Updates Wednesday, August 24, 2016 Tucson, Arizona Prevent - - PowerPoint PPT Presentation

American Association of State Highway and Transportation Officials

Special Committee on Transportation Security and Emergency Management

2016 Critical Infrastructure Committee Joint Annual Meeting

Department of Homeland Security

Updates

Wednesday, August 24, 2016 Tucson, Arizona

Presenter’s Name June 17, 2003

Prevent Terrorism/Enhance Security

• National Terrorism Advisory System advisories

(Alerts and Bulletins)

• Follow local guidance and to report suspicious activity.
• The “If You See Something, Say Something TM” campaign
• Report suspicious activity to local law enforcement.

2011

2

Presenter’s Name June 17, 2003

Hometown Security Tools

Help Your Community Prepare in advance of an incident / attack

• Encourages businesses to
• Connect,
• Plan,
• Train, and
• Report
• Helps prepare businesses and their employees to proactively
• think about the role they play
• in safety and security
• of their businesses and communities.

3

Presenter’s Name June 17, 2003

Active Shooter Preparedness

Enhance preparedness through A "whole community" approach Offer free Active Shooter training courses, materials, and workshops for a broad range of stakeholders to address issues such as:

• Active Shooter awareness (IS-907)
• Workplace Violence (IS-906)
• Incident Response (ISC Planning & Response Guide)

Better prepare you to deal with an active shooter situation

• Raise awareness of pre-incident behaviors, indicators, and

characteristics of active shooters.

4

Presenter’s Name June 17, 2003

Countering Violent Extremism (CVE)

Violent extremist threats

• U.S. domestic terrorists and homegrown violent extremists
• International terrorist groups like al-Qaeda and ISIL
• Lone offenders or small groups become radicalized
• To commit violence at home, or abroad as foreign fighters

Internet and social media

• Used to recruit and radicalize

individuals to violence

• Conventional approaches are unlikely

to identify and disrupt all terrorist plots

5

Presenter’s Name June 17, 2003

Countering Violent Extremism Grant Program

DHS issued a notice of funding opportunity on July 6, 2016

• First federal grant funding available to
• Non-governmental organizations (NGOs)
• Institutions of higher education
• 2016 Grant Application Closing date: September 6, 2016

New DHS Office for Community Partnerships (OCP)

• Created on September 28, 2015
• Streamline and head DHS’s

domestic CVE efforts

• Primary source of leadership, innovation, and support for the

improved effectiveness of partners at federal, state, local, tribal and territorial levels.

6

Presenter’s Name June 17, 2003

Safeguard and Secure Cyberspace

• Information Sharing and Analysis

Organization (ISAO) Standards Organization (SO)

• Commission on Enhancing

National Cybersecurity

• Established by Executive Order 13718 within

the Department of Commerce February 09, 2016

• Advisory in nature, the Commission will make detailed

recommendations to strengthen cybersecurity

• Final report due to the President by December 1, 2016
• Requests for Information (RFIs)
• Current and future states of cybersecurity in digital economy
• Comment period ends September 9, 2016

7

Presenter’s Name June 17, 2003

Presidential Policy Directive 41 and Annex: United States Cyber Incident Coordination

“Recognizes the leading role that DHS plays during cyber incidents,” DHS/S1

PPD-41, “United States Cyber Incident Coordination,” released July 26, 2016:

• Sets forth principles governing the Federal Government’s response

to any cyber incident

• Establishes lead Federal agencies and an architecture for

coordinating the broader Federal Government response

• Requires the Departments of Justice and Homeland Security to

maintain updated contact information PPD-41 Annex, “Cyber Incident Reporting,” released the same day

• A Unified Message for Reporting to the Federal Government

8

Presenter’s Name June 17, 2003

Federal Cyber Incident Response

Two types of Federal Incident Response (Threat and Asset) Threat Response -- Lead: Department of Justice (FBI)

• Attributing, pursuing and disrupting malicious cyber

actors and activity

• Conducting criminal investigations and
• ther actions to counter the malicious

cyber activity

• FBI will work with
• their National Cyber Investigative Joint Task Force, and
• Department of Homeland Security’s
• U.S. Secret Service and
• U.S. Immigration and customs Enforcement/Homeland

Security Investigations Cyber Crimes Center (C3)

9

Presenter’s Name June 17, 2003

Federal Cyber Incident Response

Tactical Continue to help affected entities:

• Find the adversary on its systems,
• Learn how the adversary broke in,
• Remove the adversary from its

systems, and

• Rebuild its systems to be more

secure moving forward. Strategic Coordinate the asset response

• Coordinate all government

assistance to the victim,

• Share anonymized lessons

learned information broadly,

• Distribute threat indicators through

its Automated Indicator Sharing system, and

• Identify and alert other entities at

risk from this attack.

