Civil Ination Awareness Program (CIAP).ppt

CivilInformationAwarenessProgram CIAP LinkingFederal StateandLocalLawEnforcementwithinaTotalInformationAwarenessGrid CIAPOverview EmphasisonLocallevel allsourceinformationfusioncenterfocusedonderivingHLSrelatedactionableknowledgeConductCriticalInfrastructureVulnerabilityAnalysisandThreatAssessmentsTrackIndicationsandEarlyWarningofThreatActivitiesProvideon goingnet assessmentandThreatSituationAwarenessCollaborationLinkbetweenFederal StateInformationCentersandlocalLEA FullSpectrumAnalysisandProduction Vulnerabilities IndicationsandWarning SituationAwareness Requirements Throughjointplanning clearcommunication comprehensivecoordination mutualaidatalllevelsandincreasedinformationsharing America sfirstresponderscanbetrainedandequippedtosavelivesintheeventofaterroristattack PresidentBush SecuringtheHomeland StrengtheningtheNation 2002Intelligencesharingcapabilityisthenumberonerequirementoflawenforcementagencies NIJSponsoredSurveyofLawEnforcementAgencies needaninformationsharingcapabilityAssociationofPoliceChiefsreporttoDoJ thenation slawenforcementcommunityneedstobeateam focusedonpredictiveintelligence AttorneyGeneralJohnAshcroftEstablishmentofnewDHS hasidentifiedarequirementforlocallevelintelligencefusioncentersaspartofnationalstrategyCriticalInfrastructureVulnerabilityAssessmentLocallevelInformationCoordinationandDisseminationCenters TheTechnologyNeededtoShareInformationisAlreadyHere EmphasisonLocallevel allsourceinformationfusioncenterfocusedonderivingHLSrelatedactionableknowledge Convertnebulousdatatoknowledgeandactionableoptions Data OpenSource Products PlanningToolsAdvisoriesAlertsBulletins What shappening Context DecisionSupport AllSourceReporting LocalOperationalArea FederalInfoProducts Citizen FieldOps CIAPOpsCenter Process ConductCriticalInfrastructureVulnerabilityAnalysisandThreatAssessments LocalDatabaseofPotentialTargetandLikelyThreatsusedtoDeriveanIndicationsandWarningProcess IdentifyPotentialTargetsSitesurveysDefinethesite scharacterizationsEvaluatethesite sphysicalsecuritypostureEvaluateThreatsandPrepareThreatModelsCorrelateThreattoVulnerabilitiesDefineIndicationsandEarlyWarningCriteriaPrepareRapidResponseReferenceProducts Process TrackIndicationsandEarlyWarningofThreatActivities Identifyactivitiesthatprovideevidenceindicatingthedevelopmentofapotentialincident DefineSpecificInformationRequirements SIR DefineNamedAreasofInterestNAICorrelateSIR NAIwithReportingSourceOpenReportingChannelsusingInformationAwareness IA NetPlot Record CorrelateandAssessIncomingReportsemployingIADatabaseandGeospatialInformationSystem GIS Display NAI Process Provideon goingnet assessmentandThreatSituationAwareness ResponsePersonnelConstantAwarenessofThreatSituation ConductDetailed Multi DisciplinedAssessmentofReportsbycomparingtoThreatModelsActualSituationAssessmentComparedtoPredictedEventsIdentifyDeviationsandUpdateAssessmentDisseminateAlerts AdvisoriesorBulletinsasAppropriateUpdateRapidResponseReferencesasAppropriate Explosives Chem BIO RDD HAZMAT Cyber Technologies CIAPPortalApplicationsIncidentManagementGISReportingChatVideoVTCVirtualEOCSanDiegoEnterprisePortalGISWorkFlowEngineAdvancedTerabyteSearchEngineSanDiegoStateUniversityVisLabCALIT2Infrastructure EndState CollaborationLinkbetweenFederal StateInformationCentersandlocalLEA IANet NationalInformationAwarenessGridthatEmphasizesLocalRequirements FederalInformationCenter LocalCIAP