Assessing Vulnerabilities - Principles of Emergency Management - page 193

◾ A formal review process should be established for all information released
to the public, particularly through the energy facility's website. A periodic
review of “public” information should be performed to audit the effectiveness
of information protection policies.
◾ The energy facility should be careful about disseminating sensitive informa-
tion to the press or competitors. Only minimal information should be made
available about personnel (especially executives).
◾ Security training and awareness should be provided to all employees on a
regular basis.
◾ At a minimum, an annual audit of overall security should be conducted.
Some illustrations specific to energy facilities, including large utilities not spe-
cifically considered in this report, are listed next as an example of specific protective
measures that can be implemented. The examples are grouped by type.
Measures to Prevent Damage
− Harden key installations and equipment—protect critical equipment
with walls or below-grade installations, physically separate key pieces of
equipment, and toughen the equipment itself to resist damage.
− Install surveillance systems (e.g., video cameras, motion detectors)
around key installations that are monitored and coupled with rapid-
response forces.
− Maintain security guards at key installations.
− Improve communication with law enforcement agencies, especially local
law enforcement agencies and the local FBI office, to obtain threat infor-
mation and coordinate responses to emergencies.
Measures to Limit Consequences
− Improve emergency plans and procedures for continued operation during
undesirable events and ensure that operators are trained to implement
these contingency plans.
− Modify the physical system—improve control centers and protective
devices, increase redundancy of key equipment, and increase reserve
margins.
Measures to Speed Recovery
− Conduct contingency planning for restoration of service, including iden-
tification of potential spare parts and resolution of legal uncertainties.
− Clarify the legal and institutional framework for sharing reserve
equipment.
− Stockpile critical equipment (e.g., transformers, pumps, compressors,
regulators) or any specialized materials (e.g., cables, pipe sections) needed
to manufacture critical equipment or make repairs.