Transportation Systems Security

by McDougall; Allan

• ISBN13: 9781420063783
• ISBN10: 1420063782
• Edition: 1st
• Format: Hardcover
• Copyright: 2008-05-28
• Publisher: CRC Press

Summary

Highlighting the critical importance of transportation to a country's infrastructure and survival, Transportation Systems Security presents the strategic, operational, and practical considerations involved in the implementation of physical, procedural, and managerial safeguards required to keep all modes of transportation up and running during an actual or potential disaster.

Table of Contents

Preface	p. xv
Acknowledgments	p. xix
Authors	p. xxi
Introduction to Transportation Systems	p. 1
Introduction	p. 1
Requirements for Securing the Sector	p. 2
The Transportation Sector as Linked Systems	p. 4
Impact Resulting from System Failure or Interruption	p. 4
Trends within the Transportation Sector	p. 6
Fragility and Reliability	p. 7
Understanding Transportation System Security	p. 8
Transportation System Topography	p. 11
Introduction	p. 11
General Overview	p. 12
Nodes and Conduits	p. 12
Directly and Indirectly Derived Demands	p. 14
Factors Affecting Directly Derived Demands	p. 14
Factors Affecting Indirect Demands	p. 16
Routing of Conduits	p. 19
Spoke-and-Hub Systems	p. 19
Control Points versus Nodes	p. 20
Control Points in Fixed Conduits	p. 20
Control Points along Flexible Conduits	p. 21
Terminal or Transfer?	p. 21
System as a Sum of Interlinked Systems	p. 22
Recap of the System	p. 24
Constraints within the System	p. 25
Coordination Networks	p. 25
Coordination Network-Operations	p. 25
How the Coordination Network Interacts with the System	p. 26
Conduit-Based Networks: Operations and Deployment	p. 27
Use of Systems for Automation	p. 27
Persons and Associations and Networks of Persons	p. 28
Aviation (Air)	p. 28
Marine	p. 28
Rail	p. 28
Trucking	p. 28
Sector-Wide	p. 29
Factors to Consider	p. 29
Business Goals and Mission Analysis	p. 33
Introduction	p. 33
Scales of Operability	p. 33
General Interaction	p. 35
How Is the System Mission Achieved?	p. 36
Considerations of the Transportation System	p. 37
System-Level Mission Statement	p. 38
Transportation System Security Mission Statement	p. 38
Determining the Mission Statement for Organizations	p. 39
Strategic Level Mission Statements as Organizational Constraints	p. 40
Operational Level within the Structure	p. 42
Interaction between the Strategic and Operational Levels	p. 42
Role of the Operational Level	p. 43
Tactical Level within the Structure	p. 43
Interaction between the Operational and Tactical Levels	p. 44
Overview of the Structure	p. 45
Limitations on Controls	p. 45
Limitations on the Strategic Level	p. 45
Limitations on the Operational Level	p. 47
Limitations on the Tactical Level	p. 47
Generation of the Mission Statements	p. 48
ABC Transport's Security Mission Statements	p. 49
How Does the Mission Statement Fit into Critical Infrastructure Protection?	p. 49
Questions	p. 50
General Definitions and Approaches	p. 53
Introduction	p. 53
Persons, Assets, Facilities, Information, and Activities	p. 54
Follow-the-Pipe Approach	p. 54
Mission-Driven Value	p. 55
Vulnerability-Driven Considerations	p. 55
Integrating the C-I-A Triad	p. 57
Confidentiality	p. 57
Integrity	p. 58
Availability	p. 59
Integrating the D-M-L Triad	p. 60
Disclosure	p. 61
Modification	p. 61
Loss	p. 62
CIP Management Approach	p. 62
Criticality	p. 63
Means, Opportunity, and Intent	p. 63
