InfraGard Update SSA John V. Gillies SA Matthew E. Morin Overview Role of InfraGard and NIPC Update on InfraGard Activities Future Plans for InfraGard Membership Options On-line Demonstration of Services Advisory National Infrastructure Protection Center (NIPC) and InfraGard PDD-63 “As part of a national warning and information sharing system, the President authorizes … a full scale National Infrastructure Protection Center (NIPC)...” “This organization shall serve as a national critical infrastructure threat assessment, warning, vulnerability, and law enforcement and response entity...” PDD-63 (cont.) “In addition, it will establish its own relations directly with others in the private sector and with any information and analysis entity that the private sector may create...” “All executive departments shall also share with the NIPC information about threats and warning of attacks and about actual attacks on critical government and private sector infrastructures to the extent permitted by law...” Info. Analysis and Warning Infrastructure Owners & Operators Sector Lead Agencies Department of Defense Intelligence Community h NIPC Federal, State, Local Law Enforcement Other Government Agencies Warnings Threats & Incidents Mechanism for Receiving and Disseminating Information Incident Information Submitted to NIPC email FAX telephone Secure Web Server (InfraGard) NIPC PROCESSING Dissemination of NIPC Warning Products Classified -Autodin -STU-3 -Secure FAX Declassified or Sanitized/Sensitive -Secure Web-Server -Trusted Partner Channels - ISAC Unclassified/ Non-sensitive -NIPC Public Web-Server -ANSIR -ISAC NIPC Organization NIPC Director Deputy Director Computer Investigations and Operations Section (CIOS) Analysis and Warning Section (AWS) Training, Outreach and Strategy Section (TOSS) Computer Investigations Unit Analysis and Information Sharing Unit Training and Continuing Education Unit Special Technologies Applications Unit Watch and Warning Unit Outreach and Field Support Unit Cyber Emergency Support Team Strategic Planning Unit InfraGard Our Code of Ethics Public – Private partnership to protect U.S. critical infrastructures Belief in sharing knowledge Serve Infragard and public in a diligent, loyal, honest manner, and not commit illegal acts Maintain confidentiality of fellow members Protect and respect privacy rights, civil rights, and physical and intellectual property of others Local and National InfraGard Update Hawaii InfraGard Chapter (HIGC) Yearly Report Kickoff Conference in March 2000 4 Quarterly Meetings Guest Speakers – – – – Jed Haile (Snort – intrusion detection system) Omer Poirier (United States Attorney’s Office) Det. Chris Duque (Honolulu Police Department) Jodi Ito (Implementing Security Policies) Raised InfraGard Awareness HIGC Yearly Report (cont.) 17 members – – 9 Secure 8 Unsecure Provisional Board Leadership – – – – Sterling Yee (HEI) Lester Nakamura (State of Hawaii) Jodi Ito (University of Hawaii) Janice Reitzel (Naval Criminal Investigative Service) National InfraGard Program Yearly Report Attorney General Announcement All 56 FBI Field Offices Participating Leadership from Provisional National Executive Committee Membership Opportunities – SANS 30% discount good through June, 2001 National InfraGard Program Yearly Report (cont.) National Public Website Operational – National Secure Website Operational – http://www.infragard.net https://www.infragard.org Several Chapter Websites Operational – http://www.hawaii.edu/infragard (work in progress) The Future of InfraGard HIGC Our Goals Defining our Goals – – – – – Increase membership in InfraGard Transition leadership to members Enhance local reporting to NIPC Enhance liaison between members Serve community through public service HIGC Our Plans Change in Meeting Format – Monthly Member Meetings – Emphasis on “working” roundtable to address infrastructure security issues Begin with report from FBI on significant events Time to address local and national InfraGard business To be held at FBI field office on set date Periodic Meetings Open to Public Designed to enhance public awareness of InfraGard Feature presentations related to protecting the information infrastructure. HIGC Future Plans Formation of Committees – Advisory – Outreach – Officers Chapter by-laws Organization Plan meetings Communications Manage local website Public Service National InfraGard Program Election of Board * The National InfraGard Board will consist of seven members and will replace the Provisional National Executive Committee Each chapter can nominate one member to serve Each chapter can vote for up to seven unique nominees The seven nominees with the most votes will be appointed * The process for the election has not been finalized. National InfraGard Program First National Conference To be held on 6/11-14/2001 in San Diego, California Each local chapter is funded to send InfraGard Coordinator and one delegate Order of business includes election of National InfraGard Board Membership Options InfraGard Membership Three Options None (no affiliation) Membership Secure Membership Membership is by organization, not individual InfraGard Membership - None Can attend periodic meetings that are open to the public Can receive periodic information on InfraGard – Mostly periodic meeting announcements InfraGard Membership Member Requires execution of membership agreement Requires agreement to Code of Ethics Can participate in monthly meetings Can vote in local and national elections Can serve as an officer, committee member FBI check NOT conducted Allows for participation of multiple individuals from one organization InfraGard Memberhip Requires execution of Secure Access Agreement (SAA) – – Provides legal framework for information sharing SAA must be signed by “Authorized Binding Official” Requires execution of Designated Representative (DR) Information form (DR) – Secure Member Designates individual in organization who will have access to the secure server FBI check conducted on DR and organization DR has all privileges of member InfraGard Membership - Disclosure FBI policy not to disclose identify of members Members may disclose affiliation Local members will be asked if they would like to be listed in a membership directory Membership directory distributed to members only and use must be consistent with Code of Ethics On-Line Demonstration of Services Advisories SA Matthew Morin Honolulu FBI mmorin@leo.gov (808) 566-4300