Security 101: A Physical Security Primer for Transportation Agencies (2009)

Below is the uncorrected machine-read text of this chapter, intended to provide our own search engines and external engines with highly rich, chapter-representative searchable text of each book. Because it is UNCORRECTED material, please consider the following text as a useful but insufficient proxy for the authoritative book pages.

80 Since 2001 all modes of transportation—aviation, maritime, and land-based have experienced a concentration of government efforts on security that is both of major proportion and unpar- alleled in American history. Understanding their roles as partners with government in the pro- tection of the homeland has required transportation agencies to become familiar with a host of new legislative initiatives, presidential orders, and federal department mandates, regulations, and guidelines. Chapter 6 identifies core components of the federal government’s homeland security protection strategies that focus on surface transportation. The objective of the materials is to familiarize readers with the DHS-driven “national preparedness architecture” that forms the basis for governmental action. The Federal Government, all three branches—executive, legisla- tive, and judicial—has been intensely involved in creating law, policy, procedures, and protocols to safeguard the Nation against homeland security threats. By reviewing some of these activities, in particular those of the executive and legislative branches, that relate to the transportation sec- tor, agencies can obtain a sense of the national strategies and supportive frameworks available to help them in reducing security risks. Homeland Security Laws and Statutes Congress has passed some important laws that relate specifically to transportation. These include the Aviation and Transportation Security Act (ATSA), the Homeland Security Act of 2002, and the Safe Port Security Act. ATSA was signed soon after the terrorist attacks of Septem- ber 11, 2001, with the goal “to secure the air travel system.” The Act also referenced the security of other modes of transportation. ATSA created the Transportation Security Administration (TSA) under the Department of Transportation. TSA has since been reorganized as an admin- istration under the Department of Homeland Security. Figure 6-1 shows the TSA Organization Chart as of March 20, 2008. The Homeland Security Act of 2002, a sweeping piece of legislation, established the Depart- ment of Homeland Security as a cabinet-level department of the federal government. The responsibilities of the new department included “preventing terrorist attacks within the United States, reducing the vulnerability of the United States to terrorism at home, and minimizing the damage and assisting in the recovery from any attacks that may occur.” The Act created the posi- tion of Secretary of Homeland Security to be appointed by the president with the consent of the Senate. Whereas the Department of Defense works in the military sphere, DHS works in the civil- ian sphere to protect the United States within, at, and outside its borders. Its goal is to prepare for, prevent, and respond to domestic emergencies, particularly terrorism. The establishment of DHS resulted in a massive reorganization of federal agencies. In total, over 22 federal departments or agencies including FEMA, the Secret Service, the U.S. Coast C H A P T E R 6 Homeland Security

Homeland Security 81 Guard, TSA, and the Immigration and Naturalization Service (INS), were moved under the new department. Title IV of the Act also expressly created the Undersecretary for Border and Trans- portation Security (BTS) whose primary duties include the following: • Preventing the entry of terrorists and the instruments of terrorism into the United States; • Securing the borders, territorial waters, ports, terminals, waterways, and air, land, and sea transportation systems of the United States; • Administering the immigration and naturalization laws of the United States, including the establishment of rules governing the granting of visas and other forms of permission to enter the United States to include individuals who are not citizens or lawful permanent residents; • Ensuring the customs laws of the United States; and • Ensuring the speedy, orderly and efficient flow of lawful traffic and commerce in carrying out these responsibilities. Figure 6-2 is a top-level organization chart of DHS current as of 2007. The Security and Accountability For Every (SAFE) Port Act (signed into law on March 30, 2006) focuses on enhancing security at U.S. ports, preventing threats and attacks before they reach the United States, and the security of shipping containers bound for the United States. TRANSPORTATION SECURITY ADMINISTRATION Source: www.dhs.gov ASSISTANT SECRETARY / ADMINISTRATOR DEPUTY ADMINISTRATOR LEGISLATIVE AFFAIRS Assistant Administrator INSPECTION Assistant Administrator INTELLIGENCE Assistant Administrator TRANSPORTATION THREAT ASSESSMENT & CREDENTIALING Assistant Administrator ACQUISITION Assistant Administrator / Chief Procurement Officer FINANCE & ADMINISTRATION Assistant Administrator / Chief Financial Officer HUMAN CAPITAL Assistant Administrator / Chief Human Capital Officer OPERATIONAL PROCESS & TECHNOLOGY Assistant Administrator / Chief Technology Officer INFORMATION TECHNOLOGY Assistant Administrator / Chief Information Officer SECURITY OPERATIONS Assistant Administrator TRANSPORTATION SECTOR NETWORK MANAGEMENT Assistant Administrator LAW ENFORCEMENT / FEDERAL AIR MARSHAL SERVICE Assistant Administrator / Director FAMS GLOBAL STRATEGIES Assistant Administrator STRATEGIC COMMUNICATIONS & PUBLIC AFFAIRS Assistant Administrator SPECIAL COUNSELOR CHIEF COUNSEL Figure 6-1. Transportation Security Administration organization chart, March 20, 2008.

