In Depth
Pinpointing the Terror Risk
The driving force behind the Customs-Trade Partnership Against Terrorism (C-TPAT) is the idea that it is possible for private companies to risk-manage for a onetime terrorist event.
By Ben Worthen
April 01, 2006 — CSO —
The driving force behind the Customs-Trade Partnership Against Terrorism (C-TPAT) is the idea that it is possible for private companies to risk-manage for a onetime terrorist event. With the right information about the supply chain and the full cooperation of companies, it will be possible to prevent a terrorist attack, states former U.S. Customs and Border Protection Commissioner Robert Bonner.
But Stephen Flynn, a national security expert with the Council on Foreign Relations, says that the private sector doesn't design security systems to prevent events. Instead, companies set up trip wires at vulnerable points and wait until they detect an intrusion. Then they respond.
"No one has failproof security," says Flynn. "I can give a truck driver more money than he will ever see again in his life and tell him he needs to go to lunch for three hours."
While Flynn thinks that C-TPAT is a good program, he believes it should only be part of a broader solution. Instead of focusing solely on preventing an attack, he argues that Customs should plan how to respond to and recover from one. Flynn advocates equipping ports with drive-through X-ray, radiation and gamma ray scanners. These might help prevent an attack, and scanners could help investigators pinpoint the exact time and place where a bomb was slipped into a container. Knowing exactly where in the system the weakness is might allow the rest of the system to carry on normally and avoid a nationwide shutdown.
$firstKeyword
Security Directions: A Virtual Conference
Available On Demand Sept. 30 - Dec. 30
Join us for a virtual event with candid, expert information on top security challenges and issues - all from the comfort of your desktop.
Protecting PII: How to Work with IT to Manage Risk
Understand the critical nature of the test data privacy problem and get tips on how to work with IT to implement a test data privacy program.



