Laserfiche WebLink
An Agency "CRITICAL ASSET IDENTIFICATION AND ANALYSIS" is found <br />in the section of this document entitled SECURITY PLAN SUPPORTING <br />DOCUMENTS at SECTION 7.3. <br />• Information — Employee and customer information, computer network configurations and <br />passwords, ridership, revenue and service statistics, operating and maintenance procedures, <br />vehicle identification systems <br />• Property — Revenue vehicles, non -revenue vehicles, storage facilities, passenger facilities, <br />maintenance facilities and equipment, administrative offices, computer systems and <br />communications equipment <br />Assets are critical when their loss either endangers human life or impacts the Cabarrus County <br />Transportation Service's ability to maintain service. In reviewing assets, the transportation <br />system has prioritized which among them has the greatest consequences for the ability of the <br />system to sustain service. These critical assets may require higher or special protection. <br />Asset Analysis <br />In identifying and analyzing critical assets for the entire system, under the full range of <br />operational conditions, a simple process called "asset criticality valuation" has been performed <br />by Cabarrus County Transportation Service. This process helped Cabarrus County <br />Transportation Service management to prioritize the allocation of limited resources for <br />protecting the most vital elements of its operation. In this asset analysis Cabarrus County <br />Transportation Service considered the following: <br />• Criticality to mission <br />• Asset replacement cost <br />• Severity of impact on public health and safety <br />• Impact on other assets including intangibles such as public trust and employee morale <br />For those assets that are mission -critical, steps are taken for risk avoidance (i.e. stop the activity <br />altogether), risk retention (e.g. accept the risk but take steps to reduce the likelihood or impact <br />of an incident) and risk transference (e.g. have someone else, like an insurer, assume the risk). <br />2.2b. — THREAT AND VULNERABILITY ANALYSIS <br />A threat is any action with the potential to cause harm in the form of death, injury, destruction of <br />property, interruption of operations, or denial of services. Cabarrus County Transportation <br />Service threats include accidents and incidents, hazardous materials, fires, acts of nature, or any <br />event that could be perpetrated by criminals, disgruntled employees, or terrorists. <br />Threat analysis defines the level or degree of the threats by evaluating the probability and impact <br />of the threat. The process involves gathering historical data about threatening events and <br />Attachment number 5 \n <br />F-5 Page 318 <br />