11

Marsha MacBrideMarsha MacBrideChief of Staff, Chief of Staff,

Office of Chairman PowellOffice of Chairman Powell

Director, Homeland Security Policy Director, Homeland Security Policy CouncilCouncil

Federal Communications CommissionFederal Communications Commission

22

Homeland Security Homeland Security SectorsSectors

AgricultureAgriculture Banking and Finance Banking and Finance Chemical Industry Chemical Industry Defense Industrial Base Defense Industrial Base Emergency Services Emergency Services Energy Energy Food Food Government Government Information andInformation and Postal and ShippingPostal and Shipping

TelecommunicationsTelecommunications WaterWaterTransportation Transportation Public Health Public Health

– All other sectors rely on the Information and All other sectors rely on the Information and Telecommunications sectorTelecommunications sector

33

FCC’s Homeland Security FCC’s Homeland Security MissionMission Evaluate and strengthen measures for Evaluate and strengthen measures for

protecting the Nation’s communications protecting the Nation’s communications infrastructure.infrastructure.

Facilitate rapid restoration of that Facilitate rapid restoration of that infrastructure in the event of disruption.infrastructure in the event of disruption.

Develop policies that promote access to Develop policies that promote access to effective communications services by public effective communications services by public safety, public health, and other emergency safety, public health, and other emergency personnel in emergency situations. personnel in emergency situations.

44

FCC’s Homeland Security FCC’s Homeland Security FocusFocus Interagency and Industry Interagency and Industry

PartnershipsPartnerships Infrastructure ProtectionInfrastructure Protection Communications ReliabilityCommunications Reliability Public Safety CommunicationsPublic Safety Communications Spectrum PolicySpectrum Policy New TechnologiesNew Technologies

55

FCC’s Homeland FCC’s Homeland Security PartnershipsSecurity Partnerships

Executive Office of the President

State and Local

Governments

Sister Agencies

Industry and Trade

Organizations

Federal Advisory

Committees

66

Dep

artm

ent o

f Hom

elan

d Se

curit

y

Bureau ofCitizenship and

ImmigrationServices

EmergencyPreparednessand Response

InformationAnalysis andInfrastructure

Protection

Science andTechnology

Border andTransportation

Security

FCCSecret Service

Coast Guard

FEMA

COOP

IAG

ESF#2

CDRG

Office ofScience andTechnology

Policy

JTRB

Executive Officeof the President

NationalSecurityCouncil

CNSS

Office ofHomelandSecurity

National SecurityTelecommunications

Advisory Council

FBI

SIOC

CIAO

NIPC

NIAC

NCS

NCC

National SecurityAgency

Department ofCommerce

NTIA

COP / COR

Department ofJustice

Interagency Efforts: View from the FCC

FedCIRC

Immigration& Customs

Enforcement

Customs &Border

Protection

Department ofDefense

OASD/C3I

Department ofTransportation

FAA

Chief InformationOfficer

77

FCC Partnership with FCC Partnership with NCS/NCCNCS/NCC

The National Communications System (NCS) The National Communications System (NCS) continues to be our strongest partner in our continues to be our strongest partner in our efforts to coordinate industry response to a efforts to coordinate industry response to a network outage or attack.network outage or attack.

FCC is assisting NCS in promoting its efforts to FCC is assisting NCS in promoting its efforts to improve emergency communications through improve emergency communications through the Telecommunications Service Priority (TSP), the Telecommunications Service Priority (TSP), Government Emergency Telecommunications Government Emergency Telecommunications System (GETS) and Wireless Priority Access System (GETS) and Wireless Priority Access (WPAS) programs.(WPAS) programs.

88

NCC MembershipNCC Membership

99

FCC’s Homeland Security FCC’s Homeland Security FocusFocus Interagency and Industry Interagency and Industry

PartnershipsPartnerships Infrastructure ProtectionInfrastructure Protection Communications ReliabilityCommunications Reliability Public Safety CommunicationsPublic Safety Communications Spectrum PolicySpectrum Policy New TechnologiesNew Technologies

1010

Infrastructure ProtectionInfrastructure Protection

FCC rechartered our Network Reliability and FCC rechartered our Network Reliability and Interoperability Council (NRIC VI) federal Interoperability Council (NRIC VI) federal advisory committee in January 2002 to focus on advisory committee in January 2002 to focus on homeland security issues. (www.nric.org)homeland security issues. (www.nric.org)

FCC created a new Media Security and Reliability FCC created a new Media Security and Reliability Council (MSRC) federal advisory committee in Council (MSRC) federal advisory committee in March 2002 to address broadcast, cable and March 2002 to address broadcast, cable and satellite homeland security issues. satellite homeland security issues. (www.mediasecurity.org)(www.mediasecurity.org)

1111

Network Reliability and Network Reliability and Interoperability CouncilInteroperability Council

First chartered in 1993. NRIC has a 10-year First chartered in 1993. NRIC has a 10-year history of improving network reliability.history of improving network reliability.

