Block 6 - Ics Part 1

Front 1

What was issued which established a national program called "Critical Infrastructure Protection (CIP)"

Back 1

Presidential Decision Directive PDD-63

Front 2

What was issued specifically for Critical Infrastructure Identification, Prioritization, and Protection (CIIPP) in accordance with the Patriot Act

Back 2

Homeland Security Presidential Directive (HSPD-7)

Front 3

Banking and finance

Back 3

Dep of Treasury

Front 4

Transportation

Back 4

Dep of Transportation

Front 5

Power

Back 5

Dep of Energy

Front 6

Information and Communications

Back 6

Dep of Commerce

Front 7

Federal and municipal services

Back 7

Overseen jointly by Federal and State agencies

Front 8

Emergency Services

Back 8

Health and Human Services

Front 9

Fire Departments

Back 9

Federal Emergency Management Agency (FEMA)

Front 10

Law Enforcement

Back 10

Department of Justice and the Federal Bureau of Investigation

Front 11

Public Works

Back 11

Environmental Protection Agency (EPA)

Front 12

Agriculture and Food

Back 12

Dep of Agriculture

Front 13

National monuments and icons

Back 13

Dep of the Interior

Front 14

10 defense critical infrastructure SECTORS that are protected by the DoD

Back 14

1. Financial Services
2. Transportation
3. Public Works
4. GIG C2
5. ISR
6. Health Affairs
7. Personnel
8. Space
9. Logistics
10. Defense Industrial Base

Front 15

DoD 7 areas of FOCUS

Back 15

1. Policy and Strategy
2. Intel Support
3. Industrial Policy
4. Defense Security
5. IA
6. R&D
7. Education and Awareness

Front 16

CIP Event Life cycle

Back 16

1. Analysis and Assessment (occurs before an event): Foundation and most important phase.

2. Remediation (occurs before an event): precautionary measures and actions taken before an event occurs to fix the known cyber and physical vulnerabilities that could cause an outage or compromise a NDI or any critical assets.

3. Indications and Warning (before/during event): Daily sector monitoring to assess the msn assurance capabilities of CI assets and to determine if there are event indicators to report. indications based on tactical, operational and strategic level. Tactical - input comes from asset owners. Operational - NDI sectors/NATO/allies. Strategic - intel/law enforcement/private sectors.

4. Mitigation (before and during):Comprises actions taken before or during an event in response to warnings or incidents.

5. Incident Response (after): Plans and activities taken to eliminate the cause or source of an infrastructure event.

6. Reconstruction (after): Rebuild or restore

Front 17

CIP Event Life cycle Step 1

Back 17

1. Analysis and Assessment (occurs before an event): Foundation and most important phase. (Key)

Front 18

CIP Event Life cycle Step 2

Back 18

2. Remediation (occurs before an event):
fix the known cyber and physical vulnerabilities that could cause an outage or compromise a National Defense Infrastructure or any critical assets.

Front 19

CIP Event Life cycle Step 3

Back 19

3. Indications and Warning (before/during event): Daily sector monitoring to assess the msn assurance capabilities of CI assets and to determine if there are event indicators to report. indications based on tactical, operational and strategic level. Tactical - input comes from asset owners. Operational - NDI sectors/NATO/allies. Strategic - intel/law enforcement/private sectors

Front 20

CIP Event Life cycle Step 4

Back 20

4. Mitigation (before and during):Comprises actions taken before or during an event in response to warnings or incidents.

Front 21

CIP Event Life cycle Step 5

Back 21

5. Incident Response (after): Plans and activities taken to eliminate the cause or source of an infrastructure event.

Front 22

CIP Event Life cycle Step 6

Back 22

6. Reconstruction (after): Rebuild or restore. Most challenging and least developed

Front 23

Process based manufacturing industries typically utilize three processes.

Back 23

1. Continuous manufacturing: Run continuously. Fuel, steam flow, petroleum, and distillation.
2. Batch: distinct processing steps, conducted on a quantity of material. Distinct start and end. Food processing.
3. Discrete-based: Series of steps on a single device to create end product. Electronic and mechanical parts.

