Risk Assessment (Site Security) - Revision history

Grichards at 17:38, 14 December 2022

2022-12-14T17:38:25Z

← Older revision		Revision as of 17:38, 14 December 2022
Line 3:		Line 3:
	----		----
	<!-- Delete any sections that are not necessary to your topic. Add pictures/sections as needed -->		<!-- Delete any sections that are not necessary to your topic. Add pictures/sections as needed -->
	"Facility-specific risk assessments explicitly take into account the specific vulnerabilities of each asset and the local and regional consequences of asset failure, while factoring in relevant information about Dams Sector threats from operational experience and intelligence information. The result of risk assessments informs the development of facility-specific security and resilience measures that reduce individual [[owner]] and operator risk and collectively [[contribute]] to regional and national resilience. The Dams Sector also assesses sector-level consequences using combined results of individual consequence assessments." <ref name="Dams Sector">[[Dams Sector-Specific Plan \| Dams Sector-Specific Plan, U.S. Department of Homeland Security, 2015]]</ref>		"Facility-specific risk assessments explicitly take into account the specific vulnerabilities of each asset and the local and regional consequences of asset failure, while factoring in relevant information about Dams Sector threats from operational experience and intelligence information. The result of risk assessments informs the development of facility-specific security and resilience measures that reduce individual [[owner]] and operator risk and collectively contribute to regional and national resilience. The Dams Sector also assesses sector-level consequences using combined results of individual consequence assessments." <ref name="Dams Sector">[[Dams Sector-Specific Plan \| Dams Sector-Specific Plan, U.S. Department of Homeland Security, 2015]]</ref>

	"Effective crisis management planning depends on understanding the threats and hazards that a particular organization faces. This is typically performed through a threat and hazard identification and [[Risk Assessment\|risk assessment]] process that collects information about the natural hazards, technological hazards, and human-caused incidents that challenge the organization’s ability to deliver its purpose or benefit. Through this assessment process, the organization provides context to each threat or hazard by describing the risk and/or assigning values of risk for the purposes of deciding which threats and hazards the plan(s) should prioritize and subsequently address. Evaluating risk involves estimating the probability that the specific threat or hazard will occur and the likely impacts, including the severity, notification timing, and duration. Conducting a [[Risk Assessment\|risk assessment]] will ensure organizations understand the threats they face, prioritize their actions, identify and compare options, and effectively allocate their resources."<ref name="CISA">[[Dams Sector Crisis Management Handbook \| Dams Sector Crisis Management Handbook, Cybersecurity and Infrastructure Security Agency, 2021]]</ref>		"Effective crisis management planning depends on understanding the threats and hazards that a particular organization faces. This is typically performed through a threat and hazard identification and [[Risk Assessment\|risk assessment]] process that collects information about the natural hazards, technological hazards, and human-caused incidents that challenge the organization’s ability to deliver its purpose or benefit. Through this assessment process, the organization provides context to each threat or hazard by describing the risk and/or assigning values of risk for the purposes of deciding which threats and hazards the plan(s) should prioritize and subsequently address. Evaluating risk involves estimating the probability that the specific threat or hazard will occur and the likely impacts, including the severity, notification timing, and duration. Conducting a [[Risk Assessment\|risk assessment]] will ensure organizations understand the threats they face, prioritize their actions, identify and compare options, and effectively allocate their resources."<ref name="CISA">[[Dams Sector Crisis Management Handbook \| Dams Sector Crisis Management Handbook, Cybersecurity and Infrastructure Security Agency, 2021]]</ref>

Rmanwaring at 15:29, 14 December 2022

2022-12-14T15:29:44Z

← Older revision		Revision as of 15:29, 14 December 2022
Line 14:		Line 14:
	*"Input from local law enforcement and/or [[Emergency Management\|emergency management]] agency		*"Input from local law enforcement and/or [[Emergency Management\|emergency management]] agency
	*"Information and/or intelligence from a state or local fusion center		*"Information and/or intelligence from a state or local fusion center
	*"National threat alerts and bulletins such as those issued by DHS and the Federal Bureau of Investigation (FBI)" <ref name="CISA"/>		*"National threat alerts and bulletins such as those issued by Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI)" <ref name="CISA"/>

