Exploring the Future Potential of AI-Enabled Smartphone Processors
Addressing Infrastructure Dependencies in Hazard Mitigation Plans
1. NADO & DDAA Conference
March 15, 2022
C I S A | C Y B E R S E C U R I T Y A N D I N F R A S T R U C T U R E S E C U R I T Y A G E N C Y
ADDRESSING INFRASTRUCTURE
DEPENDENCIES IN HAZARD MITIGATION
PLANS
2022 NADO AND DDAA WASHINGTON CONFERENCE
March 15, 2022
1
2. NADO & DDAA Conference
March 15, 2022
Who is CISA and how does it approach infrastructure security & resilience?
Key concepts, regional assessment of dependencies, and partnership approach
What is the Infrastructure Resilience Planning Framework (IRPF) and how did NADO
support its development?
IRPF guidance & resources
How was the IRPF piloted with the Kentucky Green River Area Development District?
Application to hazard mitigation planning
Infrastructure project development and incorporation into other regional plans
Scenario Exercise
How can IRPF and CISA critical infrastructure information be accessed?
Overview
2
5. NADO & DDAA Conference
March 15, 2022
Critical Infrastructure: Systems and assets, whether
physical or virtual, so vital that their incapacity or
destruction may have a debilitating impact on the
security, economy, public health or safety, environment, or
any combination of these matters, across any Federal,
State, regional, territorial, or local jurisdiction.
National Infrastructure Protection Plan & Partnership
16 Sectors: Critical Infrastructure Partnership Advisory
Council of government and private sector members
Source: National Infrastructure Protection Plan 2013
Critical Infrastructure
5
Courtesy of DHS
6. NADO & DDAA Conference
March 15, 2022
Infrastructure Resilience Concepts
6
The ability to prepare for and adapt to changing conditions and to withstand
and recover rapidly from disruptions. Resilience includes the ability to
withstand and recover from deliberate attacks, accidents, or naturally
occurring threats or incidents.
(Presidential Policy Directive 21)
Resilience is a property of systems rather than assets.
Infrastructure systems are interdependent and enable community functions.
Resilience goal is to maintain or restore function or services after a disruption
without detrimental impacts.
Attacks Accidents
Natural
Incidents
Changing
Technology
Socio-economic
Dynamics
7. NADO & DDAA Conference
March 15, 2022
Infrastructure Resilience Concepts
7
Critical
Infrastructure
Sectors
Community
Lifeline
Functions
F
E
M
A
Infrastructure systems support essential functions
8. NADO & DDAA Conference
March 15, 2022
Includes comprehensive, step-by-step planning guidance,
templates, and other resources to inform long-term
planning and investment decisions
Five steps from stakeholder engagement to risk
assessment and implementation
Can incorporate methods from Regional Resiliency
Assessment Program projects and outcomes from other
plans/initiatives
Can be used in other local and regional planning efforts
such as FEMA mitigation planning and recovery and
regional economic development plans
Infrastructure Resilience Planning Framework
8
Courtesy of DHS
9. NADO & DDAA Conference
March 15, 2022
Decisions throughout the lifecycle of infrastructure
affect the resilience of provided services
SLTTGs are a critical part of the infrastructure
systems network but most lack planning and
development capacity
Systems interdependent - Need to plan for critical
infrastructure systems across jurisdictions and with
private sector
Need to include risks and vulnerabilities that stem
from dependencies and consequences of disruptions
Why the IRPF
9
10. NADO & DDAA Conference
March 15, 2022
Why the IRPF
10
Courtesy of DHS
Courtesy of DHS
Lifecycle Dependencies
11. NADO & DDAA Conference
March 15, 2022
IRPF Tools and Resources
11
LAY THE
FOUNDATION
CRITICAL
INFRASTRUCTURE
IDENTIFICATION
RISK
ASSESSMENT
COMMUNITY
INFRASTRUCTURE
RESILIENCE PLAN
DEVELOPMENT
COMMUNITY
INFRASTRUCTURE
RESILIENCE PLAN
IMPLEMENTATION &
MAINTENANCE
Flexible Step-by-Step Guidance
Lay the
Foundation
• Scope the effort
• Form collaborative
planning group
• Establish
resilience goals
• Collect & review
information
Identify Critical
Infrastructure
• Identify physical
and cyber
infrastructure
• Prioritize
infrastructure
• Identify
dependencies
among
infrastructure
systems
Assess Risk
• Identify threats
and hazards to
infrastructure
• Assess
vulnerability of
infrastructure
• Assess
consequences to
infrastructure
systems
• Prioritize risk to
infrastructure
systems
Develop Actions
• Validate resilience
goals
• Identify potential
resilience solutions to
mitigate risks
• Assess existing
resources and
capabilities to
implement solutions
• Select resilience
solutions for
implementation
• Develop
implementation
strategy
Implement &
Evaluate
• Implement
resilience
solutions via
existing plans
• Monitor and
evaluate
effectiveness
• Update plans to
incorporate
lessons learned,
new best
practices, etc.