* Under Secretary for Intelligence & Analysis title created by Public Law 110-53, Aug. 3, 2007 Approved 3/20/2008 Source: www.dhs.gov U.S. DEPARTMENT OF HOMELAND SECURITY SECRETARY DEPUTY SECRETARY MANAGEMENT Under Secretary Chief Financial Officer SCIENCE & TECHNOLOGY Under Secretary NATIONAL PROTECTION & PROGRAMS Under Secretary POLICY Assistant Secretary PUBLIC AFFAIRS Assistant Secretary LEGISLATIVE AFFAIRS Assistant SecretaryGENERAL COUNSEL Chief of Staff Executive Secretariat Military Advisor CIVIL RIGHTS & CIVIL LIBERTIES Officer COUNTERNARCOTICS ENFORCEMENT Director CHIEF PRIVACY OFFICER OPERATIONS COORDINATION Director CITIZENSHIP & IMMIGRATION SERVICES OMBUDSMAN INTELLIGENCE & ANALYSIS Under Secretary* DOMESTIC NUCLEAR DETECTION OFFICE Director NATIONAL CYBER SECURITY CENTER Director FEDERAL LAW ENFORCEMENT TRAINING CENTER Director HEALTH AFFAIRS Assistant Secretary / Chief Medical Officer TRANSPORTATION SECURITY ADMINISTRATION Assistant Secretary / Administrator U.S. CUSTOMS & BORDER PROTECTION Commissioner U.S. CITIZENSHIP & IMMIGRATION SERVICES Director U.S. IMMIGRATION & CUSTOMS ENFORCEMENT Assistant Secretary U.S. SECRET SERVICE Director FEDERAL EMERGENCY MANAGEMENT AGENCY Administrator U.S. COAST GUARD Commandant INSPECTOR GENERAL Figure 6-2. Department of Homeland Security top level organization chart.

