Posts

Nothing Found

Sorry, no posts matched your criteria

CORE-Observatory

Comentario de “Protección de la Infraestructura Crítica Marítima – El Departamento de Seguridad Nacional necesita dirigir mejor la seguridad cibernética Portuaria”, Informe al Presidente, Comisión de Comercio, Ciencia y Transporte, Senado de los Estados Unidos, Oficina de Rendición de Cuentas del Gobierno de los Estados Unidos, junio de 2014 (CORE1098)

/0 Comments/in , , , , , , , , , , , , , , , , , , , , /by

Resumen: Las medidas adoptadas por el Departamento de Seguridad Nacional (DHS, por sus siglas en inglés) y dos de las agencias que lo componen, la Guardia Costera de los Estados Unidos y la Agencia Federal para el Manejo de Emergencias (FEMA, por sus siglas en inglés), así como otras agencias federales, para hacer frente a la seguridad cibernética en el entorno marítimo portuario, han sido limitadas. Reporte disponible (en inglés) en: http://www.gao.gov/assets/670/663828.pdf

[s2If is_user_logged_in()]

Full review: While the Coast Guard initiated a number of activities and coordinating strategies to improve physical security in specific ports, it has not conducted a risk assessment that fully addresses cyber-related threats, vulnerabilities, and consequences. Coast Guard officials stated that they intend to conduct such an assessment in the future, but did not provide details to show how it would address cybersecurity. Until the Coast Guard completes a thorough assessment of cyber risks in the maritime environment, the ability of stakeholders to appropriately plan and allocate resources to protect ports and other maritime facilities will be limited.

Maritime security plans required by law and regulation generally did not identify or address potential cyber-related threats or vulnerabilities. This was because the guidance issued by Coast Guard for developing these plans did not require cyber elements to be addressed. Officials stated that guidance for the next set of updated plans, due for update in 2014, will include cybersecurity requirements. However, in the absence of a comprehensive risk assessment, the revised guidance may not adequately address cyber-related risks to the maritime environment.

The degree to which information-sharing mechanisms (e.g., councils) were active and shared cybersecurity-related information varied. Specifically, the Coast Guard established a government coordinating council to share information among government entities, but it is unclear to what extent this body has shared information related to cybersecurity. In addition, a sector coordinating council for sharing information among nonfederal stakeholders is no longer active, and the Coast Guard has not convinced stakeholders to reestablish it. Until the Coast Guard improves these mechanisms, maritime stakeholders in different locations are at greater risk of not being aware of, and thus not mitigating, cyber-based threats.

Under a program to provide security-related grants to ports, FEMA identified enhancing cybersecurity capabilities as a funding priority for the first time in fiscal year 2013 and has provided guidance for cybersecurity-related proposals. However, the agency has not consulted cybersecurity-related subject matter experts to inform the multi-level review of cyber-related proposals—partly because FEMA has downsized the expert panel that reviews grants. Also, because the Coast Guard has not assessed cyber-related risks in the maritime risk assessment, grant applicants and FEMA have not been able to use this information to inform funding proposals and decisions. As a result, FEMA is limited in its ability to ensure that the program is effectively addressing cyber-related risks in the maritime environment.

Why GAO Did This Study? U.S. maritime ports handle more than $1.3 trillion in cargo annually. The operations of these ports are supported by information and communication systems, which are susceptible to cyber-related threats. Failures in these systems could degrade or interrupt operations at ports, including the flow of commerce. Federal agencies—in particular DHS—and industry stakeholders have specific roles in protecting maritime facilities and ports from physical and cyber threats. GAO’s objective was to identify the extent to which DHS and other stakeholders have taken steps to address cybersecurity in the maritime port environment. GAO examined relevant laws and regulations; analyzed federal cybersecurity-related policies and plans; observed operations at three U.S. ports selected based on being a high-risk port and a leader in calls by vessel type, e.g. container; and interviewed federal and nonfederal officials.

What GAO Recommends? GAO recommends that DHS direct the Coast Guard to (1) assess cyber-related risks, (2) use this assessment to inform maritime security guidance, and (3) determine whether the sector coordinating council should be reestablished. DHS should also direct FEMA to (1) develop procedures to consult DHS cybersecurity experts for assistance in reviewing grant proposals and (2) use the results of the cyber-risk assessment to inform its grant guidance. DHS concurred with GAO’s recommendations.

