U.S. Department of Homeland Security

1. U.S. Department of Homeland Security Overview of the Chemical Sector-Specific Agency March 2011

2. National Infrastructure Protection Plan (NIPP)

3. Sector-Specific Agency’s (SSA)Primary Roles • The SSA is the primary Federal entity responsible for coordinating the unified effort to protect against and mitigate the effects of natural or manmade events on critical infrastructure within that sector. • SSAs work closely with government at all levels (Federal, State, local, tribal, and territorial) and with private sector partners to: • Develop protective security programs and resiliency strategies; • Strengthen partnerships and improve information sharing; • Promote education, outreach, and training efforts across critical infrastructure Sectors; and • Maintain awareness and communicate with critical infrastructure partners and senior leadership during an incident. • Implement the National Infrastructure Protection Plan specific to the characteristics and risk landscapes of each of critical infrastructure sector.

4. Chemical Sector Size Program SARA Title III EPA RMP CFATS ~5k ~15k The Chemical Sector-Specific Plan (SSP) covers all facilities within the Sector regardless of which, if any, regulatory program(s) to which they belong. Chemical Sector (# of Facilities) ~550k

5. Coordinating Councils

6. Sector Goals & Objectives • Sector partners revised Goals and Objectives as part of the SSP triennial rewrite. The revised Goals for 2010 are listed below:

7. Sector Goals & Objectives (cont’d) • The Chemical Sector has also developed a Cyber Roadmap to Secure Industrial Control Systems. A series of suggested milestones have been developed to guide progress over the next 10 years.

8. Chemical Sector Programs • Information Sharing • Annual Chemical Sector Security Summit – The Chemical SSA and the SCC co-host Summit which consist of workshops, presentations and discussions for 400 attendees. Topics for the event include: CFATS implementation, multi-agency harmonization, inspections process, local security resources, cybersecurity, transportation security, theft and diversion, personnel surety, and research and development activities. • 2011 Summit: July 6 & 7 • Link to the summit website: http://www.dhs.gov/chemicalsecuritysummit • Monthly suspicious activity calls – SSA sponsors a monthly unclassified teleconference where HITRAC and the U.S. Computer Emergency Readiness Team (CERT) brief out on current physical and cyber threat information including suspicious activity reporting and overseas activity when appropriate as well as cyber vulnerabilities. • Date and Time: 4th Thursday of every month, at 11:00 AM EST. • Dial: 1800-501-9384. Pin: 4754043

9. Chemical Sector Programs • Information Sharing (Continued) • Biannual Classified Briefing – The SSA sponsors a classified briefing for cleared industry representatives twice a year. The intelligence community provides briefings on both physical and cyber threats, as well as other topics of interest for chemical supply chain professionals. • Security Awareness Guide – to assist owner/operators in their efforts to improve security at their chemical facility and to provide information on the security threat presented by explosive devices and cyber vulnerabilities. • Chemical Sector Training Resources Guide - The guide contains a list of free or low-cost training, web-based classes, seminars, and documents that are routinely available through one of several component agencies within DHS. • Homeland Security Information Network – HSIN-CS is the primary information-sharing platform for the Chemical Sector. The Sector does not have an Information Sharing Analysis Center. The Sector uses HSIN during incidents. Positive feedback during Hurricanes Gustav and Ike.

10. HSIN

11. Chemical Sector Programs • Voluntary Chemical Assessment Tool (VCAT) • Developed to provide the means for owner/operators of non-tiered facilities to identify their current risk level. • The web-based tool facilitates a cost-benefit analysis allowing users to select best combination of physical security countermeasures and mitigation strategies to reduce overall risk.

12. Chemical Sector Programs • Training • Web-Based Chemical Security Awareness Training – An interactive tool available free to chemical facilities nationwide to increase security awareness. The training is designed for all facility employees, not just those • Status: ~9,800 completions • To access the training, visit https://ChemicalSecurityTraining.dhs.gov • Chemical Sector Explosive Threat Awareness Training – A series of one day training sessions to increase the Sector’s awareness of the threat of improvised explosive devices (IED), provide safety precautions for security professionals dealing with explosive incidents, and enable Chemical Sector professionals to deter, prevent, detect, protect against, and respond to the terrorist use of VBIEDs. • Six location nationwide in 2011 Puerto Rico – January 25; Orlando, FL – March 10; Long Beach, CA – April 20; New Orleans, LA – May 11; Cedar Rapids, IA – June 17; Baltimore, MD – July 8. • Registration Link: http://guest.cvent.com/d/gdqt1z

13. Chemical Sector Programs • Training (Continued) • Security Seminar and Exercise Series with State Chemical Industry Councils – A collaborative effort between various state chemical industry councils aimed at fostering communication between facilities and their local emergency response teams by encouraging representatives to share their insight, knowledge, and experiences during a facilitated tabletop exercise.

