July 2019 AST Magazine AST July 2019 Magazine | Page 70

To www.AmericanSecurityToday.com summarize, CAIRA quantifiably mea- sures vulnerability and risk, prioritizes recommended countermeasures, pri- oritizes facilities, and compares cost and countermeasure effectiveness. The performance of July CAIRA not driv- 2019 is - Edition 35 en by regulation or design standards; therefore, the Design Basis Threats (DBT) must be identified before cost- effective recommendations can be gen- erated. HSS works with the customer to iden- tify Single-Point Failures and other critical assets or processes within the organization. Unlike standard vulnerability assessments, CAIRA quantifies risks and vulnerabilities, determines the cost effectiveness of specific improvements, and helps prioritize countermeasures. Most importantly, CAIRA lets the customer know how vulner- able the asset is, what to do to reduce the vulnerability, how effective the rec- ommendations will be in reducing the vulnerability, and at what cost. Regardless of the type of analysis or Typical CAIRA (Critical Asset and Infrastruc- study, the resulting recommendations ture Risk Analysis) Risk Reduction Charts need to be based on a given hazards. 68