Short clip: SFO's security strategy

>> Let's talk about security, because that's obviously been a big issue since 9-11 and just the airport being a critical infrastructure. So what kind of disaster planning, catastrophe planning do you have in place?

>> We have, break those into two different very, very important areas, so security is one and then disaster recovery is another. Clearly San Francisco, based on the anniversary of the 1906 earthquake has a major initiative across all city agencies to ensure that we can continue to operate in the event of a major earthquake or a man-made disaster, like the terrorist attack. And so we've put a lot of effort into figuring out how to deal with the unthinkable. And we have multiple data centers in zone 4 earthquake-proof buildings. We have offsite capabilities when it comes to moving technology and keeping the airport running. And one of the biggest challenges in business presumption planning is sitting down with your business managers and figuring out what are the scenarios that you want to plan and budget for? So it's an ongoing effort that we go through and identify what are mission critical systems and to what extent do we want to spend and prepare for certain kinds of disasters, what systems truly need to be up and what don't. And as we think and talk about this, the primary responsibility in a catastrophic event is pure communications.

>> So, what is your responsibility and involvement in the day-to-day security for the airport?

>> We get inundated, like everybody, with spam, so that falls under my security group's domain. We also deal with attacks. We have hacker attacks on our servers. We also have situations where emails and notifications will come to us overseas declaring that bad event will happen at the airport itself and the TSA or the DHS will contact us and ask us to try to help isolate where that came from and then provide that information back to them so they can track it down. So it's a fairly active involvement in cyber security on an ongoing basis. We also perform audits on our network every two to three years to ensure that they're trying to, we can afford to do best practice.

==== Transcribed by Automatic Sync Technologies ====