StateInformationCenters InformationProductsArchiveinDocumentLibraryImageryArchiveCollaborationToolsforChatandVTCSurveillanceVideooverTCP IPVoiceoverTCP IPIncidentManagementApplicationReal TimeReportingReportFormsandGISMapping ProofofConcept DomesticEmergencyResponseInformationService DERIS March 2002BurningMan August 2002SuperBowlXXXVII January 2003VulnerabilityAnalysisandThreatAssessmentConceptActiveCitizenProgramIndicationsandWarning SituationAwarenessConcept DomesticEmergencyResponseInformationService DERIS DemonstratedfeasibilityofportalbasedapproachforLEAcrisisresponseImplementsNationalInstituteforUrbanSearchandRescuestandardsforeXtremeInformationInfrastructure XII Prototypeacommonoperationalpictureandprovidereal timeC2forJointCivil MilitaryOperationsLEAfromChicago SanDiegoandLosAngelesutilizedcollaborationportalwithincontextofapotentialterroristattack BurningManEvent BurningManEventheldannuallySpontaneouscommunityof25 000peoplegatheringtoexploresocialphenomenaCIAPinvolvementEstablishedrobustcollaborationnetworkinanaustereenvironmentEmployedDERISportaltoolsasprimarymeansforreceiving archivinganddisseminatingemergencymanagementessentialelementsofinformationOverfourdayperiod implementedcomplexculturalanalysisfocusedonthedynamicsofanemergentcommunitySocialStructure caste tribal warlord Religion EthnicGroupsEvolvingEconomicStructureandStatusPoliticalstructureandstabilityLanguageandDialectReactiontointerveningforcesLocationandidentificationofkeysocialfacilities etcImplicationsTerrainandWeatherDevelopedReach backtechniquetointerfacewithSanDiegoStateUniversitySociologyLabandSanDiegoDataProcessingCenter sGISapplicationsProvidedSituationAwarenessProductsdescribingcommunityprofileinrealtimeIntegratedproductsandtoolswithin3 DvirtualEmergencyOperationsCenterEmployadvancedvisualizationtechniques SuperBowlXXXVII Future PhaseIExerciseandEvaluationSupport SpecialEventReadinessLevelIISanDiegoPolicerequestedsupportfromFederalOfficeforDomesticPreparedness ODP CIAPparticipation ReviewLocalVulnerabilityAnalysisandThreatAssessmentsasbasisforTabletopandFunctionalExercisesIdentifypotentialcriticalinfrastructuretargetsandtargetsystemsConductsitesurveys Definethesite sfunctional physicalandenvironmentalcharacterizations Evaluatethesite sphysicalsecuritypostureDefinethemostlikelyandmostdangerousthreat andDevelopthreatattackmodelsandcorrelatewithpotentialtargetvulnerabilitiesFacilitate Gaming ofThreatproblemagainstSecurityPostureProviderecommendationsforsecurity indicationsandwarning responseandmitigationresources TargetSites TargetSites TargetSites SanDiegoTargetSiteSurveys TargetFolders AreaThreatAssessment TargetFolders TargetFolders TargetFolders Analysis SanDiegoThreatEvaluation Analysis ThreatIntegration ExercisesandGaming SituationTemplates SiteSpecificReportsAnchoredtoDOD ODP SDNLStandards ThreatsModelsDevelopedusingDOD ODP SDNLStandards GraphicsnapshotsOfPotentialThreatElementsCourseofActionRelatedtoSpecificSites SituationTemplates SituationTemplates SituationTemplates Textbased butsupportedbyamplifyingimages plans diagramsandmaps Textbased butsupportedbyamplifyingimages plans diagramsandmaps OrientationGraphicSiteCharacteristicsGraphicsSiteFindingsGraphic DoctrinaltemplatesPotentialThreatElementProfile Image Description Existence Capability History Intentionsmatrix Assessment targetstheymayseeattractive Graphicsandterrainmodelbased Sit TemproughsforgamingTerrainModelRefinedSitTempQuadChart