Full citation:  “MARITIME CRITICAL INFRASTRUCTURE PROTECTION – DHS Needs to Better Address Port Cybersecurity”, Report to the Chairman, Committee on Commerce, Science, and Transportation, U.S. Senate, United States Government Accountability Office, June 2014.

CORE1098

Keywords: Maritime Security, Port Security, Cyber – Security, CBP U.S. – Customs and Border Protection, Coast Guard U.S., DHS-Department of Homeland Security, FEMA-Federal Emergency Management Agency, ISAC-information sharing and analysis center, IT-information technology, MTSA-Maritime Transportation Security Act of 2002, NIPP-National Infrastructure Protection Plan, AFE Port Act-Security and Accountability for Every Port Act of 2006, TSA-Transportation Security Administration

[/s2If]

Comentario de Consideración y Adopción de Enmiendas al Convenio Internacional para la Seguridad de la Vida Humana en el Mar, 1974, Organización Marítima Internacional (CORE1097)

/0 Comments/in , , , , , , , , , , , , , , , , , , /by

Resumen: El Código Internacional de para la Protección de Buques e Instalaciones Portuarias (PBIP o ISPS, por sus siglas en inglés) establece nuevos estándares de seguridad para buques en el mar, así como las instalaciones portuarias de todo el mundo. Su objetivo es realizar actividades de transporte marítimo más seguras contra las amenazas del terrorismo, la piratería y el contrabando. La seguridad en el mar ha sido una preocupación para gobiernos, compañías navieras, autoridades portuarias, y exportadores e importadores a lo largo de los años. Los ataques terroristas del 11 de septiembre de 2001, fueron catalizadores para la formalización de nuevas y rigurosas medidas. En diciembre de 2002, la Organización Marítima Internacional (OMI), organización especializada de la Naciones Unidas (UN), realizó una conferencia para discutir temas relacionados con la seguridad en el mar. En este conferencia, los representantes de 150 naciones (los estados miembros), participaron en la redacción de las enmiendas a la Convención Internacional para la Seguridad de la Vida Humana en el Mar (SOLAS, en inglés) y se adoptó el Código PBIP. Los cambios a la Convención SOLAS incluyen enmiendas a los capítulos V y Xi, y el Capítulo XI fue dividido en los Capítulos XI-1 y XI-2. El Código, por su parte, está dividido en dos partes. La Parte A presenta los requisitos obligatorios y la Parte B contiene orientación con respecto a las disposiciones del capítulo XI-2 del Convenio y la Parte A del Código. Reporte disponible (en inglés) en: http://www.un.org/en/sc/ctc/docs/bestpractices/32.pdf

[s2If is_user_logged_in()]

Full review: The Code aims, among other things, to establish an international framework for co-operation between Contracting Governments, government agencies, local administrations and the shipping and port industries to detect security threats and take preventive measures against security incidents affecting ships or port facilities used in international trade and to establish relevant roles and responsibilities at the national and international level. ISPS provisions relating to port facilities relate solely to the ship/port interface. Also, ISPS provisions do not extend to the actual response to attacks or to any necessary clear-up activities after such an attack. In addition, for each ship and port authority affected, the ISPS Code requires:

  • The implementation of a Ship Security Plan (SSP),
  • The implementation of a Port Facility Security Plan (PFSP),
  • The appointment of a Ship Security Officer (SSO),
  • The appointment of a Company Security Officer (CSO),
  • The appointment of a Port Facility Security Officer (PFSO),
  • The installation of ship alarms, and
  • The installation of shipboard Automatic Identification Systems (AIS).

Enforcement Date: The ISPS Code went into effect on July 1, 2004.

Full citation:   Consideration and Adoption of Amendments to the International Convention for the Safety of Life at Sea, 1974, International Maritime Organization. SOLAS/CONF.5/32. 12 December 2002

CORE1097

Keywords: Maritime Security, Port Security, Ship Security Plan (SSP), Port Facility Security Plan (PFSP), Ship Security Officer (SSO), Port Facility Security Officer (PFSO), International Maritime Organization (IMO), Safety of Life at Sea (SOLAS).

