| |
| |
Preface | |
| |
| |
Acknowledgments | |
| |
| |
Author | |
| |
| |
| |
Critical Infrastructure: What, Who Cares, and Why | |
| |
| |
Introduction to Critical Infrastructure | |
| |
| |
Antithesis | |
| |
| |
Chaos Theory and Critical Infrastructure | |
| |
| |
Who Should Read This Book? | |
| |
| |
How to Read This Book? | |
| |
| |
What Are Critical Infrastructures? | |
| |
| |
NAICS-Based CI Definitions | |
| |
| |
What Is Interdependency? | |
| |
| |
Cascading Impacts: First Order, Second Order, and Tertiary | |
| |
| |
Interdependency and Metrics | |
| |
| |
Applying Metrics to Critical Infrastructure Interdependency | |
| |
| |
National Input-Output Statistics | |
| |
| |
Data Dependency Metrics | |
| |
| |
Requirement for Covariance and Correlation in Critical Infrastructure Interdependency Assessment | |
| |
| |
Interdependency and Critical Infrastructure Risks | |
| |
| |
Strengths and Limits of This Book | |
| |
| |
Chapters to Come | |
| |
| |
Conclusion | |
| |
| |
| |
Econometrics and Critical Infrastructure Interdependency | |
| |
| |
Introduction | |
| |
| |
CI Sectors and Econometric Interdependency Analysis | |
| |
| |
Limits of This Approach | |
| |
| |
Mapping NAICS to CI Sectors | |
| |
| |
Canadian I-O Economic Interdependency Mapping | |
| |
| |
Sector-by-Sector I-O (Use versus Make) | |
| |
| |
Energy Sector in Canada | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to Energy | |
| |
| |
Key Observations Related to Non-CI Sector Inputs | |
| |
| |
Communications and IT Sector in Canada | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to Communications and IT | |
| |
| |
Key Observations | |
| |
| |
Finance Sector in Canada | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to Finance | |
| |
| |
Key Observations | |
| |
| |
Health Sector in Canada | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to Communications and IT | |
| |
| |
Key Observations | |
| |
| |
Food Sector in Canada | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to Food | |
| |
| |
Key Observations | |
| |
| |
Water Sector in Canada | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to Water | |
| |
| |
Key Observations | |
| |
| |
Transport Sector in Canada | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to Transport | |
| |
| |
Key Observations | |
| |
| |
Safety and Government Sector in Canada | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to Safety and Government | |
| |
| |
Key Observations | |
| |
| |
Manufacturing Sector in Canada | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to Manufacturing | |
| |
| |
Key Observations | |
| |
| |
Canadian I-O CI Sector Economic Dependency Matrixes | |
| |
| |
U.S. I-O Sector Economic Interdependency Mapping | |
| |
| |
Sector-by-Sector I-O (Use versus Make) | |
| |
| |
Energy Sector in the United States | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to Energy | |
| |
| |
Observations Related to Non-CI Sector Inputs | |
| |
| |
Communications and IT Sector in the United States | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to Communications and IT | |
| |
| |
Observations | |
| |
| |
Finance Sector in the United States | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to Finance | |
| |
| |
Observations | |
| |
| |
Health Sector in the United States | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to U.S. Health Sector | |
| |
| |
Observations | |
| |
| |
Food Sector in the United States | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to Food | |
| |
| |
Observations | |
| |
| |
Water Sector in the United States | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to Water | |