14. Active Shooter TTX (Sample Scenario) • Security receives a telephone call that there is a man with a gun and he is shooting everywhere • Report indicates one victim laying in the parking lot • 911 center receives emergency call from Security • Security makes announcement over the PA • Security notifies site emergency coordinator • External gates opened • Main gate house appointed the initial staging area for public safety responders • Are employees trained for this type of emergency? • Does your site emergency plan include active shooter response? • How do you control access to the site? • Do you have the security technology to assist law enforcement in locating the victims and shooter? • Do employees shelter in place or evacuate? • Should you deactivate card readers (i.e. no access)? • How do you manage visitors and contractors that are on site? • Are critical phone calls getting through to Security? Event so far Issues so far 8:00 AM 8:02 AM 8:03 AM 8:05 AM

15. Chemical Sector Programs • Exercises/Incident Management • Cyberstorm III – Congressionally-mandated exercises that examine the Nation’s cybersecurity preparedness and response capabilities. • Incident Teleconferences with Sector – SSA holds daily teleconferences with Sector. Provides avenue to push and pull information. • IP Sector Specific TTX Exercise Program (IP-SSTEP) – provide NLE 09 materials to owner/operators to hold their own TTX. • Developed, with a purpose of creating an opportunity for public and private Critical Infrastructure stakeholders and their public safety partners to address gaps, threats, issues, and concerns identified in previous exercises and their after-action processes affecting the Chemical Sector. • Allows participants the opportunity to gain an understanding of issues faced prior to, during, and after a terrorist threat/attack and the coordination with other entities, both private and government, regarding their facility.

16. IP-SSTEP (Sample Scenario) • May 27: Water Borne Improvised Explosive Device (WBIED) attack against a US vessel off the coast of Nigeria resulting in 35 killed and 40 injured. • June 1: Two chemical plants in Germany, a coal power plant in Belgium, and oil pipelines in France are attacked with Large Vehicle Borne Improvised Explosive Device (LVBIED). • In the Germany attacks, 190 tons of chlorine is released causing evacuation of the nearby towns. All four attacks resulted in total casualties of approximately 1000; over 300 civilians die. • June 4: German authorities thwart an attack against a pipeline in Eastern Germany. • With the successful execution of overseas terrorist attacks on critical infrastructure how would you receive unclassified information regarding the incident? • Which, if any, information-sharing mechanisms would be utilized? • What information would your facility require? Who would you contact to obtain this information and how would you contact them? • What should you expect to see, if anything, on HSIN-CS at this time? • Does your company/facility have mechanisms in place to share information with international partners? And if so, what are the various procedures currently in place? Details of the overseas attacks are: Key Questions

17. Chemical Sector Programs • Cybersecurity • Roadmap to Secure Control Systems in the Chemical Sector was published in September 2009. The Roadmap proposes a comprehensive plan, which includes goals and milestones, for improving the security, reliability, and functionality of industrial control systems over the next 10 years. • Awareness Campaign includes: a Call to Action; Security Training Resource; Incident Management Resource; Standards, Guidelines, and References Resource; Overview of Procurement Language • Cybersecurity Evaluation Tool (CSET) – Provides users with a systematic and repeatable approach for assessing the cybersecurity posture of their industrial control system networks. This tool also includes both high-level and detailed questions applicable to all industrial control systems.

18. Chemical Sector Programs • Research and Development • Integrated Project Team (IPT) - Involved in two Capstone IPTs : Chemical/Biological and Infrastructure Protection. SSA Co-Chairs the Chemical Sub-IPT with S&T and OHA. Three thrust areasfor Chemical-Sub IPT: Chemical Analysis; Chemical Detection; & Chemical Response and Recovery. • SCC R&D Working Group – Formed in 2009. Priorities are: studying toxicity; tracking toxic chemicals during transport; mitigating chemical releases; developing effective decontamination methods; and reducing the explosive potential of certain chemicals. SCC has ranked current projects and has been briefed on all projects. • International Activities • Strategy - The SSA has developed an international strategy with the mission to develop and foster partnerships with the international community in order to promote a global culture of protection and resiliency in the Chemical Sector.

19. Chemical SSA Team Amy Graydon - 703-603-5169 Babatope Dada – 703-603-5115 Robbie Kirk – 703-603-5113 Esther Langer – 703-603-5112 Theresa Miller (CTR) – 703-603-5127 Michael Sweet (CTR) -703-603-5178 Vanessa Thebaud (CTR) – 703-603-5114 Nohemi Zerbi – 703-603-5117 Web site: www.dhs.gov/chem-voluntary-resources Email: ChemicalSector@dhs.gov

20. Chemical SSA Team Amy Graydon amy.graydon@dhs.gov Babatope Dada babatope.dada@dhs.gov Robbie Kirk robert.kirk@hq.dhs.gov Esther Langer esther.langer@dhs.gov Nohemi Zerbi nohemi.zerbi@dhs.gov Theresa Miller (CTR) theresa.miller@associates.dhs.gov Michael Sweet (CTR) michael.sweet@associates.dhs.gov Vanessa Thebaud (CTR) vanessa.thebaud@associates.dhs.gov