Homeland Security Presidential Directives Presidential Decision Directives (PDDs) and Homeland Security Presidential Directives (HSPDs) are Executive Orders (E.O.s) promulgated by the President of the United States. Prior to the terrorist attacks of September 11, 2001, presidential decisions were communi- cated by PDD. On October 29, 2001, the first HSPD was signed by President Bush and pro- nounced as “the first in a series of Homeland Security Presidential Directives that shall record and communicate presidential decisions about the homeland security policies of the United States.” The most significant PDD affecting Homeland Security was PDD-63 issued by President Clinton on May 22, 1998. The intent of PDD-63 was “to assure the continuity and viability of critical infrastructures . . . the United States will take all necessary measures to swiftly elim- inate any significant vulnerability to both physical and cyber attacks on our critical infrastruc- tures, including especially our cyber systems.” All HSPDs, by definition, affect Homeland Security; however, some are more relevant to the protection of the transportation sector than others. Table 6-1 summarizes the purpose of important HSPD Executive Orders that affect transportation. HSPD Exec. Order No. Purpose HSPD – 3 (May 22, 2002) Homeland Security Advisory System Establishes a Homeland Security Advisory System (HSAS) to provide a comprehensive, effective means to disseminate information on the risk of terrorist acts to Federal, State, and local authorities and to the American people. Such a system would provide warnings in the form of a set of graduated "Threat Conditions" that would increase as the risk of the threat increases. HSPD – 5 (Feb 28, 2003) Management of Domestic Incidents Enhances the ability of the United States to manage domestic incidents by establishing a single, comprehensive national incident management system. HSPD – 7 (Dec 17, 2003) Critical Infrastructure Identification, Prioritization, and Protection Establishes a national policy for Federal departments and agencies to identify and prioritize U.S. critical infrastructure and key resources and to protect them from terrorist attacks. HSPD – 8 (Dec 17, 2003) National Preparedness Establishes policies to strengthen the preparedness of the United States to prevent and respond to threatened or actual domestic terrorist attacks, major disasters, and other emergencies by requiring a national domestic all-hazards preparedness goal, establishing mechanisms for improved delivery of Federal preparedness assistance to State and local governments, and outlining actions to strengthen preparedness capabilities of Federal, State, and local entities. HSPD – 13 (Dec 21, 2004) Maritime Security Policy Establishes U.S. policy, guidelines, and implementation actions to enhance U.S. national security and homeland security by protecting U.S. maritime interests. It directs the coordination of U.S. Government maritime security programs and initiatives to achieve a comprehensive and cohesive national effort involving appropriate Federal, State, local, and private-sector entities. HSPD – 16 (Jun 22, 2006) National Strategy for Aviation Security Strategies for the prevention of the Air Domain from being exploited by terrorist groups, hostile nations-states, and criminals to commit acts against the United States, its people, its infrastructure and its other interests; safe and efficient use of the Air Domain; and the continued facilitation of travel and commerce. Source: US Government, the White House Table 6-1. Purpose of HSPD executive orders affecting transportation. Homeland Security 83

84 Security 101: A Physical Security Primer for Transportation Agencies The above-mentioned laws and E.O.s are part of what is known as the federal government’s National Preparedness Architecture (NPA). Other significant components important to trans- portation are as follows: • National Strategy for Homeland Security, • National Strategy for Transportation Security, • National Strategy for Maritime Security, • National Response Framework, • National Incident Management System, • National Infrastructure Protection Plan, • Regional Transportation Security Strategies, and • Transportation Sector-Specific Plan. Figure 6-3 illustrates the five categories of the NPA—Laws, Presidential Directives, National Strategies, Strategic Plans, and Sector Specific Plans. The alignments to the NPA of three other NATIONAL PREPAREDNESS ARCHITECTURE (Transportation Sector Overview) Source: Adapted from Department of Homeland Security in the 2007 Transit Security Grant Program (TSGP) LAWS PRESIDENTIAL DIRECTIVES NATIONAL STRATEGIES STRATEGIC PLANS SECTOR SPECIFIC PLANS  Aviation Transportation Security Act (ATSA)  Homeland Security Act (HSA)  Intelligence Reform and Terrorism Prevention Act (IRTPA)  Maritime Transportation Security Act (MTSA)  SAFE Port Act  USA PATRIOT Act  Management of Domestic Incidents (HSPD-5)  Critical Infrastructure (HSPD-7)  National Preparedness (HSPD-8)  Maritime Security Policy (NSPD-41/HSPC-13)  National Preparedness Goal  National Security Strategy  National Strategy for Combating Terrorism  National Strategy for Homeland Security  National Strategy for the Physical Protection of Critical Infrastructure and Key Assets  Department of Homeland Security Strategic Plan 2004  National Strategy for Maritime Security  National Strategy for Transportation Security  National Intelligence Strategy  National Strategy to Secure Cyberspace  National Incident Management System (NIMS)  National Response Plan (NRP)  National Infrastructure Protection Plan (NIPP)  National Maritime Security Plan (NMSP)  Area Maritime Security Plans (AMSP)  State/Urban Area Homeland Security Strategies  Regional Transit Security Strategies (RTSS)  National Plan for Research & Development in Support of Critical Infrastructure Protection  Transportation Sector Specific Plan  18 Other Sector Specific Plans Figure 6-3. Categories of the NPA.

