, and other critical communications facilities, and also relies on communications to aid in monitoring and controlling the delivery of electricity.
The Information Technology Sector, which provides critical control systems and services, physical architecture, and Internet infrastructure, and also relies on communications to deliver and distribute applications and services.
The Financial Services Sector, which relies on communications for the transmission of transactions and operations of financial markets.
The Emergency Services Sector, which depends on communications for directing resources, coordinating response, operating public alert and warning systems, and receiving emergency calls.
The Transportation Systems Sector, which provides the diesel fuel needed to power backup generators and relies on communications to monitor and control the flow of ground, sea, and air traffic.
Image Source:
Public Domain image. Source:

8. Critical Manufacturing Sector
Core industries include:
Primary metals manufacturing
Machinery manufacturing
Electrical equipment, appliance, and component manufacturing
Transportation equipment manufacturing
How would an attack on the Energy Sector impact this sector?
Critical Manufacturing Sector: The Department of Homeland Security is designated as the sector-specific agency for the Critical Manufacturing Sector.
The Critical Manufacturing Sector is crucial to the economic prosperity and continuity of the United States. A direct attack on or disruption of certain elements of the manufacturing industry could disrupt essential functions at the national level and across multiple critical infrastructure sectors.
The Critical Manufacturing Sector identified several industries to serve as the core of the sector:
Primary metals manufacturing
Iron and steel mills, and ferroalloy manufacturing
Alumina and aluminum production and processing
Nonferrous metal production and processing
Machinery Manufacturing
Engine and turbine manufacturing
Power transmission equipment manufacturing
Earth moving, mining, agricultural, and construction equipment manufacturing
Electrical equipment, appliance, and component manufacturing
Electric motor manufacturing
Transformer manufacturing
Generator manufacturing
Transportation equipment manufacturing
Vehicles and commercial ships manufacturing
Aerospace products and parts manufacturing
Locomotives, railroad and transit cars, and rail track equipment manufacturing
Products made by these manufacturing industries are essential to many other critical infrastructure sectors. The Critical Manufacturing Sector focuses on the identification, assessment, prioritization, and protection of nationally significant manufacturing industries within the sector that may be susceptible to manmade and natural disasters.
Source:
Public Domain image. Source:

9. Dams Sector Delivers critical water retention and control services
Comprised of dams, navigation locks, levees, hurricane barriers, mine tailing impoundments, and other similar water retention and/or control facilities
Dams Sector: The Department of Homeland Security is designated as the sector-specific agency for dams.
The Dams Sector delivers critical water retention and control services in the United States, including hydroelectric power generation, municipal and industrial water supplies, agricultural irrigation, sediment and flood control, river navigation for inland bulk shipping, industrial waste management, and recreation. Its key services support multiple critical infrastructure sectors and industries. Dams Sector assets irrigate at least 10 percent of U.S. cropland, help protect more than 43 percent of the U.S. population from flooding, and generate about 60 percent of the electricity in the Pacific Northwest.
There are more than 87,000 dams in the United States; approximately 65 percent are privately owned, and approximately 77 percent are regulated by state dams safety offices. The Dams Sector has interdependencies with a wide range of other sectors, including:
Communications - Communications networks enable remote Dams Sector operations and control.
Energy - Hydropower dams provide critical electricity resources and black start capabilities.
Food and Agriculture - Dams Sector assets provide water for irrigation and protect farmland from flooding.
Transportation Systems - Navigation lock systems in the Dams Sector enable all inland and intra-coastal waterway freight movements. Major roads may traverse dams.
Water - Dams Sector assets provide drinking water supplies and pumping capabilities.
Source:
Public Domain image. Source:

10. Defense Industrial Base Sector
Enables research and development, design, production, delivery, and maintenance of military weapons systems, subsystems, and components to meet U.S. military requirements.
The sector provides products and services that are essential to mobilize, deploy, and sustain military operations.
Defense Industrial Base Sector: The Defense Industrial Base Sector is the worldwide industrial complex that enables research and development, as well as design, production, delivery, and maintenance of military weapons systems, subsystems, and components or parts, to meet U.S. military requirements.
The Defense Industrial Base partnership consists of Department of Defense components; more than 100,000 Defense Industrial Base companies and their subcontractors who perform under contract to the Department of Defense; companies providing incidental materials and services to the Department of Defense; and government-owned/contractor-operated and government-owned/government-operated facilities. Defense Industrial Base companies include domestic and foreign entities, with production assets located in many countries. The sector provides products and services that are essential to mobilize, deploy, and sustain military operations.
The Defense Industrial Base Sector does not include the commercial infrastructure of providers of services such as power, communications, transportation, or utilities that the Department of Defense uses to meet military operational requirements. These commercial infrastructure assets are addressed by other sector-specific agencies.
Source:
Public Domain image. Source:

11. Emergency Services Sector (Lifeline)
Saves lives, protects property and the environment, assists communities impacted by disasters, and aids recovery during emergencies.
Composed of 5 roles:
Law enforcement
Fire and emergency services
Emergency medical services
Emergency management
Public works
Emergency Services Sector: The Emergency Services Sector (ESS) is a community of millions of highly skilled, trained personnel, along with the physical and cyber resources that provide a wide range of prevention, preparedness, response, and recovery services during both day-to-day operations and incident response.
The ESS includes geographically distributed facilities and equipment in both paid and volunteer capacities, organized primarily at the federal, state, local, tribal, and territorial levels of government, such as city police departments and fire stations, county sheriff’s offices, Department of Defense police and fire departments, and town public works departments. The ESS also includes private sector resources, such as industrial fire departments, private security organizations, and private emergency medical services providers.
Source:
Public Domain image. Source:

12. Energy Sector (Lifeline)
Enables all critical infrastructure sectors, supplying fuel to the transportation industry, electricity to households and business
Three segments:
Electricity
Oil
Gas
Energy Sector: Enabling function of the other CI sectors. More than 80 percent of the U.S. energy infrastructure is owned by private companies, supplying sources of energy to business and homes across the United States and enabling the nation’s economy to grow.
The U.S. energy infrastructure fuels the economy of the 21st century. The Department of Energy is the sector-specific agency for the Energy Sector.
The energy infrastructure is divided into three interrelated segments: electricity, oil, and natural gas. The U.S. electricity segment contains more than 6,413 power plants (this includes 3,273 traditional electric utilities and 1,738 nonutility power producers) with approximately 1,075 gigawatts of installed generation. Approximately 48 percent of electricity is produced by combusting coal (primarily transported by rail), 20 percent in nuclear power plants, and 22 percent by combusting natural gas. The remaining generation is provided by hydroelectric plants (6 percent), oil (1 percent), and renewable sources such as solar, wind, and geothermal (3 percent). The heavy reliance on pipelines to distribute products across the nation highlights the interdependencies between the Energy and Transportation Systems Sector.
The reliance of virtually all industries on electric power and fuel means that all sectors have some dependence on the Energy Sector. The Energy Sector is well aware of its vulnerabilities and is leading a significant voluntary effort to increase its planning and preparedness. Cooperation through industry groups has resulted in substantial information sharing of best practices across the sector. Many sector owners and operators have extensive experience abroad with infrastructure protection and have more recently focused their attention on cybersecurity.
Source:
Public Domain image. Source:

13. Financial Services Sector
Depository institutions (banks, insurance companies), credit and financing companies
Potential risks include large-scale power outages, natural disasters, and cyberattacks
How might an attack on the Financial Service Sector impact the nation?
Financial Services Sector: The Department of the Treasury is designated as the sector-specific agency for the Financial Services Sector.
The Financial Services Sector includes thousands of depository institutions, providers of investment products, insurance companies, other credit and financing organizations, and the providers of the critical financial utilities and services that support these functions.
Financial institutions vary widely in size and presence, ranging from some of the world’s largest global companies with thousands of employees and many billions of dollars in assets, to community banks and credit unions with a small number of employees serving individual communities. Whether an individual savings account, financial derivatives, credit extended to a large organization, or investments made to a foreign country, these products allow customers to:
Deposit funds and make payments to other parties
Provide credit and liquidity to customers
Invest funds for both long and short periods
Transfer financial risks between customers
Source:
Public Domain image. Source:

