trident EDM502 all appers (all case and SLPS)

EDM502 Critical Infrastructure Vulnerability

Module 1

· Case –

o Case Assignment

§ For this Case Assignment, you are to answer the following:

§ Explain interconnectivity of infrastructures (e.g., airlines and the power grid) with specific examples. Do interconnectivities increase the vulnerability of major infrastructures?

§ Should a CIP management model be centralized, decentralized, or a combination? Propose a relevant management practice model that supports your position.

§ Comment on critical infrastructures in your town, state, or area of deployment. Number, Type(s)? How protected?

o Assignment Expectations

§ Length: This Case Assignment should be at least 3 pages not counting the title page and references.

§ References: At least two references should be included from academic sources (e.g. peer-reviewed journal articles). Required readings are included. Quoted material should not exceed 10% of the total paper (since the focus of these assignments is critical thinking). Use your own words and build on the ideas of others. When material is copied verbatim from external sources, it MUST be enclosed in quotes. The references should be cited within the text and also listed at the end of the assignment in the References section (preferably in APA format).

§ Organization: Subheadings should be used to organize your paper according to question.

§ Grammar and Spelling: While no points are deducted for minor errors, assignments are expected to adhere to standards guidelines of grammar, spelling, punctuation, and sentence syntax. Points may be deducted if grammar and spelling impact clarity.

§ The following items will be assessed in particular:

§ Relevance: All content is connected to the question.

§ Precision: Specific question is addressed. Statements, facts, and statistics are specific and accurate.

§ Depth of discussion: Student presents and integrates points that lead to deeper issues.

§ Breadth: Multiple perspectives and references, multiple issues and factors considered.

§ Evidence: Points are well-supported with facts, statistics and references.

§ Logic: Presented discussion makes sense, conclusions are logically supported by premises, statements, or factual information.

§ Clarity: Writing is concise, understandable, and contains sufficient detail or examples.

§ Objectivity: Student avoids use of first person and subjective bias.

· SLP –

o Critical Infrastructure Vulnerability and Protection: An Introduction

§ The purpose of this session long project (Modules 1–4) is to provide you with the opportunity to prepare a paper or report on CIP that is of particular interest to you community, state, or the United States in general. The following information is essential in ensuring your success with this course component.

§ The project is to include at least the following information:

§ Rationale for choosing your topic.

§ Review of the literature.

§ Implications for you community, state, or the United States in general.

o Session Long Project

§ For this first module you are to examine the literature (given to you in background information or search the internet) and consider on what topic you will focus for your CIP project. Prepare a two (2) page proposal depicting how you will approach and on what you will be focusing in this project.

§ To begin your SLP, in this first module, you are to proceed accordingly:

§ Begin browsing through the literature that relate to your topic of interest. The topic should be important to you or at least to the United States in general

§ Finally, develop a preliminary draft introduction to your review in one or two pages including a reasonably articulated topic to the literature and a sound rationale or problem statement on why you have selected this topic in CIP.

§ While your introduction is not "set in stone" and you may be fine-tuning this along the way, this introduction is to be written in a scholarly manner–illustrating careful thought and insight toward the focus of your project.

o SLP Assignment Expectations

o To ensure your success and meaningful learning with this course component, please be sure to read the following information carefully. Each of the options above is from professional sources from, for example, scholarly journals, reports, and empirical studies.

o Approximate number of scholarly sources from which to draw, cite, and reference is 10.

o Approximate number of pages: 15 including title page and reference list

o Writing format and style: APA formatting is encouraged. The following are just one of the APA formatting resources: http://www.library.cornell.edu/newhelp/res_strategy/citing/apa.html

o Organizing your Time

o The following is a general overview of how you will be submitting your SLP work. This information is provided for you on each module's SLP page in detail.

§ Module 1: Preliminary Introduction to your Review (SLP 1)

§ For this first module you are to examine the literature (given to you in background information or search the internet) and consider on what topic you will focus for your CIP project. Prepare a two pages proposal depicting how you will approach and on what you will be focusing in this project

§ Module 2: Tentative Reference List of 10 or more scholarly sources including reports, studies, and-or manuals.