12. NADO & DDAA Conference
March 15, 2022
Participant identified planning needs:
Better understanding of hazard impacts to support funding requests
Guidance for how to involve appropriate stakeholders
Improved coordination between public and private entities
Integration and simplification of existing planning processes
Visualization tools for elected officials
Recognition by federal programs of regional organizations’ role in hazard
mitigation and recovery
NADO Conversation Café 2019
12
13. NADO & DDAA Conference
March 15, 2022
Infrastructure systems have diverse
ownership and operational structures
Public utility
Privately owned
Independently operated
Government regulated
Examples
• Municipal water systems that are federally regulated
• Electric cooperatives
• Private internet and cellular communications
providers
Lay the Foundation
13
14. NADO & DDAA Conference
March 15, 2022
Energy
Electricity
Fuel: oil, natural gas
Communications
Voice, video, data services
Broadcasting
Cable
Satellite
Wireless
Wireline
Identify Critical Infrastructure
14
Water
Drinking Water
Wastewater
Transportation
Air
Maritime
Surface: motor, rail, mass
transit
Fundamental Critical Infrastructure Systems
15. NADO & DDAA Conference
March 15, 2022
Assess Risk, Vulnerability & Consequences
15
Evacuations
Food/Potable Water
Shelter
Durable Goods
Water Infrastructure
Agriculture
Operating status of public wastewater systems and private septic systems
Operating status of wastewater processing facilities
Operating status of public and private water infrastructure (e.g., water mains)
Essential Elements of Information
What is included?
• Water supply, storage, treatment, distribution,
monitoring
• Wastewater collection, storage, treatment,
discharge, monitoring
What infrastructure services are required?
• Electric power
• Internet-based content, information, and
communications services
• Wired/wireless communications
• Roads
• Chemical manufacturing/storage/transport
For what purposes?
• Electricity generation
• Equipment cooling
• Sanitation
• Healthcare
Community Lifeline Components
16. NADO & DDAA Conference
March 15, 2022
“Through BRIC, FEMA will invest in a wide
variety of mitigation activities, including large,
innovative, community-wide public
infrastructure projects….
FEMA will continue to explore creative
approaches to conducting project competitions
that support large-scale and innovative
resilient infrastructure projects that
demonstrate a measurable impact on reducing
disaster costs and building resilience.”
(BRIC Policy Update August 27, 2019)
Develop Actions
16
Expand the range of actions and
actors for reducing risk and
enhancing the resilience of
critical infrastructure systems
17. NADO & DDAA Conference
March 15, 2022
Regional look across jurisdictions
Involve multiple planning committees
Engage upstream and downstream
stakeholders
Perform dependency risk analysis
Identify multiple funding sources
Implement and Evaluate
Risk Reduction/Resiliency
Effectiveness
“realize ancillary benefits”
Population Impacted
“community-wide benefits”
Leveraging Partners
“partnerships that enhance outcomes”
“multi- jurisdictional projects”
17
18. NADO & DDAA Conference
March 15, 2022
APPLYING THE IRPF TO HAZARD
MITIGATION PLANNING WITH A REGIONAL
DEVELOPMENT ORGANIZATION*
18
19. NADO & DDAA Conference
March 15, 2022
GRADD
Planning Pilot Partners
19
Courtesy of Kentucky Association of Economic Development
CISA-ISD
CISA Region IV
FEMA Region IV
KYEM
(Division of Emergency Management
& University of Kentucky)
GREEN RIVER AREA
DEVELOPMENT DISTRICT
20. NADO & DDAA Conference
March 15, 2022
State & Local Objectives
Reduce cost and consequences of disasters to impacted communities
Build an accessible set of tools that can be applied by area development districts
to incorporate critical infrastructure resilience into hazard mitigation planning
Use critical infrastructure dependency analyses to inform investment priorities
CISA-ISD Objectives
Inform the revision and development of IRPF guidance, tools, and resources
Build an example for IRPF application that can be disseminated through states,
federal agencies, CISA Regions, and associations
Kentucky Infrastructure Planning Pilot
20
21. NADO & DDAA Conference
March 15, 2022
Application to Hazard Mitigation Planning
21
•Guidance/Checklist to identify
critical infrastructure owners and
operators who should be involved
at each phase and how (meetings,
interviews, work groups, etc.)
