Leveraging IT to Enhance Physical Security Posture: Paving the - - PowerPoint PPT Presentation

Leveraging IT to Enhance Physical Security Posture:

Paving the Foundation to Success

July 20, 2016

Carla Reid, GM/CEO Tom Street, DGM-Administration Mujib U. Lodhi – Harvey Baker – Kenn Bengtsson

Our Strategic Focus

An IT Strategy informed by fresh, holistic and business-driven thinking will deliver far more than a traditional legacy- system replacement agenda.

WSSC’s core functional pillars provided the business context for our analysis:

WSSC Core Functional Pillars

Distribution, Collection & Customer Service Build & Renew Plant and Infrastructure Water Filtration & Wastewater Treatment Crosscutting Business Functions

Security & Safety

WSSC’s Strategic Priorities: Security and Safety

►Protect our people, our business, and our

community through proactive planning emergency preparedness and utilization of effective risk management

Our Response

The Electronic Security System (ESS)

Electronic Security System

• ESS project background
• Why
• When
• What
• ESS Status
• Site conversion
• Issues and Risks
• Schedule
• Budget
• Proactive Security Technologies
• LPR
• Screening
• Analytics

Background

January 2013, ABS Consulting was awarded a contract to perform a Security Vulnerability Assessment of the Utility. Modified RAM-W methodology was selected by WSSC.

• Developed by Sandia Lab & AWWA
• Pairwise comparison to determine criticality and prioritize security upgrades
• Evaluating risks based on the effectiveness of current security system

Identifying measures to reduce risks associated with

• Natural hazard events
• Dependency hazard events
• Malevolent terrorist attacks resulting in
• Contamination
• Disruption
• Destruction of critical components

• Develop a Security Culture throughout WSSC
• Increase security resources
• Upgrade the existing security system
• Improve intra-agency coordination and cooperation for security program
• Develop Security Policies per G430 Gap assessment
• Improve records retention and document control
• Update ERP and develop methodologies
• Develop a EMP, training, practice, exercises and disaster support

Background

SVA Recommendations

Background

How much and in what capacity can the implementation of advanced technology do to meet the SVA recommendations? The ESS Project was about to be launched

Project Objectives

The Process

• Methodically and carefully carry out project in 4 phases
• Phase 1 – Develop and install necessary infrastructure to support the

system.

• Phase 2 – Upgrade old, end of life Access Control and Cameras for

38 identified critical sites

• Phase 3 – Upgrade all other less critical sites. Add advanced security

analytics

• Develop WSSC Physical Security concept
• Reactive to proactive approach
• Integrate business functions
• Converged Security
• Phase 4
• Complete sites currently under construction
• Adding analytical devices

The vision of a security platform

The phased process

Phase 1 – Complete

• New secured ESS Network
• New ESS server farm
• New ESS security enclosures protecting new endpoint devices
• 38 remote sites plus RGH have new infrastructure installed

Phase 2 – Completion in fall 2016

• Upgraded Access Control at 38 critical remote sites plus RGH
• Issued new, high secured personal badges
• Upgraded video surveillance system
• Upgraded old cameras, added more cameras to support SVA
• Implemented Physical Security Information Management system
• All Administrators and Users are fully trained
• Interaction with external law enforcement entities
• Implemented Visitor Management System

Phase 3 – Completion in fall 2017

• Converge less critical remote sites into new security platform
• Add advanced security analytics for detection and recognition.
• Implement converged security
• Physical
• Cyber

Phase 4 – Completion in fall 2018

• Expanding video analytics
• System Expansions/Upgrades

Timeline vs Budget vs Cost

Today 2014 2015 2016 2017 2018

Project Start

4/14/2014

SOC rehab complete (Lobby & lake)

3/27/2015

New Sec Infrastructure installed

5/29/2015

Phase 2 Start

9/14/2015

Phase 2 Complete

10/28/2016

Phase 3 Start

8/1/2016

Phase 3 Complete

11/24/2017

Phase 4 Start

12/4/2017

Phase 4 Complete

12/21/2018

$6.4M $1.8M $1.4M $1.4M

2019

Total estimated cost to completion: $11,000,000

Risk & Issues

Issues

• The learning curve is steeper than expected
• Takes longer time to change cultural behaviors
• Convenience vs Security is an issue
• Converging consequences
• Old technology is not always compatible when upgrading
• Access Control clearances must be revamped

Risks

• Lack of human resources with up-to-date knowledge
• Convenience factor out plays security awareness
• Keeping doors propped open
• Holding doors for people to get in
• Vehicle tail gating
• Limited security protocol and action plans for situations

Site Status

Site Status Completion Airpark WPS Complete Anacostia Complete Waiting for cut-over Bowie WPS New infrastructure Sep 2016 Brighton Dam Under construction Brink WPS New infrastructure Sep 2016 Cedar Height WPS New infrastructure Sep 2016 Central Ave WPS Under Construction Clopper Rd WPS Complete Colesville WPS New infrastructure Sep 2016 Consolidated Lab Complete Damascus ET Complete Lyttonsville Depot Complete Neelsville WPS Complete N Woodside ST New infrastructure Sep 2016 Parkway WWTP New infrastructure July 2016 Patuxent WTP New infrastructure August 2016 Piscataway WWTP Complete Waiting for cut-over Site Status Completion Damascus WWTP New infrastructure Sep 2016 Falls Rd ST New infrastructure Sep 2016 Falls Rd WPS New infrastructure Sep 2016 Ft Washington ET Complete Waiting for cut-

• ver

Gaithersburg Complete Goshen Rd WPS Complete Greenbelt ST New infrastructure Sep 2016 Hampshire Gr ET New infrastructure Sep 2016 Hill Rd WPS Complete Laurel Garage New infrastructure August 2016 Little Seneca Dam Complete Pointer Ridge ET New infrastructure Sep 2016 Potomac WTP New infrastructure October 2016 Rocky Gorge New infrastructure July 2016 Seneca WWTP Complete Waiting for cut-

• ver

Temple Hill Depot Complete Waiting for cut-

• ver

Western Branch New infrastructure July 2016

Site Status

Remote Facilities

Site Status Completion Shady Grove ST Complete South Laurel WPS New infrastructure August 2016 Suitland ET New infrastructure August 2016 RGH New infrastructure + ACS + 1/3 cameras September 2016 Glenmont ET Complete Number of Sites Completed Completed infrastructure 39 17 39

Site Status

Pilots, Proof of Concepts and a proactive detect and deny system

• Body worn camera with real-time transmitting
• License Plate Recognition (LPR)
• Video analytics
• Intrusion
• Loitering
• Motion
• Visitor Management System - Blacklisting
• Network monitoring and status change detection
• Thermal and Passive IR detection
• Replacing analog Dispatch system with digital ditto
• Replacing analog Intercom system with digital PSIM integrated system

Q & A