Railroad Security Update

1. Railroad Security Update Lou Wagner TERC/LEPC Conference August 22, 2003

2. Union Pacific Fast Facts

3. Union Pacific Railroad

4. Distribution Risk Management 

5. Presentation Overview Railroad approach to security in key areas: Hazardous materials Physical Infrastructure Operations Information technology and communications Alert levels Countermeasures

6. Railroad Security Task Force

7. Security Process Analysis of threats, vulnerability, and consequences Application of security principles including deter, detect, delay, respond Training, drills, tests Alert levels based on threat Escalating degree of countermeasure commensurate with alert level Consistent with ACC Security Code

8. Risk Assessment Criteria

9. Alert Level Actions

10. Alert Levels Level 1 - New Normal day-to-day operations Level 2 - Heightened Security Awareness Level 3 - A Credible Threat of an attack on the US or railroad industry (continuously reevaluated) Level 4 - A Confirmed Threat of attack against the railroad industry or actual attack in the US (implemented up to 72 hours and reevaluated)

11. Alert Level 1 New Normal Day to Day Operations Industry (nation) wide 33 actions identified

12. Examples of Actions Taken: Alert Level 1 Conduct security training and awareness activities. Do not disclose information to anyone who does not have a need-to-know. Turn off capabilities for tracing certain hazardous material, military, spent nuclear fuel and other sensitive materials by unauthenticated users. Periodically test that security systems are operating as intended.

13. Alert Level 2 Heightened Security Awareness General non-specific threat of possible terrorist activity involving railroad personnel and facilities. Declared industry (nation) wide. 20 additional actions

14. Examples of Actions Taken: Alert Level 2 Include security and awareness briefings as part of daily job briefings. Conduct content inspections of cars and containers for cause. Conduct spot content inspections of motor vehicles on railroad property. Coordinate with National Guard for potential security support at level 3.

15. Alert Level 3 Credible Threat of an attack on the US or railroad industry Measures capable of being maintained for weeks Continual review for effectiveness and duration. Declared industry wide for a short period of time or Applies in an immediate geographic or operational area AAR Operations Center is staffed 24 x 7

16. Alert Level 4 Confirmed Threat of attack against the railroad industry or actual attack in the US Declared industry wide for a short period of time (72- hours) or Applies in the immediate geographic or operational area Instituted for up to 72 hours Periodically evaluated for continuation.

17. Railway Alert Network

18. Countermeasures �A countermeasure is an action or a physical equipment used principally to reduce or eliminate one or more vulnerabilities�. 6 �people� countermeasures identified, such as: Enhance employee awareness to thwart intelligence gathering. 41 �process� countermeasures identified, such as: Establish the AAR Operations Center and Railroad Alert Network 6 �technology� countermeasures identified, such as: Establish secure communications.

19. Hazardous Materials

20. Haz Mat Results Highly poisonous materials which disperse easily as a gas near concentrated population are greatest concern. Anti-terrorism intelligence is very important. Specific countermeasures More inspections and guards Reduced train stops, expedited delivery Timing of movement to avoid major public events Delay pulling from a plant except by permit at Level 4 Shippers will be affected at higher alert levels Avoid opportunity for terrorists to use material as WMD

21. Physical Infrastructure

22. Infrastructure Issues A rail network has limited reroute possibilities. Severe disruptions to service levels on a temporary basis can result from loss of bridges, dispatch centers or fueling facilities.

23. Physical Assets Physical Assets Data Base - 1308 Facilities Tunnels - 265 Bridges - 762 Hump Yards - 54 Data / Dispatch Centers - 33 Fuel Centers - 138 Crew Management Centers - 7 Other Facilities - 49

25. Physical Infrastructure Countermeasures Increased alertness of all employees Increased use of guards Restricted access and parking Increased inspections Notification of unusual events Little impact on shippers

26. Operations Security

27. Operations Security Disruption of train service in general can have significant economic impact. For some commodities and OD pairs, rail is the most practical mode of transportation. We evaluated all the processes necessary to operate trains for vulnerability from terrorist activities.

28. Countermeasures to ensure Operations Security More inspections of equipment and track. More guards. Train crews verifying identity of replacement crews. Dispatchers notify security of unusual stops.

29. Information Technologyand Communications

30. Areas of Concern Tracing (of Shipments) Computer Centers and Applications Data Systems and Software Integrity Control/Dispatching Centers Communications Systems and Telecommunications Companies Communication Control Centers Key Personnel Contractors

31. IT and Com Countermeasures Guards at computer facilities Password verification Change passwords at regular intervals Limit information to parties of record Systems to thwart hackers At higher alert levels reduce contractors on the property

32. Local Plan Implementation Requires initial and periodic training Table top or similar exercises Major drills--every three years Includes methods of notifying employees of an incident such as by radio or pager alert Testing notification procedures

33. Training/Drills Use Transcaer� for drills and training Involve customers and community

34. AAR-ACC-Chlorine Institute Teams Storage in transit task force Plant access task force Communications task force

35. Request Federal Assistance National Guard Support Develop request for security assistance Establish permanent NG planning and oversight cell Provide on site security support (manpower, technology, aviation) at critical nodes for levels 3 and 4 Process formal request through DOT to DOD Seek Homeland Security Office priority and funding