[/s2If]

Comentario de “Contribuyendo a la seguridad en el envío de contenedores: ¿pueden los sensores pasivos brindar una solución? G. Janssens-Maenhout, F. De Roob, W. Janssens, Revista de Radioactividad Medioambiental, 2009 (CORE1096)

/0 Comments/in , , , , , , , , , , , , , , , , , /by

Resumen: el tráfico ilícito de material fisionable en carga de contenedores es reconocida como una debilidad potencial en seguridad nuclear. Atenuada por los atentados del 11 de septiembre de 2001, se tomaron medidas para mejorar la seguridad marítima en extensión a la Convención Internacional para la Seguridad de la Vida Humana en el Mar (SOLAS, en inglés) y en línea con las iniciativas de seguridad de contenedores de los Estados Unidos. Las técnicas efectivas de detección son necesarias para permitir que el inspector pueda interceptar el tráfico ilícito de componentes de armas nucleares o componentes de otros dispositivos nucleares explosivos. Reporte disponible (en inglés) en: https://www.researchgate.net/publication/38053693_Contributing_to_shipping_container_security_can_passive_sensors_bring_a_solution

[s2If is_user_logged_in()]

Full review: Many security measures focus on active interrogation of the container content by X-ray scan, which might be extended with the newly developed tagged neutron inspection system. Both active interrogation techniques can, with the current huge volume of container traffic, only be applied to a limited number of selected containers. The question arises whether a passive detection technique can offer an alternative solution.

This study investigates if containers equipped with a small passive detector will register during transport the neutron irradiation by fissionable material such as plutonium in a measurable way. In practice, 4/5 of the containers are about 1/8 filled with hydrogenous material and undergo a typical 2 months route. For this reference case, it was found that the most compatible passive detector would be an activation foil of iridium. Monte-Carlo simulations showed that for the reference case the activity of a 250 μm thin foil with 6 cm2 cross-section would register 1.2 Bq when it is irradiated by a significant quantity of Reactor-Grade PuO2. However this activity drops with almost two orders of magnitude for other fillings and other isotopic compositions and forms of the Pu-source. The procedure of selecting the target material for Pu detection is detailed with the theoretical methods, in order to be useful for other applications. Moreover the value of such additional passive sensors for securing maritime container transport is situated within the global framework of the First, Second and Third Line of Defense against illicit trafficking.

Full citation:   G. Janssens-Maenhout a, F. De Roob, W. Janssens (2009). Contributing to shipping container security: can passive sensors bring a solution?” Journal of Environmental Radioactivity 101(2):95-105 · OCTOBER 2009.

Keywords: Nuclear illicit trafficking, Maritime container transport, Passive detection technique

[/s2If]

Introducción a la Gestión de la Cadena de Suministro (Capítulo 2 Compendio CASSANDRA, CORE2007a)

/0 Comments/in , , , , , , , , , , , , , , , , , , , , , , , , , , , , , /by

Resumen

El segundo capítulo del Compendio CASSANDRA brinda una visión general sobre la teoría y práctica de la gestión moderna de la cadena de suministro. Escrito en un lenguaje común, el texto explica una amplia gama de estrategias para la gestión de cadenas de suministro, desde la gestión eficiente a la logística ágil y de rápida reacción. El capítulo también define terminología fundamental de cadena de suministro y discute las tendencias actuales en la logística, incluyendo la “sincro-modalidad”, el uso de los proveedores de servicios logísticos “4PL” (fourth-party logistics) y la logística verde. El capítulo presenta varios marcos de referencia de la cadena de suministro que ilustran una serie de actividades interdependientes y actores de interés involucrados en el transporte internacional de carga. El compendio CASSANDRA está disponible en(disponible solo en inglés).

Revisión por Toni Männistö (CBRA).

