Marsha MacBride Chief of Staff, Office of Chairman Powell Director, Homeland Security Policy...
description
Transcript of Marsha MacBride Chief of Staff, Office of Chairman Powell Director, Homeland Security Policy...
11
Marsha MacBrideMarsha MacBrideChief of Staff, Chief of Staff,
Office of Chairman PowellOffice of Chairman Powell
Director, Homeland Security Policy Director, Homeland Security Policy CouncilCouncil
Federal Communications CommissionFederal Communications Commission
22
Homeland Security Homeland Security SectorsSectors
AgricultureAgriculture Banking and Finance Banking and Finance Chemical Industry Chemical Industry Defense Industrial Base Defense Industrial Base Emergency Services Emergency Services Energy Energy Food Food Government Government Information andInformation and Postal and ShippingPostal and Shipping
TelecommunicationsTelecommunications WaterWaterTransportation Transportation Public Health Public Health
– All other sectors rely on the Information and All other sectors rely on the Information and Telecommunications sectorTelecommunications sector
33
FCC’s Homeland Security FCC’s Homeland Security MissionMission Evaluate and strengthen measures for Evaluate and strengthen measures for
protecting the Nation’s communications protecting the Nation’s communications infrastructure.infrastructure.
Facilitate rapid restoration of that Facilitate rapid restoration of that infrastructure in the event of disruption.infrastructure in the event of disruption.
Develop policies that promote access to Develop policies that promote access to effective communications services by public effective communications services by public safety, public health, and other emergency safety, public health, and other emergency personnel in emergency situations. personnel in emergency situations.
44
FCC’s Homeland Security FCC’s Homeland Security FocusFocus Interagency and Industry Interagency and Industry
PartnershipsPartnerships Infrastructure ProtectionInfrastructure Protection Communications ReliabilityCommunications Reliability Public Safety CommunicationsPublic Safety Communications Spectrum PolicySpectrum Policy New TechnologiesNew Technologies
55
FCC’s Homeland FCC’s Homeland Security PartnershipsSecurity Partnerships
Executive Office of the President
State and Local
Governments
Sister Agencies
Industry and Trade
Organizations
Federal Advisory
Committees
66
Dep
artm
ent o
f Hom
elan
d Se
curit
y
Bureau ofCitizenship and
ImmigrationServices
EmergencyPreparednessand Response
InformationAnalysis andInfrastructure
Protection
Science andTechnology
Border andTransportation
Security
FCCSecret Service
Coast Guard
FEMA
COOP
IAG
ESF#2
CDRG
Office ofScience andTechnology
Policy
JTRB
Executive Officeof the President
NationalSecurityCouncil
CNSS
Office ofHomelandSecurity
National SecurityTelecommunications
Advisory Council
FBI
SIOC
CIAO
NIPC
NIAC
NCS
NCC
National SecurityAgency
Department ofCommerce
NTIA
COP / COR
Department ofJustice
Interagency Efforts: View from the FCC
FedCIRC
Immigration& Customs
Enforcement
Customs &Border
Protection
Department ofDefense
OASD/C3I
Department ofTransportation
FAA
Chief InformationOfficer
77
FCC Partnership with FCC Partnership with NCS/NCCNCS/NCC
The National Communications System (NCS) The National Communications System (NCS) continues to be our strongest partner in our continues to be our strongest partner in our efforts to coordinate industry response to a efforts to coordinate industry response to a network outage or attack.network outage or attack.
FCC is assisting NCS in promoting its efforts to FCC is assisting NCS in promoting its efforts to improve emergency communications through improve emergency communications through the Telecommunications Service Priority (TSP), the Telecommunications Service Priority (TSP), Government Emergency Telecommunications Government Emergency Telecommunications System (GETS) and Wireless Priority Access System (GETS) and Wireless Priority Access (WPAS) programs.(WPAS) programs.
88
NCC MembershipNCC Membership
99
FCC’s Homeland Security FCC’s Homeland Security FocusFocus Interagency and Industry Interagency and Industry
PartnershipsPartnerships Infrastructure ProtectionInfrastructure Protection Communications ReliabilityCommunications Reliability Public Safety CommunicationsPublic Safety Communications Spectrum PolicySpectrum Policy New TechnologiesNew Technologies
1010
Infrastructure ProtectionInfrastructure Protection
FCC rechartered our Network Reliability and FCC rechartered our Network Reliability and Interoperability Council (NRIC VI) federal Interoperability Council (NRIC VI) federal advisory committee in January 2002 to focus on advisory committee in January 2002 to focus on homeland security issues. (www.nric.org)homeland security issues. (www.nric.org)
FCC created a new Media Security and Reliability FCC created a new Media Security and Reliability Council (MSRC) federal advisory committee in Council (MSRC) federal advisory committee in March 2002 to address broadcast, cable and March 2002 to address broadcast, cable and satellite homeland security issues. satellite homeland security issues. (www.mediasecurity.org)(www.mediasecurity.org)
1111
Network Reliability and Network Reliability and Interoperability CouncilInteroperability Council
First chartered in 1993. NRIC has a 10-year First chartered in 1993. NRIC has a 10-year history of improving network reliability.history of improving network reliability.