•Guidance for articulating private
sector and owner/operator value of
participating
•Stakeholder invitation letter
•Critical infrastructure identification
question sets and worksheets
•Prioritization facilitation guide and
criteria
•Interview guidance, dependency
question sets and spreadsheets
•Risk assessment question sets for
critical infrastructure interviews
•Guidance for facilitating a working
group to develop critical infrastructure
performance objectives
•Inventory of grant and loan
opportunities
•Guidance for incorporating
mitigation measures into
other planning activities
•Guides for workshops with external
owners, operators, and regulators
•Facilitation guides for discussing a range
of mitigation strategies including
administrative or business solutions
Hazard
Mitigation
Planning
Process
22. NADO & DDAA Conference
March 15, 2022
Sample Tool: Meeting Facilitation Guide
22
Images Courtesy of DHS
23. NADO & DDAA Conference
March 15, 2022
The dependency and co-benefit analysis is a way to help
reprioritize mitigation actions. In the end, it leads to
developing multi-faceted projects that address the total
problem. ~ Kentucky Division of Emergency Management
The dependency questions that referenced community
functions really “got them thinking” about backup services.
It resulted in development of a project for backup power
for lift stations – a tangible benefit of the facilitated
discussion. ~ Green River Area Development District
Used the dependency questions to show the importance
of drilling down to the utility level for public works
mitigation. ~ Green River Area Development District
Pilot Participant Feedback
23
Community Hazard Mitigation Planning Meeting,
Green River Area Development District
24. NADO & DDAA Conference
March 15, 2022
Co-developed Resource
24
25. NADO & DDAA Conference
March 15, 2022
Infrastructure Dependency Impacts
25
26. NADO & DDAA Conference
March 15, 2022
Critical Dependencies for Nursing Homes
26
Lifeline Infrastructure
Energy
Electricity
Fuel
Communications
Water/Wastewater
Transportation
Emergency Services
Critical Products
27. NADO & DDAA Conference
March 15, 2022
Supply Chains and Critical Goods
27
Courtesy of DHS
28. NADO & DDAA Conference
March 15, 2022
GRADD supplemental use of the IRPF:
More in-depth assessment of infrastructure system dependencies
Enhanced planning with focus on infrastructure service resilience
Prioritized mitigation projects
Integration with other regional planning
Potential use in disaster recovery
Pilot Phase II
28
29. NADO & DDAA Conference
March 15, 2022
Engage Planning Committees
29
Economic Development Corporation
Hazard Mitigation Council
Regional Transportation Committee
Water Management Council
Workforce Development Board
Aging Council
TRIAD
GRADD MISSION
Courtesy of GRADD
• Afford local governments and
citizens a regional forum to
identify issues and
opportunities;
• Provide leadership in planning
and implementing programs to
improve the quality of life with
the District
30. NADO & DDAA Conference
March 15, 2022
Inform Economic Development Planning
30
Incorporate outcomes into Comprehensive
Economic Development Strategy (CEDS):
critical infrastructure systems that enable the
region’s key industry and businesses
key infrastructure system providers
strategies to ensure continuity of
infrastructure services
analysis that shows economic strengths,
weaknesses, and opportunities 30%
Transport
35%
Buildings and
Structures
30%
Electric Cables
Aluminum Smelting
1/3 of U.S. Production
Courtesy of GRADD
31. NADO & DDAA Conference
March 15, 2022
31
Infrastructure Projects • Major Ag Processor
• 120 Years Old
• Soybean Oil
• Biofuels
• 45 million gals/year
• Edible Oils
• Barge/Rail/Truck/Pipeline
• 1400 feet of Riverbank
• Center Street Pump
Station
• Engineer Preliminary
Assessment - $50,000
• Owensboro Grain Company
• City of Owensboro
31
32. NADO & DDAA Conference
March 15, 2022
EXPANDING REGIONAL APPLICATIONS
32
33. NADO & DDAA Conference
March 15, 2022
IRPF Application to Other Plans
Plan Type IRPF Guidance and Resources can inform:
Hazard Mitigation Plan ◄ Infrastructure stakeholder identification
◄ Critical systems and services identification
◄ Planning goals & objectives
◄ Vulnerability and consequence analysis
◄ Project identification toward resilience
◄ Infrastructure investment priorities
◄ Development decisions
◄ Project prioritization
◄ Response and recovery activities/procedures
Comprehensive Economic
Development Strategy (CEDS)
Comprehensive or General Plan
Capital Improvement Plan (CIP)
Specific or Area Development Plan
Emergency Operations or
Emergency Response Plan
Long-term Recovery Plan
33
34. NADO & DDAA Conference
March 15, 2022
Why Work with Regional Districts
Infrastructure transcends local boundaries
Shared infrastructure
dependencies/interdependencies
Single infrastructure systems at
regional scale
Examples:
• Ports/multimodal transportation systems
• Electrical grid
• Regional water/wastewater systems that
serve more than one locality and are
essential for development or recovery
Rural and metropolitan regional districts are logical partners for
integrating hazard mitigation into other plans and funding proposals
Courtesy of DHS
34
35. NADO & DDAA Conference
March 15, 2022
Disaster and Economic Recovery
Evacuations
Food/Potable Water
Shelter
Durable Goods
Water Infrastructure
Agriculture
Operating status of public wastewater systems and private septic systems
Operating status of wastewater processing facilities
Operating status of public and private water infrastructure (e.g., water mains)
Essential Elements of Information
What is included?
