1

U.S. Department of Homeland Security

Overview of the

Chemical Sector-Specific Agency

March 2011

National Infrastructure Protection Plan (NIPP)

Sector-Specific Agency’s (SSA)Primary Roles

The SSA is the primary Federal entity responsible for coordinating the unified effort to protect against and mitigate the effects of natural or manmade events on critical infrastructure within that sector.

SSAs work closely with government at all levels (Federal, State, local, tribal, and territorial) and with private sector partners to:

• Develop protective security programs and resiliency strategies;• Strengthen partnerships and improve information sharing;• Promote education, outreach, and training efforts across critical infrastructure

Sectors; and• Maintain awareness and communicate with critical infrastructure partners and

senior leadership during an incident.

Implement the National Infrastructure Protection Plan specific to the characteristics and risk landscapes of each of critical infrastructure sector.

3

4

Chemical Sector Size

Program

Chemical Sector

(# of Facilities)

SARA

Title III

CFATSEPA

RMP

~5k

~15k

The Chemical Sector-Specific Plan (SSP) covers all facilities within the Sector regardless of which, if any, regulatory program(s) to which they belong.

~550k

Coordinating Councils

5

Chemical GCC Chemical SCCDepartment of Commerce

Department of Defense

Department of Energy

Department of Health and Human Services

Department of Homeland Security

Department of Justice

Department of Labor

Department of Transportation

Environmental Protection Agency

Department of State

Office of the Director of National Intelligence

Chemical Safety Board

State, Local, Tribal and Territorial Government Coordinating Council Liaisons

Agricultural Retailers Association

American Chemistry Council

American Coatings Association

Chemical Producers & Distributors Association

Compressed Gas Association

CropLife America

Institute of Makers of Explosives

International Institute of Ammonia Refrigeration

International Liquid Terminals Association

National Association of Chemical Distributors

National Petrochemical & Refiners Association

Society of Chemical Manufacturers and Affiliates

The Chlorine Institute

The Fertilizer Institute

6

Sector Goals & Objectives

Goal 1 Evaluate the security posture of Chemical Sector high-risk assets including physical, cyber, and human elements as needed.

Goal 2 Prioritize Chemical Sector critical infrastructure protection activities based on risk.

Goal 3 Sustain risk-based, cost-effective sector-wide protective programs that increase asset-specific resiliency without hindering the economic viability of the sector.

Sector partners revised Goals and Objectives as part of the SSP triennial rewrite. The revised Goals for 2010 are listed below:

7

Sector Goals & Objectives (cont’d)

Goal 4 Refine processes and mechanisms for ongoing Government-private sector coordination to increase sector resiliency, as necessary.

Goal 5 Support risk-based critical infrastructure protection research and development projects that add value to the Chemical Sector.

Goal 6 Measure the progress and effectiveness of sector critical infrastructure protection activities.

The Chemical Sector has also developed a Cyber Roadmap to Secure Industrial Control Systems. A series of suggested milestones have been developed to guide progress over the next 10 years.

8

Chemical Sector Programs

Information Sharing

• Annual Chemical Sector Security Summit – The Chemical SSA and the SCC co-host Summit which consist of workshops, presentations and discussions for 400 attendees. Topics for the event include: CFATS implementation, multi-agency harmonization, inspections process, local security resources, cybersecurity, transportation security, theft and diversion, personnel surety, and research and development activities.• 2011 Summit: July 6 & 7• Link to the summit website: http://www.dhs.gov/chemicalsecuritysummit

• Monthly suspicious activity calls – SSA sponsors a monthly unclassified

teleconference where HITRAC and the U.S. Computer Emergency Readiness Team (CERT) brief out on current physical and cyber threat information including suspicious activity reporting and overseas activity when appropriate as well as cyber vulnerabilities.

• Date and Time: 4th Thursday of every month, at 11:00 AM EST.

• Dial: 1800-501-9384. Pin: 4754043

Chemical Sector Programs Information Sharing (Continued)

• Biannual Classified Briefing – The SSA sponsors a classified briefing for cleared industry representatives twice a year. The intelligence community provides briefings on both physical and cyber threats, as well as other topics of interest for chemical supply chain professionals.

• Security Awareness Guide – to assist owner/operators in their efforts to improve security at their chemical facility and to provide information on the security threat presented by explosive devices and cyber vulnerabilities.

• Chemical Sector Training Resources Guide - The guide contains a list of free or low-cost training, web-based classes, seminars, and documents that are routinely available through one of several component agencies within DHS.

• Homeland Security Information Network – HSIN-CS is the primary information-sharing platform for the Chemical Sector. The Sector does not have an Information Sharing Analysis Center. The Sector uses HSIN during incidents. Positive feedback during Hurricanes Gustav and Ike.

9

HSIN

10

11

Chemical Sector Programs

Voluntary Chemical Assessment Tool (VCAT)

• Developed to provide the means for owner/operators of non-tiered facilities to identify their current risk level.

• The web-based tool facilitates a cost-benefit analysis allowing users to select best combination of physical security countermeasures and mitigation strategies to reduce overall risk.

12

Chemical Sector Programs Training

• Web-Based Chemical Security Awareness Training – An interactive tool available free to chemical facilities nationwide to increase security awareness. The trainingis designed for all facility employees, not just those

• Status: ~9,800 completions

• To access the training, visit https://ChemicalSecurityTraining.dhs.gov • Chemical Sector Explosive Threat Awareness Training –

A series of one day training sessions to increase the Sector’s awareness of the threat of improvised explosive devices (IED), provide safety

precautions for security professionals dealing with explosive incidents, and enable Chemical Sector professionals to deter, prevent, detect, protect against, and respond to the terrorist use of VBIEDs.

