Security 101: A Physical & Cyber Security Primer for Transportation Agencies

In 2012, the AASHTO Special Committee on Transportation Security and Emergency Management (SCOTSEM) adopted TRB’s National Cooperative Highway Research Program (NCHRP) Report 525, Vol. 14: Security 101: A Physical Security Primer for Transportation Agencies (available at http://www.trb.org/Publications/Blurbs/162394.aspx). As stated in NCHRP Report 525, Vol. 14, Security 101 “provides transportation managers and employees with an introductory-level reference document to enhance their working knowledge of security concepts, guidelines, definitions, and standards. This is a document for use primarily by those who are neither security professionals nor well versed in security language. There are many types of security: personal, cyber, document, information, operations, personnel, infrastructure, etc. The document adopted in 2012 focuses on physical security, the part of security concerned with measures and concepts designed to (1) safeguard personnel; (2) prevent unauthorized access to equipment, installations, materiel, and documents; and (3) safeguard equipment, installations, materiel, and documents against espionage, sabotage, damage, and theft. “Physical security is integral to an all-hazards approach to preparedness. As such, the report adopted in 2012 covers the major components of an effective security program at the conceptual level, including risk management and risk assessment, plans and strategies, physical security countermeasures, security personnel and other personnel, infrastructure protection, and homeland security. The primer can be used as an introduction to the extensive literature and additional sources of information identified in the appendixes; however, readers are reminded that plans need to be tested through exercises to ensure adequacy and to reinforce roles and responsibilities.” Since publication of Security 101, there have been both significant changes and a substantial increase in knowledge about surface transportation security. The decade-long effort to improve the state of security and emergency management practice in the transportation industry has produced new strategies, programs, and ways of doing business that have increased the security of our transportation systems as well as ensured their resiliency. Research is needed to update Security 101 to reflect the changed circumstances and to include cyber-related information. The objective of this research is to develop a recommended second edition of Security 101 for use by transportation personnel without a security background whose work requires them to address, perform, or supervise security or infrastructure protection activities as a part of their overall job responsibilities. The updated Security 101 should be suitable for adoption by the AASHTO Special Committee on Transportation Security and Emergency Management (SCOTSEM). The updated Security 101 should reference the latest practice and guidance in infrastructure protection encompassing cyber and physical security. This update would include guidance from USDOT, FHWA, AASHTO, APTA, FTA, FEMA, TSA, DHS, National Institute of Standards and Technology (NIST), International Organization for Standardization (ISO), and TRB. The work will update fundamental definitions for: (1) surface transportation physical and cyber security; (2) all-hazards planning; and (3) resilience of transportation operations in the post 9-11 environment.

• Record URL:
  http://apps.trb.org/cmsfeed/TRBNetProjectDisplay.asp?ProjectID=4070

Language

• English

Project

• Status: Completed
• Funding: $100000
• Contract Numbers:

  Project 20-59(51)A

• Sponsor Organizations:

  National Cooperative Highway Research Program

  Transportation Research Board
  500 Fifth Street, NW
  Washington, DC  United States  20001

  Federal Highway Administration

  1200 New Jersey Avenue, SE
  Washington, DC  United States  20590

  American Association of State Highway and Transportation Officials (AASHTO)

  444 North Capitol Street, NW
  Washington, DC  United States  20001
• Performing Organizations:

  Countermeasures Assessment & Security Experts, LLC

  ,    
• Principal Investigators:

  Frazier, Ernest

• Start Date: 20160210
• Expected Completion Date: 20180331
• Actual Completion Date: 20180331

Subject/Index Terms

• TRT Terms: Computer security; Disaster resilience; Emergency management; Infrastructure; Legal factors; Personnel; Risk management; Security; Standards; Training; Transportation departments
• Subject Areas: Security and Emergencies; Transportation (General);

Filing Info

• Accession Number: 01746812
• Record Type: Research project
• Source Agency: Transportation Research Board
• Contract Numbers: Project 20-59(51)A
• Files: TRB, RIP
• Created Date: Jul 27 2020 3:30PM