SiteFindingsGraphicExtract PTEimageanddescription TemplateofattackCOA Recommendations I W 1 2 3 SiteSurveyFacilityX Report SiteSpecificReports CollectDataperPlaybook Orientationgraphic BasicSiteinfoTable Workinginward identifyKOCCOAelements PotentialHazards Amplifyingdatatables SiteCharacteristicsgraphicscouldtakemanyformsbutwillillustrateInformationcollectedon OperationalConditions BuildingStructure IntermodallinksandSystemicImpact Procedures EquipmentandInformation HistoricAnalysis ConsequenceandSeverityAnalysis SecuritySystemEffectiveness ReviewOrientationandCharacteristicsGraphicsandidentifyvulnerabilities DOD ODPandSDNLprotocolsandevaluationchecklistsareusedinconjunctionwiththesegraphicstokeyinonmainlimitationsandopportunitiesprovidedbythelayoftheland SiteFindingsGraphicwillcombinecriticalcomponentsofOrientationandCharacteristicGraphicstoIllustratekeyanalyticalpointsthatneedtobebroughttothecustomer sattention ThiswillbeasinglegraphicAndwillprovidethebasisforgamingduringthreatintegrationphase TargetFolderprovidesdescriptionoffindingsinnarrativeformat DOD ODP SDNLVulnerabilityAnalysisProtocols CollectandReport InitialProduction VulnerabilityAnalysisPlaybook Analysis FinalProduction InformationandProductRefinementProcess 1SanDiegoTargetSiteSurveys AreaThreatAssessment SanDiegoThreatEvaluation ThreatDatabase Image Description Existence Capability History Intentionsmatrix Assessment targetstheymayseeattractive InformationandProductRefinementProcess CollectandReport InitialProduction Analysis FinalProduction DetailResearchInteractionwithLEA Report ThreatsModelsDevelopedusingDOD ODP SDNLStandards ThreatModelGraphics DoctrinalTemplatesIllustratehowPTEconductsattacks PTEQuadChartsprovideasnapshotofPTEAndthePotentialtargetsattractivetothegroup EvaluatePTEusingDOD ODP SDNLStandards CorrelatePTEModelstoTargetSiteFindingsGraphictodeterminewhichsitesfitPTEprofile 2SanDiegoThreatEvaluation InformationandProductRefinementProcess InitialProduction DetailedAnalysis FinalProduction SiteFindingGraphicExtract PTEimageanddescription TemplateofattackCOA Recommendations I W TableTopExerciseSeriestorefineSituationTemplatesandHelpSecurityPersonnelidentifygasintheirresourcesandprocedures EvaluateandrefineSituationTemplatesbasedonresultsofGaming EvaluategaminganddefineI W SituationTemplatesareagraphicillustrationofhowaPTEwouldattackaspecifictarget SituationTemplatesaredevelopedforeachattackscenarioforeachtargetsite InitialSituationTemplatesillustrateR Sactivity C2Activity InfiltrationActivityandAttackActivity DuringThreatIntegration sinitialproduction SituationTemplatesarebasedonananalysisandneedtoberefinedthroughexercisesandgaming TerrainModelsfacilitateexercisesbyprovidingtruescalerepresentationoftargetsite SituationTemplateQuadChartsillustrateMLandMDattackscenarios SMEEvaluation 3ThreatIntegration ActiveCitizenConcept ACriticalComponenttoCIAP Data OpenSource Products PlanningToolsAdvisoriesAlertsBulletins What shappening Context DecisionSupport AllSourceReporting LocalOperationalArea FederalInfoProducts ActiveCitizen FieldOps CIAPOpsCenter ActiveCitizenProgram ActiveCitizenProgramleveragestheeyesandearsofthecommunitytoassistlawenforcement MainConcept Communitybasedapproachtoempoweringcitizensaspartnerswithlawenforcementintheefforttoprotecttheirneighborhoodsandcommunities Issues EventsofSept11thandsubsequentinvestigationsrevealthattheterroristseasilyintegratedintoAmericancommunities