• Water supply, storage, treatment, distribution, monitoring
• Wastewater collection, storage, treatment, discharge,
monitoring
What infrastructure services are required?
• Electric power
• Internet-based content, information, and communications
services
• Wired/wireless communications
• Roads
• Chemical manufacturing/storage/transport
For what purposes?
• Electricity generation
• Equipment cooling
• Sanitation
• Healthcare
Community Lifeline Components
35
36. NADO & DDAA Conference
March 15, 2022
Planning
Process
Risk
Assessment
Mitigation
Strategy
Plan
Maintenance
HMP & CEDS Integration
36
Summary
Background
SWOT
Analysis
Strategy
Evaluation
Framework
Lay the
Foundation
Identify
Critical
Infrastructure
Assess
Risk
Develop
Actions
Implement & Evaluate
IRPF
HMP
CEDS
Reference: NADO Research Foundation and University of Louisville Center for Hazard Research and Policy Development. (2015). Building Economic
Resilience in the Kerr-Tar Region: Recommendations for Linking Comprehensive Economic Development Strategies and Hazard Mitigation Plans.
37. NADO & DDAA Conference
March 15, 2022
Where the IRPF Can Add Value to CEDS
37
Plan Maintenance
Integrate mitigation principles into community
officials’ responsibilities and department roles
Develop targets and metrics for reducing vulnerability of critical
systems/facilities such as access to backup power or comms
Mitigation Strategy
Minimize disruptions and economic losses to
agriculture, manufacturing, and other sectors
Align mitigation and economic development projects supported
by emergency managers and economic development partners
SWOT/Risk Assessment Hazard Vulnerability Score
Identify critical infrastructure
Add critical infrastructure function/service vulnerability to business
clusters and secondary and tertiary consequences
Planning Process/Data
Location of critical infrastructure for economic development, including major transportation routes (highways, rail
lines, airports), water and wastewater facilities, communication networks, and energy distribution systems
Reference: NADO Research Foundation and University of Louisville (2015). Building Economic Resilience in
the Kerr-Tar Region: Recommendations for Linking Comprehensive Economic Development
Strategies and Hazard Mitigation Plans.
38. NADO & DDAA Conference
March 15, 2022
The IRPF is available for download at www.cisa.gov/idr-program
Resources/tools are linked within the document
Supplemental resources available at www.cisa.gov/idr-program
Infrastructure Dependency Primer
Drought and Infrastructure: A Planning Guide
Technical support currently in development:
Email questions to: IDR@cisa.dhs.gov
CISA Regional Offices (www.cisa.gov/cisa-regions) critical infrastructure information
Ongoing collaboration with federal agencies, universities, and planning associations to
deliver training and technical assistance
Dissemination Strategy
38
39. NADO & DDAA Conference
March 15, 2022
CISA Regional Offices and Outreach Staff
39
Courtesy of DHS
40. NADO & DDAA Conference
March 15, 2022
Delivering IRPF and Other Guides
40
Private Sector
Federal
State, Local, Tribal, Territorial
NGOs, Academia,
NADO
CISA-
ISD
41. NADO & DDAA Conference
March 15, 2022
SCENARIO EXERCISE
41
42. NADO & DDAA Conference
March 15, 2022
The Scenario
A severe winter storm (Nor’easter) has struck Northern New England bringing a
combination of snow, ice, and wind across the region. Infrastructure systems
throughout Anytown, NH have been damaged by the ice and high winds, leading to
downed trees, power outages, and other consequences.
Frigid temperatures are forecast for the next week followed by rapid warming and
melting that is predicted to cause flooding in areas already impacted several times in
the past decade. Impacts to infrastructure systems have disrupted essential services
including:
Public health and community hospitals/nursing homes
Small business and important industry operations
Education and libraries
You are meeting to consider which infrastructure systems are necessary to business
recovery and enhanced future resilience
42
43. NADO & DDAA Conference
March 15, 2022
Discuss at Tables and Report Out
10-MINUTE TABLE DISCUSSION
Assume a major event such as this storm impacted your region:
How would a major regional employer likely be impacted by this type of event?
What impacts were a result of disruptions in infrastructure systems/services that
enable the employer?
What other critical facilities depend on those same infrastructure systems/services?
What facilities/systems depend on the employer to function or operate?
Are these critical infrastructure systems within or outside the county or RDO?
Any new insights from this exercise for economic recovery or CEDs planning?
