Critical Infrastructure Protection & Resilience Asia

Programme

2016 Outline Conference Topics were:

PLENARY SESSIONS:

Collaborative Approach to CIP and CIIP
As the lines and responsibilities between CIP and CIIP become increasingly blurred in many areas, a holistic approach to protection of CNI, from both physical and cyber security perspectives is increasingly important. To this nature the collaboration between agencies and CNI operators, and individual departments, becomes increasingly important. How can we work better together for common purpose, resource sharing and intelligence gathering to deliver better value for the tax payer and greater success in delivering security & resilience to our Critical National Infrastructure, and improving disaster risk reduction.

Insider Threat and The Human Asset
Critical National Infrastructure can only be successfully run and secured by people and often they are the forgotten element within planning the security of CNI. People are the most valuable asset in any organisation, but may also be your most significant vulnerability. How can you ensure systems are in place to ensure your most valuable asset is not your biggest threat? How can human assets be enhanced to add value and security? What identity management & access control strategies need to be implemented to ensure integrity and legitimacy of personnel?

Risk Based Approach to CIP
Designing and improving security operations requires keeping a balance between business needs and security requirements. How can using a risk based approach enhance business continuity and can policies and practices of national infrastructure, including those operated by governments, be capable of adapting to the changing security and threat environment?

Disaster Prevention & Management in CNI
Disasters cause serious disruption of the functioning of a community or a society, whether from Environmental emergencies, Natural disasters, Complex emergencies or Pandemic emergencies. A disaster in relation to Critical National Infrastructure can have additional impact on society and the economy of a country by reducing its resilience in mitigating environmental and economic impact. In this session Disaster Management, the organisation and management of resources and responsibilities for dealing with all aspects of emergencies, in particular preparedness, response and recovery, will look at the Disaster risk reduction and management, Impacts of and response to disasters and Post-disaster recovery.

International & National Agency and Operator Cooperation
Where and how can agencies and CNI operators better work together for common purpose, resource sharing and intelligence gathering to deliver greater success in delivering security & resilience to our Critical National Infrastructure. How best do central and local government and the emergency services co-ordinate their efforts, and co-operate with infrastructure operators and where do Public Private Partnerships contribute towards for the protection of vulnerable targets against natural disasters or terrorist attacks.

CRITICAL INFRASTRUCTURE PROTECTION (CIP)

Emerging & Future Threats Identification & Management
The ever changing nature of threats, whether natural, through climate change, or man-made through terrorism activities, means the need to continually review and update policies, practices and technologies to meet these growing demands. But what are those emerging threats and how can we identify, monitor and manage their levels of potential damage?

The PPP Role in CIP
With many critical infrastructures in the hands of private organisations, how does the responsibility of security and resilience lie between government, with public accountability to keep them safe, secure and operational 24/7, and the private operator, with additional responsibilities towards shareholders? How can improving the communication between the public sector and private sector enhance protection and can incentives be employed to better engage private owners into PPP?

Transport, Energy & Telecomms Infrastructure Security
Transport, power and telecommunications are the crucial economic lifeblood of any modern industrial economy. The fragility of Asia’s exposed transport network across a large region provides unique challenges, including freight and passenger travel through our ports, harbours and airports. Communications infrastructure becomes key during any threat scenario to which many fail when severely damaged, limiting coordinated efforts and potentially causing damage to the economy far in excess of any physical damage they may incur. The problem for the authorities, operators and agencies is to ensure the right balance of security, safety and resilience in facilities that are widely dispersed and subject to diverse ranges of threats.

Technologies to Detect and Protect
What are some of the latest and future technologies, from ground surveillance to space based technology, to predict or detect potential threats to CNI, whether natural or terrorist related.

CRITICAL INFORMATION INFRASTRUCTURE PROTECTION (CIIP) / CYBER SECURITY

Cybersecurity Threats and Trends
The digital age has opened up immense new opportunities for criminal activity, providing numerous communications channels and instant access to critical information and data. But what are the latest threats in the cybersecurity space and what are the future trends likely to be in attacks on our critical information infrastructure.

Convergence in Cyber Security and CIIP
All parts of infrastructure are interconnected which, despite being convenient and efficient, can leave the complete system extremely vulnerable to attack. Convergence of cyber security, incidence response and crisis management can enhance the integrity of the infrastructure and help exceed minimum security requirements.

Cyber Analysis, Monitoring and Defence
The ability to monitor the cyber threats to CNI can greatly assist the operators and agencies better prepare their defences against cyber attacks on systems and information/data. What is the latest strategic perspective on cyber monitoring and cyber defences for enhancing CIIP?

IT/OT Integration
With increasing use of SCADA systems and the modernisation of smart grid and other industry systems utilising IT, how can the Operation Technology (OT) domain remain totally secure with greater access from internet insecurity?