[s2If is_user_logged_in()]

Full review

The compendium summarizes the SCOR and UN/CEFACT supply chain models, that may be the two most used logistics reference frameworks in the world. The document also discusses less known academic conceptual models that seek to simplify the complexity of supply chain management by categorizing and explaining management strategies, activities, stakeholders and their roles and responsibilities. The section on the future trends in logistics offers a great outlook on the most likely changes and driving forces in the logistics industry. The outlook suggests that for example synchromodality (increased flexibility in transport mode selection), green logistics (less emissions), use of 4PL logistics service providers (outsourced supply chain management), and continuously increasing ship and port sizes will reshape the cross-border logistics over the years. The document also explains key CASSANDRA concepts and their impacts on international supply chain management. For instance, the Data Pipeline, a pivotal CASSANDRA concept, seeks to enhance sharing of information across supply chain stakeholders, in particularly from business operators to customs and other border control authorities. Most importantly, the Data Pipeline would allow customs officers to access commercial information, that normally is exchanged only between buyers and sellers, early in the upstream supply chain at the consignment completion point (CCP). This accurate, early commercial information would enable the customs and other border control agencies to assess security and other risks of cargo early on.

All in all, the document provides a crash refresher course on basic and advanced logistics terminology that would be beneficial for many the CORE consortium, especially for those partners whose expertise is mainly outside the logistics industry. The CORE demonstrators benefit from descriptions of CASSANDRA innovations that support information exchange and improve visibility across the supply chain. The demos might choose to reuse some of these CASSANDRA innovations or their components. The CASSANDRA compendium also contains a great deal of material that could be reused for education and training purposes in CORE (WP19). Finally, the chapter concludes with recommendations that are relevant also for CORE. The chapter recommends, for example, that because of broad variety of international supply chains, CASSANDRA solutions should be adaptable for different contexts.

Reference

Hintsa, J. and Uronen, K. (Eds.) (2012), “Common assessment and analysis of risk in global supply chains “, Compendium of FP7-project CASSANDRA, Chapter 2

CORE2007

[/s2If]

Trade and money laundering uncontained (the Economist, May 2014, CORE2006)

/0 Comments/in , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , /by

Summary

International trade is becoming one of the main instruments for cross-border money laundering aside common bank transfers, remittances and cash smuggling. The ”trade-based money laundering” disguises illegal trading as seemingly legitimate commercial transactions. The most common technique is mis-invoicing in which fraudsters undervalue imports or overvalue exports to repatriate ill-gotten money from abroad. For example, official records show that Mexican exports to US are much higher than the US imports from Mexico, a discrepancy that signs fraud by Mexican criminals, most likely drug cartels. In general, the trade-based money laundering offers new financial tools for a broad range of drug traffickers, arms smugglers, corrupt politicians, terrorists and evaders of taxes, duties and capital controls. Review by Toni Männistö (CBRA)

[s2If is_user_logged_in()]

Full review

International trade is becoming one of the main instruments for cross-border money laundering aside common bank transfers, remittances and cash smuggling. The ”trade-based money laundering” disguises illegal trading as seemingly legitimate commercial transactions. The most common technique is mis-invoicing in which fraudsters undervalue imports or overvalue exports to repatriate ill-gotten money from abroad. For example, official records show that Mexican exports to US are much higher than the US imports from Mexico, a discrepancy that signs fraud by Mexican criminals, most likely drug cartels. In general, the trade-based money laundering offers new financial tools for a broad range of drug traffickers, arms smugglers, corrupt politicians, terrorists and evaders of taxes, duties and capital controls.

The new methods for cross-border money laundering and tax evasion concern most CORE demonstrations, especially those involving international cargo movements. The emerging risk of trade-based money laundering calls for new and more effective enforcement of trade transactions. CORE is developing new solutions (e.g., data pipeline and system-based supervision) for capturing and sharing trade information across logistics operators and law enforcement agencies. The new solutions likely improve law enforcement’s capability to detect suspicious trade transactions that may have something to do with the trade-based money laundering. However, building such capability requires IT integration (e.g., interoperability), risk awareness and education and training. CORE consortium addresses these complementary activities in work carried out in risk, IT and educational clusters.