Expanded membership in 2001 charter.Expanded membership in 2001 charter.

December 2002 - Delivered best practices for December 2002 - Delivered best practices for securing the physical and cyber networks.securing the physical and cyber networks.

March 2002 - Delivered best practices for March 2002 - Delivered best practices for service restoration and disaster recovery.service restoration and disaster recovery.

1212

NRIC Best Practices – NRIC Best Practices – Summary of Results – Dec Summary of Results – Dec `02`02Creation of Best Practices to Fortify and Harden NetworksCreation of Best Practices to Fortify and Harden Networks

Systematic assessment of communications infrastructure vulnerabilitiesSystematic assessment of communications infrastructure vulnerabilities Creation of an Integrated Vulnerabilities – Threats – Best Practices FrameworkCreation of an Integrated Vulnerabilities – Threats – Best Practices Framework

Physical Security Best PracticesPhysical Security Best Practices

200 Best Practices/3,500 Participant-Hours in working meetings200 Best Practices/3,500 Participant-Hours in working meetings Sample Best Practices:Sample Best Practices:

– Network Operators should ensure intra-office diversity of all critical resources including spares, power, timing source and Network Operators should ensure intra-office diversity of all critical resources including spares, power, timing source and signaling leads (e.g., SS7). \signaling leads (e.g., SS7). \

– Where feasible, Network Operators should provide both physical and logical diversity of critical facilities links (e.g., nodal, Where feasible, Network Operators should provide both physical and logical diversity of critical facilities links (e.g., nodal, network element). Particular attention should be paid to telecom hotels and other choke points. network element). Particular attention should be paid to telecom hotels and other choke points.

Cybersecurity Best PracticesCybersecurity Best Practices

103 Best Practices/Over 3,000 Participant-Hours in working meetings103 Best Practices/Over 3,000 Participant-Hours in working meetings Sample Best Practices:Sample Best Practices:

– Equipment deployed in insecure or remote locations should include intrusion detection mechanisms that enable stored Equipment deployed in insecure or remote locations should include intrusion detection mechanisms that enable stored critical information to be destroyed upon detection of attack.critical information to be destroyed upon detection of attack.

– Network Operators and Service Providers should know and validate who you are accepting routing information from to Network Operators and Service Providers should know and validate who you are accepting routing information from to protect against global routing table disruptions.protect against global routing table disruptions.

1313

NRIC Best Practices – NRIC Best Practices – Summary of Results March Summary of Results March ‘03‘03

Creation of Best Practices to Facilitate Recovery from AttacksCreation of Best Practices to Facilitate Recovery from Attacks

Business ContinuityBusiness Continuity Disaster Recovery and Service RestorationDisaster Recovery and Service Restoration Communications Industry Support for Public Safety CommunityCommunications Industry Support for Public Safety Community

Business ContinuityBusiness Continuity

103 Best Practices103 Best Practices Sample Best Practice:Sample Best Practice:

– Service Providers, Network Operators and Equipment Suppliers should consider establishing a designated Emergency Operations Center. This center should contain tools for coordination of service restoral including UPS, alternate means of communications, maps, and documented procedures to manage business interruptions and/or disasters.

Service RestorationService Restoration

Over 150 Best Practices in the area of Physical Security and CybersecurityOver 150 Best Practices in the area of Physical Security and Cybersecurity Sample Best Practices:Sample Best Practices:

– If the Domain Name System (DNS) server is under attack, 1) Implement reactive filtering to discard identified attack If the Domain Name System (DNS) server is under attack, 1) Implement reactive filtering to discard identified attack traffic, if possible 2) Rate-limiting traffic to the DNS server complex 3) Deploy additional DNS server capacity in a traffic, if possible 2) Rate-limiting traffic to the DNS server complex 3) Deploy additional DNS server capacity in a round-robin architecture 3) Utilize Denial of Service (DoS) tracking methods to identify the source(s) of the attack.round-robin architecture 3) Utilize Denial of Service (DoS) tracking methods to identify the source(s) of the attack.

Communications Industry Support for Public Safety CommunityCommunications Industry Support for Public Safety Community

Recommendations and best practices to support communications needs of public safety personnel in an emergencyRecommendations and best practices to support communications needs of public safety personnel in an emergency

1414

Media Security and Reliability Media Security and Reliability CouncilCouncil

MSRC Objectives:MSRC Objectives:– Ensure the security and sustainability of broadcast and multichannel Ensure the security and sustainability of broadcast and multichannel

video programming distribution (MVPD) facilities.video programming distribution (MVPD) facilities.– Ensure the availability of adequate transmission capability during Ensure the availability of adequate transmission capability during

natural disasters or man-made attacks.natural disasters or man-made attacks.– Facilitate the rapid restoration of broadcast and MVPD services in the Facilitate the rapid restoration of broadcast and MVPD services in the

event of significant disruptions.event of significant disruptions.

Two Working Groups:Two Working Groups:− Public Communications and Safety.Public Communications and Safety.− Communications Infrastructure Security, Access and Restoration.Communications Infrastructure Security, Access and Restoration.

