Risk assessment methodology for electric power transmission, RAM-TSM

RAM-T^SM includes both a methodology and a training program for assessing the security risk for high voltage power transmission systems. The methodology is based on the traditional risk equation: (Likelihood of Attack) * (Consequence) * (1-System Effectiveness) = Risk. A screening method is provided to help owners/operators prioritize their facilities and decide which require a full security risk assessment and warrant the expenditure of resources to perform it. The assessment process begins with a characterization of the facility including identification of the undesired events and the respective critical assets. Guidance for defining a design basis threat is included, as well as for using the definition of the threat together with the attractiveness of the target to estimate the likelihood of adversary attack at a specific facility. Relative values of consequence are estimated. Methods are also included for estimating the effectiveness of the security system against the adversary attack. Finally, relative risk is calculated. In the event that the value of risk is deemed to be unacceptable (too high), the methodology addresses a process for identifying and evaluating system upgrades in order to reduce risk. Upgrades include improving protection system effectiveness and/or mitigating consequences in order to reduce risk.