Critical Infrastructure Protection

Key Initiatives

1. Risk Assessment
   • The CIP Program, as the Sector Specific Agency for the Healthcare and Public Health Sector, participates in a number of risk related initiatives in partnership with the Department of Homeland Security Office of Infrastructure Protection.  The Risk Integration and Analysis Branch (RIAB), within the DHS Office of Infrastructure Protection, performs infrastructure-related decision support analysis and prioritization for Federal, State, local, tribal, territorial, and private sector partners through its four major program areas, the:
     • National Critical Infrastructure Prioritization Program (NCIPP):
       1. Tier 1/Tier 2 Program
       2. Critical Foreign Dependencies Initiative (CFDI)
     • National Infrastructure Risk Analysis Program, including the Strategic Homeland Infrastructure Risk Assessment (SHIRA) process;
     • Infrastructure Risk Analysis Partnership Program (IRAPP); and
     • Critical Infrastructure Futures Analysis Program.
   • RIAB’s vision is to lead a public and private sector analytic network capable of anticipating the decision making requirements of the infrastructure protection community.

2. Cybersecurity
   • The HHS CIP Program and the Healthcare and Public Health sector is an active member of the Cross-Sector Cybersecurity Working Group (CSCSWG) and other cybersecurity initiatives.  In addition to addressing cybersecurity issues among private and public sector partners, the program also serves as the link between HHS cybersecurity initiatives and our sector security partners.

3. Operations
   • The HHS CIP Program is an active participant in the Secretary’s Operations Center during emergencies.  It serves as the primary conduit between the Department of Homeland Security National Infrastructure Coordination Center and HHS.  In addition, it assists in integrating private sector partners into the preparedness, response, and recovery cycle by serving as an information sharing node for all of the diverse entities through the sector. 

4. Working Groups

• Research and Development Working Group
  • The Healthcare and Public Health (HPH) Sector Critical Infrastructure and Key Resources (CI/KR) R&D and Modeling, Simulation and Analysis Joint Advisory Workgroup (JAWG) is a public/private partnership, comprised of HPH Sector Coordinating Council and Government Coordinating Council members as well as representatives of academia and other subject matter experts (approximately 20 GCC members and approximately 21 combined HSCC members and academia, depending on the topic). This group is chartered to identify Sector protection and preparedness R&D /MS&A needs for HPH. Additionally, they are relied upon for thought leadership and expertise to support other formal taskforce, research groups (e.g., National Biodefense Science Board, Institute of Medicine, Department of Homeland Security, etc.), and programs on protection, preparedness, and response requirements. As part of their roles and responsibilities, the JAWG has initiated efforts to:
    • Identify gaps in Sector CIKR protection-preparedness related capabilities
    • Examine vulnerabilities to disasters, attacks, various threats
    • Identify tools/technologies that would help mitigate those vulnerabilities and reduce consequences
• Sector Specific Metrics Working Group
  • Measuring effectiveness is a key component of the NIPP Risk Management Framework. Knowledge gained from this effort is intended to help assess progress toward security goals. Metrics provide a foundation for establishing a baseline of current performance, and demonstrating that objectives are being met or that gaps exist in infrastructure protection and consequence reduction. The National Infrastructure Protection Plan (NIPP) specifically requires each sector to develop sector-specific metrics that are tailored to its infrastructure and unique operating characteristics.
• Information Sharing Working Group
  • The Information Sharing Working group is tasked with identifying data and/or reports from both the public and private sector which would be beneficial towards increasing resiliency, preparedness, and response efforts related to CIKR throughout the sector.  The working group is comprised of both public and private partners , with a majority of members residing in the private sector.  The ISWG is also tasked with developing the mechanisms by which information sharing should/can take place, including but not limited to, the Homeland Security Information Network (HSIN).
• Risk Assessment Working Group
  • The Risk Assessment Working Group is a multi-disciplinary group including both public and private sector partners.  This group is tasked with assessing vulnerabilities in the Healthcare and Public Health sector involving natural, man-made, and technological hazards.  The group is also responsible for addressing all aspects of the DHS Strategic Homeland Infrastructure Risk Assessment (SHIRA) Program and interfaces with both the Government Coordinating Council and Healthcare Sector Coordinating Council as required.