43
44. NADO & DDAA Conference
March 15, 2022
CONCLUSION
44
45. NADO & DDAA Conference
March 15, 2022
Summary - IRPF Resources
45
Lay the
Foundation
Planning
participant
information sheet
Stakeholder
invitation letter
Data collection list
Link to plan
integration
evaluation
guidebook
Sample goals and
objectives
Identify Critical
Infrastructure
Infrastructure asset
data matrix
Dependency
identification
worksheet
Dependency
discussion guides
Community
systems
discussion guide
System
owner/operator
interview guide
Meeting
facilitation guide
Assess Risk
Hazard information
resource list
Summary of risk
assessment
methodologies
Develop Actions
Sample capability
assessment
worksheet
Mitigation
alternatives
evaluation guide
Link to NIST
economic decision
guide software
Resilient solutions
strategy worksheet
List of sources for
resilience solution
ideas
Implementation
& Maintenance
Inventory of
funding
opportunities
(grants & loans)
General
recommendations
for plan integration
46. NADO & DDAA Conference
March 15, 2022
THE IRPF – A planning framework that:
Provides flexible guidance and resources for incorporating infrastructure into
existing planning activities
Encourages critical infrastructure dependency analysis in planning
Promotes engagement of all stakeholders (public, private, multi-sector) in planning
Highlights the role of resilience planning and its relationship to other plans
Enhances the relevance of existing plans so they lead to more effective investment
Summary
46
47. NADO & DDAA Conference
March 15, 2022
Which types of regional plans might benefit from
integrating infrastructure resilience?
What information or support would NADO members need
to use the IRPF?
Discussion Questions
47
48. NADO & DDAA Conference
March 15, 2022
48
For more information:
www.cisa.gov
Questions?
Sandra Pinel, PHD, AICP
Senior Planner
Addison Coley
Presidential Management Fellow
Email: IDR@cisa.dhs.gov
Hinweis der Redaktion
This presentation will cover how the Infrastructure Resilience Planning Framework (IRPF) can be used by planners and applied to hazard mitigation and planning. The framework was developed by the Cybersecurity and Infrastructure Security Agency (CISA) and has also been used by the Federal Emergency Management Agency (FEMA) within the Department of Homeland Security. The intent of the framework is to reduce the impact of floods, droughts, and other hazards on community infrastructure. The framework can also help communities examine how different systems depend on each other (i.e., water, schools, telecommunications, power, or supply chains for goods and materials that may be vulnerable to disruption). The framework can be used to support integrated hazard mitigation and CEDS planning.
CISA – Sandra
What is CISA and how does it approach infrastructure and resilience?
Why is understanding and planning for dependencies critical to health and economy – example from Texas
What is the IRPF and what challenges/gaps is it intended to address?
How did NADO support its development
How did the KY Pilot originate
Regional EDDs and MPOs are essential to securing the Nation’s critical infrastructure, planning must be at the regional scale, regional councils can use IRPF
How to access IRPF and support from CISA - CISA has information to share and methods
The key point is the importance of working with the private sector and across agencies and with state, tribal, local, and territorial partners that are responsible for critical assets and community services.
The key point is the importance of working with the private sector and across agencies and with state, tribal, local, and territorial partners that are responsible for critical assets and community services.
Transition, before talking about that collaborative work and the outcomes, we would like to back up a bit to talk about the national Critical Infrastructure plan that CISA leads and illustrate importance of understanding and planning for dependencies across the different sectors and jurisdictions in order to reduce consequences of disruptions from any hazard or threat.
It is important to consider infrastructure as a set of linked facilities and systems that deliver essential services.
For example, water system operations depend on electrical power and telecommunications, and natural gas and petroleum processing depend on municipal water. Healthcare and emergency mgt. depend on continuity of water supply. These types of dependencies can be understood for a particular community or region.
Growing interdependencies between infrastructure sectors and lifeline functions increase the possibility of cascading effects if a single sector is disrupted. Understanding and mitigating these risks is a key element of our national security, resilience, and economic prosperity. We apply this perspective to a resilience approach to planning/assessments/response and recovery.
IRPF Step 3 - Approaches for assessing risk to critical infrastructure that can inform the identification and prioritization of mitigation measures
Resources
Hazard information resource list
Summary of risk assessment methodologies
Critical infrastructure is a crucial enabler of community functions represented by FEMA lifelines which are categories of the most critical capabilities and services provided to citizens
Note that this is true during steady-state as well as during a hazard event – i.e., both pre and post disaster
Next slide provides a scenario illustration of this relationship between community functions and infrastructure
IRPF Goals:
Assist planners, community decision-makers, and other critical infrastructure stakeholders with the identification, prioritization, and implementation of solutions that can enhance the security and resilience of critical infrastructure with their community.
Encourage the incorporation of infrastructure security and resilience considerations into broader community planning efforts.
Inform investment decisions that support long-term resilience.
Apply perspective to planning/assessments/response and recovery
The goal is to efficiently use resources to mitigate risks, reduce repetitive losses, and increase resilience
The figure on the left represents the infrastructure life cycle from planning and design to operations and recovery. The right figure shows how dependent a system such as water can be on electricity, communications, etc. and how many sectors may depend on a water supply.
