Leveraging IT to Enhance Physical Security Posture: Paving the - PowerPoint PPT Presentation

Leveraging IT to Enhance Physical Security Posture: Paving the Foundation to Success July 20, 2016 Carla Reid, GM/CEO Tom Street, DGM-Administration Mujib U. Lodhi – Harvey Baker – Kenn Bengtsson

Our Strategic Focus An IT Strategy informed by fresh, holistic and business-driven thinking will deliver far more than a traditional legacy- system replacement agenda.

WSSC Core Functional Pillars WSSC’s core functional pillars provided the business context for our analysis: Build & Renew Water Filtration & Distribution, Crosscutting Plant and Wastewater Collection & Business Infrastructure Treatment Customer Service Functions Security & Safety

WSSC’s Strategic Priorities: Security and Safety ► Protect our people, our business, and our community through proactive planning emergency preparedness and utilization of effective risk management

Our Response The Electronic Security System (ESS)

Electronic Security System • ESS project background • Why • When • What • ESS Status • Site conversion • Issues and Risks • Schedule • Budget • Proactive Security Technologies • LPR • Screening • Analytics

Background January 2013, ABS Consulting was awarded a contract to perform a Security Vulnerability Assessment of the Utility. Modified RAM-W methodology was selected by WSSC. • Developed by Sandia Lab & AWWA • Pairwise comparison to determine criticality and prioritize security upgrades • Evaluating risks based on the effectiveness of current security system Identifying measures to reduce risks associated with • Natural hazard events • Dependency hazard events • Malevolent terrorist attacks resulting in • Contamination • Disruption • Destruction of critical components

Background SVA Recommendations • Develop a Security Culture throughout WSSC • Increase security resources • Upgrade the existing security system • Improve intra-agency coordination and cooperation for security program • Develop Security Policies per G430 Gap assessment • Improve records retention and document control • Update ERP and develop methodologies • Develop a EMP, training, practice, exercises and disaster support

Background How much and in what capacity can the implementation of advanced technology do to meet the SVA recommendations? The ESS Project was about to be launched

Project Objectives The Process • Methodically and carefully carry out project in 4 phases • Phase 1 – Develop and install necessary infrastructure to support the system. • Phase 2 – Upgrade old, end of life Access Control and Cameras for 38 identified critical sites • Phase 3 – Upgrade all other less critical sites. Add advanced security analytics • Develop WSSC Physical Security concept • Reactive to proactive approach • Integrate business functions • Converged Security • Phase 4 • Complete sites currently under construction • Adding analytical devices

The vision of a security platform

The phased process Phase 1 – Complete • New secured ESS Network • New ESS server farm • New ESS security enclosures protecting new endpoint devices • 38 remote sites plus RGH have new infrastructure installed Phase 2 – Completion in fall 2016 • Upgraded Access Control at 38 critical remote sites plus RGH • Issued new, high secured personal badges • Upgraded video surveillance system • Upgraded old cameras, added more cameras to support SVA • Implemented Physical Security Information Management system • All Administrators and Users are fully trained • Interaction with external law enforcement entities • Implemented Visitor Management System Phase 3 – Completion in fall 2017 • Converge less critical remote sites into new security platform • Add advanced security analytics for detection and recognition. • Implement converged security • Physical • Cyber Phase 4 – Completion in fall 2018 • Expanding video analytics • System Expansions/Upgrades

Timeline vs Budget vs Cost SOC rehab complete (Lobby & lake) 3/27/2015 New Sec Infrastructure installed 5/29/2015 Phase 3 Start Phase 3 Complete 8/1/2016 11/24/2017 Phase 4 Complete Project Start Phase 2 Start Phase 2 Complete Phase 4 Start 12/21/2018 4/14/2014 9/14/2015 10/28/2016 12/4/2017 2019 2014 2015 2016 2017 2018 Today $6.4M $1.8M $1.4M $1.4M Total estimated cost to completion: $11,000,000

Risk & Issues Issues • The learning curve is steeper than expected • Takes longer time to change cultural behaviors • Convenience vs Security is an issue • Converging consequences • Old technology is not always compatible when upgrading • Access Control clearances must be revamped Risks • Lack of human resources with up-to-date knowledge • Convenience factor out plays security awareness • Keeping doors propped open • Holding doors for people to get in • Vehicle tail gating • Limited security protocol and action plans for situations

Site Status Site Status Completion Site Status Completion Complete Damascus WWTP New infrastructure Sep 2016 Airpark WPS Falls Rd ST New infrastructure Sep 2016 Anacostia Complete Waiting for cut-over Falls Rd WPS New infrastructure Sep 2016 Bowie WPS New infrastructure Sep 2016 Ft Washington ET Complete Waiting for cut- Brighton Dam Under construction over Gaithersburg Complete Brink WPS New infrastructure Sep 2016 Complete Goshen Rd WPS Cedar Height WPS New infrastructure Sep 2016 Greenbelt ST New infrastructure Sep 2016 Central Ave WPS Under Construction Hampshire Gr ET New infrastructure Sep 2016 Clopper Rd WPS Complete Hill Rd WPS Complete Colesville WPS New infrastructure Sep 2016 Laurel Garage New infrastructure August 2016 Consolidated Lab Complete Little Seneca Dam Complete Damascus ET Complete Pointer Ridge ET New infrastructure Sep 2016 Complete Lyttonsville Depot Potomac WTP New infrastructure October 2016 Neelsville WPS Complete Rocky Gorge New infrastructure July 2016 N Woodside ST New infrastructure Sep 2016 Seneca WWTP Complete Waiting for cut- Parkway WWTP New infrastructure July 2016 over Patuxent WTP New infrastructure August 2016 Temple Hill Depot Complete Waiting for cut- over Piscataway WWTP Complete Waiting for cut-over New infrastructure July 2016 Western Branch

Site Status Remote Facilities Site Status Completion Shady Grove ST Complete South Laurel WPS New infrastructure August 2016 Suitland ET New infrastructure August 2016 RGH New infrastructure + ACS September 2016 + 1/3 cameras Glenmont ET Complete Number of Sites Completed Completed infrastructure 39 17 39

Site Status Pilots, Proof of Concepts and a proactive detect and deny system • Body worn camera with real-time transmitting • License Plate Recognition (LPR) • Video analytics • Intrusion • Loitering • Motion • Visitor Management System - Blacklisting • Network monitoring and status change detection • Thermal and Passive IR detection • Replacing analog Dispatch system with digital ditto • Replacing analog Intercom system with digital PSIM integrated system

Q & A