| |
| |
Key Observations | |
| |
| |
Transport Sector in the United States | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to Transport | |
| |
| |
Key Observations | |
| |
| |
Safety and Government Sector in the United States | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to Safety and Government | |
| |
| |
Observations | |
| |
| |
Manufacturing Sector in the United States | |
| |
| |
Dependency Observations | |
| |
| |
Non-CI Sector Inputs to Manufacturing | |
| |
| |
Observations | |
| |
| |
U.S. I-O CI Sector Economic Dependency Matrix | |
| |
| |
Comparison of Canada-U.S. CI Sectors by I-O Ratio | |
| |
| |
Energy | |
| |
| |
Communications and IT | |
| |
| |
Finance | |
| |
| |
Health | |
| |
| |
Food | |
| |
| |
Water | |
| |
| |
Transportation | |
| |
| |
Safety and Government | |
| |
| |
Manufacturing | |
| |
| |
Undesignated Industries | |
| |
| |
Canadian Indications of Critical, Undesignated Industries | |
| |
| |
U.S. Indications of Critical, Undesignated Industries | |
| |
| |
Professional and Technical Services | |
| |
| |
Conclusions and Indicated Risks | |
| |
| |
Canadian Indications | |
| |
| |
U.S. Indications | |
| |
| |
| |
Information and Data Dependency Analysis | |
| |
| |
Introduction | |
| |
| |
Information Operations and Data Dependency | |
| |
| |
Information and Data Dependency Assessment Methodology | |
| |
| |
Boundaries of Analysis | |
| |
| |
Shared Network Infrastructure | |
| |
| |
A Word about Voice | |
| |
| |
Analysis of Survey Data | |
| |
| |
Defining Inbound and Outbound Dependency among CI Owners | |
| |
| |
Inbound Data Dependency | |
| |
| |
Outbound Data Dependency | |
| |
| |
Dependency Matrixes | |
| |
| |
Data Dependency Metrics | |
| |
| |
Inbound Data Dependency Chart | |
| |
| |
Outbound Data Dependency Chart | |
| |
| |
Information and Data Dependency Maps | |
| |
| |
Sector-Specific Dependency Analysis | |
| |
| |
Tornado Diagrams and Inbound/Outbound Dependency Ratio | |
| |
| |
Energy Sector Data Dependencies | |
| |
| |
Finance Sector Data Dependencies | |
| |
| |
Communications and IT Sector Data Dependencies | |
| |
| |
Health Sector Data Dependencies | |
| |
| |
Food Sector Data Dependencies | |
| |
| |
Water Sector Data Dependencies | |
| |
| |
Transportation Sector Data Dependencies | |
| |
| |
Safety Sector Data Dependencies | |
| |
| |
Government Sector Data Dependencies | |
| |
| |
Manufacturing Sector Data Dependencies | |
| |
| |
Conclusions and Indicated Risks | |
| |
| |
Indications from Data | |
| |
| |
Acknowledgment | |
| |
| |
| |
Correlation, Dependency Latency, and Vulnerabilities of Critical Infrastructure | |
| |
| |
Introduction | |
| |
| |
Objective | |
| |
| |
Correlation of Interdependency Metrics | |
| |
| |
Time and Dependency Latency | |
| |
| |
Canadian Correlated Dependency Metrics | |
| |
| |
Sector Dependency Latency and Cascading Threats | |
| |
| |
U.S. Correlated Interdependency Metrics | |
| |
| |
Sector Dependency Latency and Cascading Threats | |
| |
| |
Conclusions and Indicated Risks | |
| |
| |
Cascading Impact Concentrations | |
| |
| |
Correlated Dependency Maps | |
| |
| |
Canada | |
| |
| |
United States | |
| |
| |
| |
Critical Infrastructure Threat-Risk | |
| |
| |
Introduction | |
| |
| |
Lay Perceptions of Risk | |
| |
| |
Scale and Breadth | |
| |
| |
Deep Dive into Universal Risk | |
| |
| |
Existing Methodologies | |
| |
| |
Real Threat Metrics | |
| |
| |
Prevention versus Response | |
| |
| |
Attributes of Good Universal Risk Management | |
| |
| |
Universal Risk Methodology for CIP | |
| |
| |
Pragmatic Threat-Risk Analysis Methodology | |
| |
