InfoGram

August 1, 2002

NOTE: This InfoGram will be distributed weekly to provide members of the emergency services sector with news and information concerning the protection of their critical infrastructures. For further information please contact the U.S. Fire Administration's Critical Infrastructure Protection Information Center at (301) 447-1325 or email at usfacipc@dhs.gov.

Information Sharing Benefits

The June 27th InfoGram discussed the benefits derived from the dedicated and trusted two-way information sharing between the National Infrastructure Protection Center (NIPC) and the emergency services sector. Fire and EMS departments were urged to cooperate by providing information about suspicious contacts, threats, attacks, vulnerabilities, and security best practices. With this cooperation, the NIPC will be able to efficiently identify the patterns, methods, and sources of potential malicious actions directed against the critical infrastructures of emergency first responders.

During the latter part of July, two EMS organizations (one in Pennsylvania and another in Florida) forwarded to NIPC an electronic message they received from a program manager in the Defense, Space, and Environment Division, of a company located in Rome, Italy. The message requested information about the application of satellite navigation (e.g., GPS) for ambulance tracking and route guidance. It also inquired about the use of other special equipment for American ambulance operations.

Within 72 hours of receiving the first notification with the message from Italy attached, the NIPC completed an investigation and substantiated that the electronic request for information originated from a registered Italian company with legitimate emergency services contracts. Both EMS organizations, as well as the CIPIC, were notified of these results. The CIPIC subsequently learned that both agencies decided not comply with the request because of the sensitivity of the information and lack of secure communications.

This episode serves as a fine example of how information sharing with the NIPC can assist departments in making decisions regarding their critical infrastructures. While maintaining the confidentiality or privacy of each reporting organization, other departments in the American emergency services sector can learn about potential threats (or, in this case, non-threats) and adjust their operations accordingly. When a suspicious activity occurs, the NIPC encourages phone calls to 202-323-3205; facsimiles to 202-323-2079; and electronic mail to nipc.watch@fbi.gov.

Protecting Community Critical Infrastructures

The International Criminal Police Organization (Interpol) has conducted investigations of suspected terrorists and other criminals who successfully obtained employment in positions related to community infrastructures. Interpol warns that this is an increasingly attractive option for terrorists seeking access to the critical infrastructures (people, physical entities, and cyber systems) of any community, but especially those in the United States. Given this warning, the CIPIC cautions that the owners and operators of American critical infrastructures on the national, state, and local levels must conscientiously investigate the background history of all recently hired and new candidates.

In a related action, a panel of senior Virginia officials recently wrote that "the current patchwork of background check requirements presents a possible vulnerability, in that personnel who are untrustworthy may be unknowingly hired and placed in positions that allow access to sensitive information of critical functions." Considering this vulnerability, Virginia state leaders announced on July 30th that all state government employees who work in potential terrorism targets (i.e., critical infrastructures) "will undergo criminal background checks when they are hired." The panel chairman said that local governments would be allowed to designate positions they consider sensitive because of proximity to critical infrastructures.

As municipalities will continue to be on the front lines in the effort to prevent or mitigate terrorist attacks, the CIPIC suggests consideration of Virginia's example on this matter. Those city governments and owners of local critical infrastructures (e.g., fire and EMS) not already doing so, should explore the deterrent value and feasibility of implementing thorough and consistent background checks for their new personnel.

Security of Water Supplies

Early this week, federal officials arrested two al Qaeda suspects in Colorado with documents in their possession about how to poison water supplies. Government sources said they found papers concerning water poisoning among several other terrorist documents in a Denver residence.

Some water utility experts are skeptical regarding the poisoning of a local water supply. They believe it would necessitate tons of poisonous chemicals to dangerously contaminate a city's water source. However, other specialists argue that contamination could be accomplished depending upon certain entry factors. Utility managers should be aware of these factors and able to elaborate if necessary. The deputy director of the American Water Works Association recently explained that "it's not necessarily truckloads of chemicals we are worried about. There are pumps, pipes, and other things that utilities need to protect."

If water supplies are vulnerable to poisoning as alleged by some utility leaders, then the potential exists for fighting fires with poisoned water. Therefore, the CIPIC recommends that local fire departments review the various chemical contaminants and determine when poisoned water can and cannot be safely used for fire suppression.

Electrical Power Infrastructure

Summer temperatures exceeding 90 degrees exert greater demands for electrical power to operate air conditioners, computers, and other power-draining equipment. At many locations throughout the United States, utility systems cannot meet the increased consumption of electrical power.

Fires in electrical transformers like those that knocked out power around New York City in the past few weeks are likely to become more common as utility systems around the nation show their age, energy industry analysts say. As result, utility companies have been forced to cut back their power supply resulting in service reductions.

Although reductions in service may be necessary, they can also be rather dangerous if not fully coordinated. Community leaders, perhaps the members of the local emergency planning committee, must be consulted to ensure that locality-specific reductions focus on the nonessential electrical load. Without doubt, the chief officers of emergency first responders should be among the decision makers.