§ Submit a tentative reference list of 10 or more sources that you will be citing, reviewing, and referencing in your final paper. Briefly describe the contents of each article in a few sentences (APA formatting recommended).

§ Choose 5 from the 10 references and explain in some detail its contents and relevancy to your whole report.

§ Module 3: Draft Paper Submission.

§ Submit your draft copy of your report for a critique prior to final submission.

§ Module 4: Completed session long project

§ Hand in your project containing a brief introduction, body with the guiding concepts, and conclusion (15 pages–Including title page and reference list).

· Discussion –

o There are many examples of failures in cybersecurity including the Stuxnet computer virus interfering with the Iranian uranium enrichment process; Wall Street (NASDAQ); and Identity Theft from banks and on-line retailers and corporations.

o What are some of the measures that can be employed to protect our banking, defense and critical infrastructure from cyber-assault?

· Course Material –

o Required Reading

§ A generic national framework for critical information infrastructure protection (CIIP) (2007). Manual Suter Center for Security Studies, ETH, Zurich. Retrieved from: http://www.itu.int/ITU-D/cyb/cybersecurity/docs/generic-national-framework-for-ciip.pdf

§ Digital Attack Map: Distributed Denial of Service (DDoS) Website: http://www.digitalattackmap.com/

§ Obama, B. (2013). Presidential Policy Directive: Critical infrastructure security and resilience, White House. Retrieved from: https://www.whitehouse.gov/the-press-office/2013/02/12/presidential-policy-directive-critical-infrastructure-security-and-resil

§ Resiliency rules: 7 Steps for critical infrastructure protection. (2007). Slideserve. Retrieved from https://www.slideserve.com/sierra/resiliency-rules

§ Student manual. (2013). The National Infrastructure Protection Plan: An Introduction. FEMA. Retrieved from: https://training.fema.gov/EMIWeb/IS/courseOverview.aspx?code=IS-860.b

§ The National Cybersecurity and Communications Integration Center: Website: http://www.dhs.gov/about-national-cybersecurity-communications-integration-center

o Recommended Reading

§ Parks, R. (2007). Guide to critical infrastructure protection,Cyber Vulnerability Protection. Retrieved from: http://energy.gov/sites/prod/files/oeprod/DocumentsandMedia/26-CIP_CyberAssessmentGuide.pdf

§ The future of the electric grid (2011). MIT Energy Initiative. Retrieved from: http://web.mit.edu/mitei/research/studies/the-electric-grid-2011.shtml

o Recommended Sites

§ Journal of National Security Law and Policy.http://www.jnslp.com/read.asp

§ United States Cyber Command - Cybersecurity:http://www.defense.gov/home/features/2010/0410_cybersec/

Module 2

· Case –

o Case Assignment

§ This Case Assignment examines Critical Infrastructure Protection (CIP) and intergovernmental approaches to safeguarding and to responses to natural disasters.

§ Read pp. 71-75. National Infrastructure Protection Plan (2009).

§ A category five hurricane hit the town of Jacksonville, Florida devastated the town crippling infrastructure including power to homes and businesses. The telephone lines were also destroyed. To add to the monumental task of locating, triaging, and securing the safety of citizens, looters have been stealing cooper from the inactive power lines. Motorists no longer guided by traffic lights, have been negotiating pedestrians and massive debris in the streets; the town is in chaos.

§ Explain the coordinated responses necessary to protect critical infrastructure and key resources (CIKR). Which agencies would be involved to restore normalcy in the Florida town? Note: There is no one answer.

§ Go to GIS Lounge. Look up explanation of GIS and Remote Sensing.

§

§ Discuss the combination of Remote Sensing (RS) and Geospatial Information System (GIS) in the transportation infrastructure protection, and flood risks of major rivers.

o Assignment Expectations

§ Length: This Case Assignment should be at least 3-5 pages not counting the title page and references.