strategic preparedness components—the National Response Framework (NRF), National Infrastructure Response Plan (NIPP), and the Transportation Specific Sector Plan—are also vitally important to the transportation sector. National Response Framework The NRF (formerly the National Response Plan) identifies the key personnel, roles, responsi- bilities, and mechanisms for the Nation’s response to incidents. Considered applicable at all lev- els of government—federal, state, and local—as well as to the private sector, the NRF defines “response” as “save lives, protect property and the environment and meet basic needs.” The NRF builds on the National Incident Management System (NIMS) by outlining how the federal gov- ernment is organized to support communities and the States in the event of a catastrophic occur- rence. Transportation’s role under such circumstances is defined under Emergency Support Functions (ESF) 1. The 15 ESFs are as follows: 1. Transportation 2. Communications 3. Public Works and Engineering 4. Firefighting 5. Emergency Management 6. Mass Care, Emergency Assistance, Housing, and Human Services 7. Logistics Management and Resource Support 8. Public Health and Medical Services 9. Search and Rescue 10. Oil and Hazardous Materials Response 11. Agriculture and Natural Resources 12. Energy 13. Public Safety and Security 14. Long-Term Community Recovery 15. External Affairs The lead federal agency for ESF#1 is the U.S. Department of Transportation. DOT is respon- sible for planning and coordinating activities affecting transportation throughout all incident areas—prevention, preparedness, response, recovery, and mitigation. During a national inci- dent, DOT will activate the Crisis Management Center (CMC), which serves as the department’s focal point for emergency response and communications with the National Response Coordi- nation Center (NRCC). DHS’ document ESF# 1 Transportation Annex captures information related to the responsibilities and action steps of the various entities and partners under the framework (see Figure 6-4). This includes scope, concept of operations, and policy requirements. The ESF #1 Annex Policies Section is provided as Figure 6-5. National Infrastructure Protection Plan The 2006 National Infrastructure Protection Plan aligns with the National Preparedness Architecture in effect as a plan document designated to bring to life HSPD-7, Critical Infrastruc- ture Identification, Prioritization, and Protection. HSPD-8, National Preparedness is addressed as well in the context of the NIPP being an overarching priority area critically necessary for the Nation to meet its National Preparedness Goal of “helping entities at all levels of government build and maintain the capabilities to prevent, protect against, respond to, and recover from major events to minimize the impact on lives, property and the economy.” Homeland Security 85

Source: National Infrastructure Protection Plan, 2006 Figure 6-4. Sector-specific agencies and critical infrastructure/key resources sector. 86 Security 101: A Physical Security Primer for Transportation Agencies The NIPP is also consistent with the Homeland Security Act of 2002 which assigns DHS the responsibility to develop a comprehensive national plan for securing the Critical Infrastructure (CI) and Key Resources (KR) of the United States. Each of the federal departments with respon- sibilities under the NIPP is a mandatory signatory to a Letters of Agreement that has committed their respective agencies to the following: • Support NIPP concepts, frameworks, and processes, and carry out their assigned functional responsibilities as appropriate and consistent with their own agency-specific authorities, resources, and programs regarding the protection of CI/KR (Critical Infrastructure)/(Key Resources); • Work with the Secretary of Homeland Security, as appropriate and consistent with their own agency-specific authorities, resources, and programs, to coordinate funding and implemen- tation of programs that enhance CI/KR protection;