| |
Relativistic Threat Analysis | |
| |
| |
Real-Time Risk | |
| |
| |
Critical Analysis | |
| |
| |
Contextual Concepts of Risk Management | |
| |
| |
Precautionary Approach | |
| |
| |
Threat Events | |
| |
| |
Threat Perspective | |
| |
| |
Threats-From | |
| |
| |
Threats-To | |
| |
| |
Threat-Vector | |
| |
| |
Importance of Threat Agents in Forming a Predictive Analysis | |
| |
| |
Threat Agents | |
| |
| |
Threat Action | |
| |
| |
Impact Limitations | |
| |
| |
Threat Limitations | |
| |
| |
Managing Uncertainty | |
| |
| |
Infrastructure Risk Mitigation Errors | |
| |
| |
Threat in 2008 | |
| |
| |
Counterpoint on Cyber Threat-Risk | |
| |
| |
Threat-Risk Convergence | |
| |
| |
Conclusions | |
| |
| |
| |
Critical Infrastructure Interdependency Case Studies | |
| |
| |
Introduction | |
| |
| |
Objectives | |
| |
| |
Structure of Case Studies | |
| |
| |
| |
Pandemic and Influenza | |
| |
| |
Scenario | |
| |
| |
Literature Review | |
| |
| |
Findings: CI Interdependency Vulnerability and Risk Analysis under Pandemic Conditions | |
| |
| |
Summary Analysis | |
| |
| |
Detailed Risk Analysis of Sector Interdependency under Pandemic Conditions | |
| |
| |
Health Dependency on Energy | |
| |
| |
Health Dependency on Other Health Sector Entities | |
| |
| |
Health Dependency on Safety and Government | |
| |
| |
Health Dependency on Communications and IT | |
| |
| |
Health Dependency on Water | |
| |
| |
Health Dependency on Transportation | |
| |
| |
Health Dependency on Food | |
| |
| |
Health Dependency on Finance | |
| |
| |
Health Dependency on Manufacturing | |
| |
| |
Outbound Cascading Impacts under Pandemic Conditions | |
| |
| |
Energy Dependency on Health | |
| |
| |
Comments | |
| |
| |
Safety and Government Dependency on Health | |
| |
| |
Comments | |
| |
| |
Communications and IT Dependency on Health | |
| |
| |
Comments | |
| |
| |
Water Dependency on Health | |
| |
| |
Comments | |
| |
| |
Transportation Dependency on Health | |
| |
| |
Comments | |
| |
| |
Food Dependency on Health | |
| |
| |
Comments | |
| |
| |
Finance Dependency on Health | |
| |
| |
Comments | |
| |
| |
Manufacturing Dependency on Health | |
| |
| |
Comments | |
| |
| |
AssetRank Assessment Algorithm | |
| |
| |
| |
Cyber-Attack on Water Infrastructure | |
| |
| |
Scenario | |
| |
| |
Literature Review | |
| |
| |
Findings: CI Interdependency Vulnerability and Risk Analysis under Wastewater Management Crisis Conditions | |
| |
| |
Detailed Risk Analysis of Sector Interdependency under Pandemic Conditions | |
| |
| |
Water Dependency on Water | |
| |
| |
Water Dependency on Energy | |
| |
| |
Water Dependency on Safety and Government | |
| |
| |
Water Dependency on Communications and IT | |
| |
| |
Water Dependency on Health Sector Entities | |
| |
| |
Water Dependency on Transportation | |
| |
| |
Water Dependency on Manufacturing | |
| |
| |
Water Dependency on Food | |
| |
| |
Water Dependency on Finance | |
| |
| |
Outbound Cascading Impacts under Cyber-Attack Conditions | |
| |
| |
Health Dependency on Water | |
| |
| |
Comments | |
| |
| |
Energy Dependency on Water | |
| |
| |
Comments | |
| |
| |
Safety and Government Dependency on Water | |
| |
| |
Comments | |
| |
| |
Communications and IT Dependency on Water | |
| |
| |
Comments | |
| |
| |
Food Dependency on Water | |
| |
| |
Comments | |
| |
| |
Finance Dependency on Water | |
| |
| |
Comments | |
| |
| |
Transportation Dependency on Water | |
| |
| |
Comments | |
| |
| |
Manufacturing Dependency on Water | |
| |
| |
Comments | |
| |
| |
AssetRank Assessment Algorithm | |
| |
| |
Further Case Studies | |
| |
| |
Index | |