Site Security Program Management: Difference between revisions
No edit summary |
No edit summary |
||
| Line 5: | Line 5: | ||
"Security programs, resilience strategies, and specific security measures for individual sector assets will vary greatly depending on the level of risk that encompasses the specific threat to the asset, its vulnerability, and the consequences of failure. Dams Sector partners may develop emergency action plans, business continuity plans, and disaster [[recovery]] plans to support incident response and restoration." <ref name="Dams Sector">[[Dams Sector-Specific Plan| Dams Sector-Specific Plan (U.S. Department of Homeland Security, 2015)]]</ref> | "Security programs, resilience strategies, and specific security measures for individual sector assets will vary greatly depending on the level of risk that encompasses the specific threat to the asset, its vulnerability, and the consequences of failure. Dams Sector partners may develop emergency action plans, business continuity plans, and disaster [[recovery]] plans to support incident response and restoration." <ref name="Dams Sector">[[Dams Sector-Specific Plan| Dams Sector-Specific Plan (U.S. Department of Homeland Security, 2015)]]</ref> | ||
"Owners and operators also typically undertake a number of safety and security measures that include, but are not limited to, the installation of boat and vehicle barriers, enhanced access control measures, expanded closed-circuit television (CCTV) coverage, increased use of alarm systems, enhanced measures to secure control systems (both physical and cyber), the integration of security into existing emergency action plans, and expanded personnel screening programs. Security measures at dams, levees, and other sector assets also include contingency planning and increased liaison with all levels of law enforcement and emergency response agencies. Nonstructural protective measures such as zoning, strengthened building codes, floodplain management ordinances, development fees, flood risk education programs, and relocation of flood-prone communities and infrastructure are examples of security and resilience measures that can substantially decrease the impact of a levee break." <ref name="Dams Sector"/> | "Owners and operators also typically undertake a number of safety and security measures that include, but are not limited to, the installation of boat and vehicle barriers, enhanced access control measures, expanded closed-circuit television (CCTV) coverage, increased use of alarm systems, enhanced measures to secure control systems (both physical and cyber), the integration of security into existing emergency action plans, and expanded personnel screening programs. Security measures at dams, levees, and other sector assets also include contingency planning and increased liaison with all levels of law enforcement and [[Emergency Response|emergency response]] agencies. Nonstructural protective measures such as zoning, strengthened building codes, floodplain management ordinances, development fees, flood risk education programs, and relocation of flood-prone communities and infrastructure are examples of security and resilience measures that can substantially decrease the impact of a levee break." <ref name="Dams Sector"/> | ||
"Dam owners can enhance the overall resilience of their facilities through the development of plans to guide emergency response, crisis communication, rapid restoration, and continuity of operations. In general, these plans describe response actions that the facility will take for incidents and scenarios of concern. An integrated crisis management program inclusive of these plans serves as an overarching framework outlining how the facility will respond to an emergency or incident, regardless of the event or triggering source. Crisis management programs are intrinsically linked to the risk management strategies adopted by the organization as they focus on minimizing safety and economic impacts, limiting operational disruptions, and achieving prompt recovery." <ref name="CISA">[[Dams Sector Crisis Management Handbook| Dams Sector Crisis Management Handbook (Cybersecurity and Infrastructure Security Agency, 2021)]]</ref> | "Dam owners can enhance the overall resilience of their facilities through the development of plans to guide emergency response, crisis communication, rapid restoration, and continuity of operations. In general, these plans describe response actions that the facility will take for incidents and scenarios of concern. An integrated crisis management program inclusive of these plans serves as an overarching framework outlining how the facility will respond to an emergency or incident, regardless of the event or triggering source. Crisis management programs are intrinsically linked to the [[Risk Management|risk management]] strategies adopted by the organization as they focus on minimizing safety and economic impacts, limiting operational disruptions, and achieving prompt recovery." <ref name="CISA">[[Dams Sector Crisis Management Handbook| Dams Sector Crisis Management Handbook (Cybersecurity and Infrastructure Security Agency, 2021)]]</ref> | ||
"Developing a crisis management program includes three components: | "Developing a crisis management program includes three components: | ||
| Line 18: | Line 18: | ||
*[[Hazard-Specific Response Plans]] | *[[Hazard-Specific Response Plans]] | ||
*[[Crisis Communications Plans]] | *[[Crisis Communications Plans]] | ||
*[[Recovery Plans]] | *[[Rapid Response Recovery Plans]] | ||
*[[Continuity Plans]] | *[[Continuity Plans]] | ||
Revision as of 20:42, 9 December 2022
"Security programs, resilience strategies, and specific security measures for individual sector assets will vary greatly depending on the level of risk that encompasses the specific threat to the asset, its vulnerability, and the consequences of failure. Dams Sector partners may develop emergency action plans, business continuity plans, and disaster recovery plans to support incident response and restoration." [1]
"Owners and operators also typically undertake a number of safety and security measures that include, but are not limited to, the installation of boat and vehicle barriers, enhanced access control measures, expanded closed-circuit television (CCTV) coverage, increased use of alarm systems, enhanced measures to secure control systems (both physical and cyber), the integration of security into existing emergency action plans, and expanded personnel screening programs. Security measures at dams, levees, and other sector assets also include contingency planning and increased liaison with all levels of law enforcement and emergency response agencies. Nonstructural protective measures such as zoning, strengthened building codes, floodplain management ordinances, development fees, flood risk education programs, and relocation of flood-prone communities and infrastructure are examples of security and resilience measures that can substantially decrease the impact of a levee break." [1]
"Dam owners can enhance the overall resilience of their facilities through the development of plans to guide emergency response, crisis communication, rapid restoration, and continuity of operations. In general, these plans describe response actions that the facility will take for incidents and scenarios of concern. An integrated crisis management program inclusive of these plans serves as an overarching framework outlining how the facility will respond to an emergency or incident, regardless of the event or triggering source. Crisis management programs are intrinsically linked to the risk management strategies adopted by the organization as they focus on minimizing safety and economic impacts, limiting operational disruptions, and achieving prompt recovery." [2]
"Developing a crisis management program includes three components:
- "Understanding hazards that could impact the facility, its operations, equipment, and personnel.
- "Developing plans to prepare for, respond to, and recover from the likely hazards.
- "Conducting exercises to validate and update plans, test communications protocols, and clarify roles and responsibilities." [2]
Types of Crisis Management Plans
- Emergency Action Plans
- Hazard-Specific Response Plans
- Crisis Communications Plans
- Rapid Response Recovery Plans
- Continuity Plans
Citations:
Revision ID: 5123
Revision Date: 12/09/2022