This report presents best practices in risk assessment; challenges in implementing the National Critical Function (NCF) risk assessment framework to characterize risk that the coronavirus disease 2019 (COVID-19) pandemic poses to critical infrastructure; recommendations for improving the framework; and suggestions for further characterizing NCFs' interdependence, vulnerability, and geographic variation to improve risk assessment processes.

A Risk Assessment of National Critical Functions During COVID-19

Challenges and Opportunities

Andrew Lauland, Benjamin Lee Preston, Kristin J. Leuschner, Michelle E. Miro, Liam Regan, Scott R. Stephenson, Rachel Steratore, Aaron Strong, Jonathan W. Welburn, Jeffrey B. Wenger

ResearchPublished Apr 26, 2022

The Homeland Security Operational Analysis Center (HSOAC) was tasked with using the National Risk Management Center's (NRMC's) National Critical Function (NCF) risk assessment framework to assess risk to each NCF and complete individual risk analyses for the 55 NCFs. The NRMC also requested that HSOAC perform additional tasks, including providing a report on emerging lessons learned from risk management efforts to limit the impact and disruption that coronavirus disease 2019 (COVID-19) had on the 55 NCFs.

This report presents insights into best practices in risk assessment; challenges in the implementation of the NCF risk assessment framework to characterize risk to critical infrastructure associated with the COVID-19 pandemic; recommendations for improving the framework; and suggestions for further characterization of NCFs' interdependence, vulnerability, and geographic variation that could improve risk assessment processes.

Key Finding

  • Challenges in implementing the framework include persistently high risk ratings, difficulty in assessing risk to some NCFs in isolation from other NCFs, separating out national from regional impacts, and identifying NCFs that are especially vulnerable to disruption from COVID-19.

Recommendations

  • Recommendations for improving the framework in future iterations include opportunities to review and refine the drivers of risk examined, the indicators used to monitor risk, and the time scale used in assessing risk. The NRMC might also consider stress-testing the framework against other potential threats.
  • Future risk assessments can also be enhanced through a better understanding of interdependence, vulnerability, and geographic variation among NCFs. Finally, the NRMC might consider opportunities to enhance dissemination by documenting successful mitigation activities and improving the two-way flow of risk information for different audiences.

Topics

Document Details

Citation

RAND Style Manual
Lauland, Andrew, Benjamin Lee Preston, Kristin J. Leuschner, Michelle E. Miro, Liam Regan, Scott R. Stephenson, Rachel Steratore, Aaron Strong, Jonathan W. Welburn, and Jeffrey B. Wenger, A Risk Assessment of National Critical Functions During COVID-19: Challenges and Opportunities, Homeland Security Operational Analysis Center operated by the RAND Corporation, RR-A210-1, 2022. As of September 11, 2024: https://www.rand.org/pubs/research_reports/RRA210-1.html
Chicago Manual of Style
Lauland, Andrew, Benjamin Lee Preston, Kristin J. Leuschner, Michelle E. Miro, Liam Regan, Scott R. Stephenson, Rachel Steratore, Aaron Strong, Jonathan W. Welburn, and Jeffrey B. Wenger, A Risk Assessment of National Critical Functions During COVID-19: Challenges and Opportunities. Homeland Security Operational Analysis Center operated by the RAND Corporation, 2022. https://www.rand.org/pubs/research_reports/RRA210-1.html.
BibTeX RIS

Research conducted by

This research was sponsored by the National Risk Management Center in the Cybersecurity and Infrastructure Security Agency at the U.S. Department of Homeland Security (DHS) and conducted within the Strategy, Policy and Operations Program of the Homeland Security Operational Analysis Center (HSOAC).

This publication is part of the RAND research report series. Research reports present research findings and objective analysis that address the challenges facing the public and private sectors. All RAND research reports undergo rigorous peer review to ensure high standards for research quality and objectivity.

RAND is a nonprofit institution that helps improve policy and decisionmaking through research and analysis. RAND's publications do not necessarily reflect the opinions of its research clients and sponsors.