Rmanwaring at 15:28, 14 December 2022

2022-12-14T15:28:06Z

← Older revision		Revision as of 15:28, 14 December 2022
Line 3:		Line 3:
	----		----
	<!-- Delete any sections that are not necessary to your topic. Add pictures/sections as needed -->		<!-- Delete any sections that are not necessary to your topic. Add pictures/sections as needed -->
	"Facility-specific risk assessments explicitly take into account the specific vulnerabilities of each asset and the local and regional consequences of asset failure, while factoring in relevant information about Dams Sector threats from operational experience and intelligence information. The result of risk assessments informs the development of facility-specific security and resilience measures that reduce individual [[owner]] and operator risk and collectively [[contribute]] to regional and national resilience. The Dams Sector also assesses sector-level consequences using combined results of individual consequence assessments." <ref name="Dams Sector">[[Dams Sector-Specific Plan\| Dams Sector-Specific Plan (U.S. Department of Homeland Security, 2015)]]</ref>		"Facility-specific risk assessments explicitly take into account the specific vulnerabilities of each asset and the local and regional consequences of asset failure, while factoring in relevant information about Dams Sector threats from operational experience and intelligence information. The result of risk assessments informs the development of facility-specific security and resilience measures that reduce individual [[owner]] and operator risk and collectively [[contribute]] to regional and national resilience. The Dams Sector also assesses sector-level consequences using combined results of individual consequence assessments." <ref name="Dams Sector">[[Dams Sector-Specific Plan \| Dams Sector-Specific Plan, U.S. Department of Homeland Security, 2015]]</ref>

	"Effective crisis management planning depends on understanding the threats and hazards that a particular organization faces. This is typically performed through a threat and hazard identification and [[Risk Assessment\|risk assessment]] process that collects information about the natural hazards, technological hazards, and human-caused incidents that challenge the organization’s ability to deliver its purpose or benefit. Through this assessment process, the organization provides context to each threat or hazard by describing the risk and/or assigning values of risk for the purposes of deciding which threats and hazards the plan(s) should prioritize and subsequently address. Evaluating risk involves estimating the probability that the specific threat or hazard will occur and the likely impacts, including the severity, notification timing, and duration. Conducting a risk assessment will ensure organizations understand the threats they face, prioritize their actions, identify and compare options, and effectively allocate their resources."<ref name="CISA">[[Dams Sector Crisis Management Handbook\| Dams Sector Crisis Management Handbook (Cybersecurity and Infrastructure Security Agency, 2021)]]</ref>		"Effective crisis management planning depends on understanding the threats and hazards that a particular organization faces. This is typically performed through a threat and hazard identification and [[Risk Assessment\|risk assessment]] process that collects information about the natural hazards, technological hazards, and human-caused incidents that challenge the organization’s ability to deliver its purpose or benefit. Through this assessment process, the organization provides context to each threat or hazard by describing the risk and/or assigning values of risk for the purposes of deciding which threats and hazards the plan(s) should prioritize and subsequently address. Evaluating risk involves estimating the probability that the specific threat or hazard will occur and the likely impacts, including the severity, notification timing, and duration. Conducting a [[Risk Assessment\|risk assessment]] will ensure organizations understand the threats they face, prioritize their actions, identify and compare options, and effectively allocate their resources."<ref name="CISA">[[Dams Sector Crisis Management Handbook \| Dams Sector Crisis Management Handbook, Cybersecurity and Infrastructure Security Agency, 2021]]</ref>

	"Potential sources of threat and hazard information can include the following:		"Potential sources of threat and hazard information can include the following:

Grichards at 20:13, 9 December 2022

2022-12-09T20:13:00Z

← Older revision		Revision as of 20:13, 9 December 2022
Line 5:		Line 5:
	"Facility-specific risk assessments explicitly take into account the specific vulnerabilities of each asset and the local and regional consequences of asset failure, while factoring in relevant information about Dams Sector threats from operational experience and intelligence information. The result of risk assessments informs the development of facility-specific security and resilience measures that reduce individual [[owner]] and operator risk and collectively [[contribute]] to regional and national resilience. The Dams Sector also assesses sector-level consequences using combined results of individual consequence assessments." <ref name="Dams Sector">[[Dams Sector-Specific Plan\| Dams Sector-Specific Plan (U.S. Department of Homeland Security, 2015)]]</ref>		"Facility-specific risk assessments explicitly take into account the specific vulnerabilities of each asset and the local and regional consequences of asset failure, while factoring in relevant information about Dams Sector threats from operational experience and intelligence information. The result of risk assessments informs the development of facility-specific security and resilience measures that reduce individual [[owner]] and operator risk and collectively [[contribute]] to regional and national resilience. The Dams Sector also assesses sector-level consequences using combined results of individual consequence assessments." <ref name="Dams Sector">[[Dams Sector-Specific Plan\| Dams Sector-Specific Plan (U.S. Department of Homeland Security, 2015)]]</ref>