14. Food and Agriculture Sector
Majority under private ownership
Consists of farms, restaurants, and food manufacturing, processing, and storage facilities
Approximately one-fifth of the nation’s economic activity
On which other sectors does the Food and Agriculture Sector depend?
Food and Agriculture Sector: The Department of Agriculture and the Department of Health and Human Services are designated as co-sector-specific agencies for the Food and Agriculture Sector.
The Food and Agriculture Sector is almost entirely under private ownership. It is composed of an estimated 2.1 million farms, 935,000 restaurants, and more than 200,000 registered food manufacturing, processing, and storage facilities. This sector accounts for roughly one-fifth of the nation's economic activity.
The Food and Agriculture Sector has critical dependencies with many sectors, but particularly with the following:
Water and Wastewater Systems, for clean irrigation and processed water
Transportation Systems, for movement of products and livestock
Energy, to power the equipment needed for agriculture production and food processing
Chemical, for fertilizers and pesticides used in the production of crops
Image source:
Public Domain Image, source:

15. Government Facilities Sector
Buildings in U.S. and overseas that are owned or leased by government, including:
General-use office buildings
Special-use military installations
Embassies
Courthouses
National laboratories
Structures that house critical equipment, networks, and functions
Two subsectors:
Education Facilities
National Monuments and Icons
Government Facilities Sector: The Department of Homeland Security and the General Services Administration are designated as co-sector-specific agencies for the Government Facilities Sector.
The Government Facilities Sector includes a wide variety of buildings, located in the United States and overseas, that are owned or leased by federal, state, local, and tribal governments. Many government facilities are open to the public for business activities, commercial transactions, or recreational activities, while others that are not open to the public contain highly sensitive information, materials, processes, and equipment. These facilities include general-use office buildings and special-use military installations, embassies, courthouses, national laboratories, and structures that may house critical equipment, systems, networks, and functions.
In addition to physical structures, the sector includes cyber elements that contribute to the protection of sector assets (e.g., access control systems and closed-circuit television systems) as well as individuals who perform essential functions or possess tactical, operational, or strategic knowledge.
The Education Facilities Subsector covers pre-kindergarten through twelfth-grade schools, institutions of higher education, and business and trade schools. The subsector includes facilities that are owned by government and private sector entities.
The National Monuments and Icons Subsector encompasses a diverse array of assets, networks, systems, and functions located throughout the United States. Many National Monuments and Icons assets are listed in either the National Register of Historic Places or the List of National Historic Landmarks.
Source:
Public Domain image. Souce:

16. Healthcare and Public Health Sector
Protects sectors of the economy from terrorism, infectious disease outbreaks, and natural disasters
Largely owned and operated by private sector organizations
Plays a significant role in response and recovery across all other sectors in the event of a natural or manmade disaster
Healthcare and Public Health Sector: The Department of Health and Human Services is designated as the sector-specific agency for the Healthcare and Public Health Sector.
The Healthcare and Public Health Sector protects all sectors of the economy from hazards such as terrorism, infectious disease outbreaks, and natural disasters. Because the vast majority of the sector's assets are privately owned and operated, collaboration and information sharing between the public and private sectors is essential to increasing resilience of the nation's Healthcare and Public Health critical infrastructure.
Operating in all U.S. states, territories, and tribal areas, the sector plays a significant role in response and recovery across all other sectors in the event of a natural or manmade disaster. While healthcare tends to be delivered and managed locally, the public health component of the sector, focused primarily on population health, is managed across all levels of government: national, state, regional, local, tribal, and territorial.
Source:
Public Domain image. Source:

17. Information Technology Sector
Hardware, software, and information technology systems and services and, in collaboration with the Communications Sector, the Internet
Operated by multiple entities, often owners and operators, that maintain and restore the network, including the Internet
Information Technology Sector: The Department of Homeland Security is designated as the sector-specific agency for the Information Technology Sector.
The Information Technology Sector is central to the nation's security, economy, and public health and safety as businesses, governments, academia, and private citizens are increasingly dependent upon Information Technology Sector functions. These virtual and distributed functions produce and provide hardware, software, and information technology systems and services, and—in collaboration with the Communications Sector—the Internet. The sector's complex and dynamic environment makes identifying threats and assessing vulnerabilities difficult and requires that these tasks be addressed in a collaborative and creative fashion.
Information Technology Sector functions are operated by a combination of entities—often owners and operators and their respective associations—that maintain and reconstitute the network, including the Internet. Although information technology infrastructure has a certain level of inherent resilience, its interdependent and interconnected structure presents challenges as well as opportunities for coordinating public and private sector preparedness and protection activities.
Source:
Public Domain image. Source:

18. Nuclear Reactors, Materials, and Waste Sector
Nuclear power accounts for approximately 20 percent of our nation's electrical generation, provided by 99 commercial nuclear plants.
Includes:
Nuclear power plants
Non-power nuclear reactors used for research, testing, and training
Manufacturers of nuclear reactors or components
Radioactive materials used primarily in medical, industrial, and academic settings
Nuclear fuel cycle facilities
Decommissioned nuclear power reactors
Transportation, storage, and disposal of nuclear and radioactive waste
Nuclear Reactors, Materials, and Waste Sector: The Department of Homeland Security is designated as the sector-specific agency for the Nuclear Reactors, Materials, and Waste Sector.
Source:
Public Domain image. Source:

19. Transportation Systems Sector (Lifeline)
Systems that move people and goods through the country and overseas.
Includes 7 key subsectors:
Aviation – aircraft, air traffic control systems, airports, heliports, and landing strips
Highway and Motor Carrier – roadways, bridges, tunnels, and vehicles (buses, school buses)
Mass Transit and Passenger Rail – terminals and infrastructure for passenger rail and bus systems (includes vanpools)
Maritime Transportation System – U.S. coastline, ports, and waterways
Pipeline Systems – natural gas, chemical pipelines
Freight Rail – railroads
Postal and Shipping – mail and delivery services
Source:
Transportation: The nation's transportation system quickly, safely, and securely moves people and goods through the country and overseas. The Department of Homeland Security and the Department of Transportation are designated as co-sector-specific agencies for the Transportation Systems Sector.
The Transportation Systems Sector consists of seven key subsectors, or modes:
Aviation includes aircraft, air traffic control systems, and about 19,700 airports, heliports, and landing strips. Approximately 500 provide commercial aviation services at civil and joint-use military airports, heliports, and sea plane bases. In addition, the aviation mode includes commercial and recreational aircraft (manned and unmanned) and a wide variety of support services, such as aircraft repair stations, fueling facilities, navigation aids, and flight schools.
Highway and Motor Carrier encompasses more than 4 million miles of roadway, more than 600,000 bridges, and more than 350 tunnels. Vehicles include trucks, including those carrying hazardous materials; other commercial vehicles, including commercial motorcoaches and school buses; vehicle and driver licensing systems; traffic management systems; and cyber systems used for operational management.
Mass Transit and Passenger Rail includes terminals, operational systems, and supporting infrastructure for passenger services by transit buses, trolleybuses, monorail, heavy rail—also known as subways or metros—light rail, passenger rail, and vanpool/rideshare. Public transportation and passenger rail operations provided an estimated 10.8 billion passenger trips in 2014.
Maritime Transportation System consists of about 95,000 miles of coastline, 361 ports, more than 25,000 miles of waterways, and intermodal landside connections that allow the various modes of transportation to move people and goods to, from, and on the water.
Pipeline Systems consist of more than 2.5 million miles of pipelines spanning the country and carrying nearly all of the nation's natural gas and about 65 percent of hazardous liquids, as well as various chemicals. Above-ground assets, such as compressor stations and pumping stations, are also included.
Freight Rail consists of seven major carriers, hundreds of smaller railroads, over 138,000 miles of active railroad, over 1.33 million freight cars, and approximately 20,000 locomotives. An estimated 12,000 trains operate daily. The Department of Defense has designated 30,000 miles of track and structure as critical to mobilization and resupply of U.S. forces.
Postal and Shipping moves about 720 million letters and packages each day and includes large integrated carriers, regional and local courier services, mail services, mail management firms, and chartered and delivery services.
Source:

