DSBlog

Comments (0)

One decade after letters containing anthrax spores killed five people and infected 17 others in the Eastern United States, there has been a veritable blizzard of news articles, research reports and seminars, all aimed at answering the question: are we better prepared for a biological weapons attack now than we were 10 years ago?

A review of some of what’s been published in the last month or so seems to indicate that the consensus answer is “yes – but not as much as we could be.”

Biological threats occupy a somewhat unusual niche as compared to chemical, radiological, nuclear and explosive threats (known collectively as CBRNE). When prioritizing security risks, there is a general tendency to focus mainly on threats with the highest likelihood as well as those with the highest consequences. The trickiness with bio threats, whether contagious on non-contagious, is that they’re neither as high-consequence as a nuclear attack nor as high-likelihood as a chemical or even radiological attack, let alone one caused by conventional explosives. A bio event, furthermore, is unique in that it can be intentionally caused by humans or equally occur through a naturally-generated outbreak, which means that bio preparedness, protection, mitigation, response and recovery efforts are altogether more complex (read more agencies involved and more resources needed) than for other CBRNE threats.

So how are we doing? Participants in a seminar at the Center for American Progress yesterday catalogued several areas of progress, including:

  • The creation of the Department of Homeland Security and new bio-security programs at the Food and Drug Administration (FDA) and the Centers for Disease Control (CDC), up from a single program at the Pentagon;
  • A Strategic National Stockpile of antibiotics, vaccines, antitoxins and other critical medical equipment and supplies, plus related government acquisition programs;
  • Government agency support for research, development and acquisition of new biological countermeasures; and
  • Better coordination between the public safety and public health communities.

The speakers warned, however, that continued Congressional budget cuts to bio-preparedness programs are putting these and other advances into jeopardy. (We do wish the Center would publish a written transcript of the event, titled Anthrax Revisited: The Outlook for Biopreparedness in the United States, since the video is nearly three hours long. One of the participants did produce a paper that made many of the same points, however.)

Although the Government Accountability Office (GAO) has not published any recent reports specifically on bio-terrorism, it has addressed the issue in other 2011 reports, including ones relating to interagency duplication of effort, combating CBRNE threats, public health preparedness, and CBRNE coordination between DHS and the Department of Health and Human Services (HHS).

The most relentlessly negative assessment of the current state of bio-preparedness comes from the non-profit WMD Center, run by ex-senators Bob Graham and Jim Talent. On Wednesday, it issued a Bio-Response Report Card that gives the U.S. government poor marks for eight different categories of bio-preparedness at six different levels of event severity, from small-scale non-contagious to a contagious global crisis. For example, it gives ‘F’ grades in 15 categories on the matrix, including for how the government identifies the source of a biological event at almost every level of severity, and for the development and approval, availability, and dispensation of medical countermeasures. There are 15 ‘Ds’, seven ‘Cs’, eight ‘Bs’ (all of them in the two least-severe event levels) and no ‘As’ in the above-mentioned categories, which also include detection and diagnosis, communication, medical management and environmental cleanup. It also noted that advances in bio-preparedness have not nearly kept pace with major scientific and technological strides that could be used by terrorists in the weaponization and delivery of pathogens.

While the report received mostly uncritical coverage, one blogger said the Center’s report is the “same script they have always written: Calamity is coming if we don’t spend more of bioterror defense. And anyone can make biological weapons. Easy.” And he called the authors the “Graham-Talent sock puppet lobby” for bio-defense funding. Ouch. The Bulletin of Atomic Scientists Online similarly dissed last year’s report card, though it used more scientific language.

While much of the focus in the past month has been on bio-security preparedness, some attention is being paid to the threat side of the equation as well. For instance, intelligence gleaned from the raid on Osama bin Laden’s Abbottabad compound confirmed earlier indications that al-Qaeda is intent on acquiring or developing biological agents and weaponizing and deploying them against Western targets. And the proliferation of new delivery vehicles such as unmanned aerial vehicles presents another potential increase in the threat likelihood of a biological attack, according to some terrorism analysts. Others have focused on advances in technologies to detect bacterial threats such as anthrax by using lasers (thanks, Global Security Newswire, for both links). And a new National Academies report asks whether prepositioning antibiotics in U.S. cities could shorten response times to a bio attack.

And so the measure / countermeasure / counter-countermeasure cycle continues…

––––––––––––––––

Digital Sandbox is the leader in public safety risk management, providing analytic tools and information products to government agencies and large enterprises for optimizing risk-based strategic, policy and budgetary decisions.

 

Join The Conversation »
Comments (0)

U.S. government agencies have experienced a 650-percent increase in security incidents over the past five years due in large part to weaknesses in information-security policies and practices, according to a report released this week by the Government Accountability Office (GAO).

The Federal Information Security Management Act of 2002 (FISMA) requires the Office of Management and Budget (OMB) to develop and oversee the implementation of policies, standards and guidelines on information security at executive branch agencies, but in a survey of 24 of these agencies during fiscal-year 2010 the GAO found that while some progress has been made, “much work remains.”

Perhaps most disturbingly, it said that:

    “most major federal agencies had weaknesses in each of the five major categories of information system controls: (1) access controls, which ensure that only authorized individuals can read, alter, or delete data; (2) configuration management controls, which provide assurance that only authorized software programs are implemented; (3) segregation of duties, which reduces the risk that one individual can independently perform inappropriate actions without detection; (4) continuity of operations planning, which helps avoid significant disruptions in computer-dependent operations; and (5) agency-wide information security programs, which provide a framework for ensuring that risks are understood and that effective controls are selected and implemented.”

It reported that all 24 agencies “had vulnerabilities in access control, configuration management, and security management” and that “[d]eficiencies in segregation of duties and contingency planning, while not reported for all of these agencies, were prevalent.”

Click here to view or download the report.

October 8 Update: After we published this post yesterday, President Obama issued an Executive Order aimed at closing security gaps in classified computer networks and safeguarding classified national security information shared across such networks. The Executive Order is here.

––––––––––––––––

Digital Sandbox is the leader in public safety risk management, providing analytic tools and information products to government agencies and large enterprises for optimizing risk-based strategic, policy and budgetary decisions.

 

Join The Conversation »
Comments (0)

It looks as if one major manufacturer of millimeter-wave body scanners is beginning to respond to the outcry over their potential for causing privacy violations due to rather detailed images of subjects’ bodies.

In its promo literature for the new ProVision ATD (pictured, below), L-3 Communications notes that the equipment “addresses privacy concerns by eliminating the generation and review of images.” Instead, scan data from the unit (the ATD stands for Automatic Target Detection) “is processed by software without human intervention to determine if any threats are present. Potential threat areas are then presented to the operator using a generic mannequin that resembles a human outline.”

The latest product upgrade seems to be going over well: the Transportation Security Administration (TSA) bought 300 of them today. Perhaps Germany will consider procuring a few as well.

Now, if the scanner manufacturers can only find a way to put people’s minds at ease about the potential health risks in a future upgrade.

––––––––––––––––

Digital Sandbox is the leader in public safety risk management, providing analytic tools and information products to government agencies and large enterprises for optimizing risk-based strategic, policy and budgetary decisions.

Join The Conversation »

Get In Touch

Have a question or want to give us feedback?

Email Us »