For example, after hurricane Maria, VAB supported FEMA and the other federal agencies and studied where there were breakdowns in both the delivery of emergency health services, manufacturing that supported economic resilience, and water and wastewater. The assumption had been that the most essential infrastructure to recovery was power, but the study found although generators supplied some power, WWW systems were inoperable: Companies manufacturing oxygen essential to health care, for example, could not operate without IT connections to mainland servers. Others were able to provide water to communities. Although private companies were not eligible for federal funding, they are essential to a good plan.
This way of looking at infrastructure dependencies is essential to considering infrastructure in HM plans.
Discuss it as a process of identifying priorities and building resilience over time – building resilience into plans
Apply perspective to planning/assessments/response and recovery
The goal is to efficiently use resources to mitigate risks, reduce repetitive losses, and increase resilience
The figure on the left represents the infrastructure life cycle from planning and design to operations and recovery. The right figure shows how dependent a system such as water can be on electricity, communications, etc. and how many sectors may depend on a water supply.
For example, after hurricane Maria, VAB supported FEMA and the other federal agencies and studied where there were breakdowns in both the delivery of emergency health services, manufacturing that supported economic resilience, and water and wastewater. The assumption had been that the most essential infrastructure to recovery was power, but the study found although generators supplied some power, WWW systems were inoperable: Companies manufacturing oxygen essential to health care, for example, could not operate without IT connections to mainland servers. Others were able to provide water to communities. Although private companies were not eligible for federal funding, they are essential to a good plan.
This way of looking at infrastructure dependencies is essential to considering infrastructure in HM plans.
Discuss it as a process of identifying priorities and building resilience over time – building resilience into plans
The IRPF provides a structured process for improving critical infrastructure resilience, supported by a set of tools and information resources.
The IRPF is flexible and customizable—this is an end-to-end process with supporting tools and guidance, but we know that different users are going to want to be able to tailor and scope the process to fit their needs
The steps are designed to be modular, and you can pick up and leave off at any point in the guide.
The IRPF is not a fixed or required process – it reflects basic planning steps with a set a of principles, considerations, tools, and resources that can be used to specifically inform planning for infrastructure systems within these other comprehensive, development, or capital improvement plans.
NADO Conversation Café – presented the steps of the IRPF then facilitated a scenario-based exercise to work through them.
Valuable feedback provided by the NADO audience helped to revise and improve the IRPF prior to public release.
Stakeholder involvement
IRPF Step 1 – Lay the Foundation
Develop initial buy-in, form a collaborative planning group, and collect and review existing data and plans that may be relevant
Tools
Planning participant information sheet
Stakeholder invitation letter
Resources
Data collection list
Link to plan integration evaluation guidebook
Sample goals and objectives
There are 16 infrastructure sectors defined by DHS are critical, however four are fundamental to society – Communications, Energy, Transportation, and Water.
IRPF Step 2 – Identify Critical Infrastructure
Identify and prioritize infrastructure that is critical to the community and identify dependencies among systems and assets
Tools
Infrastructure asset data matrix
Dependency identification worksheet
Dependency discussion guides
Community systems discussion guide
System owner/operator interview guide
Meeting facilitation guide
Assess vulnerability of infrastructure systems to hazards/threats and consequences of disruption = risk to the community lifeline functions they enable
IRPF Step 3 – Risk Assessment
Approaches for assessing risk to critical infrastructure that can inform the identification and prioritization of mitigation measures
Resources
Hazard information resource list
Summary of risk assessment methodologies
IRPF Step 4 – Develop Actions
Identification and prioritization of mitigation strategies to address priority risks and achieve community critical infrastructure resilience goals
Tools
Sample capability assessment worksheet
Mitigation alternatives evaluation guide
Link to NIST economic decision guide
Resilient solutions strategy worksheet
Resource
List of sources for resilience solution ideas
Implementation is collaborative and integrated, supports development of complex BRIC or other projects
IRPF Step 5 – Implement & Evaluate
Implementation of prioritized resilience solutions through existing planning mechanisms and potential funding and technical assistance sources
Tool
Inventory of funding opportunities (grants & loans)
Resource
General recommendations for plan integration
Why Kentucky?
Geographically & Demographically Diverse - has more navigable waterways and shorelines than any other state, most counties with less than 5000 people and no secure tax base and land tenure to support infrastructure investment
National Importance - Louisville airport is UPS flight headquarters, Amazon located in the state capitol, GRADD region – national aluminum and bourbon supplier
Ongoing Resilience Activities – RRAP, 100 Resilient Cities, Statewide Resilience Committee
Leader in Emergency Management:
Challenges – 14 flood declarations in 17 years, repetitive losses to local water/wastewater infrastructure, limited local resources
Goals – make plans actionable, build local capacity, and reduce costs of disasters
Regional Planning Commissions – ADDs are tasked with doing all types of planning – HMP, CEDs, transportation, water, etc.
