The National Infrastructure Protection Plan: Establishing a Risk-Based Approach to Resource Allocation

1. The National Infrastructure Protection Plan: Establishing a Risk-Based Approach to Resource Allocation

2. Provides a comprehensive plan and unifying structure for the government and the private sector to improve protection and resiliency of the Nation’s critical infrastructure and key resources. • Overarching goal of the National Infrastructure Protection Plan: • The National Infrastructure Protection Plan supports the prioritization of protection and resiliency initiatives and investments across sectors to ensure that government and private sector resources are applied where they offer the most benefit for mitigating risk by lessening vulnerabilities, deterring threats, and minimizing the consequences of terrorist attacks and other manmade and natural disasters. National Infrastructure Protection Plan (NIPP) Build a safer, more secure, and more resilient America by preventing, deterring, neutralizing, or mitigating the effects of deliberate efforts by terrorists to destroy, incapacitate, or exploit elements of our nation's critical infrastructure and key resources and to strengthen national preparedness, timely response, and rapid recovery of critical infrastructure and key resources in the event of an attack, natural disaster, or other emergency.

3. The NIPP Establishes An Organizing Framework • Eighteen critical infrastructure and key resources sectors defined by Homeland Security Presidential Directive-7 • Highly diverse assets, systems, networks, and functions • Partnership framework for risk information-sharing and collaboration • All-hazards threat environment • Establishes a risk-based approach to decision-making

4. NIPP Risk Management Framework Structured to promote continuous improvement Implemented collaboratively between DHS and sector partners Allows for flexibility to reflect the individual characteristics of each sector

5. DHS Infrastructure Risk Analysis Programs • National Infrastructure Risk Analysis Program • Strategic Homeland Infrastructure Risk Assessment process, National and Sector Risk Profiles, and National Risk Estimates • National Critical Infrastructure Prioritization Program • Prioritized lists of domestic and international critical infrastructure for incident and risk management purposes • Infrastructure Risk Analysis Partnership Program • Building State and local analytic capabilities • Long-Range Planning and Analysis Program • Future trends and alternative actions • Critical Infrastructure and Key Resource Risk Methodology Development Program • Technical leadership and applied research • National Infrastructure Simulation and Analysis Center • Modeling and simulation for consequence, cascading effects, and dependencies including recent studies on the global financial system, earthquakes, California State Water Project, and chemical supply chain resiliency • Critical Infrastructure Red Team • Brings adversarial perspective to risk management planning

6. Risk-Based Resource Allocation • The National Risk Profile incorporates and summarizes a broad array of information and assessments. • Drives national and sector-specific priorities, and resource allocation decisions.

7. Desired End-State HITRAC’s Homeland Security Risk Architecture Risk Analysis Infrastructure Prioritization Critical Foreign Dependencies Analysis Red Team Analysis Return on Investment Analysis Long Range Planning and Analysis Strategic Multi-Year Planning Program Development Data and Requirements Resource Allocation Operational Activities Program/Mission Evaluation Incident Management Partners and Analytic Processes* Federal Government State Government Local Government Tribal/ Territorial Private Sector Analysis SHIRA TRAM CSAT CTRA RAM-WRAM-D RSAT RAMP BTRA MSRAM Homeland Security Community * Examples designed for illustration only; not an exhaustive list • Actively developing Homeland Infrastructure Threat and Risk Analysis Center’s (HITRAC) programs, and those of our partners, to improve our ability to provide robust support across the full breadth of the infrastructure protection community’s decision making requirements.

8. Information Sharing – Partnerships & Collaboration • Sustained, mutual partnerships are critical to informed and accurate risk analysis. • New suite of risk-based products to support partner decision-making.

9. 2009 NIPP Expands Partnerships, Programs, Tools • All-hazards approach to risk methodologies and risk-informed products • New emphasis on State and local fusion centers with Infrastructure Risk Analysis Partnership Programpartnerships • New programs, approaches, and tools for the National Infrastructure Protection Plan Risk Management Framework • Expanded focus on the cyber risk component • Education, training, outreach, and exercise programs to bring the risk focus to our security partners

10. Continuous Improvement – DHS Priorities • Expand risk-based decision support products • Continue to improve tools and methodologies • Increase outreach and information-sharing with security partners • Build a more robust risk-informed approach to incident response • Provide a feedback loop for continuous improvement and refinement of plans and policies