20. Water and Wastewater Systems Sector (Lifeline)
Safe drinking water is essential to protecting public health.
Properly treated wastewater prevents disease and protects the environment.
Especially vulnerable to attack and natural disasters that could result in large scale illness or causalities.
Energy and other sectors depend on water to operate.
Water and Wastewater Systems: A CI sector essential to modern life and the economy. Safe drinking water is a requirement for public health. Properly treated wastewater prevents disease.
There are approximately 153,000 public drinking water systems and more than 16,000 publicly owned wastewater treatment systems in the United States. More than 80 percent of the U.S. population receives their potable water from these drinking water systems, and about 75 percent of the U.S. population has its sanitary sewerage treated by these wastewater systems.
The Water and Wastewater Systems Sector is vulnerable to a variety of attacks, including contamination with deadly agents; physical attacks, such as the release of toxic gaseous chemicals; and cyberattacks. The result of any variety of attack could be large numbers of illnesses or casualties and/or a denial of service that would also impact public health and economic vitality. The sector is also vulnerable to natural disasters. Critical services, such as firefighting and healthcare (hospitals), and other dependent and interdependent sectors, such as Energy, Food and Agriculture, and Transportation Systems, would suffer negative impacts from a denial of service in the Water and Wastewater Systems Sector.
Source:
Source:

21. Interconnected Nature of Critical Infrastructure
Current image source:
Citation:
“Figure 3.1 Connections and Interdependencies Across the Country”. National Infrastructure Protection Plan. Department of Homeland Security. Unknown Year.

22. Critical Infrastructure Protection and Resilience Processes
Infrastructure resilience is “the ability to reduce the magnitude and/or duration of disruptive events.” — DHS
The National Infrastructure Protection Plan (NIPP) provides the unifying structure for the integration of existing and future critical infrastructure security and resilience efforts into a single national program.
The NIPP 2013: Partnering for Critical Infrastructure Security and Resilience outlines how government and the private sector will work together to manage the risks and resiliency outcomes for critical infrastructure.

23. Collaborative Partnerships
A collaboration of partnerships among private owners, federal, state, local, tribal, and territorial governments is required to manage the risks to the nation’s critical infrastructure.
This requires an integrated approach to:
Identify, deter, detect, disrupt, and prepare for threats and hazards to the nation’s CI
Reduce vulnerabilities of critical assets, systems, and networks
Mitigate the potential consequences to critical infrastructure of incidents or adverse events that occur – NIPP 2013
Fusion centers: state and major urban area focal points for the receipt, analysis, gathering, and sharing of threat-related information between federal, state, local, tribal, territorial (SLTT), and private sector partners.
DHS manages the Fusion Center Performance Program (FCPP), which evaluates the capability and performance of the national network.

24. PPD-21 Strategic Imperatives
Refine and clarify functional relationships across the federal government to advance the national unity of effort to strengthen critical infrastructure security and resilience
Enable efficient information exchange by identifying baseline data and systems requirements for the federal government
Implement an integration and analysis function to inform planning and operational decisions regarding critical infrastructure
The PPD directs the establishment of two national critical infrastructure centers operated by DHS – one for physical infrastructure and another for cyber infrastructure. These centers are to be integrated and serve as the focal points for critical infrastructure partners to obtain situational awareness and actionable information to protect the physical and cyber aspects of critical infrastructure.
According to the PPD, the timely exchange of threat and vulnerability information is key to securing critical infrastructure. To facility that goal, requirements must be identified with respect to how that information will be formatted and disseminated, taking into consideration system interoperability and the need for redundant/alternate systems in the event of system disruption. Federal agencies are tasked with ensuring that all privacy principles, policies, and procedures are implemented in accordance with the law and will oversee information sharing.
Builds on the first two imperatives and recommends implementing an integration and analysis function that will exist at the intersection of the two national centers listed in Imperative 1. This shall provide the capability to “collate, assess, and integrate vulnerability and consequence information with threat streams and hazard information to:
a. Aid in prioritizing assets and managing risks to critical infrastructure;
b. Anticipate interdependencies and cascading impacts;
c. Recommend security and resilience measures for critical infrastructure prior to, during, and after an event or incident; and
d. Support incident management and restoration efforts related to critical infrastructure.”
Presidential Policy Directive/PPD

