Addressing Consequence within Operational Risk: An Approach for Understanding an Organization's Unique Infrastructure Environment

The endeavor of tackling operational risk focused on consequences is challenging even for the most resourced entity but can be advanced through a simplified approach: identifying, binning, and prioritizing the infrastructure environment. While no two entities within a single element of the 16 critical infrastructure sectors are exactly alike when it comes to risk, there is a basic process to move toward a greater understanding of operational risk by becoming more informed about the infrastructure landscape in which the entity exists. The process starts with bringing internal and external stakeholders and subject matter experts together to analyze key areas such as Information Technology (IT) and Operational Technology (OT) components and points of convergence, analyzing internal and external cyber and physical dependencies, accounting for explosive growth in devices and wireless technology, and leveraging the contributions of people inside and outside the operational environment. Attaining a common understanding of the infrastructure landscape as part of addressing consequences within operational risk is not easy to do or resource-light, but the process outlined provides the framework to further any entity's efforts in this space.

Mr. Gagnon is the Strategic Advisor, Critical Infrastructure Security and Resilience in the National & Homeland Security (N&HS) directorate at Idaho National Laboratory (INL). He serves as the Senior Homeland Security Advisor and primary representative for U.S. Department of Homeland Security (DHS) efforts. N&HS supports the U.S. DHS operational and support components, and other federal agencies by providing unique capabilities to complex homeland security challenges. The DHS portfolio at INL is diverse and over $166 million annually. This portfolio includes control systems security, infrastructure analysis and technology development, workforce development, and lifeline infrastructure resilience. Mr. Gagnon serves on the INL Resilience Optimization Center Strategic Advisory Group. Prior to his current position, Mr. Gagnon was appointed by DHS as the first Protective Security Advisor in Tampa, Florida on March 21, 2005. In this capacity, he supported the development of the national risk picture by identifying, assessing, monitoring, and minimizing the risk to critical infrastructure at the national, regional, State, and local levels. For almost 14 years, Mr. Gagnon's steady-state, special event, and domestic incident infrastructure security and resilience efforts, in concert with public and private sector decision-making leadership, directly enhanced the safety and security of the over 20 million residents of the nation's third most populated state. Mr. Gagnon has traveled worldwide on behalf of the Department of Defense - Defense Threat Reduction Agency conducting comprehensive assessments of critical infrastructure complexes, facilities, and systems. He also served in the United States Air Force for over 22 years in various physical security, law enforcement, and training positions. In his final military assignment, Mr. Gagnon exercised security decision-making authority, affecting the protection of the President of the United States as the Chief, Presidential Aircraft Security. In this position, he personally directed security aboard Air Force One during 200 trips transiting all 50 states and 65 countries in support of President William J. Clinton and President George W. Bush. Mr. Gagnon received a Bachelor of Science Degree in Occupational Education, Summa Cum Laude, from Southern Illinois University, a Master of Arts Degree in Human Resources Development from Webster University, and a Post Master’s Certificate (Doctoral Studies) in Homeland Security Leadership & Policy from Northcentral University. He also holds Graduate Certificates in Security Management from Michigan State University, Project Management from Western Carolina University, and Public Leadership from the Olin Business School, Washington University in St. Louis. Mr. Gagnon was a Senior Executive Fellow, January 2016 Cohort, Harvard University, John F. Kennedy School of Government, and completed the Brookings Institution’s Executive Leadership for America program. He is nationally board-certified as a Certified Information Systems Security Professional (CISSP), Certified Protection Professional (CPP), and Physical Security Professional (PSP).