• Provide annual reports, consistent with HSPD-7 requirements, to the Secretary of Homeland Security on their efforts to identify, prioritize, and coordinate CI/KR protection in their respective sectors; • Coordinate development of Sector-Specific Plans (SSPs) in collaboration with security part- ners and submit completed SSPs to the Department of Homeland Security within 180 days of final approval of the NIPP. Each SSP will align with the NIPP risk management framework Figure 6-5. ESF #1 Annex Policies Section. Homeland Security 87

88 Security 101: A Physical Security Primer for Transportation Agencies and include a menu of sector-specific protective activities and a description of the sector’s information sharing mechanisms and protocols; • Undertake the initiatives and actions outlined in the NIPP Initial Implementation Initiatives and Actions matrix; • Develop or modify existing interagency and agency-specific CI/KR plans as appropriate, to facilitate compliance with the NIPP and SSPs; • Develop and maintain partnerships for CI/KR protection with appropriate State, regional, local, tribal, and international entities; the private sector; and nongovernmental organizations; and • Protect critical infrastructure information according to the Protected Critical Infrastructure Information Program or other appropriate guidelines, and share information relevant to CI/KR protection (e.g., actionable information on threats, incidents, and CI/KR status) as appropriate and consistent with their own agency-specific authorities. (NIPP page iii). The NIPP establishes CI/KR protection roles for certain federal departments and agencies. Fig- ure 6-4 illustrates the sector-specific agency assignments. Footnote 6 of the Table refers directly to the text of HSPD-7, “the Department of Transportation and the Department of Homeland Security will collaborate on all matters relating to transportation security and transportation infrastructure protection.” The text of the plan at Section 2.2.3 adds additional direction and responsibilities to DOT: “. . . and is additionally responsible for operating the National Airspace System. DOT and DHS collaborate on regulating the transportation of hazardous materials by all modes (includ- ing pipelines).” The NIPP also establishes the NIPP Risk Management Framework protection program strat- egy, described as the “cornerstone” of the plan. Figure 6-6 shows the three protection program areas—Physical, Cyber, and Human, as well as the six steps of the process shown as a continu- ous improvement feedback loop designed to enhance the protection of CI/KR. Transportation Systems CI/KR Sector-Specific Plan Perhaps the most significant NPA component category area for purposes of transportation agency security is the Sector-Specific Plans component. It is known formally as the Transporta- tion Systems Critical Infrastructure and Key Resources Sector-Specific Plan as input to the National Infrastructure Protection Plan (TSSP), published by DHS in May 2007. The main body of the TSSP document contains significant detailed information about the transportation sector, including sector profile data; cross sector dependencies; identification of key federal, state, local, and private security partners; system data regarding assets, networks and functions; risk man- agement and assessment information; security plan development recommendations; and per- formance measurement parameters for protection program implementation. This information is presented as a transportation sector continuation plan that builds on the content of the