25. Role of Department of Homeland Security
Presidential Policy Directive/PPD-21, released Feb. 12, 2013, designates the Department of Homeland Security as responsible for:
Providing guidance
Promoting national unity of effort
Coordinating the federal effort to provide security and resiliency to the nation’s critical infrastructure
From PPD-221:
Secretary of Homeland Security The Secretary of Homeland Security shall provide strategic guidance, promote a national unity of effort, and coordinate the overall Federal effort to promote the security and resilience of the Nation's critical infrastructure. In carrying out the responsibilities assigned in the Homeland Security Act of 2002, as amended, the Secretary of Homeland Security evaluates national capabilities, opportunities, and challenges in protecting critical infrastructure; analyzes threats to, vulnerabilities of, and potential consequences from all hazards on critical infrastructure; identifies security and resilience functions that are necessary for effective public-private engagement with all critical infrastructure sectors; develops a national plan and metrics, in coordination with SSAs and other critical infrastructure partners; integrates and coordinates Federal cross-sector security and resilience activities; identifies and analyzes key interdependencies among critical infrastructure sectors; and reports on the effectiveness of national efforts to strengthen the Nation's security and resilience posture for critical infrastructure.
Additional roles and responsibilities for the Secretary of Homeland Security include:
1) Identify and prioritize critical infrastructure, considering physical and cyber threats, vulnerabilities, and consequences, in coordination with SSAs and other Federal departments and agencies;
2) Maintain national critical infrastructure centers that shall provide a situational awareness capability that includes integrated, actionable information about emerging trends, imminent threats, and the status of incidents that may impact critical infrastructure;
3) In coordination with SSAs and other Federal departments and agencies, provide analysis, expertise, and other technical assistance to critical infrastructure owners and operators and facilitate access to and exchange of information and intelligence necessary to strengthen the security and resilience of critical infrastructure;
4) Conduct comprehensive assessments of the vulnerabilities of the Nation's critical infrastructure in coordination with the SSAs and in collaboration with SLTT entities and critical infrastructure owners and operators;
5) Coordinate Federal Government responses to significant cyber or physical incidents affecting critical infrastructure consistent with statutory authorities;
6) Support the Attorney General and law enforcement agencies with their responsibilities to investigate and prosecute threats to and attacks against critical infrastructure;
7) Coordinate with and utilize the expertise of SSAs and other appropriate Federal departments and agencies to map geospatially, image, analyze, and sort critical infrastructure by employing commercial satellite and airborne systems, as well as existing capabilities within other departments and agencies; and
8) Report annually on the status of national critical infrastructure efforts as required by statute.

26. Role of Sector-Specific Agencies
As each critical infrastructure sector has unique characteristics, operating models, and risk profiles, specific agencies are assigned to each of the critical infrastructure sectors. Their duties include:
Coordinate with DHS and other agencies
Serve as a federal interface, coordinating sector-specific activities
Carry out incident management responsibilities
Provide, support, and facilitate technical assistance and consultations for that sector to assist with vulnerability identification and mitigation
Provide reports to DHS
From PPD-21:
Sector-Specific Agencies Each critical infrastructure sector has unique characteristics, operating models, and risk profiles that benefit from an identified Sector-Specific Agency that has institutional knowledge and specialized expertise about the sector. Recognizing existing statutory or regulatory authorities of specific Federal departments and agencies, and leveraging existing sector familiarity and relationships, SSAs shall carry out the following roles and responsibilities for their respective sectors:
1) As part of the broader national effort to strengthen the security and resilience of critical infrastructure, coordinate with the Department of Homeland Security (DHS) and other relevant Federal departments and agencies and collaborate with critical infrastructure owners and operators, where appropriate with independent regulatory agencies, and with SLTT entities, as appropriate, to implement this directive;
2) Serve as a day-to-day Federal interface for the dynamic prioritization and coordination of sector-specific activities;
3) Carry out incident management responsibilities consistent with statutory authority and other appropriate policies, directives, or regulations;
4) Provide, support, or facilitate technical assistance and consultations for that sector to identify vulnerabilities and help mitigate incidents, as appropriate; and
5) Support the Secretary of Homeland Security's statutorily required reporting requirements by providing on an annual basis sector-specific critical infrastructure information.

