Be Informed. Be prepared.

1. Be Informed. Be prepared.

2. WaterISAC Implemented in 2002, WaterISAC is an Internet-based rapid notification system and information resource about all threats and hazards to drinking and wastewater systems. It is the only centralized up-to-the-minute resource of its kind serving the water sector. Presidential Decision Directive NSC-63, issued on May 22, 1998 encouraged creation of the Information Sharing and Analysis Center, with the design and functions of the ISAC to be determined by the private sector in consultation with the federal government.

3. What Does WaterISAC Do? WaterISAC • Gathers information on threats and solutions • Analyzes informationfor credibility and relevancy • Disseminates actionable information to utilities • Operates securely 24/7

4. WaterISAC Options • WaterISAC Basicis free • WaterISAC Prois a subscription service

5. WaterISAC Basic… …a free service which provides up-to-date water-specific security alerts and information to more than 13,000 water and wastewater utilities.

6. WaterISAC Pro… …is a subscription service which goes beyond WaterISAC Basic by providing an unrivaled water sector-specific source of information, research and analysis concerning all hazards to water and wastewater systems.

7. Summary of Features

12. Scenario Water system director on a business trip hears a rumor that a couple carrying bomb materials is headed towards his city. What would you do?

13. What Really Happened? Utility director called WaterISAC and asked for assistance. WaterISAC called DHS contacts. DHS confirmed rumor and verified that law enforcement was in pursuit. WaterISAC informed director who in turn briefed his local officials.

15. The Power to Assist • Water system devastated by Hurricane Katrina contacts WaterISAC to seek assistance in locating specialized equipment. • WaterISAC puts the word out. • Equipment and personnel from other utilities are dispatched to the water system.

16. Threats Against Water Are Real • Iraq - Terrorists add water utility chlorine canisters to bomb attacks • Mexico - Sodium cyanide drums stolen • Australia - SCADA attack results in sewage discharge • Afghanistan - U.S. water system architectural drawings found in terrorist hideout

17. South Carolina - Two alarm sensors found cut in attempted water plant break-in • California - Attempted theft of large chlorine storage tanks • Georgia - A granular substance is added to water following a plant break-in facilities • Texas - Public works receives a letter threatening water supply contamination

18. Consequences of Attacks and Other Hazards • Compromised public health • Economic damages • Loss of fire suppression flow • Reduced water quality • Diminished delivery capacity • Decreased public confidence • Legal fallout • Political fallout

19. WaterISAC Is Your Resource • Provides a comprehensive knowledge base on hazards to water utilities • Supports utilities’ security strategies, assessments and emergency plans • Operates securely • Functions as the distribution center for threat alerts to utilities • Helps subscribers demonstrates due diligence

20. WaterISAC Is Secure • Hosted in U.S. Government-cleared “top secret” facility • Features state-of-the-art cyber security • Monitored constantly for unauthorized attempts to use or alter the site • Analysts and staff have government security clearances

21. Access requires USB key and secret passcode • Each subscriber’s identity is verified • Subscribers sign nondisclosure agreements

22. Under U.S. law, WaterISAC is a non-governmental entity and, as such, exempt from public disclosure laws • Top-secret cleared analysts scrub data prior to any dissemination

23. WaterISAC Analysts… • Assess • Analyze • Generate threat and vulnerability reports and summaries • Interact with subscribers • Interact with ISAC analysts from other critical infrastructure groups • Interact with U.S. law enforcement, security, defense, and other government personnel

25. Information and Intelligence Partners U.S. Federal Agencies • Central Intelligence Agency • Defense Intelligence Agency • National Security Agency • Department of Homeland Security • Federal Bureau of Investigation • Transportation Security Administration • Regional Information Sharing System

26. Department of Defense • First Information Operations Command • Counterintelligence Field Activity • Surface Deployment & Distribution Command • NORTHCOM

27. U.S. State Agencies • Virginia Fusion Center • New Jersey OHSP • Nevada Emergency Operations • Maryland Coordination and Analysis Center • Texas Fusion Center • State Police

28. Scenario: Dirty Bomb, Dirty Water Emergency workers responding to a dirty bomb incident have been washed down. Contaminated run-off containing radioactive waste is streaming toward your wastewater plant.

29. Keyword Search

30. Search Result

31. Search Result

35. Secure Contaminant Databases WaterISAC takes the user to two other secure sites with no additional sign-inrequired: • WCIT: Water Contaminant Information Tool (U.S. EPA) • UK W.I.R. – United Kingdom Water Industry Research (proprietary contaminantdata base)

38. The Power of Relationships • The structure and professional relationships cultivated by and through WaterISAC and the ISAC Council are valuable assets • ISACs share information about interdependencies, providing a basis for the discernment of patterns or threats that exist on multiple fronts

40. ISAC Council and Other ISACs • Communications • Electricity Sector • Emergency Management and Response • Financial Services • Information Technology • Multi-State • Public Transportation

41. Maritime • Research and Education • Surface Transportation • Trucking • Supply Chain • Chemical • Water

43. Subscribe to WaterISAC Call 202-331-0479 Michael Arceneaux arceneaux@waterisac.org