C.A.R.V.E.R. Vulnerability Assesment Training

Why C.A.R.V.E.R. Vulnerability Assesments?

In today’s uncertain world, private businesses, and government entities, need to understand their vulnerabilities to the potential threats against them. These threats may come in the form of Criminals, Terrorists, or even Natural Disasters. HITAC can offer comprehensive Vulnerability Assessments, Target Analysis, and Threat Assessment training. Often clients will actually save money by more efficiently utilizing mitigation procedures suggested after the Vulnerability Assessment process. HITAC will work with your personnel to train them to be able to complete vulnerability assessments using the C.A.R.V.E.R. Methodology. This will assist your personnel in finding realistic mitigation techniques and procedures based on your unique logistical and budgetary constraints.

After 09-11-01 it has been widely recognized that the pre-planning by private security officials saved many thousands of lives in the Twin Towers, and in the aftermath of Katrina we should all recognize the limitations of government to “come to our rescue” especially in the short term. Your facility and the people who work, shop or study there are your responsibility, let HITAC help you train your personnel to assess your individual organization’s vulnerabilities and develop solutions that you can live with.

Our team members are trained in C.A.R.V.E.R. the most widely accepted Vulnerability Assessment methodology available. We have team members with a wide variety of expertise that can be utilized depending on your specific needs. The below is a short description of the C.A.R.V.E.R. methodology.

CARVER Methodology

CARVER is an offensive target assessment tool originally developed for use by the U.S. military in evaluating the vulnerabilities of enemy targets, and determining how best to exploit those vulnerabilities. The same methodology can and is used to assess the likelihood of attack of Critical Infrastructure/Key Resource (CI/KR).

CARVER is a unique analytical tool because it facilitates both a qualitative and a quantitative assessment of a target's vulnerabilities. Most assessment tools are limited to qualitative assessments. A quantitative assessment assists in highlighting vulnerabilities and prioritizing remedial efforts.

CARVER is an acronym for the following criteria:

• Criticality - Single points of failure, Degree of importance to the system
• Accessibility - Ease of access, (Security System Effectiveness)
• Recoverability - The time and effort to recover system operation after an adverse event.
• Vulnerability - Level of exposure to attack based on adversary capability
• Effect - Scope and magnitude of adverse consequences that would result from malicious actions
• Recognizability- Ability of an adversary to recognize a target as a target

CARVER selection factors will assist you in determining which assets or components of your assets would be most attractive to attack.

As each of the criteria is evaluated they are given a numerical value. The sum of the value's providing an overall risk value for that asset.

C.A.R.V.E.R. Course Terminal Objective: Prepare Participants to complete C.A.R.V.E.R. Vulnerability Assessments as part of an overall Vulnerability Assessment program for private and governmental security programs.

Day one:

• Introduction and Administrative Issues
• Overview of the Threat Assessment and Vulnerability Assessment Process
• Introduction to C.A.R.V.E.R.
• Introduction to Target Analysis
• Design Basis Threats and Conducting a Threat Assessment

Day two:

• Introduction to Vulnerability Assessments
• Security System Effectiveness
• Table Top Exercise, Example:

Day Three:

• Brief and Practical Exercise Preparation
• Exercise Site Visitation
• Team Presentations