NIPP. The most important planning tools associated with the TSSP exist in its Modal Annexes. Here DHS compartmentalizes federal government homeland security strategy into descriptive, usable elements, by mode at the operations level. There are six Modal Annexes to the TSSP—Aviation, Maritime, Mass Transit (including passenger rail), Highway Infrastructure and Motor Carrier, Freight Rail, and Pipeline. Each annex contains comprehensive guidance on issues such as communications and infor- mation sharing through the Homeland Security Information Network (HSIN), obtaining grant funds for training employees using DHS-approved courses, identifying promising cooperative R&D initiatives for sponsorship, or simply learning about well-proven countermeasures being

used in the sector to reduce vulnerabilities or mitigate risks. The subject matter content of each of the Modal Annexes is divided into five subcategories: • Executive Summary • Overview of Transportation Mode – Vision and Description – Coordinating Council Process and Structure Homeland Security 89 The NIPP risk management framework includes the follow- ing activities: Set goals and objectives: De ne speci c outcomes, condi- tions, end points, or performance targets that collectively constitute an effective risk management posture. Identify assets, systems, and networks: Develop an inven- tory of the assets, systems, and networks, including those located outside the United States, that make up the Nation’s CIKR or contribute to the critical functionality therein, and collect information pertinent to risk management that takes into account the fundamental characteristics of each sector. Assess risks: Evaluate the risk, taking into consideration the potential direct and indirect consequences of a terrorist attack or other hazards (including, as capabilities mature, seasonal changes in the consequences and dependencies and interdependencies associated with each identi ed as- set, system, or network), known vulnerabilities to various potential attack methods or other signi cant hazards, and general or speci c threat information. Prioritize: Aggregate and compare risk assessment results to: develop an appropriate view of asset, system, and/or network risks and associated mission continuity, where applicable; establish priorities based on risk; and determine protection, resilience, or business continuity initiatives that provide the greatest return on investment for the mitigation of risk. Implement protective programs and resiliency strategies: Select appropriate actions or programs to reduce or man- age the risk identi ed; identify and provide the resources needed to address priorities. Measure effectiveness: Use metrics and other evaluation procedures at the appropriate national, State, local, regional, and sector levels to measure progress and assess the effec- tiveness of the CIKR protection programs. Source: National Infrastructure Protection Plan, 2006 Figure 6-6. Activities included in NIPP risk management framework.

90 Security 101: A Physical Security Primer for Transportation Agencies Transportation Systems Sector Goals and Objectives The chart shows the rela- tionship of each project to the Transportation Systems Sector goals and objectives. G oa l 1 : P re ve nt a nd d et er a ct s of t er ro ri sm u si ng o r ag ai ns t th e U .S . tr an sp or ta ti on s ys te m . G oa l 1 A : Im pl em en t fle xi bl e, la ye re d, a nd u np re di ct ab le s ec ur it y pr og ra m s us in g ri sk m an ag em en t pr in ci pl es . G oa l 1 B : I nc re as e th e vi gi la nc e of t ra ve le rs a nd t ra ns po rt at io n w or ke rs . G oa l 1 C : En ha nc e in fo rm at io n an d in te lli ge nc e sh ar in g am on g tr an s- po rt at io n se cu ri ty p ar tn er s. G oa l 2 : En ha nc e th e re si lie nc y of t he U .S . tr