Front 24

SCADA Systems

Back 24

Highly distributed systems used to control geographically dispersed assets, where centralized data acquisitions and control are critical to system operations.

Front 25

Distributed Control System (DCS)

Back 25

Used to control processes such as electrical power generation, oil refineries, water/waste-water treatment, and manufacturing production. Integrated as a control architecture containing a supervisory level of control overseeing multiple integrated sub-systems that are responsible for controlling the details of a localized process.

Front 26

Energy Management and Control System (EMCS)

Back 26

Integrated central control and display panel that incorporates the building fire alarm system and controls for building HVAC and lighting system.

Front 27

Building Automation System (BAS)

Back 27

Computerized, intelligence network of electronic devices, designed to MONITOR and CONTROL the MECHANICAL and LIGHTING systems in a building.

Front 28

Process Control System (PCS)

Back 28

Located within a more confined factory or plant centric area when compared to SCADA. On a LAN.

Front 29

Human-Machine Interface

Back 29

Software or hardware (server) that allows human operators to monitor the state of a process under control, modify control settings to change the control objective, and manually override automatic control operations in the event of an emergency.

Front 30

Remote Terminal Unit (RTU)

Back 30

Special purpose data acquisition and control unit esigned to support SCADA remote stations. Field devices often equipped with WIRELESS radio interfaces to support remote situations where wire based comm are unavailable.

Front 31

Programmable Logic Controllers (PLC)

Back 31

Computer based, solid state devices that control almost all industrial equipment and processes. Logic level. Resemble ladder diagrams.

Front 32

Proportional-integral-derivative (PID)

Back 32

Allows system to anticipate and adjust setting based off the "error" value as then difference between an acceptable setpoint and a measured process variable.

Front 33

What does each value in PID represent?

Back 33

P - Proportional value determines the reaction to the CURRENT error
I - Integral value determines the reaction based on the SUM of RECENT errors.
D - Derivative value determines the reaction based on the rate at which the error HAS BEEN CHANGING.

Front 34

Utilizes an actuating device to control the process directly WITHOUT using feedback

Back 34

Open-loop control system (water valve)

Front 35

Uses a measurement of the output and feedback of the signal to compare it with the desired output

Back 35

closed-loop control system (AC system)

Front 36

The measure of the output is called

Back 36

Feedback signal

Front 37

Feedback control system

Back 37

Tends to maintain a prescribed relationship of one system variable to another by comparing functions of these variables and using the difference as a means of control.

Front 38

Closed loop communications come in three types

Back 38

Mechanical linkages
pneumatic signals
hardwired electrical signals

Front 39

Intelligent Electronic Devices (IED)

Back 39

"Smart" sensor/actuator containing the intel rqd to acquire data, communicate to other devices and perform local processing and control. Allow for automatic control at the local level.

Front 40

Diagnostics and mnx utilities are used to

Back 40

Prevent, identify, and recover from abnormal operation or failure.

Front 41

Operate continuously over the duration of a process with cycle times ranging on the order of milliseconds to minutes

Back 41

Supervisory-level loops and lower loops

Front 42

Hosts the DCS or PLC supervisory control software that is designed to communicate with lower level control devices

Back 42

Control Server

Front 43

Master Terminal Unit (MTU)/SCADA Server

Back 43

Acts as the master in a SCADA system. RTU and PLC devices located at remote field sites usually act as slaves. Heart of ICS.

Front 44

Two types of transmission from MTU

Back 44

Response to poll
Report by exception

Front 45

Data historian

Back 45

Centralized db for logging all process information within an ICS.

Front 46

IO Server

Back 46

Responsible for collecting, buffering, and providing access to process information from control sub components such as PLC, RTU, & IED. Used for interfacing third party control components, such as an HMI and a control server.

Front 47

Major components of an ICS network

Back 47

-Fieldbus Network:link sensors and other devices to a PLC or other controller.
-Control Network:Connects supervisory control level to lower level control modules.
-Layer 2/3 device
-FW
-Modems
-Remote Access Points