	"Effective crisis management planning depends on understanding the threats and hazards that a particular organization faces. This is typically performed through a threat and hazard identification and risk assessment process that collects information about the natural hazards, technological hazards, and human-caused incidents that challenge the organization’s ability to deliver its purpose or benefit. Through this assessment process, the organization provides context to each threat or hazard by describing the risk and/or assigning values of risk for the purposes of deciding which threats and hazards the plan(s) should prioritize and subsequently address. Evaluating risk involves estimating the probability that the specific threat or hazard will occur and the likely impacts, including the severity, notification timing, and duration. Conducting a risk assessment will ensure organizations understand the threats they face, prioritize their actions, identify and compare options, and effectively allocate their resources."<ref name="CISA">[[Dams Sector Crisis Management Handbook\| Dams Sector Crisis Management Handbook (Cybersecurity and Infrastructure Security Agency, 2021)]]</ref>		"Effective crisis management planning depends on understanding the threats and hazards that a particular organization faces. This is typically performed through a threat and hazard identification and [[Risk Assessment\|risk assessment]] process that collects information about the natural hazards, technological hazards, and human-caused incidents that challenge the organization’s ability to deliver its purpose or benefit. Through this assessment process, the organization provides context to each threat or hazard by describing the risk and/or assigning values of risk for the purposes of deciding which threats and hazards the plan(s) should prioritize and subsequently address. Evaluating risk involves estimating the probability that the specific threat or hazard will occur and the likely impacts, including the severity, notification timing, and duration. Conducting a risk assessment will ensure organizations understand the threats they face, prioritize their actions, identify and compare options, and effectively allocate their resources."<ref name="CISA">[[Dams Sector Crisis Management Handbook\| Dams Sector Crisis Management Handbook (Cybersecurity and Infrastructure Security Agency, 2021)]]</ref>

	"Potential sources of threat and hazard information can include the following:		"Potential sources of threat and hazard information can include the following:
Line 12:		Line 12:
	*"Records from previous incidents, including historical data		*"Records from previous incidents, including historical data
	*"Forecasts or models of future risks due to changing weather and demographic patterns		*"Forecasts or models of future risks due to changing weather and demographic patterns
	*"Input from local law enforcement and/or emergency management agency		*"Input from local law enforcement and/or [[Emergency Management\|emergency management]] agency
	*"Information and/or intelligence from a state or local fusion center		*"Information and/or intelligence from a state or local fusion center
	*"National threat alerts and bulletins such as those issued by DHS and the Federal Bureau of Investigation (FBI)" <ref name="CISA"/>		*"National threat alerts and bulletins such as those issued by DHS and the Federal Bureau of Investigation (FBI)" <ref name="CISA"/>


	==Types of Security==		==Types of Security==

Grichards at 20:07, 9 December 2022

2022-12-09T20:07:39Z

← Older revision		Revision as of 20:07, 9 December 2022
Line 3:		Line 3:
	----		----
	<!-- Delete any sections that are not necessary to your topic. Add pictures/sections as needed -->		<!-- Delete any sections that are not necessary to your topic. Add pictures/sections as needed -->
	[~~Paragraph here~~]		"Facility-specific risk assessments explicitly take into account the specific vulnerabilities of each asset and the local and regional consequences of asset failure, while factoring in relevant information about Dams Sector threats from operational experience and intelligence information. The result of risk assessments informs the development of facility-specific security and resilience measures that reduce individual [[owner]] and operator risk and collectively [[contribute]] to regional and national resilience. The Dams Sector also assesses sector-level consequences using combined results of individual consequence assessments." <ref name="Dams Sector">[[Dams Sector-Specific Plan\| Dams Sector-Specific Plan (U.S. Department of Homeland Security, 2015)]]</ref>