§ References: At least two references should be included from academic sources (e.g. peer-reviewed journal articles). Required readings are included. Quoted material should not exceed 10% of the total paper (since the focus of these assignments is critical thinking). Use your own words and build on the ideas of others. When material is copied verbatim from external sources, it MUST be enclosed in quotes. The references should be cited within the text and also listed at the end of the assignment in the References section (preferably in APA format).

§ Organization: Subheadings should be used to organize your paper according to question.

§ Grammar and Spelling: While no points are deducted for minor errors, assignments are expected to adhere to standards guidelines of grammar, spelling, punctuation, and sentence syntax. Points may be deducted if grammar and spelling impact clarity.

§ The following items will be assessed in particular:

§ Relevance: All content is connected to the question.

§ Precision: Specific question is addressed. Statements, facts, and statistics are specific and accurate.

§ Depth of discussion: Student presents and integrates points that lead to deeper issues.

§ Breadth: Multiple perspectives and references, multiple issues and factors considered.

§ Evidence: Points are well-supported with facts, statistics and references.

§ Logic: Presented discussion makes sense, conclusions are logically supported by premises, statements, or factual information.

§ Clarity: Writing is concise, understandable, and contains sufficient detail or examples.

§ Objectivity: Student avoids use of first person and subjective bias.

· SLP–

o Natural Disasters and Infrastructure Damage

§ Tentative Reference List of 10 or more scholarly sources including reports, studies, and-or manuals. Please avoid non-scholarly sources such as Wikipedia, newspaper articles, and blogs. Choose 5 from the 10 references that you submitted in the previous SLP and explain in some detail its contents and relevancy to your whole report.

§ For Module 2 SLP: Submit a tentative reference list of 10 or more sources (in alphabetical order) that you will be citing, reviewing, and referencing in your final paper. Briefly describe the contents of each article in a few sentences (APA formatting recommended).

§ As your SLP begins to take shape, be sure to revisit the Session Long Project Overview at the SLP page of module 1 to keep you going on the right direction.

o SLP Assignment Expectations

§ Sources are to be presented in alphabetical order.

§ Sources are to be formatted in an academic writing style (e.g., APA).

§ Sources must be scholarly.

· Discussion –

o Active Duty and National Guard units have been used in the past during natural disaster response operations domestically and internationally. Discuss the capabilities and limitations of: 1) Active Duty, and 2) National Guard being used to support disaster relief efforts.

· Course Material –

o Required Reading

§ Emergency planning for nuclear disasters (2011). Union of Concerned Scientists. Retrieved from https://www.ucsusa.org/nuclear-power/nuclear-power-accidents/emergency-planning#.WqFMtOjwZPY. Click Fact Sheet “Emergency Planning and Preparedness for Nuclear Disasters” found on page 1.

§ Miller, R. (2007). Hurricane Katrina: Communications and Infrastructure Impacts. US Army War College. Retrieved from: https://blackboard.angelo.edu/bbcswebdav/institution/LFA/CSS/Course%20Material/BOR4301/Readings/Hurricane%20Katrina%20Communications%20%26%20Infrastructure%20Impacts.pdf

§ National infrastructure protection plan (2009). [Read 5.1 A. Coordinated National Approach to the Homeland Security Mission, pp. 71-75]. Retrieved from:http://www.dhs.gov/xlibrary/assets/NIPP_Plan.pdf

§ National infrastructure protection plan Website (2013). Retrieved from: https://www.dhs.gov/national-infrastructure-protection-plan

§ Transportation Systems Sector: https://www.dhs.gov/transportation-systems-sector

§ Grass GIS: https://grass.osgeo.org/

o Recommended Sites

§ Disaster and Emergency Management on the Internet.http://www.keele.ac.uk/depts/por/disaster.htm

§ Global Disaster Alert and Coordination System.http://www.gdacs.org/

§ Natural Disaster News. http://www.topix.com/news/natural-disasters

§ NOAA National Severe Storms Laboratory. http://www.nssl.noaa.gov/

Module 3

· Case –

o Infrastructure Protection, Vulnerability Analysis, and Network Architectures

o Case Assignment

§ Read the required literature and especially review the videos.