an sp or ta ti on s ys te m . G oa l 2 A : M an ag e an d re du ce t he r is k as so ci at ed w it h ke y no de s, lin ks , an d flo w s w it hi n cr it ic al t ra ns po rt at io n sy st em s to im pr ov e ov er al l n et w or k su rv iv ab ili ty . G oa l 2 B : En su re t he c ap ac it y fo r ra pi d an d fle xi bl e re sp on se a nd re co ve ry t o al l-h az ar ds e ve nt s. G oa l 2 C : Im pl em en t ri sk -b as ed m ea su re s to im pr ov e th e re du nd an cy an d ro bu st ne ss o f ke y no de s, li nk s, a nd f lo w s. G oa l 3 : Im pr ov e th e co st -e ff ec ti ve u se o f re so ur ce s fo r tr an sp or ta - ti on s ec ur it y. G oa l 3 A : A lig n se ct or r es ou rc es w it h th e hi gh es t pr io ri ty t ra ns po rt a- ti on s ec ur it y ri sk s us in g bo th r is k an d ec on om ic a na ly se s as d ec i- si on c ri te ri a. G oa l 3 B : En su re r ob us t se ct or p ar ti ci pa ti on a s a pa rt ne r in d ev el op - in g an d im pl em en ti ng p ub lic s ec to r pr og ra m s fo r C I/ K R p ro te ct io n. G oa l 3 C : Im pr ov e co or di na ti on a nd r is k- ba se d pr io ri ti za ti on o f Tr an sp or ta ti on S ys te m s S ec to r se cu ri ty r es ea rc h, d ev el op m en t, te st , an d ev al ua ti on e ff or ts . G oa l 3 D : A lig n ri sk a na ly si s m et ho do lo gi es w it h th e R is k A na ly si s an d M an ag em en t fo r C ri ti ca l A ss et P ro te ct io n (R A M C A P ) cr it er ia ou tl in ed in t he N IP P . 1. FHWA Bridge and Tunnel Vulnerability Workshops 2. FHWA Statewide and Project-Specific Vulnerability Assessments 3. TSA Security Action Items (SAIs) 4. TSA Intercity Bus Security Grant Program (IBSGP) 5. TSA Truck Security Grant Program H ig hw ay a nd M ot or C ar ri er P ro gr am s 6. FHWA-Supported Security R&D Program Figure 6-7. Information product and associated program, goals and objectives matrix contained in the modal annex for highway infrastructure and motor carriers. • Implementation Plan – Goals and Objectives – Programs and Processes – Industry Effective Practices – Security Guidelines – Security Standards and Requirements – Compliance and Assessment Processes – Grant Programs – The Way Forward • Program Management • Security Gaps Figure 6-7, adapted from the Modal Annex for Highway Infrastructure and Motor Carriers:

Transportation Systems Sector Goals and Objectives The chart shows the rela- tionship of each project to the Transportation Systems Sector goals and objectives. 7. National Cooperative Highway Research Program Project 20-59 8. FMCSA and TSA Truck Tracking Security Pilots 9. Hazardous Materials Research Involving Security Initiatives 10. TSA HAZMAT Driver Background Rulemaking 11. FMCSA Hazardous Materials Safety Permit Program 12. Security Plans and Training 13. FHWA Security Self-Assessment Tool 14. TSA Corporate Security Reviews (CSRs) H ig hw ay a nd M ot or C ar ri er P ro gr am s G oa l 1 : P re ve nt a nd d et er a ct s of t er ro ri sm u si ng o r ag ai ns t th e U .S . tr an sp or ta ti on s ys te m . G oa l 1 A : Im pl em en t fle xi bl e, la ye re d, a nd u np re di ct ab le s ec ur it y pr og ra m s us in g ri sk m an ag em en t pr in ci pl es . G oa l 1 B : I nc re as e th e vi gi la nc e of t ra ve le rs a nd t ra ns po rt at io n w or ke rs . G oa l 1 C : En ha nc e in fo rm at io n an d in te lli ge nc e sh ar in g am on g tr an s- po rt at io n se cu ri ty p ar tn er s. G oa l 2 : En ha nc e th e re si lie nc y of t he U .S . tr an sp or ta ti on s ys te m . G oa l 2 A : M an ag e an d re du ce t he r is k as so ci at ed w it h ke y no de s, lin ks , an d flo w s w it hi n cr it ic al t ra ns po rt at io n sy st em s to im pr ov e ov er al l n et w or k su rv iv ab ili ty . G oa l 2 B : En su re t he c ap ac it y fo r ra pi d an d fle xi bl e re sp on se a nd re co ve ry t o al