			"Effective crisis management planning depends on understanding the threats and hazards that a particular organization faces. This is typically performed through a threat and hazard identification and risk assessment process that collects information about the natural hazards, technological hazards, and human-caused incidents that challenge the organization’s ability to deliver its purpose or benefit. Through this assessment process, the organization provides context to each threat or hazard by describing the risk and/or assigning values of risk for the purposes of deciding which threats and hazards the plan(s) should prioritize and subsequently address. Evaluating risk involves estimating the probability that the specific threat or hazard will occur and the likely impacts, including the severity, notification timing, and duration. Conducting a risk assessment will ensure organizations understand the threats they face, prioritize their actions, identify and compare options, and effectively allocate their resources."<ref name="CISA">[[Dams Sector Crisis Management Handbook\| Dams Sector Crisis Management Handbook (Cybersecurity and Infrastructure Security Agency, 2021)]]</ref>

			"Potential sources of threat and hazard information can include the following:
			*"Expert knowledge about past or potential future threats or hazards
			*"Existing assessments (e.g., security, risk, and vulnerability) conducted by the organization
			*"Records from previous incidents, including historical data
			*"Forecasts or models of future risks due to changing weather and demographic patterns
			*"Input from local law enforcement and/or emergency management agency
			*"Information and/or intelligence from a state or local fusion center
			*"National threat alerts and bulletins such as those issued by DHS and the Federal Bureau of Investigation (FBI)" <ref name="CISA"/>

	==Types of Security==		==Types of Security==
	* [[Physical Security]]		* [[Physical Security]]
	* [[Cyber Security]]		* [[Cyber Security]]

	~~==Examples==~~
	~~{{Website Icon}}~~
	~~==Best Practices Resources==~~
	~~{{Document Icon}}~~
	~~==Trainings==~~
	~~{{Video Icon}}~~

	<!-- For information on notation for in text citations visit https://www.mediawiki.org/wiki/Help:Cite Or simply enclose the citation as shown <ref> citation </ref> in the location of the in text mention. Citations will automatically populate below-->		<!-- For information on notation for in text citations visit https://www.mediawiki.org/wiki/Help:Cite Or simply enclose the citation as shown <ref> citation </ref> in the location of the in text mention. Citations will automatically populate below-->

Grichards at 01:49, 18 November 2022

2022-11-18T01:49:57Z

← Older revision		Revision as of 01:49, 18 November 2022
Line 1:		Line 1:
	__NOTOC__		__NOTOC__
			[[Category:Site Security]]
	----		----
	<!-- Delete any sections that are not necessary to your topic. Add pictures/sections as needed -->		<!-- Delete any sections that are not necessary to your topic. Add pictures/sections as needed -->

Grichards at 21:19, 16 September 2022

2022-09-16T21:19:28Z

← Older revision		Revision as of 21:19, 16 September 2022
Line 5:		Line 5:

	==Types of Security==		==Types of Security==
			* [[Physical Security]]
	~~'''~~Physical Security~~'''~~		* [[Cyber Security]]

	~~'''~~Cyber Security~~'''~~

	==Examples==		==Examples==

Rmanwaring at 22:00, 8 September 2022

2022-09-08T22:00:12Z

← Older revision		Revision as of 22:00, 8 September 2022
Line 4:		Line 4:
	[Paragraph here]		[Paragraph here]

	==~~Other Headings~~==		==Types of Security==
	~~[Paragraph here]~~
			'''Physical Security'''

			'''Cyber Security'''

	==Examples==		==Examples==

Rmanwaring: Created page with "NOTOC ---- [Paragraph here] ==Other Headings== [Paragraph here] ==Examples== {{Website Icon}} ==Best Practices Resources== {{Document Icon}} ==Trainings== {{Video Icon}}

Risk Assessment (Site Security) - Revision history

Grichards at 17:38, 14 December 2022

Rmanwaring at 15:29, 14 December 2022

Rmanwaring at 15:28, 14 December 2022

Grichards at 20:13, 9 December 2022

Grichards at 20:07, 9 December 2022

Grichards at 01:49, 18 November 2022

Grichards at 21:19, 16 September 2022

Rmanwaring at 22:00, 8 September 2022

Rmanwaring: Created page with "__NOTOC__ ---- [Paragraph here] ==Other Headings== [Paragraph here] ==Examples== {{Website Icon}} ==Best Practices Resources== {{Document Icon}} ==Trainings== {{Video Icon}}

Rmanwaring: Created page with "NOTOC ---- [Paragraph here] ==Other Headings== [Paragraph here] ==Examples== {{Website Icon}} ==Best Practices Resources== {{Document Icon}} ==Trainings== {{Video Icon}}