§ Critical Infrastructure Protection Module: Energy Supply Chain

§ Energy Vulnerability Analysis

§ Critical Infrastructure: Vulnerability Analysis and Protection: SCADA Structure

§ SCADA Vulnerability Analysis

§ Permission granted by Naval Postgraduate School, Center for Homeland Defense and Security, 28JAN11.

§ Read the required literature, especially National Infrastructure Protection Plan (2009), pp. 76-79; and, Sector-Specific Plans (SSPs), Department of Homeland Security.

§ Answer the following:

§ Why are refinery and storage stages more vulnerable than at other supply chain components?

§ IT-ISAC: Explain what this is and its role in IT and computer products.

§ “SCADA protection is scattered among governmental agencies and commercial groups.” Give some examples of overlap.

§ Explain the relationship of National Infrastructure Protection Plan (NIPP) and Sector-Specific Plans (SSPs). Also, their relationship with Department of Homeland Security.

§ Explain the function of an SSP; choose a particular SSP and describe its purpose. Also, why did you choose that particular plan?

o Assignment Expectations

§ Length: This Case Assignment should be at least 5-8 pages not counting the title page and references.

§ References: At least two references should be included from academic sources (e.g. peer-reviewed journal articles). Required readings are included. Quoted material should not exceed 10% of the total paper (since the focus of these assignments is critical thinking). Use your own words and build on the ideas of others. When material is copied verbatim from external sources, it MUST be enclosed in quotes. The references should be cited within the text and also listed at the end of the assignment in the References section (preferably in APA format).

§ Organization: Subheadings should be used to organize your paper according to question.

§ Grammar and Spelling: While no points are deducted for minor errors, assignments are expected to adhere to standards guidelines of grammar, spelling, punctuation, and sentence syntax. Points may be deducted if grammar and spelling impact clarity.

§ The following items will be assessed in particular:

§ Relevance: All content is connected to the question.

§ Precision: Specific question is addressed. Statements, facts, and statistics are specific and accurate.

§ Depth of discussion: Student presents and integrates points that lead to deeper issues.

§ Breadth: Multiple perspectives and references, multiple issues and factors considered.

§ Evidence: Points are well-supported with facts, statistics and references.

§ Logic: Presented discussion makes sense, conclusions are logically supported by premises, statements, or factual information.

§ Clarity: Writing is concise, understandable, and contains sufficient detail or examples.

§ Objectivity: Student avoids use of first person and subjective bias.

§

· SLP –

o INFRASTRUCTURE PROTECTION, VULNERABILITY ANALYSIS, AND NETWORK ARCHITECTURES

§ Draft Paper Submission

§ Submit your draft copy of your report for a critique prior to final submission.

§ The Draft copy will not be critiqued for English or punctuation. Suggestions will be made to incorporate in the final report.

o SLP Assignment Expectations

§ Length: This Case Assignment should be at least 10 pages not counting the title page and references.

§ References: At least two references should be included from academic sources (e.g. peer-reviewed journal articles). Required readings are included. Quoted material should not exceed 10% of the total paper (since the focus of these assignments is critical thinking). Use your own words and build on the ideas of others. When material is copied verbatim from external sources, it MUST be enclosed in quotes. The references should be cited within the text and also listed at the end of the assignment in the References section (preferably in APA format).

§ Organization: Subheadings should be used to organize your paper according to question.

§ The following items will be assessed in particular:

§ Relevance: All content is connected to the question.

§ Precision: Specific question is addressed. Statements, facts, and statistics are specific and accurate.

§ Depth of discussion: Student presents and integrates points that lead to deeper issues.

§ Breadth: Multiple perspectives and references, multiple issues and factors considered.

§ Evidence: Points are well-supported with facts, statistics and references.

