Railroad Security Update

1
Railroad Security Update

• Lou Wagner
• TERC/LEPC Conference
• August 22, 2003

2
Union Pacific Fast Facts
Miles of Track 33,586 Employees 48,000
Annual Payroll 2.7 billion Purchases Made
2.9 billion Locomotives 7,100 Freight Cars
153,272 2002 Revenue 12.2 billion Chemical
Revenue 1.6 billion
3
Union Pacific Railroad
Seattle
Eastport
Portland
Duluth
Twin Cities
Chicago
Omaha
SLC
Oakland
Denver
KC
St. Louis
Memphis
LA
Dallas
Calexico
Nogales
El Paso
New Orleans
Houston
Eagle Pass
Laredo
Brownsville
4
Distribution Risk Management
5
Presentation Overview

• Railroad approach to security in key areas
• Hazardous materials
• Physical Infrastructure
• Operations
• Information technology and communications
• Alert levels
• Countermeasures

6
Railroad Security Task Force
ASSOCIATION OF AMERICAN RAILROADS
7
Security Process

• Analysis of threats, vulnerability, and
  consequences
• Application of security principles including
  deter, detect, delay, respond
• Training, drills, tests
• Alert levels based on threat
• Escalating degree of countermeasure commensurate
  with alert level
• Consistent with ACC Security Code

8
Risk Assessment Criteria
Significant risk to
Population
National Economy
National Security
9
Alert Level Actions
10
Alert Levels

• Level 1 - New Normal day-to-day operations
• Level 2 - Heightened Security Awareness
• Level 3 - A Credible Threat of an attack on the
  US or railroad industry (continuously
  reevaluated)
• Level 4 - A Confirmed Threat of attack against
  the railroad industry or actual attack in
  the US (implemented up to 72 hours and
  reevaluated)

11
Alert Level 1

• New Normal Day to Day Operations
• Industry (nation) wide
• 33 actions identified

12
Examples of Actions Taken Alert Level 1

• Conduct security training and awareness
  activities.
• Do not disclose information to anyone who does
  not have a need-to-know.
• Turn off capabilities for tracing certain
  hazardous material, military, spent nuclear fuel
  and other sensitive materials by unauthenticated
  users.
• Periodically test that security systems are
  operating as intended.

13
Alert Level 2

• Heightened Security Awareness
• General non-specific threat of possible terrorist
  activity involving railroad personnel and
  facilities.
• Declared industry (nation) wide.
• 20 additional actions

14
Examples of Actions Taken Alert Level 2

• Include security and awareness briefings as part
  of daily job briefings.
• Conduct content inspections of cars and
  containers for cause.
• Conduct spot content inspections of motor
  vehicles on railroad property.
• Coordinate with National Guard for potential
  security support at level 3.

15
Alert Level 3

• Credible Threat of an attack on the US or
  railroad industry
• Measures capable of being maintained for weeks
• Continual review for effectiveness and duration.
• Declared industry wide for a short period of time
  
• or
• Applies in an immediate geographic or operational
  area
• AAR Operations Center is staffed 24 x 7

16
Alert Level 4

• Confirmed Threat of attack against the railroad
  industry or actual attack in the US
• Declared industry wide for a short period of time
  (72- hours) or Applies in the immediate
  geographic or operational area
• Instituted for up to 72 hours
• Periodically evaluated for continuation.

17
Railway Alert Network
National
Customers
DOT Crisis Center
ACC
National Infrastructure Protection Center
AAR Operations Center
CI
24 x 7
AAR Staff
Federal Railroad Administrator
API
MTMC Operations Center
Railroad Industry
Homeland Security Office
Railroad CEO VPO
ASLRRA
Amtrak Operations Center
Railroad Operations Centers
18
Countermeasures

• A countermeasure is an action or a physical
  equipment used principally to reduce or eliminate
  one or more vulnerabilities.
• 6 people countermeasures identified, such as
• Enhance employee awareness to thwart intelligence
  gathering.
• 41 process countermeasures identified, such as
• Establish the AAR Operations Center and Railroad
  Alert Network
• 6 technology countermeasures identified, such
  as
• Establish secure communications.

19
Hazardous Materials
20
Haz Mat Results

• Highly poisonous materials which disperse easily
  as a gas near concentrated population are
  greatest concern.
• Anti-terrorism intelligence is very important.
• Specific countermeasures
• More inspections and guards
• Reduced train stops, expedited delivery
• Timing of movement to avoid major public events
• Delay pulling from a plant except by permit at
  Level 4
• Shippers will be affected at higher alert levels
• Avoid opportunity for terrorists to use material
  as WMD

21
Physical Infrastructure
22
Infrastructure Issues

• A rail network has limited reroute possibilities.
  
• Severe disruptions to service levels on a
  temporary basis can result from loss of bridges,
  dispatch centers or fueling facilities.

23
Physical Assets

• Physical Assets Data Base - 1308 Facilities
• Tunnels - 265
• Bridges - 762
• Hump Yards - 54
• Data / Dispatch Centers - 33
• Fuel Centers - 138
• Crew Management Centers - 7
• Other Facilities - 49

24
(No Transcript)
25
Physical Infrastructure Countermeasures

• Increased alertness of all employees
• Increased use of guards
• Restricted access and parking
• Increased inspections
• Notification of unusual events
• Little impact on shippers

26
Operations Security
27
Operations Security

• Disruption of train service in general can have
  significant economic impact. For some
  commodities and OD pairs, rail is the most
  practical mode of transportation.
• We evaluated all the processes necessary to
  operate trains for vulnerability from terrorist
  activities.

28
Countermeasures to ensure Operations Security

• More inspections of equipment and track.
• More guards.
• Train crews verifying identity of replacement
  crews.
• Dispatchers notify security of unusual stops.

29
Information Technologyand Communications
30
Areas of Concern

• Tracing (of Shipments)
• Computer Centers and Applications
• Data Systems and Software Integrity
• Control/Dispatching Centers
• Communications Systems and Telecommunications
  Companies
• Communication Control Centers
• Key Personnel
• Contractors

31
IT and Com Countermeasures

• Guards at computer facilities
• Password verification
• Change passwords at regular intervals
• Limit information to parties of record
• Systems to thwart hackers
• At higher alert levels reduce contractors on the
  property

32
Local Plan Implementation

• Requires initial and periodic training
• Table top or similar exercises
• Major drills--every three years
• Includes methods of notifying employees of an
  incident such as by radio or pager alert
• Testing notification procedures

33
Training/Drills

• Use Transcaer for drills and training
• Involve customers and community

34
AAR-ACC-Chlorine Institute Teams

• Storage in transit task force
• Plant access task force
• Communications task force

35
Request Federal Assistance

• National Guard Support
• Develop request for security assistance
• Establish permanent NG planning and oversight
  cell
• Provide on site security support (manpower,
  technology, aviation) at critical nodes for
  levels 3 and 4
• Process formal request through DOT to DOD
• Seek Homeland Security Office priority and
  funding

36
(No Transcript)
37
(No Transcript)