Aviation security is best achieved by integrating public and private aviation security global activities into a coordinated effort to detect, deter, prevent, and defeat threats to the Air Domain, reduce vulnerabilities, and minimize the consequences of, and expedite the recovery from, attacks that might occur. The Strategy aligns Federal government aviation security programs and initiatives into a comprehensive and cohesive national effort involving appropriate Federal, State, local, and tribal governments and the private sector to provide active layered aviation security for, and support defense in-depth of, the United States.

In June 2006, building upon the Administration’s successful efforts since 9/11, the President directed the development of a comprehensive National Strategy for Aviation Security to protect the Nation and its interests from threats in the Air Domain. The Secretary of Homeland Security, in accordance with National Security Presidential Directive-47/Homeland Security Presidential Directive-16 coordinates the operational implementation, including the integration and synchronization of related Federal programs and initiatives.

Through a collaborative interagency effort and with input from aviation stakeholders, seven supporting plans are being developed to address the specific threats and challenges identified in NSPD-47/HSPD-16. Although the plans will address different aspects of aviation security, they will be mutually linked and reinforce each other. The supporting plans are:

• Aviation Transportation System Security Plan;

• Aviation Operational Threat Response Plan;

• Aviation Transportation System Recovery Plan;

• Air Domain Surveillance and Intelligence Integration Plan;

• International Aviation Threat Reduction Plan;

• Domestic Outreach Plan; and

• International Outreach Plan.

Development of these plans will be guided by the need to revalidate and further enhance current aviation security principles. These plans will be updated on a periodic basis in response to changes in perceived risks to aviation security, the world environment, technology, air transport demands, the global aviation system, and national and homeland security policies. Together, the National Strategy for Aviation Security and seven supporting plans present a comprehensive national effort to prevent hostile or illegal acts within the Air Domain, promote global economic stability, and protect legitimate aviation activities.

For this and more information please see: http://www.dhs.gov/files/laws/gc_1173113497603.shtm

This rule establishes risk-based performance standards for the security of our nation’s chemical facilities. It requires covered chemical facilities to It requires covered chemical facilities to prepare Security Vulnerability Assessments, which identify facility security vulnerabilities, and to develop and implement Site Security Plans, which include measures that satisfy the identified risk-based performance standards.

It also allows certain covered chemical facilities, in specified circumstances, to submit Alternate Security Programs in lieu of a Security Vulnerability Assessment, Site Security Plan, or both.

You can find more information at: http://www.dhs.gov/xprevprot/programs/gc_1169501486179.shtm

The voluntary standard guidelines Phase III of the Water Infrastructure Security Enhancements (WISE) program were jointly developed by the American Society of Civil Engineers (ASCE) and the American Water Works Association (AWWA) with technical input from the Water Environment Federation (WEF). These security recommendations and improvements are beginning wider adoption with funding from DHS in 2009 and beyond.

Risk reduction standards for water, wastewater and stormwater systems are an essential part of protecting our nation’s infrastructure from potential terrorist threats.

The guidelines provide drinking water, wastewater and stormwater utilities with practical
information to help implement improved security measures in new and existing facilities of all sizes.
The documents also address risks from construction and design perspectives and describe physical security approaches for detecting or delaying malevolent parties. The water guideline covers raw water facilities, wells and pumping stations, water treatment plants, water storage facilities, distribution systems and support facilities. The wastewater/stormwater guideline focuses on collections systems, pump stations, wastewater treatment plants and support facilities.

Phase I, released in 2004, and addressed issues such as risk assessment, threat analysis, financial and communications planning, human resources management, operational maintenance, emergency response strategy, design upgrades for improving physical security and management and operating practices to reduce vulnerabilities to malevolent events. Guidelines for contaminant monitoring systems addressed system design including assessments for monitoring system needs, locating instruments and sensors and responding to suspected contamination events.

Phase II, developed comprehensive modular-format training materials to disseminate the information in the interim guidance documents such as implementing enhanced security measures in facility design, operation and management, and providing water managers, operations personnel, design professionals and regulatory officials with detailed practical assistance for implementing improved security measures.

More information can be found at the American Water Works Association http://www.awwa.org , The Water Environment Foundation http://www.wef.org , or the U.S. Environmental Protection Agency http://cfpub.epa.gov/safewater/watersecurity/index.cfm

Disaster comes in many forms for businesses, natural, man-made, and economic.  This blog is meant to provide some of the key items (food for thought).  Think about recent events that have hit many businesses, the down-turn in the economy,  the events of Huricane Katrina, the California wild fires, and devastation of areas by flooding in the midwest.  Clearly there are other events of the past that dictate awareness to their potential as well,  such as the events of  9/11, the industrial espionage that was discovered at Boeing, and other man-made domestic threats that impact companies ability to operate or even to continue to exist.

Think about the aspects of your business that are key to your operations.  For most companies the basics are communications, banking (access to funds), records (both finacial and customer), necessary supplies, your workforce, and a base of operations (where you work).

Now that I have you thinking about these recent events I will address natural and some man-made events in this posting with a few simple steps to develop a plan.

• Most companies records are on computers. They should be backed up regularly and  information storage should be securely on and off-site (this can be as simple as a secure FTP storage site, or cross backups between geographically disparate locations)
• Copy important documents (client lists, contracts, accounting records) on paper and digitally then store them in a secure location or off site in a secure container (Have a method to update these routinely).
• Cross-train employees and make them aware of the plan to continue operations in the event of disaster.   Allow multiple key or responsible employees to know where key elements of the corporate information is kept and how the plan allows access in the event of disaster.
• Prepare secondary work locations in the event of disaster and allow employees the ability to telecommute or  work remotely from home via computer. 
• Keep additional supplies (water, food, blakets, medical supplies, flashlights, batteries, portable radios, etc.) on hand in case of a shelter in place disaster.
• Plan to simplify operations and downsize for periods of time without full operation or the use of, electricity, computers,water, facilities, etc.
• Have a communication chain and notification tree to keep track of your workforce in the event of disaster.

The key to this message in its simplest form is this: Have a plan, be prepared to modify your plan, practice your plan, have your workforce (especially key employees) know the plan, and be aware of the potential of threats by keeping informed (this gives you time to prepare and implement your plan).

More information is available on the web from the US Small Business Administration at the following link: http://www.sba.gov/services/disasterassistance/disasterpreparedness/index.html

This blog content is an excerpt from my article Disaster Preparedness for Business. 

Frank Davies, President, Aella Consulting Group, Inc. www.aellagroup.com