§ Logic: Presented discussion makes sense, conclusions are logically supported by premises, statements, or factual information.

§ Objectivity: Student avoids use of first person and subjective bias.

o

· Discussion –

o Hurricanes and Tornados have a significant impact on both Public Safety Radio systems (Police, Fire, EMS, etc.) and Cellular Communications. What can be done to ensure communications do not fail following a severe wind event? Remember to cite your sources and list your references.

· Course Material –

o Required Reading

§ Common cyber-security vulnerabilities observed in control system assessments by the INL NSTB program (2008), Department of Energy. Retrieved from: http://energy.gov/oe/downloads/common-cyber-security-vulnerabilities-observed-control-system-assessments-inl-nstb

§ National infrastructure protection plan (2009). [Read 5.2 The CIKR Protection Component of the Homeland Security Mission, and 5.3 Relationship of the NIPP and SSPs to Other CIKR Plans and Programs, pp. 76-79]. Retrieved from: http://www.dhs.gov/xlibrary/assets/NIPP_Plan.pdf

§ Sector-specific plans (SSPs), Department of Homeland Security. Retrieved from: http://www.dhs.gov/critical-infrastructure-sectors

o Required Videos

§ *Lewis, T. (2004). Critical infrastructure protection module: Energy supply chain. 15 minute video: https://www.chds.us/coursefiles/cip/lectures/energy/cip_energy_supplychain/player.html

§ * Lewis, T. (2004). Energy vulnerability analysis-Part 1. 25 minute video: https://www.chds.us/coursefiles/cip/lectures/energy/cip_energy_vulnerabilityanalysis_p01/player.html

§ * Lewis, T. (2004). Critical infrastructure: Vulnerability analysis and protection, SCADA structure. 17 minute video: https://www.chds.us/coursefiles/cip/lectures/scada/cip_SCADA/player.html

§ * Lewis, T. (2004). SCADA vulnerability analysis. 25 minute video: https://www.chds.us/coursefiles/cip/lectures/scada/cip_SCADA_vulnerabilityanalysis/player.html

o Optional Reading

§ Bomb Making Materials Awareness Program, Department of Homeland Security. http://www.dhs.gov/files/programs/gc_1259938444548.shtm

§ National Infrastructure Simulation and Analysis Center (NISAC), Los Alamos. http://www.sandia.gov/nisac/

§ National Infrastructure Coordinating Center, Department of Homeland Security. http://www.dhs.gov/national-infrastructure-coordinating-center

Module 4

· Case –

o International Cooperation

o Case Assignment

§ After reading the required literature, comment on two of the following:

§ Read Resolution 2341 of United Nations Security Council on the protection of critical infrastructure from terrorist attacks. Answer the following: Who are the member countries of the UNSC? Comment on the UNSC’s handling of Iran’s nuclear program.

§ Go to required website: International Engagement Results, Department of Homeland Security. Click “International Partnerships.” From the list of agreements, pick one and comment, using examples such as an agreement with a specific country.

§ Read What Is Container Security Initiative (CSI) and How Does It Work? Answer the following: What are the possible ways shipping containers pose a security risk? A critical infrastructure risk?

§ Comment on the most recent natural or man-made disaster and the effects on critical infrastructure, answering: When? Where? What? Why? How?

o Assignment Expectations

§ Length: This Case Assignment should be at least 3 pages not counting the title page and references.

§ References:At least two references should be included from academic sources (e.g. peer-reviewed journal articles). Required readings are included. Quoted material should not exceed 10% of the total paper (since the focus of these assignments is critical thinking). Use your own words and build on the ideas of others. When material is copied verbatim from external sources, it MUST be enclosed in quotes. The references should be cited within the text and also listed at the end of the assignment in the References section (preferably in APA format).

§ Organization: Subheadings should be used to organize your paper according to question.

§ Grammar and Spelling: While no points are deducted for minor errors, assignments are expected to adhere to standards guidelines of grammar, spelling, punctuation, and sentence syntax. Points may be deducted if grammar and spelling impact clarity.