Partner with a mid-capacity ADD that is updating its hazard mitigation plan to validate the IRPF, develop tools and resources, demonstrate usefulness within the FEMA HMP process, and build method into State HMP guidance.
2-year pilot with Commonwealth of KY Emergency Management and local area development district (GRADD) – pilot partners shown on next slide
GRADD Interest in IRPF
Private sector consultation and data in the planning process
Communicating the importance of dependencies in risk assessment and functions in mitigation strategies
Considering dependencies in choosing and justifying projects
Aligning plans and federal/state funding for projects with co-benefits, including meeting BRIC program criteria
Project activities:
Worked with KYEM and GRADD to scope effort and identify planning opportunities – presented IRPF and dependency concepts to Judge Execs, HM Council, regional committee chairs, nursing home committee, GRADD planners
Developed tools and resources to support Hazard Mitigation Planning – stakeholder invitation letter, utility owner/operator interview guide, dependency discussion guides, table correlating IRPF to HMP requirements
Tested draft tools and resources in community meetings – City of Whitesville facilitated discussion focused on two critical facilities (emergency shelter and wastewater system), their dependencies, and consequences of a disruption to them; led to identification of a project to provide backup power to critical wastewater lift station.
Revised the IRPF guidance based on input from KYEM and GRADD – added new resources and tools, changed the definition of community, changed from standalone plan to incorporation into existing plans, changed prioritization to focus on impacts
We started with a project that the community had identified as priority in its hazard mitigation plan update – generators for a wastewater systems.
We handed out the reference sheet with the 4 major infrastructure systems that services depend upon – power, transportation…. Etc.
We then asked the group at the table (depicted in the photo) to consider what services that system provides to the community, county or region? (schools, etc.), then what infrastructure systems that wastewater system depends on in addition to electricity.
From there, we facilitated a discussion on what alternative mitigation actions should be considered to not only reduce loss of power (generators) but ensure continuity or recovery of services.
Benefits of using the IRPF
Highlighted the importance of considering critical facilities within a larger context -- Why is it important? What dependencies exist? What is the consequence of disruption?
Helped in prioritizing scarce public investments by understanding which vulnerabilities should be addressed to prevent catastrophic disruptions
Led to identifying mitigation and projects with resilience co-benefits across utilities or public goals
Provided the basis for more competitive federal funding applications
Additional Benefits:
Summarize critical infrastructure system vulnerability to identified hazards, including cascading impacts caused by dependencies
Address repetitive-loss assets and systems
Identify the most important actions to retaining community services and the economy
Improve competitiveness of grant and loan requests
Asked for something to help educate local officials – which will be used in Phase II about to launch-
The Infrastructure Dependency Primer was developed to provide an introduction to dependencies and their importance in enhancing the resilience of infrastructure systems. It provides a web-based, interactive overview of dependencies for several key critical infrastructure systems and guidance on how an understanding of dependencies can be used to inform plans and reduce risk.
(hover over image to bring up video Play bar at bottom – make sure laptop speakers are set to broadcast sound)
Discuss critical infrastructure as a crucial enabler of community services
Discuss co-benefits of enhancing resilience of critical infrastructure
CISA focus is on enhancing resilience pre and post disaster
Critical infrastructure is increasingly at risk from a variety of hazards—including natural hazards, aging and failing infrastructure components, cyber threats, pandemics, and acts of terrorism.
These threats have evolved over the years, presenting ever-changing challenges. Physical and cyber infrastructure have grown inextricably linked, meaning both cyber and physical measures are required to guard against the full array of threats.
Furthermore, growing interdependencies between infrastructure sectors and the lifeline functions we all rely on increase the possibility of cascading effects if a single sector is disrupted. Understanding and mitigating these risks is a key element of our national security, resilience, and economic prosperity.
So this slide presents the critical infrastructure systems and services that are critical for the health sector;
Nursing homes are incredibly important and perform a vital function in communities; in order to perform that function they rely on an awful lot of infrastructure systems that are outside of their control.
As we see them nursing homes need energy—both electricity and during an emergency, potentially fuel for generators; communications systems including internet and phone service; water and wastewater services, and transportation—and there we’re talking primarily road access into and out of the facilities to enable the movement of people and supplies
Additionally, there’s a need for emergency services – EMS, fire, and police as well as critical products such as oxygen, pharmaceuticals, and linens that you need to maintain a steady supply of to continue operating
this may not be an exhaustive and if there’s anything that you think is missing here, we’d love to hear so that we can incorporate it into future work. On our regional assessments, we regularly find that one of the most important things is speaking directly with owners and operators – you all know a lot more about you systems and your requirements than we ever will.