• Six location nationwide in 2011 Puerto Rico – January 25; Orlando, FL – March 10; Long Beach, CA – April 20; New Orleans, LA – May 11; Cedar Rapids, IA – June 17; Baltimore, MD – July 8.

• Registration Link: http://guest.cvent.com/d/gdqt1z

Chemical Sector Programs

Training (Continued)

• Security Seminar and Exercise Series with State Chemical Industry Councils – A collaborative effort between variousstate chemical industry councils aimed at fostering communication between facilities and their local emergency response teams by encouraging representatives to share their insight, knowledge, and experiences during a facilitated tabletop exercise.

13

Active Shooter TTX (Sample Scenario)

Security receives a telephone call that there is a man with a gun and he is shooting everywhere

• Report indicates one victim laying in the parking lot

911 center receives emergency call from Security

Security makes announcement over the PA

Security notifies site emergency coordinator

• External gates opened

• Main gate house appointed the initial staging area for public safety responders

Are employees trained for this type of emergency?

Does your site emergency plan include active shooter response?

How do you control access to the site?

Do you have the security technology to assist law enforcement in locating the victims and shooter?

Do employees shelter in place or evacuate?

Should you deactivate card readers (i.e. no access)?

How do you manage visitors and contractors that are on site?

Are critical phone calls getting through to Security?

14

8:00 AM

8:02 AM

8:03 AM

8:05 AM

Event so far Issues so far

Chemical Sector Programs Exercises/Incident Management

• Cyberstorm III – Congressionally-mandated exercises that examine the Nation’s cybersecurity preparedness and response capabilities.

• Incident Teleconferences with Sector – SSA holds daily teleconferences with Sector. Provides avenue to push and pull information.

• IP Sector Specific TTX Exercise Program (IP-SSTEP) – provide NLE 09 materials to owner/operators to hold their own TTX.

• Developed, with a purpose of creating an opportunity for public and private Critical Infrastructure stakeholders and their public safety partners to address gaps, threats, issues, and concerns identified in previous exercises and their after-action processes affecting the Chemical Sector.

• Allows participants the opportunity to gain an understanding of issues faced prior to, during, and after a terrorist threat/attack and the coordination with other entities, both private and government, regarding their facility.

15

IP-SSTEP (Sample Scenario)

May 27: Water Borne Improvised Explosive Device (WBIED) attack against a US vessel off the coast of Nigeria resulting in 35 killed and 40 injured.

June 1: Two chemical plants in Germany, a coal power plant in Belgium, and oil pipelines in France are attacked with Large Vehicle Borne Improvised Explosive Device (LVBIED).

• In the Germany attacks, 190 tons of chlorine is released causing evacuation of the nearby towns. All four attacks resulted in total casualties of approximately 1000; over 300 civilians die.

June 4: German authorities thwart an attack against a pipeline in Eastern Germany.

With the successful execution of overseas terrorist attacks on critical infrastructure how would you receive unclassified information regarding the incident?

• Which, if any, information-sharing mechanisms would be utilized?

• What information would your facility require? Who would you contact to obtain this information and how would you contact them?

• What should you expect to see, if anything, on HSIN-CS at this time?

• Does your company/facility have mechanisms in place to share information with international partners? And if so, what are the various procedures currently in place?

16

Details of the overseas attacks are: Key Questions

Chemical Sector Programs Cybersecurity

• Roadmap to Secure Control Systems in the Chemical Sector was published in September 2009. The Roadmap proposes a comprehensive plan, which includes goals and milestones, for improving the security, reliability, and functionality of industrial control systems over the next 10 years.

Awareness Campaign includes: a Call to Action; Security Training Resource; Incident Management Resource; Standards, Guidelines, and References Resource; Overview of Procurement Language

• Cybersecurity Evaluation Tool (CSET) – Provides users with a systematic and repeatable approach for assessing the cybersecurity posture of their industrial control system networks. This tool also includes both high-level and detailed questions applicable to all industrial control systems.

17

Chemical Sector Programs Research and Development

• Integrated Project Team (IPT) - Involved in two Capstone IPTs : Chemical/Biological and Infrastructure Protection. SSA Co-Chairs the Chemical Sub-IPT with S&T and OHA. Three thrust areas for Chemical-Sub IPT: Chemical Analysis; Chemical Detection; & Chemical Response and Recovery.

• SCC R&D Working Group – Formed in 2009. Priorities are: studying toxicity; tracking toxic chemicals during transport; mitigating chemical releases; developing effective decontamination methods; and reducing the explosive potential of certain chemicals. SCC has ranked current projects and has been briefed on all projects.

International Activities• Strategy - The SSA has developed an international strategy with the mission to

develop and foster partnerships with the international community in order to promote a global culture of protection and resiliency in the Chemical Sector.

18

Chemical SSA TeamAmy Graydon - 703-603-5169

Babatope Dada – 703-603-5115

Robbie Kirk – 703-603-5113

Esther Langer – 703-603-5112

Theresa Miller (CTR) – 703-603-5127

Michael Sweet (CTR) -703-603-5178

Vanessa Thebaud (CTR) – 703-603-5114

Nohemi Zerbi – 703-603-5117

Web site: www.dhs.gov/chem-voluntary-resources 

Email: ChemicalSector@dhs.gov

19

Chemical SSA Team

Amy Graydon amy.graydon@dhs.gov

Babatope Dada babatope.dada@dhs.gov

Robbie Kirk robert.kirk@hq.dhs.gov

Esther Langer esther.langer@dhs.gov

Nohemi Zerbi nohemi.zerbi@dhs.gov

Theresa Miller (CTR) theresa.miller@associates.dhs.gov

Michael Sweet (CTR) michael.sweet@associates.dhs.gov

Vanessa Thebaud (CTR) vanessa.thebaud@associates.dhs.gov

20