Stand up for the facts!

Our only agenda is to publish the truth so you can be an informed participant in democracy.
We need your help.

More Info

I would like to contribute

Louis Jacobson
By Louis Jacobson December 19, 2012
Back to Make security part of new infrastructure design

A deliberate move toward "resilience" in infrastructure

It's been a slow process, but the Obama administration is accelerating steps toward fortifying the nation's critical infrastructure.

During the 2008 presidential campaign, Barack Obama promised to make sure that "security is considered and built into the design of new infrastructure, so that our critical assets are protected from the start and more resilient to naturally-occurring and deliberate threats throughout their life-cycle."

"Critical infrastructure" is defined by the PATRIOT Act of 2001 as "systems and assets, whether physical or virtual, so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters." These can range from the electrical grid and water systems to highways and airports.

Meanwhile, the definition of "resilience" may be even more important for analyzing this promise.

Various government reports have used somewhat different definitions for "resilience," but one of the broadest was offered in an August 2009 report by the Homeland Security Studies and Analysis Institute, a federally funded research institute. The institute's definition used three "mutually reinforcing objectives." One was the ability to avoid hazards altogether; the second was the ability to "bend but not break" in the face of threats; and the third was the ease with which service can be restored after damage occurs.

Defining "resilience" matters because it goes a step beyond "protection," which is the basis for one of the key federal documents that governs critical infrastructure -- Homeland Security Presidential Directive 7, signed by President George W. Bush on Dec. 17, 2003.

Initially, resilience took a back seat under Obama. "Most infrastructure projects initiated as a part of the economic stimulus efforts in 2009 were undertaken without the addition of any new requirements that infrastructure be more resilient in the face of manmade and naturally occurring dangers -- these 'shovel-ready' projects were completed using pre-existing construction criteria," said Stephen Flynn, the founding co-director of the George J. Kostas Research Institute for Homeland Security at Northeastern University.

But that's changing. The White House appears to be redrafting this directive so that it includes the standard of "resilience," and the homeland-security page on the White House website says that "ensuring the resilience of our critical infrastructure is vital to homeland security. Working with the private sector and government partners at all levels will develop an effective, holistic, critical infrastructure protection and resiliency plan that centers on investments in business, technology, civil society, government, and education."

How has the funding gone? Spending on "infrastructure protection and information security" in the Department of Homeland Security budget has fluctuated from year to year, but it was $52 million -- or 6 percent -- higher in fiscal year 2012 than it was in fiscal year 2009, and the administration has requested a 31 percent bump for fiscal year 2013 compared to fiscal 2012.

The administration cites several areas of progress on improving the resilience of critical infrastructure, such as efforts by the Coast Guard in the wake of the April 2010 BP Deepwater Horizon oil spill to add a layer of risk-based security for offshore drilling units on the U.S. Outer Continental Shelf, and more than 680 assessments of critical infrastructure sites by DHS officials.

We should note, as we did in our previous update, that critical infrastructure goes well beyond the reach of the federal government, since most pieces of it are owned and operated by either the private sector or by states and localities. So while the Obama administration can provide guidance and funding, other levels of government and the private sector are the ones who have to carry out the necessary upgrades.

Making the nation's critical infrastructure more resilient will be a years-long, or even decades-long, process, but the administration has moved the ball forward. We rate this a Compromise.

Our Sources

Department of Homeland Security, Homeland Security Presidential Directive 7, accessed Dec. 18, 2012

White House, homeland security home page, accessed Dec. 18, 2012

Government Accountability Office, "Critical Infrastructure Protection: Update to National Infrastructure Protection Plan Includes Increased Emphasis on Risk Management and Resilience," March 2010

Department of Homeland Security, main budget page, accessed Dec. 18, 2012

National Infrastructure Advisory Council, "Critical Infrastructure Resilience: Final Report and Recommendations," Sept. 8, 2009

American Public Works Association, "APWA Emergency Management Committee Meets in D.C.," April 2012

Email interview with Stephen Flynn, the founding co-director of the George J. Kostas Research Institute for Homeland Security at Northeastern University, Dec. 18, 2012