Reference

Trade and money laundering uncontained, the Economist, May 3rd 2014

CORE2006

[/s2If]

Drug trafficking in the Caribbean – the Full circle (the Economist May 2014, CORE2005)

/0 Comments/in , , , , , , , , , , , , , , , , /by

Summary

Anti-drug officials report rising cocaine imports into the US through the Caribbean islands. The officials ascribe the increasing popularity of the Caribbean route to the strengthened enforcement of alternative trafficking routes. The South American cocaine smuggling routes have displaced several times over the years due, and now again the Caribbean route is the same one than traffickers used two decades ago. The new wave of trafficking through is expected to increase violence and undermine anti-corruption efforts in the Caribbean.

The drug traffickers move significant amounts of their cocaine from Colombian coca farms and laboratories to Venezuela by jungle trails, riverboats and small aircraft. From the Venezuelan coast, the contraband is smuggled to Caribbean islands by speedboats, planes, sometimes hidden inside commercial cargo. The cocaine traffickers use then yachts, mules, cruise ships, fast boats and commercial cargo vessels to smuggle the illegal drugs into the US and Europe. The new wave of trafficking through is expected to increase violence and undermine anti-corruption efforts in the Caribbean. Review by Toni Männistö (CBRA)

[s2If is_user_logged_in()]

Full review

Anti-drug officials report rising cocaine imports into the US through the Caribbean islands. The officials ascribe the increasing popularity of the Caribbean route strengthened law enforcement of alternative trafficking routes. Because traffickers prefer smuggling routes that offer the highest profit-to-risk ratios, the South American cocaine smuggling networks are evolving constantly. Routes have displaced several times over the years, and now the route is again the same than two decades ago.

Today, traffickers move again significant amounts of their cocaine from Colombian coca farms and laboratories to Venezuela by jungle trails, riverboats and small aircraft. From the Venezuelan coast, the contraband is smuggled to Caribbean islands by speedboats, planes and sometimes hidden inside commercial cargo. The cocaine traffickers use then yachts, mules, cruise ships, fast boats and commercial cargo vessels to smuggle the illegal drugs into the US and Europe.  The new wave of trafficking through is expected to increase violence and undermine anti-corruption efforts in the Caribbean. The new wave of trafficking through is expected to increase violence and undermine anti-corruption efforts in the Caribbean.

Trends of international drug trafficking often influence intensity of law enforcement efforts in global supply chains. Thus, changes in South American drug trafficking may affect also the two CORE trade lanes that import goods from the region into Europe, (1) imports of fresh cut flowers from Colombia to the Netherlands (WP11) and (2) imports of coffee and cocoa beans from South America to Europe (WP13). These trade lanes may become subject to more intense anti-drug controls over the following years. Besides the CORE demo cluster, also the CORE risk cluster benefit from the insight this article provides on the recent trends in routes, volumes and methods of the South American drug trafficking. This information may be useful for CORE’s activities that are developing educational and training material.

Reference

Drug trafficking in the Caribbean – the Full circle, the Economist, May 24th 2014

CORE2005

[/s2If]

Resolución de Punta Cana, Resolución de la Comisión de Políticas de la Organización Mundial de Aduanas sobre el papel de la aduana en el contexto de la seguridad, OMA 2015 (CORE2004)

/0 Comments/in , , , , , , , , , , , , /by

La nueva Resolución de Punta Cana establece directrices para los roles de seguridad de las aduanas en la lucha contra la nueva ola de terrorismo, tal como se manifiesta en los recientes ataques a Túnez, Turquía, Líbano, Francia y Malí. La Resolución destaca que las autoridades de aduanas son usualmente la primera línea de defensa contra el crimen transnacional, el terrorismo y el extremismo: las aduanas controlan los movimientos transfronterizos de personas, mercancías, dinero y medios de trasporte, y por lo tanto, protegen a las comunidades contra terroristas que pueden utilizar la cadena internacional de suministros para movilizar materiales, fondos u operativos a través de las fronteras. Sobre la base de los instrumentos y acuerdos anteriores de la OMA, especialmente del Programa de Seguridad de la OMA, la Resolución de Punta Cana es el plan de acción de la comunidad aduanera, y con la promesa renovada de solidaridad que ofrece un fondo diplomático para otras actividades antiterroristas. Más información en: http://www.wcoomd.org/en/media/newsroom/2015/december/wco-issues-the-punta-cana-resolution.aspx

[s2If is_user_logged_in()]