Americansarenotawareofwhatindicatorstolookfor NoprogramcurrentlyexiststoeducatetheAmericanpublicaboutthingstolookforinpre attackenvironments NoprocessesorprogramsexisttomotivateAmericanstoinformlawenforcementofficialsofsuspiciousactivity Mostterroristswillinfiltrateintoethnically friendlylower middleclasseconomiccommunities Mostethniccommunitiesaresuspiciousofornon cooperativewithlawenforcementprograms Existingcommunity basedprogramsarenotcompatiblewiththeterroristmodusoperandi ActiveCitizenProgram ActiveCitizenProgramleveragestheeyesandearsofthecommunitytoassistlawenforcement Components OrganizationalandOperationalStructure ActCitCoordinationCenter CadreoftrainedcitizenvolunteersReportingContext ProvidecitizenswithspecificinformationreportingrequirementsReportingInfrastructure Internetbasedreportingportal HotlinePhoneBank Doesnotreplace911 InformationFusion Validate Coalesce ArchiveDisseminationtoLawEnforcement NeighborhoodActCitTeams ActCitCoordinationCenter CoordinationCenterisnotalawenforcemententity ActiveCitizenProgramPilotImplementation SmallScaleSampleImplementationDuringPilot EstablishCoordinationCenter SpaceinCountyEOCorSDSUVizlab Broadband TelephoneandVTCEstablishCadreSampleforinitialimplementation LinkwithSDPDCOPSprogram LinkwithSheriffsNeighborhoodWatchReportingArchitecture PDA CellPhone WirelessService BlockmarshalconceptTrainandExerciseImplement PullingtheCIAPPiecesTogether VulnerabilityAnalysis ThreatAssessment ActiveCitizen IndicationsandWarningSituationAwareness SuperBowlXXXVII Future PhaseIIEstablishCIAPCenterissupportofSanDiegoMulti AgencyCommand MAC StandupCIAPCentertoprovidereal timeinformationreportingandallsourcefusioninsupportofindicationsandwarningandsituationawarenessforSuperBowlsecurity LEADOC SDEOC MIL SDMAC SDPDDOC SDSODOC LATEW CATIC OHS SuperBowlCIAPCenter Reports CIAPPortal 18CitiesinSDCounty FullServiceVTC CATIC CaliforniaAnti TerrorismInformationCenter IANet LEADOC SDEOC MIL SDMAC SDPDDOC SDSODOC 18CitiesinSDCounty IANet NetAssessmentSupportAndProduction Dissemination Fed State Real TimeCollaborationTools ActCit Event ConceptofOperationsforSanDiego X Y SDSheriffDOC MilitaryCOCs CountyEOC MAC LATEW CATIC OHS FBISIOC FEMA CIAC SDPDDOC Field IndicationsandWarning I WflowintoCIAPviaIncidentReportsfromFieldAndSupportingDOCs LATEWProvidesNetAssessmentAndFusionSupport NationalAdvisoriesandI WFromFederalAgencies StateAntiTerrorismInformationCoordinationAdvisories ActCit FieldUnits Event ConceptofOperationsforSanDiego SituationAwareness X Y SDSheriffDOC MilitaryCOCs CountyEOC MAC LATEW CATIC OHS FBISIOC FEMA CIAC SDPDDOC Field Alerts AdvisoriesandBulletinsDisseminatedforCommonOperationalUnderstanding ActCit FieldUnits Implementation EstablishtheInformationAwarenessGrid SDSheriffDOC MilitaryCOCs CountyEOC MAC LATEW CATIC OHS FBISIOC FEMA CIAC IANet VirtualInformationAnalysisRound Table EachCenterrequiresonlyAusernameandpasswordForeachparticipant SBUoverVPN NationalCapabilitiesInDirectSupportofLocalEventinReal time ExistingTechnologyNOnewBoxesNONewSoftwareNOModificationstoArchitecturesPortalBasedConceptthatuses familiar everydaytypeapplications SDPDDOC SubjectMatterExperts FacilitatesExistingProcedures Event Information RealtimeaccesstoonlineVulnerabilityassessmentProductsandplanningtools FAA Implementation CIAPFunctionality MonitoringEvents SDSheriffDOC SDCountyEOC MAC CIAC IANet LocalCollaborationCoordinateEventRelatedOperationsEnsureReadinessPosture SDPDDOC Inf