Asset Response -- Lead: Department of Homeland Security National Cybersecurity and Communications Integration Center (NCCIC), Cyber Unified Coordination Group (UCG)

10

Presenter’s Name June 17, 2003

Federal Cyber Incident Response

Department of Homeland Security’s support role in:

Threat Response -- Lead: Department of Justice (FBI) National Cyber Investigative Joint Task Force

• DHS law enforcement components (USSS and HSI) will
• Coordinate with other law enforcement agencies
• Continue to conduct criminal investigations into cyber

incidents, and

• From within the Cyber Unified Coordination Group (UCG)
• Coordinate with the FBI’s National Cyber Investigative

Joint Task Force

Presenter’s Name June 17, 2003

National Cyber Incident Response Plan (NCIRP)

DHS is leading the effort to write the Plan to

• Formalize the incident response practices,
• Detail organizational roles, responsibilities,

and actions to

• Prepare for, respond to, and coordinate

the recovery from a significant cyber incident,

• Build upon PPD-41, and
• Include the private sector and other levels of government

The Plan will be written in collaboration with partners, including:

• All critical infrastructure sectors, sector coordinating councils,

government coordinating councils, Sector Specific Agencies, states, and private sector organizations.

12

Presenter’s Name June 17, 2003

The National Initiative for Cybersecurity Careers and Studies (NICCS) Training Catalog

Managed by the Office of Cybersecurity and Communications (CS&C) Cybersecurity Education and Awareness Branch (CEA) A key resource of cybersecurity information directly focused on:

• Enhancing awareness,
• Expanding the pipeline and
• Evolving the field

National resource for cybersecurity and opportunities available to:

• Government, Industry,
• Academia, and the general public

13

Presenter’s Name June 17, 2003

S&T Grant Opportunity at Minority Serving Institutions

$3.6M for Scientific Leadership Awards (SLA) at Minority Serving Institutions (MSI)

• DHS seeks to build a diverse,

highly capable, technical workforce for the homeland security enterprise.

• One of several programs administered by S&T’s Office of

University Programs.

• For more information and to apply, visit www.grants.gov.
• Refer to the opportunity DHS-16-ST-062-0012016
• The deadline for submitting proposals is October 5, 2016.
• DHS will conduct a webinar for interested applicants

August 17, 2016 at 3 p.m. EDT.

14

Presenter’s Name June 17, 2003

Homeland Security Information Network (HSIN) Capabilities for CISR Community Members

Host Your meetings via Webinar using HSIN Connect

• Saves time, money, and other resources
• Connect with remote employees, partners, & CISR community
• Available FREE to all HSIN-CI members

Learn how at HSIN Learn

• The HSIN Training Team has developed a series of courses to

help you get the most out of HSIN

15

Presenter’s Name June 17, 2003

IP’s Stakeholder Education and Training Program

Just achieved Over 1 Million Course Completions

Critical Infrastructure Stakeholder FREE Training Offerings include:

• Security Awareness, Foundational, and Sector-Specific Series

Independent Study courses delivered publicly through FEMA/EMI.

• Limited-distribution courses via controlled access on HSIN-CI
• Instructor-led classes taught in-house and regionally
• Facilitated workshops delivered via regional outreach tours
• Critical Infrastructure Learning Series Webinars on DHS.gov, and
• Collaboratively-developed courses delivered by partners nation-wide

Extensive new CISR Training Portal now available on HSIN-CI

16

Nancy Pomerleau

Team Lead and Infrastructure Analyst (Highways, Mass Transit, Rail) in Transportation Systems National Protection and Programs Directorate Office of Infrastructure Protection | Sector Outreach and Programs Division

Desk: (703) 603-5044 Email: nancy.pomerleau@hq.dhs.gov