27. Sector-Specific Agencies
Sector – SSA
Sector - SSA
Chemical Sector — Department of Homeland Security
Financial Services Sector – Department of the Treasury
Commercial Facilities Sector — Department of Homeland Security
Food and Agriculture Sector – Department of Agriculture and Department of Health and Human Services
Communications Sector — Department of Homeland Security
Government Facilities Sector – Department of Homeland Security and the General Services Administration
Critical Manufacturing Sector — Department of Homeland Security
Healthcare and Public Health Sector – Department of Health and Human Services
Dams Sector — Department of Homeland Security
Information Technology Sector – Department of Homeland Security
Defense Industrial Base Sector — DoD
Nuclear Reactors, Materials, and Waste Sector - – Department of Homeland Security
Emergency Services Sector – Department of Homeland Security
Transportation Systems Sector - – Department of Homeland Security and the Department of Transportation
Energy Sector – Department of Energy
Water and Wastewater Systems Sector – Environmental Protection Agency

28. Role of State, Local, Tribal, and Territorial Governments
The State, Local, Tribal, and Territorial Government Coordinating Council (SLTTGCC) serves as a forum to ensure that state, local, tribal, and territorial (SLTT) homeland security partners are integrated as active participants in national critical infrastructure security and resilience efforts. — DHS
They provide an organizational structure to coordinate across jurisdictions on SLTT government-level guidance, strategies, and programs. — DHS
The SLTTGCC also provides information on SLTT-level security and resilience initiatives, activities, and best practices. — DHS

29. Standards
North American Electricity Reliability Council (NERC) — Develops NERC Reliability Standards that define the reliability requirements for planning and operating the North American bulk power system, using a results-based approach.
National Institute of Standards and Technologies (NIST) — Developed a voluntary risk-based Cybersecurity Framework, a set of industry and best practices to help critical infrastructure organizations manage cybersecurity risks.
North American Electricity Reliability Council (NERC) - A nonprofit formed in 1968 by the electric utility industry to promote reliability and adequacy of bulk power transmission in the electric utility systems in North America.

30. FEMA Courses and Certifications
Foundational Course
Purpose
Critical Infrastructure Support Annex
Support Annexes describe how federal departments and agencies, the private sector, volunteer organizations, and nongovernmental organizations (NGOs) coordinate and execute the common support processes and administrative tasks required during an incident.
The National Infrastructure Protection Plan, An Introduction
The purpose of this course is to present an overview of the National Infrastructure Protection Plan (NIPP).
Critical Infrastructure Security and Resilience: Achieving Results through Partnership and Collaboration
The course is designed for critical infrastructure owners and operators from both the government and private sector and those with critical infrastructure duties and responsibilities at the state, local, tribal, and territorial levels.
Implementing Critical Infrastructure Security and Resilience
This course introduces those with critical infrastructure duties and responsibilities at the state, local, tribal, and territorial levels to the information they need and the resources available to them in the execution of the mission to secure and improve resilience in the nation’s critical infrastructure.
The DHS Office of Infrastructure Protection (IP) developed these courses to train and educate the critical infrastructure community, and to support implementation of the National Infrastructure Protection Plan. These courses were developed in collaboration with critical infrastructure stakeholders including Federal, State, local, tribal, and territorial government partners, critical infrastructure owners and operators, and private sector partners. In addition, sector-specific courses and security awareness courses are offered. Registration is required to take the courses at

31. End slide - Credits