Security Vulnerability Assessment Methodology for the Petroleum and Petrochemical
[COLOR=#000000][SIZE=+0] [/SIZE][/COLOR][COLOR=#000000][SIZE=+0] [/SIZE][/COLOR][COLOR=#000000][SIZE=+0] [/SIZE][/COLOR][COLOR=#000000][SIZE=+0] [/SIZE][/COLOR]
[CENTER][COLOR=#000000][/COLOR][SIZE=3][COLOR=#000000] [/COLOR][/SIZE][B][SIZE=3][COLOR=#000000]Security Vulnerability Assessment [/COLOR][COLOR=#000000]Methodology for the Petroleum and [/COLOR][COLOR=#000000]Petrochemical Industries, Second Edition [/COLOR][/SIZE][COLOR=#000000][SIZE=2] [/COLOR][COLOR=#000000] [/COLOR][COLOR=#000000] [/COLOR][COLOR=#000000] [/COLOR][COLOR=#000000] [/COLOR][COLOR=#000000] [/COLOR][/B][/SIZE]
[SIZE=2][B][COLOR=#000000][/COLOR][COLOR=#000000] [/COLOR][COLOR=#000000] [/COLOR][COLOR=#000000] [/COLOR][COLOR=#000000][FONT=Helvetica]American Petroleum Institute [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]1220 L Street, NW [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]Washington, DC [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]20005-4070 [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica] [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]National Petrochemical & [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]Refiners Association [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]1899 L Street, NW [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]Suite 1000 [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]Washington, DC [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]20036-3896 [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica] [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica] [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica] [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica][/FONT][/COLOR] [/B][/SIZE][/CENTER]
[SIZE=+0][SIZE=+0][B][COLOR=#000000][/COLOR][/B][/SIZE][/SIZE]
[SIZE=+0][SIZE=+0][B][COLOR=#000000][/COLOR][/B][/SIZE][/SIZE]
[SIZE=+0][SIZE=+0][B][COLOR=#000000]CONTENTS [/COLOR][/B][COLOR=#000000][/COLOR][/SIZE][/SIZE]
[COLOR=#000000][SIZE=+0] [/SIZE][/COLOR][COLOR=#000000][FONT=Helvetica]CHAPTER 1 INTRODUCTION ................................................................................................[COLOR=#000000]............1[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]1.1 INTRODUCTION TO SECURITY VULNERABILITY ASSESSMENT............................................[COLOR=#000000]1[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]1.2 OBJECTIVES, INTE NDED AUDIENCE AND SCOPE OF THE GUIDANCE .................................[COLOR=#000000]1[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]1.3 SECURITY VULNERABILITY ASSESSMENT AND SECURITY MANAGEMENT PRINCIPLES.....[COLOR=#000000]2[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]CHAPTER 2 SECURITY VULNERABILITY ASSESSMENT CONCEPTS ...............................................[COLOR=#000000]3[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]2.1 INTRODUCTION TO SVA TERMS ................................................................[COLOR=#000000]............................3[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]2.2 RISK DEFINITION FOR SVA ................................................................................................[COLOR=#000000]....3[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]2.3 CONSEQUENCES ................................................................................................[COLOR=#000000]...................4[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]2.4 ASSET ATTRACTIVENESS................................................................................................[COLOR=#000000]......4[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]2.5 THREAT................................................................................................................................[COLOR=#000000]..5[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]2.6 VULNERABILITY ................................................................................................[COLOR=#000000].....................5[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]2.7 SVA APPROACH................................................................................................[COLOR=#000000].....................5[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]2.8 CHARACTERISTICS OF A SOUND SVA APPROACH ................................[COLOR=#000000]...............................7[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]2.9 SVA STRENGTHS AND LIMITATIONS ................................................................[COLOR=#000000].....................8[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]2.10 RECOMMENDED TIMES FOR CONDUCTING AND REVIEWING THE SVA.............................[COLOR=#000000]8[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]2.11 VALIDATION AND PRIORITIZATION OF RISKS................................................................[COLOR=#000000]......8[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]2.12 RISK SCREENING................................................................................................[COLOR=#000000].................9[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]CHAPTER 3 SECURITY VULNERABILITY ASSESSMENT METHODOLOGY .......................................[COLOR=#000000]9[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]3.1 OVERVIEW OF THE SVA METHODOLOGY ................................................................[COLOR=#000000].............9[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]3.2 SVA METHODOLOGY ................................................................................................[COLOR=#000000]........... 15[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]3.3 STEP 1: ASSETS CHARACTERIZATION................................................................[COLOR=#000000]................ 18[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]3.4 STEP 2: THREAT ASSESSMENT................................................................[COLOR=#000000]........................... 23[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]3.5 SVA STEP 3: VULNERABILITY ANALYSIS ................................................................[COLOR=#000000]............. 25[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]3.6 STEP 4: RISK ANALYSIS/RANKING ................................................................[COLOR=#000000]....................... 28[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]3.7 STEP 5: IDENTIFY COUNTERMEASURES:................................................................[COLOR=#000000]............ 28[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]3.8 FOLLOW-UP TO THE SVA................................................................................................[COLOR=#000000]..... 29[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]ATTACHMENT 1 – EXAMPLE SVA METHODOLOGY FORMS ................................[COLOR=#000000]........................ 31[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]ABBREVIATIONS AND ACRONYMS ................................................................[COLOR=#000000].............................. 41[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][SIZE=+0] [/SIZE][/COLOR][COLOR=#000000][FONT=Helvetica]APPENDIX A—SVA SUPPORTING DATA REQUIREMENTS ................................