Expanded membership in 2001 charter.Expanded membership in 2001 charter.
December 2002 - Delivered best practices for December 2002 - Delivered best practices for securing the physical and cyber networks.securing the physical and cyber networks.
March 2002 - Delivered best practices for March 2002 - Delivered best practices for service restoration and disaster recovery.service restoration and disaster recovery.
1212
NRIC Best Practices – NRIC Best Practices – Summary of Results – Dec Summary of Results – Dec `02`02Creation of Best Practices to Fortify and Harden NetworksCreation of Best Practices to Fortify and Harden Networks
Systematic assessment of communications infrastructure vulnerabilitiesSystematic assessment of communications infrastructure vulnerabilities Creation of an Integrated Vulnerabilities – Threats – Best Practices FrameworkCreation of an Integrated Vulnerabilities – Threats – Best Practices Framework
Physical Security Best PracticesPhysical Security Best Practices
200 Best Practices/3,500 Participant-Hours in working meetings200 Best Practices/3,500 Participant-Hours in working meetings Sample Best Practices:Sample Best Practices:
– Network Operators should ensure intra-office diversity of all critical resources including spares, power, timing source and Network Operators should ensure intra-office diversity of all critical resources including spares, power, timing source and signaling leads (e.g., SS7). \signaling leads (e.g., SS7). \
– Where feasible, Network Operators should provide both physical and logical diversity of critical facilities links (e.g., nodal, Where feasible, Network Operators should provide both physical and logical diversity of critical facilities links (e.g., nodal, network element). Particular attention should be paid to telecom hotels and other choke points. network element). Particular attention should be paid to telecom hotels and other choke points.
Cybersecurity Best PracticesCybersecurity Best Practices
103 Best Practices/Over 3,000 Participant-Hours in working meetings103 Best Practices/Over 3,000 Participant-Hours in working meetings Sample Best Practices:Sample Best Practices:
– Equipment deployed in insecure or remote locations should include intrusion detection mechanisms that enable stored Equipment deployed in insecure or remote locations should include intrusion detection mechanisms that enable stored critical information to be destroyed upon detection of attack.critical information to be destroyed upon detection of attack.
– Network Operators and Service Providers should know and validate who you are accepting routing information from to Network Operators and Service Providers should know and validate who you are accepting routing information from to protect against global routing table disruptions.protect against global routing table disruptions.
1313
NRIC Best Practices – NRIC Best Practices – Summary of Results March Summary of Results March ‘03‘03
Creation of Best Practices to Facilitate Recovery from AttacksCreation of Best Practices to Facilitate Recovery from Attacks
Business ContinuityBusiness Continuity Disaster Recovery and Service RestorationDisaster Recovery and Service Restoration Communications Industry Support for Public Safety CommunityCommunications Industry Support for Public Safety Community
Business ContinuityBusiness Continuity
103 Best Practices103 Best Practices Sample Best Practice:Sample Best Practice:
– Service Providers, Network Operators and Equipment Suppliers should consider establishing a designated Emergency Operations Center. This center should contain tools for coordination of service restoral including UPS, alternate means of communications, maps, and documented procedures to manage business interruptions and/or disasters.
Service RestorationService Restoration
Over 150 Best Practices in the area of Physical Security and CybersecurityOver 150 Best Practices in the area of Physical Security and Cybersecurity Sample Best Practices:Sample Best Practices:
– If the Domain Name System (DNS) server is under attack, 1) Implement reactive filtering to discard identified attack If the Domain Name System (DNS) server is under attack, 1) Implement reactive filtering to discard identified attack traffic, if possible 2) Rate-limiting traffic to the DNS server complex 3) Deploy additional DNS server capacity in a traffic, if possible 2) Rate-limiting traffic to the DNS server complex 3) Deploy additional DNS server capacity in a round-robin architecture 3) Utilize Denial of Service (DoS) tracking methods to identify the source(s) of the attack.round-robin architecture 3) Utilize Denial of Service (DoS) tracking methods to identify the source(s) of the attack.
Communications Industry Support for Public Safety CommunityCommunications Industry Support for Public Safety Community
Recommendations and best practices to support communications needs of public safety personnel in an emergencyRecommendations and best practices to support communications needs of public safety personnel in an emergency
1414
Media Security and Reliability Media Security and Reliability CouncilCouncil
MSRC Objectives:MSRC Objectives:– Ensure the security and sustainability of broadcast and multichannel Ensure the security and sustainability of broadcast and multichannel
video programming distribution (MVPD) facilities.video programming distribution (MVPD) facilities.– Ensure the availability of adequate transmission capability during Ensure the availability of adequate transmission capability during
natural disasters or man-made attacks.natural disasters or man-made attacks.– Facilitate the rapid restoration of broadcast and MVPD services in the Facilitate the rapid restoration of broadcast and MVPD services in the
event of significant disruptions.event of significant disruptions.
