Geographic Information Systems(GIS) Threat Analysis Techniques Overview What is GIS? Functional capabilities of GIS BCM Process and GIS How to leverage GIS in threat/risk analysis Ron Brown, CBCP Managing Director PricewaterhouseCoopers Washington, DC. April 22, 2013 Value of using GIS 2 Why GIS? Improve your understanding of threat information that holistically presents the information to enable a more effective and efficient decision support capability. Need an easy way to visualize this data quickly. The best way currently available is through the use of Geographic What is GIS? A Geographic Information System (GIS) integrates hardware, software, and data for capturing, managing, analyzing, and displaying all forms of geographically referenced information GIS allows us to view, understand, question, interpret, and visualize data in many ways that reveal relationships, patterns, and trends in the form of maps, globes, reports, and charts GIS helps you answer questions and solve problems by looking at your data in a way that is quickly understood and easily shared 3 4
Functional capabilities of GIS GIS allows users to visualize geospatial data in a way that reveals patterns, relationships, and trends; data can be used to catalogue events, report status, and monitor critical infrastructure GIS technology provides the capability to map and analyze hazards of all types and visualize their potential business impacts BCM process and integration of GIS Incorporation of GIS into the Business Continuity Management (BCM) planning process makes for better informed decision making throughout the planning process producing more robust BCM plans that are more adaptable to real crisis situations Planners and exercise participants who utilize GIS support are better prepared and trained to properly execute corporate BCM plans in line with corporate leadership objectives and strategies GIS can be used to predict damage, provide situational awareness to decision makers, and compare historical data to verify integrity during planning and response 5 6 How to leverage GIS in threat/risk analysis Identify and graphically depict: Past disaster impacts Predictive modeling of threats New York evacuation zones and Sandy storm surge extent Overlay infrastructure to realize relationships with client business operations Helps identify critical needs for business operations Allows for identification of alternate operating locations or data backup centers 7 8
Lower Manhattan Subway lines and Sandy storm surge extent Rockaways Pre-Sandy Storm damage in the Rockaways Post-Sandy 9 10 Major east coast hurricane tracks 1950-2010 storm seasons Using GIS to understand outside threats Chemical/hazmat/explosives manufacturers or distributors Nuclear power facilities» The US Nuclear Regulatory Commission (NRC) defines two Emergency Planning Zones (EPZs) around nuclear power plants. The Plume Exposure Pathway EPZ extends 10 miles; the primary concern is exposure of the public to, and the inhalation of, airborne radioactive contamination. The Ingestion Pathway EPZ extends 50 miles; the primary concern is ingestion of food and liquid that is contaminated by radioactivity.» Critical infrastructure within EPZs may be affected by evacuations, degraded utilities (i.e. water) Potential terrorist targets, areas prone to civil disturbances All potentially affecting transportation, employee continuity, suppliers/vendors 11 12
North Carolina nuclear power facilities and nearby airports WISER chemical spill protective distance map 13 14 Infrastructure/Relationships GIS provides a way to graphically depict potential risks to infrastructure Identifying weaknesses and/or single points of failure Allows the use of scenarios to helps identify additional areas for prioritization of critical business functions and mitigation strategies Allows for a better understanding of population impacts on BCM Effects of a disaster may be amplified in areas of high population density USGS Pacific Northwest 7.2M earthquake scenario 15 16
San Ramon emergency services and fault lines San Diego sewer lines and fault lines 17 18 Value of using GIS in BCM Allows for desktop analysis Strengthens plans with better understanding of risks/threats Allows for better exercises and more comprehensive briefs to senior leadership Thank you! Please contact me with any follow up questions: ron.brown@us.pwc.com Phone: 703-930-4634 Creates a better understanding of dependencies on suppliers, infrastructure, and employees 2012 PwC. All rights reserved. In this document, "PwC" refers to PricewaterhouseCoopers LLP, a Delaware limited liability partnership, which is a member firm of PricewaterhouseCoopers International Limited, each member firm of which is a separate legal entity. This document is for general information purposes only, and should not be used as a substitute for consultation with professional advisors. 19