Convergence within the Transportation System	p. 64
The Concept of Risk, Residual Risk, and Risk Appetite	p. 65
Who Decides the Threshold for Risk Appetite?	p. 68
Avoiding, Addressing, Transferring, Accepting, and Ignoring Risk	p. 68
Avoiding Risk	p. 69
Addressing Risk	p. 69
Transferring Risk	p. 70
Accepting Risk	p. 71
Ignoring Risk	p. 71
Responses to Risk and Regulation	p. 72
Risk Awareness	p. 73
The Concept of Safeguards	p. 74
Tactical-Level Safeguards	p. 75
Operational-Level Safeguards	p. 75
Strategic-Level Safeguards	p. 76
Regulator-Driven Safeguards	p. 76
Prevention, Detection, Response, and Recovery	p. 77
Prevention	p. 77
Detection and Response	p. 78
Recovery	p. 80
Looking at Vulnerabilities	p. 80
Interim versus Proposed Measures	p. 81
Layered Defenses	p. 82
The Macro Level	p. 83
ABC Transport	p. 83
Local versus Systems Approaches	p. 89
Introduction	p. 89
Structures of Networks	p. 90
The Flux of the Transportation System	p. 91
Imperatives Driving Network Component Behavior	p. 92
Aligning Imperatives with the Mission Statement	p. 93
Relationship between Imperatives and Levels	p. 95
Tactical-Level Imperatives	p. 95
Operational-Level Imperatives	p. 96
Strategic-Level Imperatives	p. 97
Aligning the Levels of the Organization	p. 97
Communications among the Levels	p. 98
Pace of Evolution	p. 99
Internal Influences versus External Influences	p. 100
Transorganizational Constraints	p. 100
Alignment with Mission Statements	p. 100
Influences on Follow the Pipe	p. 101
Alignment of Transorganizational Groups with the Matrix	p. 101
Constraints by Regulators	p. 102
Questions	p. 103
Answers	p. 104
Criticality, Impact, Consequence, and Internal and External Distributed Risk	p. 107
Introduction	p. 107
Assignment of Value	p. 108
Criticality	p. 109
Single Points of Failure	p. 109
Consideration for Nationally Declared Critical Infrastructure	p. 110
Impact	p. 110
Tactical-Level Impact	p. 111
Operational-Level Impact	p. 111
Strategic-Level Impact	p. 112
Consideration for Control Systems	p. 113
Consequence	p. 113
Risk	p. 114
Internal Risk	p. 114
External Risk	p. 115
Risk Calculations	p. 115
ABC Transport Example	p. 116
Questions	p. 119
Mitigation and Cost Benefit	p. 121
Introduction	p. 121
First Step to Mitigating Risk-Strategy	p. 121
Key Considerations	p. 122
Management Tolerances toward Risk	p. 122
Costs	p. 122
Resistance to Change	p. 123
Selecting a Mitigation Strategy	p. 123
Ignoring Risk	p. 124
ABC Transport Example	p. 124
Tactical-Level Considerations	p. 125
ABC Transport Example	p. 126
Operational-Level Considerations	p. 126
ABC Transport Example	p. 127
Strategic-Level Considerations	p. 127
System-Level Considerations	p. 129
Cost Considerations	p. 130
Benefit Considerations	p. 130
Aligning Procedures with Performance	p. 131
Setting Strong Procedures	p. 131
Prevention	p. 132
Detection	p. 133
Response	p. 134
Recovery	p. 135
Linking Business Activities	p. 136
Robustness, Resiliency, and Redundancy	p. 137
Robustness	p. 137
Resiliency	p. 137
Redundancy	p. 137
Cascading Impacts	p. 138
Setting Goals and Benchmarks	p. 138
Generating the Manual	p. 139
Questions	p. 139
Certification, Accreditation, Registration, and Licensing	p. 141
Introduction	p. 141
Linking to Mitigation	p. 142
Certification	p. 142
Accreditation	p. 143
Registration	p. 144
Licensing	p. 145
The Trusted Transportation System	p. 145
ABC Transport Example	p. 146
Continuity of Operations Planning	p. 147
Questions	p. 149
Continuity of Operations	p. 151
Introduction	p. 151
