Defense Critical Infrastructure:

Adherence to Guidance Would Improve DOD's Approach to Identifying and Assuring the Availability of Critical Transportation Assets

GAO-08-851: Published: Aug 15, 2008. Publicly Released: Aug 15, 2008.

Additional Materials:

Contact:

Davi M. Dagostino
(202) 512-3000
contact@gao.gov

 

Office of Public Affairs
(202) 512-4800
youngc1@gao.gov

The Department of Defense (DOD) established the Defense Critical Infrastructure Program (DCIP) to assure the availability of mission-critical infrastructure, including surface, sea, and air transportation assets to carry out its missions. GAO was asked to evaluate (1) the extent to which the U.S. Transportation Command (TRANSCOM) has identified, prioritized, and assessed critical transportation assets; (2) the extent to which DOD installation personnel have taken actions to help assure the availability of critical transportation assets, both within and independent of DCIP; and (3) how DOD is funding critical transportation asset assurance. GAO examined a nonprojectable sample of 22 critical transportation assets, reviewed relevant DOD guidance and documents, and interviewed cognizant officials.

TRANSCOM has taken some actions to identify, prioritize, and assess its critical transportation assets but, according to officials from the Office of the Assistant Secretary of Defense for Homeland Defense and Americas' Security Affairs (ASD[HD&ASA]), its methodology for doing so, until recently, has been inconsistent with the intent of DOD's various DCIP guidance and with the approach adopted by some of the other combatant commands and military services. TRANSCOM considers entire installations--military air bases, seaports, and commercial airports--as critical assets, rather than identifying assets with greater specificity, such as individual runways, navigation aids, and fuel storage facilities. This methodology diminishes the reliability of the critical transportation asset list, a condition that impedes DOD's ability to prioritize its critical assets departmentwide and effectively target spending on risk-reduction efforts. Further, TRANSCOM was using its vulnerability assessments to identify specific critical transportation assets on the installations. This practice conflicts with DOD's DCIP guidance not to use vulnerability assessments to identify critical assets. Though TRANSCOM officials stated that they now plan to discontinue this practice, they were unable to provide ASD(HD&ASA) or GAO with any documentation to confirm that this decision had occurred officially. Further, TRANSCOM's memorandum of understanding with the Joint Staff to participate as transportation subject matter experts on the Joint Staff's vulnerability assessments with a DCIP module is still in draft. In May 2008, TRANSCOM officials told GAO that they now plan to use the draft DCIP critical asset identification process to reevaluate its 300 identified critical transportation assets; however, a timeline to complete this has not yet been determined. DOD installation personnel at the 22 sites GAO visited have taken actions to help assure the availability of critical transportation assets; however, these actions have routinely occurred independent of DCIP. Consequently, they do not consider the full spectrum of threats and hazards and they tend to focus on preventing mass personnel casualties instead of critical asset assurance. DCIP's impact at the installations where the assets are located was negligible because of the lack of service-specific guidance. This gap in guidance hinders installation personnel's ability to make informed risk management decisions based on asset criticality. Coordination efforts between installation personnel and non-DOD owners of critical transportation assets and supporting public works infrastructure were substantial, but have been focused on the protection of people and not on asset assurance. DOD has allocated approximately $283 million for DCIP from fiscal years 2004 to 2008, including $8.6 million to TRANSCOM for its combatant command and defense sector responsibilities. Critical infrastructure assurance efforts also have been funded through other DOD complementary programs, such as the Antiterrorism Program, and through foreign government contributions. Although existing DCIP funding does not include funding for remediating asset vulnerabilities, remediation has been funded from these other sources.

Recommendations for Executive Action

  1. Status: Closed - Implemented

    Comments: In a memorandum dated December 17, 2010, the Office of the Assistant Secretary of Defense for Homeland Defense and Americas' Security Affairs (ASD[HD&ASA])--the office responsible for DCIP--noted that that all of TRANSCOM's critical assets were identified using the DOD Critical Asset Identification Process. As a result, TRANSCOM will be able to identify which specific transportation assets are critical.

    Recommendation: To help assure the availability of critical assets in the Transportation Defense Sector and to enable decision makers within DOD to more effectively prioritize and target limited resources to reduce critical asset vulnerabilities and allow ASD(HD&ASA) to formulate a complete and accurate list of Defense Critical Assets, the Secretary of Defense, should, through ASD(HD&ASA) and the Chairman of the Joint Chiefs of Staff, direct the Commander of TRANSCOM to fully implement the criteria, methodology, and process in the draft DOD Critical Asset Identification Process manual to reevaluate and update the identification of all critical transportation assets, and develop a timeline for doing so.

    Agency Affected: Department of Defense

  2. Status: Closed - Implemented

    Comments: We recommended that U.S. Transportation Command stop using its Transportation Integrated Vulnerability Assessments to identify critical infrastructure. The Department concurred with our recommendation and provided documentation that these vulnerability assessments have been discontinued altogether as part of a larger, DOD-wide effort to reduce the number of vulnerability assessments.

    Recommendation: To help assure the availability of critical assets in the Transportation Defense Sector and to enable decision makers within DOD to more effectively prioritize and target limited resources to reduce critical asset vulnerabilities and allow ASD(HD&ASA) to formulate a complete and accurate list of Defense Critical Assets, the Secretary of Defense, should, through ASD(HD&ASA) and the Chairman of the Joint Chiefs of Staff, direct the Commander of TRANSCOM to discontinue the use of Transportation Infrastructure Vulnerability Assessments as its primary tool for identifying its critical assets.

    Agency Affected: Department of Defense

  3. Status: Closed - Implemented

    Comments: We recommended the U.S. Transportation Command (TRANSCOM) officials finalize a memorandum with the Joint Staff to define TRANSCOM's roles and responsibilities for transportation subject matter experts to augment the Joint Staff's vulnerability assessments for critical assets. DOD provided us with the memorandum that outlined TRANSCOM assessors roles and responsibilities.

    Recommendation: To help assure the availability of critical assets in the Transportation Defense Sector and to enable decision makers within DOD to more effectively prioritize and target limited resources to reduce critical asset vulnerabilities and allow ASD(HD&ASA) to formulate a complete and accurate list of Defense Critical Assets, the Secretary of Defense, should, through ASD(HD&ASA) and the Chairman of the Joint Chiefs of Staff, direct the Commander of TRANSCOM to finalize its memorandum of understanding with the Joint Staff to enable TRANSCOM transportation subject matter experts to participate in the DCIP module of a Joint Staff vulnerability assessment.

    Agency Affected: Department of Defense

  4. Status: Closed - Implemented

    Comments: We recommended that the Military Departments issue service-specific guidance to implement the Defense Critical Infrastructure Program because installations we visited were unfamiliar with the program and how to implement it. DOD officials have since provided us with the officially released guidance per each military service on the implementation of the program.

    Recommendation: To facilitate DCIP implementation at the installation level, the Secretary of Defense should direct the secretaries of the military departments to develop and implement service-specific guidance based on published DOD DCIP guidance.

    Agency Affected: Department of Defense

 

Explore the full database of GAO's Open Recommendations »

Jan 7, 2021

Dec 18, 2020

Dec 17, 2020

Nov 24, 2020

Nov 19, 2020

Nov 16, 2020

Nov 9, 2020

Oct 29, 2020

Sep 30, 2020

Looking for more? Browse all our products here