Recommendation 12.2: A Homeland Security Institute to provide technical analysis and support should be established to serve the organization that sets priorities for homeland security; this Institute would perform the following functions:
Systems analysis, risk analysis, and simulation and modeling to determine the vulnerabilities of the nation’s critical infrastructures and the effectiveness of the systems deployed to reduce them.18
Sophisticated economic and policy analysis to assess the distributed costs and benefits of alternative approaches to enhancing security.
Red teaming to evaluate the effectiveness of measures deployed to enhance the security of target institutions, facilities, and infrastructure.
Identification of instances when common standards and protocols are necessary to ensure interoperability and effective utilization of tools developed for field operators and first responders. The institute would cooperate with relevant federal agencies, such as NIST, in the development of these standards.
Assistance for agencies in establishing testbeds to evaluate the effectiveness of technologies under development and to assess the appropriateness of such technologies for deployment.
Design of metrics and use of these metrics to evaluate the effectiveness of homeland security programs throughout the government agencies and at national laboratories.
Design of and support for the conduct of exercises and simulations.
This recommended Homeland Security Institute should be a dedicated, contracted, not-for-profit organization.
It is essential that the federal government have access to these capabilities so that it can make effective decisions about priorities and programs for counterterrorism, whether the capabilities support a strengthened OHS or a new Department of Homeland Security. However, the number of people needed to provide the breadth and depth of technical expertise for performing the above functions would be significant, and neither OHS nor OSTP is large enough to house such a group internally. Therefore the committee is recommending that the above functions be located in a dedicated, not-for-profit security technical analysis and support institute.
This is not the first time that the establishment of a research corporation has
In particular, capability is needed for looking at scenarios in which the nation is exposed to multiple threats simultaneously (as discussed in Chapter 10) and in which the links between elements of the U.S. infrastructure are exploited. The modeling and analyses would not compete with the work of federal agencies but rather would be used to complement those efforts and to test whether the multiagency programs aimed at identifying critical vulnerabilities and mitigating these problems are proceeding correctly.