Critical Infrastructure Risk Assessment. Ernie Hayden, MIPM, CISSP, CEH, GICSP(Gold), PSP
for performing a proper risk assessment found in few other texts. I especially appreciate the chapter on observation that instructs the reader how to perform various types of evidence gathering and the value of tech technique. While this book is highly detailed, each chapter contains numerous references where the reader can go for even more in-depth information on each chapter’s topics. The book’s appendix contains a detailed, lengthy sample risk assessment report that puts many of the topics in the book to use.
In my experience as an executive consultant and having served dozens of companies and agencies over the past six years, I can confidently say that half or more of all organizations practice little or no risk management at all.
As the need for risk management becomes more apparent in organizations, this book should be in the library of every risk manager as well as every consultant performing risk assessments of critical infrastructure facilities -not on the shelf, but on the desk as a regular desk reference.
Peter Gregory
CISM, CISA, CIPM, CRISC, CISSP, CCSK, CCISO, QSA
Seattle, Washington
Table of Contents
WHAT YOUR COLLEAGUES ARE SAYING ABOUT CRITICAL INFRASTRUCTURE RISK ASSESSMENT
DEDICATION AND ACKNOWLEDGEMENTS
The Genesis
In this chapter you will discover:
The Risk Assessment Flow Chart
PART I FOUNDATIONS Chapter 1 Just What is Critical Infrastructure?
1.1 What is Critical Infrastructure?
1.2 Critical Infrastructure Conceptual Development — United States
1.2.1 Mid-1990’s — Executive Order 13010
1.2.2 1998 — Presidential Decision Directive (PDD) 63
1.2.3 2001 (Post 9/11) Executive Order 132 2823
1.2.4 2001 (Post 9/11) USA PATRIOT Act24
1.2.5 2002 National Strategy for Homeland Security26
1.2.6 2003 National Strategy for Physical Infrastructure Protection
1.2.7 2003 Homeland Security Presidential Directive (HSPD-7)
1.3 International Perspectives on Critical Infrastructure
1.4 Critical Infrastructure — A Missing Sector
1.5 Critical Infrastructure Interdependencies
1.5.1 Seattle Tacoma Airport Oil Pipeline Interdependencies
1.5.2 Critical Infrastructure Interdependencies with Orbiting Satellites
1.5.3 The Expansive Nature of Interdependencies and Critical Infrastructure