Work Plans:Work Plans:− Monthly meeting schedule to develop best practices.Monthly meeting schedule to develop best practices.− Initial recommendations to be presented at May 2003 council Initial recommendations to be presented at May 2003 council

meeting.meeting.− Additional recommendations released on an ongoing basis.Additional recommendations released on an ongoing basis.

1515

FCC’s Homeland Security FCC’s Homeland Security FocusFocus Interagency and Industry PartnershipsInteragency and Industry Partnerships Infrastructure ProtectionInfrastructure Protection Communications ReliabilityCommunications Reliability Public Safety CommunicationsPublic Safety Communications Spectrum Policy Spectrum Policy New TechnologiesNew Technologies

1616

Communications Communications ReliabilityReliability

Promote NRIC and MSRC best practices.Promote NRIC and MSRC best practices. Measure success of best practices Measure success of best practices

implementation.implementation. Enhance and improve NRIC and MSRC best Enhance and improve NRIC and MSRC best

practices as we learn more.practices as we learn more. Partner with National Communications System Partner with National Communications System

(NCS) to promote TSP, GETS, and WPAS.(NCS) to promote TSP, GETS, and WPAS.

1717

FCC’s Homeland Security FCC’s Homeland Security FocusFocus Interagency and Industry PartnershipsInteragency and Industry Partnerships Infrastructure ProtectionInfrastructure Protection Communications ReliabilityCommunications Reliability Public Safety Public Safety

CommunicationsCommunications Spectrum PolicySpectrum Policy New TechnologiesNew Technologies

1818

Public Safety Public Safety CommunicationsCommunications Provide access to new spectrum in support of Provide access to new spectrum in support of

Public Safety.Public Safety.– 700 MHz, 4.9 GHz700 MHz, 4.9 GHz

Ensure 911 and E-911 implementation.Ensure 911 and E-911 implementation.– April 29, 2003 launch of E911 Coordination InitiativeApril 29, 2003 launch of E911 Coordination Initiative

Ensure interoperability of Public Safety radio Ensure interoperability of Public Safety radio systems. systems.

Coordinate with DHS on Project SAFECOM.Coordinate with DHS on Project SAFECOM. Resolve Public Safety interference at 800 MHz.Resolve Public Safety interference at 800 MHz.

1919

FCC’s Homeland Security FCC’s Homeland Security FocusFocus Interagency and Industry Partnerships Interagency and Industry Partnerships Infrastructure ProtectionInfrastructure Protection Communications ReliabilityCommunications Reliability Public Safety CommunicationsPublic Safety Communications Spectrum PolicySpectrum Policy New TechnologiesNew Technologies

2020

Spectrum PolicySpectrum Policy

FCC Spectrum Policy Task ForceFCC Spectrum Policy Task Force– Focused on facilitating access to spectrum by Focused on facilitating access to spectrum by

removing regulatory impediments and improving removing regulatory impediments and improving interference avoidance.interference avoidance.

– Concluded that spectrum currently set aside for Concluded that spectrum currently set aside for public safety use should remain subject to public safety use should remain subject to “command-and-control” model to ensure provision “command-and-control” model to ensure provision of essential life-and-safety services.of essential life-and-safety services.

– Proposed providing public safety users flexibility to Proposed providing public safety users flexibility to lease spectrum capacity during lower-use periods to lease spectrum capacity during lower-use periods to other users because of high variability of public other users because of high variability of public safety use.safety use.

– Short and long-term implementation ongoing.Short and long-term implementation ongoing.

2121

FCC’s Homeland Security FCC’s Homeland Security FocusFocus Interagency and Industry Partnerships Interagency and Industry Partnerships Infrastructure ProtectionInfrastructure Protection Communications ReliabilityCommunications Reliability Public Safety CommunicationsPublic Safety Communications Spectrum PolicySpectrum Policy New TechnologiesNew Technologies

2222

New TechnologiesNew Technologies

FCC ActionsFCC Actions Foster implementation of new Foster implementation of new

technologytechnology– Ultra-Wideband (UWB)Ultra-Wideband (UWB)– TelemedicineTelemedicine– Software Defined Radios (SDR)Software Defined Radios (SDR)

2323

ConclusionConclusion

The FCC is just one component of The FCC is just one component of a complex network of public and a complex network of public and private partnerships dedicated to private partnerships dedicated to improving the security and improving the security and reliability of our Nation’s reliability of our Nation’s telecommunications telecommunications infrastructure.infrastructure.

2424

Contacting The FCCContacting The FCC

You may contact the FCC You may contact the FCC Homeland Security Policy Council Homeland Security Policy Council at at Homeland@fcc.gov.Homeland@fcc.gov.

Or contact the Policy Council Or contact the Policy Council Deputy Director Linda Blair Deputy Director Linda Blair directly at (202) 418-7450.directly at (202) 418-7450.

www.fcc.gov/homelandwww.fcc.gov/homeland