API SECURITY VULNERABILITY ASSESSMENT : 2004

CHAPTER 1 - INTRODUCTION
  1.1 INTRODUCTION TO SECURITY VULNERABILITY ASSESSMENT
  1.2 OBJECTIVES, INTENDED AUDIENCE AND SCOPE OF THE GUIDANCE
  1.3 SECURITY VULNERABILITY ASSESSMENT AND SECURITY MANAGEMENT
       PRINCIPLES
CHAPTER 2 - SECURITY VULNERABILITY ASSESSMENT CONCEPTS
  2.1 INTRODUCTION TO SVA TERMS
  2.2 RISK DEFINITION FOR SVA
  2.3 CONSEQUENCES
  2.4 ASSET ATTRACTIVENESS
  2.5 THREAT
  2.6 VULNERABILITY
  2.7 SVA APPROACH
  2.8 CHARACTERISTICS OF A SOUND SVA APPROACH
  2.9 SVA STRENGTHS AND LIMITATIONS
  2.10 RECOMMENDED TIMES FOR CONDUCTING AND REVIEWING THE SVA
  2.11 VALIDATION AND PRIORITIZATION OF RISKS
  2.12 RISK SCREENING
CHAPTER 3 - SECURITY VULNERABILITY ASSESSMENT METHODOLOGY
  3.1 OVERVIEW OF THE SVA METHODOLOGY
  3.2 SVA METHODOLOGY
  3.3 STEP 1: ASSETS CHARACTERIZATION
  3.4 STEP 2: THREAT ASSESSMENT
  3.5 SVA STEP 3: VULNERABILITY ANALYSIS
  3.6 STEP 4: RISK ANALYSIS/RANKING
  3.7 STEP 5: IDENTIFY COUNTERMEASURES:
  3.8 FOLLOW-UP TO THE SVA
ATTACHMENT 1 - EXAMPLE SVA METHODOLOGY FORMS
ABBREVIATIONS AND ACRONYMS
APPENDIX A - SVA SUPPORTING DATA REQUIREMENTS
APPENDIX B - SVA COUNTERMEASURES CHECKLIST
APPENDIX C - SVA INTERDEPENDENCIES AND INFRASTRUCTURE CHECKLIST
APPENDIX C1 - REFINERY SVA EXAMPLE
APPENDIX C2 - PIPELINE SVA EXAMPLE
APPENDIX C3 - TRUCK TRANSPORTATION SVA EXAMPLE
APPENDIX C4 - RAIL TRANSPORTATION SVA EXAMPLE
References

Provides guidelines on identifying and analyzing the threats and the vulnerabilities facing a facility by conducting a Security Vulnerability Assessment (SVA).