Full review

The new Punta Cana Resolution sets guidelines for customs’ security roles in the combat against the new wave of terrorism, as manifested by recent attacks in Tunisia, Turkey, Lebanon, France and Mali. The resolution highlights that the customs authorities are typically the first line of defense against transnational crime, terrorism and extremism: the customs control cross-border movements of people, cargo, money and modes of transport and thus protect communities against terrorists that may exploit international supply chains to move materials, funds or operatives across borders. Building on the previous WCO instruments and agreements, especially on the WCO Security Programme, the Punta Cana resolution is the customs community’s action plan and renewed pledge of solidarity that provides a diplomatic backdrop for further counterterrorism activities.

The Punta Cana resolution encourages customs administrations worldwide to intensify collaboration within the customs community and with other border control agencies, both domestically and internationally. In case of missing or obsolete counter-terrorism strategy, the resolution urges customs to add new security roles in their mandates and activities. The Punta Cana document also recommends customs to pay close regard to the WCO’s previous agreements and instruments, such as the WCO Compliance and Enforcement Package, SAFE Framework of Standards and the WCO Security Programme. At more practical level, the resolution promotes the use of the full range of modern detection and investigation techniques, especially advance risk profiling on the basis of Advance Passenger Information (API) and Passenger Name Record (PNR). The resolution also calls governments from around the world to provide necessary financial and human support so that their national customs administrations can contribute towards the goals of the WCO Security Programme.

The Punta Cana Resolution informs CORE consortium about the changing risk landscape where the threat of transnational terrorism is high again. The Resolution also reminds the CORE’s risk cluster of the three cornerstones of effective border security management: collaboration, technology and human resources. The Punta Cana document also gives an overlook on the customs’ security priorities over the following years. For example, the global customs community will likely invest a great deal of time and money to develop new risk profiling systems that tap into new data sources such as the Advance Passenger Information (API) and Passenger Name Record (PNR). The same trend towards better risk profiling is likely to define also the future cargo security efforts at the borders.

Reference: WCO, 2015. Punta Cana Resolution, Resolution of the Policy Commission of the World Customs Organization on the Role of Customs in the Security Context.

CORE2004
[/s2If]

Revisión COM (2014) 527 Estrategia de la UE y el Plan de Acción para la Gestión del Riesgo de Aduanas (CORE1028).

/0 Comments/in /by

Resumen: La presente comunicación propone una estrategia para mejorar las gestiones de riesgos en aduanas y la seguridad de la cadena de suministro («la estrategia») y una tabla de acciones prioritarias («plan de acción»). Los archivos originales están codificados como CORE1028, en la biblioteca electrónica CORE.

Revisión COM (2012) 793 Gestión de Riesgos de Aduanas y Seguridad de la Cadena de Suministro. (CORE1001)

/0 Comments/in /by

Resumen: El objetivo de esta comunicación es para: (i) examinar la aplicación de la política de gestión del riesgo en aduanas; (ii) proponer un enfoque estratégico para los próximos años; (iii) hacer recomendaciones para la acción con un enfoque en el despliegue eficiente de los recursos. La gestión de riesgos efectiva de la circulación de mercancías a través de la cadena de suministro internacional es fundamental para la seguridad  y esencial para facilitar el comercio legítimo y proteger el interés financiero y económico de la UE y de sus Estados miembros. Hay retos críticos que deben abordarse y éstos no se pueden resolver de manera suficiente por los Estados miembros, sino que requieren acción de la UE para complementar y reforzar los esfuerzos realizados a nivel nacional. Relevante para todos los CORE, y específicamente para las cuestiones aduaneras, por ejemplo, Demostrador  WP14 FALACUS- FAstLAne through CUStom. Codificación en la biblioteca electrónica CORE es CORE1001

Informe en el reporte FP7-Eurosky (CORE3009a)

/0 Comments/in /by

Resumen: Esta referencia en la revisión del proyecto se centra en FP7-Eurosky. El autor de la revisión es Konstantinos Vasileiou, ILS. Los archivos originales se codifican como CORE3009a, en la biblioteca electrónica CORE. Más información sobre el proyecto en: http://www.euroskyproject.eu/
Read more