Insider Threat Mitigation Workshop Instructional Materials

Abstract

Basic Physical Protection Systems (PPS) May 21 2007 Background Physical protection systems at different sites are seldom identical because of the differences in facilities, targets, and threats. The basic design for physical protection systems is quite well established but considerable engineering and design tailoring is usually required for each site. DOE and NNSA sites use DOE Order 470.4-2. This Manual establishes requirements for the physical protection of safeguards and security (S&S) interests. Objectives The objectives of the physical protections system should be: a. To establish conditions which would minimize the possibilities for unauthorized removal of nuclear material and/or for sabotage ; and b. To provide information and technical assistance in support of rapid and comprehensive measures to locate and recover missing nuclear material and to cooperate with safety authorities in minimizing the radiological consequences of sabotage. PPS Functions: Detection, Delay, and Response An effective physical protection system integrates people, equipment, and procedures for the protection of assets or facilities against theft, sabotage, or other malevolent human attacks. Depending on the assets and possible targets in the facility, a probable type of adversary may be identified. Adversaries can be categorized into three main groups: outsiders, insiders, and outsiders working in collusion with insiders. Outsiders include terrorists, criminals, extremists, and hackers. An insider is considered anyone with knowledge of operations in the facility and who has unescorted access to security areas and sensitive information. An outsider that operates with insider assistance represents a great challenge for the security system since the insider can move around the facility without raising suspicion and can choose the best time to act. Regardless of these possibilities, the PPS must respond to the challenge and prevent an attack by bringing into effect its three main functions: detection, delay, and response. The Detection Function Detection is the discovery of an adversary action. It includes sensing of covert or overt intrusion activities. The following is a typical detection sequence: 1. A sensor reacts to a stimulus and initiates an alarm. 2. The information from the sensor is reported and displayed. 3. A person assesses the information and judges the alarm to be valid or invalid.