l-h az ar ds e ve nt s. G oa l 2 C : Im pl em en t ri sk -b as ed m ea su re s to im pr ov e th e re du nd an cy an d ro bu st ne ss o f ke y no de s, li nk s, a nd f lo w s. G oa l 3 : Im pr ov e th e co st -e ff ec ti ve u se o f re so ur ce s fo r tr an sp or ta - ti on s ec ur it y. G oa l 3 A : A lig n se ct or r es ou rc es w it h th e hi gh es t pr io ri ty t ra ns po rt a- ti on s ec ur it y ri sk s us in g bo th r is k an d ec on om ic a na ly se s as d ec i- si on c ri te ri a. G oa l 3 B : En su re r ob us t se ct or p ar ti ci pa ti on a s a pa rt ne r in d ev el op - in g an d im pl em en ti ng p ub lic s ec to r pr og ra m s fo r C I/ K R p ro te ct io n. G oa l 3 C : Im pr ov e co or di na ti on a nd r is k- ba se d pr io ri ti za ti on o f Tr an sp or ta ti on S ys te m s S ec to r se cu ri ty r es ea rc h, d ev el op m en t, te st , an d ev al ua ti on e ff or ts . G oa l 3 D : A lig n ri sk a na ly si s m et ho do lo gi es w it h th e R is k A na ly si s an d M an ag em en t fo r C ri ti ca l A ss et P ro te ct io n (R A M C A P ) cr it er ia ou tl in ed in t he N IP P . Figure 6-7. Continued. Homeland Security 91

92 Security 101: A Physical Security Primer for Transportation Agencies Source: Transportation Systems Critical Infrastructure and Key Resources Sector-Specific Plan, 2007 Transportation Systems Sector Goals and Objectives The chart shows the rela- tionship of each project to the Transportation Systems Sector goals and objectives. 15. TSA Missouri Pilot 16. FMCSA Sensitive Security Visits (SSVs) and Security Contact Reviews (SCRs) 17. FHWA Security and Emergency Management Professional Capacity Building Program 18. TSA School Transportation Security Awareness (STSA) H ig hw ay a nd M ot or C ar ri er P ro gr am s G oa l 1 : P re ve nt a nd d et er a ct s of t er ro ri sm u si ng o r ag ai ns t th e U .S . tr an sp or ta ti on s ys te m . G oa l 1 A : Im pl em en t fle xi bl e, la ye re d, a nd u np re di ct ab le s ec ur it y pr og ra m s us in g ri sk m an ag em en t pr in ci pl es . G oa l 1 B : I nc re as e th e vi gi la nc e of t ra ve le rs a nd t ra ns po rt at io n w or ke rs . G oa l 1 C : En ha nc e in fo rm at io n an d in te lli ge nc e sh ar in g am on g tr an s- po rt at io n se cu ri ty p ar tn er s. G oa l 2 : En ha nc e th e re si lie nc y of t he U .S . tr an sp or ta ti on s ys te m . G oa l 2 A : M an ag e an d re du ce t he r is k as so ci at ed w it h ke y no de s, lin ks , an d flo w s w it hi n cr it ic al t ra ns po rt at io n sy st em s to im pr ov e ov er al l n et w or k su rv iv ab ili ty . G oa l 2 B : En su re t he c ap ac it y fo r ra pi d an d fle xi bl e re sp on se a nd re co ve ry t o al l-h az ar ds e ve nt s. G oa l 2 C : Im pl em en t ri sk -b as ed m ea su re s to im pr ov e th e re du nd an cy an d ro bu st ne ss o f ke y no de s, li nk s, a nd f lo w s. G oa l 3 : Im pr ov e th e co st -e ff ec ti ve u se o f re so ur ce s fo r tr an sp or ta - ti on s ec ur it y. G oa l 3 A : A lig n se ct or r es ou rc es w it h th e hi gh es t pr io ri ty t ra ns po rt a- ti on s ec ur it y ri sk s us in g bo th r is k an d ec on om ic a na ly se s as d ec i- si on c ri te ri a. G oa l 3 B : En su re r ob us t se ct or p ar ti ci pa ti on a s a pa rt ne r in d ev el op - in g an d im pl em en ti ng p ub lic s ec to r pr og ra m s fo r C I/ K R p ro te ct io n. G oa l 3 C : Im pr ov e co or di na ti on a nd r is k- ba se d pr io ri ti za ti on o f Tr an sp or ta ti on S ys te m s S ec to r se cu ri ty r es ea rc h, d ev el op m en t, te st , an d ev al ua ti on e ff or ts . G oa l 3 D : A lig n ri sk a na ly si s m et ho do lo gi es w it h th e R is k A na ly si s an d M an ag em en t fo r C ri ti ca l A ss et P ro te ct io n (R A M C A P ) cr it er ia ou tl in ed in t he N IP P . Figure 6-7. Continued.