Infrastructure Resilience
OTHSolutions performs assessments, implements analytical frameworks, plans mitigation measures and develops resources which enhance an organization’s capacity to build resilience, buy-down prioritized risks and expand security capabilities across critical infrastructure communities.
Methodology - S.A.F.E.R
Survey
Survey and catalog potential risks across the enterprise using tailored methodologies ranging from design-based threat assessments to consequence-based assessments.
Analyze
Analyze risks using homeland security-derived models, such as IST and THIRA.
Formulate
Formulate mitigation strategies based upon industry best practice benchmarks such as the NIST Cybersecurity Framework and ANSI/ASIS PAP.1.
Execute
Execute chosen risk reduction strategies and controls.
Review
Review monitoring data to inform future implementation adjustments.
Performance Snapshots.
Coauthored "Communities Initiative Risk Assessment: IoT and Security Risk” to identify risks across Internet of Things (IoT) architectural layers which could lead to the disruption of critical infrastructure operations and the compromise of sensitive data.
Reviewed artificial intelligence (AI) risk assessments in eight industry sectors, providing sector-specific guidance and mitigation strategies for managing AI-related risks, emphasizing secure adoption and usage practices.
Coordinated with industry to identify, qualify, and quantify AI’s impact on critical infrastructure, including a comprehensive assessment of how AI may introduce new risks or amplify existing risks to critical infrastructure sectors.
Drafted the national electromagnetic pulse risk assessment report in response to Executive Order 13865 requirements.
Led interagency efforts to assemble a space weather-specific risk register. Led White House efforts to develop space weather decision-support templates for Presidential briefings and prioritize risk mitigation efforts.
Created a Positioning Navigation and Timing (PNT) maturity model to articulate current policies, threat landscape, and how the risks translate into actionable mitigation activities.
Led multiple sessions with telecommunications owners/operators to articulate the implications of PNT interference and dependencies across the chemical, manufacturing, dams, energy, transportation, water and DIB sectors.
Examined PNT architecture as it related to 5G deployment and the implications on critical infrastructure, including the development of an after-action report for the communications interference aviation incident in Colorado.
Drafted multiple information and communications technology (ICT) supply chain risk management (SCRM) products to catalog current threat vectors as well as best practices and lessons learned, including the “Operationalizing Vendor Supply Chain Risk Management Template for Small and Medium-Sized Businesses” and an ICT SCRM Threat Scenarios Report.
More services.
