Many states and urban areas are using a risk management model to set Homeland Security priorities and maximize resources. In order to implement a successful program, your organization must establish a core set of capabilities that enable you to:

• Maintain a Critical Infrastructure and Key Resources (CI/KR) catalog
• Maintain a threat and asset catalog
• Perform multiple types of CI/KR surveys and assessments
• Maintain and analyze your own risk profile
• Align prevention, protection, response, and recovery capabilities to your risk profile
• Make investments based on qualified capability gaps
• Become more competitive in Homeland Security and infrastructure grant programs

The Five Building Blocks of a Successful Risk Management Program

Digital Sandbox can develop a program for your organization that meets or exceeds every standard for successful risk management.

• System Components
  Site Profiler, our robust enterprise solution, enables data collection, analysis, and reporting across all risk management functions. Because Site Profiler integrates with your public safety programs, you can reuse data and incorporate your risk management program into other functions.
  
• Strategy & Processes
  Our experts develop efficient and repeatable processes to run your risk management program and optimize your Site Profiler deployment. System-generated metrics track your program’s progress.
• Data Collection
  Your data and information from DHS and other open sources is used to create your preliminary risk baseline. As your program matures, data is updated and improved through your strategic collection and analysis programs.
  
• Training
  We provide your team with the knowledge to sustain a successful risk management program through ongoing training and train-the-trainer programs.
• Risk Management Services
  Your implementation includes consulting tailored to your unique environment and needs.

A Proven Roadmap to Success

Our roadmap includes the following tools to tailor your risk management system to your unique requirements:

• Concept of Operations (CONOPS)
  A CONOPS clearly lays out how your risk management program operates, including:
  
  • Business strategies and processes. Through interviews and group brainstorming, we develop workflows, standard operating procedures, and decision points to enable your management to create program guidelines. Metrics and reporting requirements are defined to track your program’s progress and success.
    
  • System architecture. Site Profiler’s integration with your IT environment and public safety systems is defined.
    
• Data Collection
  A successful risk management program starts with a reasonable set of data on threats, assets, vulnerabilities, and risks. Working with your experts, we identify your internal sources of information. Your data is combined with other data sources to build a CI/KR catalog of your top 100-1,000 assets.
  
  Site Profiler is preconfigured with the default threats and hazards in your threat/hazard baseline. Default threats are compiled from public sources (e.g., National Infrastructure Protection Plan and FEMA 426 publications). Threats are grouped into three categories: natural, accidental, and intentional/terrorism. We assemble a group of your threat subject matter experts to define threats to your area, review default threats, and identify additional threats. Additional threats are configured and maintained in Site Profiler, which adds them to your threat baseline.
  
• Preliminary Risk Baseline
  Your preliminary risk baseline is created with input from your experts, including definitions for risk metrics for your CI/KR catalog and threat/hazard ratings. Using these values, Site Profiler performs risk calculations to produce a high-level view of your risk baseline and launch your assessment program. Your risk profile is refined and improved as new assessments are loaded into Site Profiler.
   
• System Initialization
  We configure Site Profiler with the business process and technical requirements identified in the CONOPS and preload your initial data baselines. Once interfaces are extended to your user community, your system is ready.
  
• Training
  Digital Sandbox thoroughly trains your users on your business processes before they are implemented. Basic, advanced and train-the-trainer instruction is available.
• Ongoing Risk Management Services
  Your risk management program can be enhanced with additional capabilities, including:
  • DHS data call automation and support
  • Automated CI/KR catalog integration
  • Custom integration with existing systems
  • Specialized risk baselines
  • Resource allocation modeling
  • Survey and assessment assistance
  • Private sector coordination