§ The following items will be assessed in particular:

§ Relevance: All content is connected to the question.

§ Precision: Specific question is addressed. Statements, facts, and statistics are specific and accurate.

§ Depth of discussion: Student presents and integrates points that lead to deeper issues.

§ Breadth: Multiple perspectives and references, multiple issues and factors considered.

§ Evidence: Points are well-supported with facts, statistics and references.

§ Logic: Presented discussion makes sense, conclusions are logically supported by premises, statements, or factual information.

§ Clarity: Writing is concise, understandable, and contains sufficient detail or examples.

§ Objectivity: Student avoids use of first person and subjective bias.

o

· SLP –

o INTERNATIONAL COOPERATION

o Your final report is due. Please check your spelling, punctuation, and grammar prior to submission.

o SLP Assignment Expectations

§ Length: This Case Assignment should be at least 10-15 pages not counting the title page and references.

§ References: At least two references should be included from academic sources (e.g. peer-reviewed journal articles). Required readings are included. Quoted material should not exceed 10% of the total paper (since the focus of these assignments is critical thinking). Use your own words and build on the ideas of others. When material is copied verbatim from external sources, it MUST be enclosed in quotes. The references should be cited within the text and also listed at the end of the assignment in the References section (preferably in APA format).

§ Organization: Subheadings should be used to organize your paper according to question.

§ The following items will be assessed in particular:

§ Relevance: All content is connected to the question.

§ Precision: Specific question is addressed. Statements, facts, and statistics are specific and accurate.

§ Depth of discussion: Student presents and integrates points that lead to deeper issues.

§ Breadth: Multiple perspectives and references, multiple issues and factors considered.

§ Evidence: Points are well-supported with facts, statistics and references.

§ Logic: Presented discussion makes sense, conclusions are logically supported by premises, statements, or factual information.

§ Objectivity: Student avoids use of first person and subjective bias.

o

· Discussion –

o Global and regional conflicts can greatly affect several critical infrastructure sectors in the United States. Discuss the importance of international agreements in protecting U.S. infrastructure given current conflicts in the Middle East and Africa. Remember to cite your sources and list your references.

· Reflections –

o Assignment Expectations:

§ Address concept A and B in about 150 words each.

§ You will be graded on how well you demonstrate knowledge and understanding of the concept, and critical thinking pertaining to the applicability of the concept to your professional practice. Points awarded will follow breakdown below.

§ You will neither be required to, nor graded on responses to your peers. One posting will suffice.

o The Assignment: Given the readings and assignments in the course, identify and discuss two concepts or lessons learned that you believe will be most applicable to your professional discipline.

o Concept A (points 10/20):

§ Identify /define (points 4/20): ...

§ Your professional discipline: ...

§ How applicable (points 6/20): ...

o Concept B (points 10/20):

§ Identify /define (points 4/20): ...

§ Your professional discipline: ...

§ How applicable (points 6/20): ...

o All information in the postings can be shared by all for the betterment of your project.

· Course Material –

o Required Reading

§ International Engagement Results, Department of Homeland Security. https://www.dhs.gov/international-engagement-results Click “International Partnerships” and review the list of agreements.

§ Key Private and public cyber expectations need to be consistently addressed (2010). GAO, Report to Congressional Requestors. Retrieved from: http://www.gao.gov/new.items/d10628.pdf

§ Resolution 2341 of United Nations Security Council on the protection of critical infrastructure from terrorist attacks. (2017). Derechos.org. Retrieved from http://www.derechos.org/terrorism/doc/unterror54.html

§ What is container security initiative (CSI) and how does it work? (2016). Retrieved from: http://www.marineinsight.com/marine-safety/what-is-container-security-initiative-csi-and-how-does-it-work/

o Required Sites

§ International Critical Infrastructure Engagement: https://www.dhs.gov/international-critical-infrastructure-engagement

§ International Strategy for Disaster Reduction. Geneva, Switzerland. http://www.unisdr.org/