Two Working Groups:Two Working Groups:− Public Communications and Safety.Public Communications and Safety.− Communications Infrastructure Security, Access and Restoration.Communications Infrastructure Security, Access and Restoration.
Work Plans:Work Plans:− Monthly meeting schedule to develop best practices.Monthly meeting schedule to develop best practices.− Initial recommendations to be presented at May 2003 council Initial recommendations to be presented at May 2003 council
meeting.meeting.− Additional recommendations released on an ongoing basis.Additional recommendations released on an ongoing basis.
1515
FCC’s Homeland Security FCC’s Homeland Security FocusFocus Interagency and Industry PartnershipsInteragency and Industry Partnerships Infrastructure ProtectionInfrastructure Protection Communications ReliabilityCommunications Reliability Public Safety CommunicationsPublic Safety Communications Spectrum Policy Spectrum Policy New TechnologiesNew Technologies
1616
Communications Communications ReliabilityReliability
Promote NRIC and MSRC best practices.Promote NRIC and MSRC best practices. Measure success of best practices Measure success of best practices
implementation.implementation. Enhance and improve NRIC and MSRC best Enhance and improve NRIC and MSRC best
practices as we learn more.practices as we learn more. Partner with National Communications System Partner with National Communications System
(NCS) to promote TSP, GETS, and WPAS.(NCS) to promote TSP, GETS, and WPAS.
1717
FCC’s Homeland Security FCC’s Homeland Security FocusFocus Interagency and Industry PartnershipsInteragency and Industry Partnerships Infrastructure ProtectionInfrastructure Protection Communications ReliabilityCommunications Reliability Public Safety Public Safety
CommunicationsCommunications Spectrum PolicySpectrum Policy New TechnologiesNew Technologies
1818
Public Safety Public Safety CommunicationsCommunications Provide access to new spectrum in support of Provide access to new spectrum in support of
Public Safety.Public Safety.– 700 MHz, 4.9 GHz700 MHz, 4.9 GHz
Ensure 911 and E-911 implementation.Ensure 911 and E-911 implementation.– April 29, 2003 launch of E911 Coordination InitiativeApril 29, 2003 launch of E911 Coordination Initiative
Ensure interoperability of Public Safety radio Ensure interoperability of Public Safety radio systems. systems.
Coordinate with DHS on Project SAFECOM.Coordinate with DHS on Project SAFECOM. Resolve Public Safety interference at 800 MHz.Resolve Public Safety interference at 800 MHz.
1919
FCC’s Homeland Security FCC’s Homeland Security FocusFocus Interagency and Industry Partnerships Interagency and Industry Partnerships Infrastructure ProtectionInfrastructure Protection Communications ReliabilityCommunications Reliability Public Safety CommunicationsPublic Safety Communications Spectrum PolicySpectrum Policy New TechnologiesNew Technologies
2020
Spectrum PolicySpectrum Policy
FCC Spectrum Policy Task ForceFCC Spectrum Policy Task Force– Focused on facilitating access to spectrum by Focused on facilitating access to spectrum by
removing regulatory impediments and improving removing regulatory impediments and improving interference avoidance.interference avoidance.
– Concluded that spectrum currently set aside for Concluded that spectrum currently set aside for public safety use should remain subject to public safety use should remain subject to “command-and-control” model to ensure provision “command-and-control” model to ensure provision of essential life-and-safety services.of essential life-and-safety services.
– Proposed providing public safety users flexibility to Proposed providing public safety users flexibility to lease spectrum capacity during lower-use periods to lease spectrum capacity during lower-use periods to other users because of high variability of public other users because of high variability of public safety use.safety use.
– Short and long-term implementation ongoing.Short and long-term implementation ongoing.
2121
FCC’s Homeland Security FCC’s Homeland Security FocusFocus Interagency and Industry Partnerships Interagency and Industry Partnerships Infrastructure ProtectionInfrastructure Protection Communications ReliabilityCommunications Reliability Public Safety CommunicationsPublic Safety Communications Spectrum PolicySpectrum Policy New TechnologiesNew Technologies
2222
New TechnologiesNew Technologies
FCC ActionsFCC Actions Foster implementation of new Foster implementation of new
technologytechnology– Ultra-Wideband (UWB)Ultra-Wideband (UWB)– TelemedicineTelemedicine– Software Defined Radios (SDR)Software Defined Radios (SDR)
2323
ConclusionConclusion
The FCC is just one component of The FCC is just one component of a complex network of public and a complex network of public and private partnerships dedicated to private partnerships dedicated to improving the security and improving the security and reliability of our Nation’s reliability of our Nation’s telecommunications telecommunications infrastructure.infrastructure.
2424
Contacting The FCCContacting The FCC
You may contact the FCC You may contact the FCC Homeland Security Policy Council Homeland Security Policy Council at at [email protected]@fcc.gov.
Or contact the Policy Council Or contact the Policy Council Deputy Director Linda Blair Deputy Director Linda Blair directly at (202) 418-7450.directly at (202) 418-7450.
www.fcc.gov/homelandwww.fcc.gov/homeland