[COLOR=#000000]........................... 43[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]APPENDIX B—SVA COUNTERMEASURES CHECKLIST ................................[COLOR=#000000]............................... 45[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]APPENDIX C—SVA INTERDEPENDENCIES AND INFRASTRUCTURE CHECKLIS T[COLOR=#000000]....................... 67[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]APPENDIX C1—REFINERY SVA EXAMPLE ................................................................[COLOR=#000000]................. 115[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]APPENDIX C2—PIPELINE SVA EXAMPLE ................................................................[COLOR=#000000].................. 123[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]APPENDIX C3—TRUCK TRANSPORTATION SVA EXA MPLE ................................[COLOR=#000000]...................... 135[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][FONT=Helvetica]APPENDIX C4—RAIL TRANSPORTATION SVA EXAMPLE ................................[COLOR=#000000].......................... 145[/COLOR][/FONT][/COLOR][COLOR=#000000][COLOR=#000000][SIZE=+0][/SIZE][/COLOR][/COLOR][COLOR=#000000][SIZE=+0] [/SIZE][/COLOR][COLOR=#000000][FONT=Helvetica]References ................................................................................................................................[COLOR=#000000].. 155 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica] [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]Figures [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]2.1 Risk Definition ................................................................................................[COLOR=#000000]..................3 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]2.2 SVA Risk Variables ................................................................................................[COLOR=#000000]...........3 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]2.3 Asset Attractiveness Factors ................................................................[COLOR=#000000].............................4 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]2.4 Overall Asset Screening Approach................................................................[COLOR=#000000].....................6 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]2.5 Recommended Times for Conducting and Reviewing the SVA ............................................[COLOR=#000000]9 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]
[/FONT][/COLOR][COLOR=#000000][FONT=Helvetica] [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica][/FONT][/COLOR]
[COLOR=#000000][FONT=Helvetica]3.1 Security Vulnerability Assessment Methodology Steps ................................[COLOR=#000000]...................... 11 [/COLOR][/FONT][/COLOR]
[COLOR=#000000][FONT=Helvetica]3.1a Security Vulnerability Assessment Methodology[/FONT][/COLOR][COLOR=#000000][SIZE=+0]—[/SIZE][/COLOR][COLOR=#000000][FONT=Helvetica]Step 1 ................................[COLOR=#000000].................. 12 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.1b Security Vulnerability Assessment Methodology[/FONT][/COLOR][COLOR=#000000][SIZE=+0]—[/SIZE][/COLOR][COLOR=#000000][FONT=Helvetica]Step 2................................[COLOR=#000000].................. 13 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.1c Security Vulnerability Assessment Methodology[/FONT][/COLOR][COLOR=#000000][SIZE=+0]—[/SIZE][/COLOR][COLOR=#000000][FONT=Helvetica]Steps 3 – 5 ................................[COLOR=#000000].......... 14 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.2 SVA Methodology Timeline ................................................................[COLOR=#000000]............................. 15 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.3 SVA Team Members ................................................................................................[COLOR=#000000]....... 16 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.4 Sample Objectives Statement ................................................................[COLOR=#000000].......................... 16 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.5 Security Events of Concern ................................................................[COLOR=#000000]............................. 17 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.6 Description of Step 1 and Substeps ................................................................[COLOR=#000000]................. 19 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.7 Example Candidate Critical Assets ................................................................[COLOR=#000000].................. 20 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.8 Possible Consequences of Security Events ................................................................[COLOR=#000000]...... 21 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.9 Example Definitions of Consequences of the Event................................[COLOR=#000000]........................... 22 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.10 Description of Step 2 and Substeps ................................................................[COLOR=#000000]................. 23 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.11 Threat Rating Criteria................................................................................................[COLOR=#000000]...... 25 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.12 Target Attractiveness Factors (for Terrorism) ................................................................[COLOR=#000000].... 25 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.13 Attractiveness Factors Ranking Definitions (A)................................................................[COLOR=#000000].. 26 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.14 Description of Step 3 and Substeps ................................................................[COLOR=#000000]................. 26 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.15 Vulnerability Rating Criteria ................................................................[COLOR=#000000]............................. 27 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.16 Description of Step 4 and Substeps ................................................................[COLOR=#000000]................. 28 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.17 Risk Ranking Matrix ................................................................................................[COLOR=#000000]........ 29 [/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica]3.18 Description of Step 5 and Substeps ................................................................[COLOR=#000000]................. 29 [/COLOR][/FONT][/COLOR]
[COLOR=#000000][FONT=Helvetica]
[/FONT][/COLOR]
[COLOR=#000000][FONT=Helvetica]A [COLOR=#000000][FONT=Helvetica]SVA Methodology Flow Diagram ................................................................[COLOR=#000000]................... 124 [/COLOR][/FONT][/COLOR][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica] [/FONT][/COLOR][COLOR=#000000][FONT=Helvetica] [/FONT][/COLOR]
[url=http://mihd.net/3idbcwa/114598___api_-_security_vulnerability_assessment_methodology_for_the_petroleum_and_petrochemical_industries]Download - mihd.net[/url]__