Here’s a breakdown of critical products that were identified for nursing homes as part of a supply chain analysis for New York City
Focus of the study is on the movement of medical goods into New York City and determine where there are risks. Focus is both on what are the challenges in the event of emergency: because it’s a series of islands—there are limited pathways in and many medical supplies are time sensitive or require special treatment – they may need refrigeration of have short lifespans. But another component is where is there risk in the supply chain for critical medical goods. Where could there be upstream problems that could affect you as a whole.
Five primary buckets and then are also items such as food and water that are not listed here because they’re requirements for the general population. Now we don’t have slides for all of these because the study is still underway, but I can present what we have so far.
IRPF can be used at any point in the planning process.
In discussion with KY regarding opportunity is to use the IRPF in recovery post flooding and now recent tornados.
Example partner project
Reference $200,000 EDA grant monies - an opportunity to integrate IRPF (dependencies and resilience) into CEDs planning.
Infrastructure stakeholder identification
identify stakeholders whose input should be sought during planning
identify external organizations with whom response should be coordinated
Critical systems and services identification
identify and prioritize critical infrastructure facilities
identify critical infrastructure systems that enable the region’s economy
Plan goals & objectives
inform the design and capacity of infrastructure needed to support planned/proposed community development
inform development of design standards, codes, and guidelines
articulate the goals of long-term recovery
Vulnerability and consequence analysis
determine risks to the continuity of essential community functions
inform the analysis of economic strengths, weaknesses, and/or opportunities
inform infrastructure conditions and needs assessment
inform hazard/threat scenarios addressed emergency and mitigation plans
inform the analysis of recovery issues, needs, and opportunities
Project identification toward resilience
develop more effective mitigation projects that improve community resilience
identify infrastructure improvements/projects that require capital funds
identify response resources that need to be developed
Infrastructure investment priorities
inform infrastructure investment and rebuilding priorities
inform development of public policies related to the maintenance of infrastructure
develop justification for infrastructure projects
Development decisions
inform land use planning
identify factors that influence the implementation of development strategies
Project prioritization
prioritize projects based on critical system/service risk-reduction and resilience
evaluate and prioritize development strategies against based on infrastructure factors
Response and recovery activities/procedures
identify critical response activities and response procedures
The next six slides discuss how CISA’s capabilities fit into the incident management environment. Because ESF #14 is new, there may be a lack of understanding of the value that ESF #14 delivers under the NRF. While the “Intended Outcomes” slide addresses this generally, the next set of slides describe the value in more concrete terms.
Other Federal agencies are experts in specific infrastructure sectors while, in general terms, CISA focuses on the cross-sector implications of these sectors. A frequent question is “what is the difference between cross-sector and dependencies?” The answer is more about perspective than function. The term “dependency” focuses on what a specific system or asset needs to function while “cross-sector” focuses on how different sectors interact with each other.
This slide illustrates how infrastructure is tied to the Community Lifeline Function construct. Within each Community Lifeline, there are components. Each component is composed of different assets which make up the system (What is included?). The next element is to consider what infrastructure services are delivered through the physical system. Finally, consider what purpose they serve. We see the Essential Elements of Information (EEIs) in the grey box at the bottom of this slide.
Talk about Puerto Rico, Harvey and the Virgin Islands contributions of this perspective to recovery plans and projects.
FEMA and EDA have been working to integrate HMP and CEDS planning requirements. NADO promoted integration of HMP and CEDS planning requirements with a pilot project (Kerr Tar Regional COG)
(click mouse for IRPF steps to show up) The IRPF can help EDDs identify and reduce vulnerabilities to the infrastructure systems that support recovery and resilience.
Talk about what Regions do with partners to secure and enhance the resilience of critical infrastructure systems:
PSAs help protect the nations CI through a variety of programs and partnerships
Prioritization of CI w/ States (Local, State, Federal, Combination)
Vulnerability Assessments of Public and Private Sector Infrastructure = partnerships
PSAs are a natural liaison between the public and private sector
Example: The Regional Resiliency Assessment Program (RRAP) is a cooperative assessment of specific critical infrastructure within a designated geographic area and a regional analysis of the surrounding infrastructure that address a range of infrastructure resilience issues that could have regionally and nationally significant consequences.
Work across multiple inter-agency partnerships and with the Centers of Excellence – FEMA, CMTS, NIST, the National Drought Resilience Partnership, and with multiple associations that serve the public and private sector including SLTTG planners and decision makers.
Assign different tables different community functions/services
The IRPF is to take what we know nationally and make tools available to plan for critical infrastructure around the goal of resilience
The framework is an overarching, one-stop infrastructure resilience guidance document as well as a series of instructional resrouces that give communities specific tips on how to identify infrastructure and their dependencies, assess risk, and identify and implement actions to reduce risk and enhance resilience and security.
Partnering with local governments, planners, and the private sector to enhance the understanding of and planning for infrastructure resilience
Comprised of a suite of planning resources focused on infrastructure security and resilience designed to inform infrastructure investment, development, and operational decisions
How can the IRPF systems-approach, dependency analysis, and regional view be made useful to regional councils?