What Is COOP?	p. 152
Aligning COOP, BCP, and Contingency Planning	p. 153
Background of COOP	p. 154
Objectives	p. 155
Elements	p. 156
Operations	p. 157
Issues Implementing COOP	p. 158
Aligning with Preventive Safeguards	p. 159
ABC Transport Example: Business Continuity Planning	p. 159
Detection	p. 161
ABC Transport Example: Corporate Policy	p. 163
Response and Mitigation	p. 163
ABC Transport Example: ABC Employees	p. 163
ABC Transport Example: The Regional Office	p. 164
ABC Transport Example: Senior Management	p. 164
Recovery	p. 165
Supply Chain Management Security	p. 166
Questions	p. 167
Networks and Communities of Trust	p. 171
Introduction	p. 171
Value of Community Involvement	p. 172
Prevention	p. 172
Detection	p. 173
Response	p. 174
Recovery	p. 174
Community Building as a Continuum	p. 175
Setting of Arrangements	p. 176
Communities and Council Building	p. 177
Tactical, Operational, and Strategic Considerations	p. 177
Communities, Trusted Networks, and Operations	p. 178
ABC Transport Example	p. 179
Questions	p. 180
Establishing and Monitoring Learning Systems	p. 183
Introduction	p. 183
Intent of the Learning System	p. 184
How the Intent Is Met	p. 184
Assessing or Evaluating against Criteria	p. 185
Prioritizing Based on Divergence	p. 186
Determining Causes	p. 186
Communicating Results	p. 187
Challenges with ISACs	p. 188
How Would Information Be Shared?	p. 189
Legal Issues with ISACs	p. 190
Consequences of Accidental Disclosure of Information	p. 191
Intellectual Property and ISACs	p. 192
Trend Analysis	p. 192
Reporting Trends	p. 192
Information Sharing and Definition and Categorization Challenges	p. 193
ABC Transport	p. 194
Questions	p. 195
Fragility and Fragility Analysis Management	p. 197
Introduction	p. 197
Requirement for Information	p. 198
Repositories of Information	p. 198
Lines of Communication	p. 201
Data Categorization	p. 202
Adaptability of the Categorization Process	p. 203
Adaptability of Data Sets or Mutability	p. 204
Assessment	p. 205
Integration into Mitigation Strategies	p. 206
Addressing Capacity in Decision-Making Gaps	p. 209
Translating of Strategies into Action	p. 209
The Rough Fragility Score for Evolution	p. 210
Additional Factors with Respect to Fragility	p. 213
Rating Geographic, Sphere of Control, and Interdependency Fragility	p. 214
Fragility Factor	p. 217
Relating to Resiliency and Redundancy	p. 217
Fragility and the Path of Least Resistance	p. 218
Mean Time between Business Failure (MTBBF)	p. 218
Mean Time between Market Failure (MTBMF)	p. 219
Persistent Fragility Leading to System Revolution	p. 220
Management of Fragility	p. 220
Relating to Prevention, Detection, Response, and Recovery	p. 221
Transportation System Security, Risk, and Fragility	p. 221
Questions	p. 221
Sample Memorandum of Understanding between The Radio Amateurs of Canada Inc. and The Canadian Red Cross Society	p. 223
Memorandum of Understanding between The Radio Amateurs of Canada Inc. and The Canadian Red Cross Society	p. 223
Appendix A	p. 224
Guidelines for Cooperation	p. 224
Appendix B	p. 225
Organization of The Canadian Red Cross Society	p. 225
Organization of The Radio Amateurs of Canada Inc	p. 225
Manager's Working Tool	p. 227
Product or Service Delivery	p. 227
Geography and Community Building	p. 231
Data Categorization and Information Management	p. 236
Establish a Learning System	p. 238
Maintenance and Sustainability	p. 242
Index	p. 245
Table of Contents provided by Ingram. All Rights Reserved.