The research team developed the Transportation Network Resilience Awareness Challenge to help transportation agencies build capacity in resilience planning. The challenge aims to improve organizational capacity by introducing key information about different aspects of resilience planning. It also provides individuals with a common language as a starting point for discussion among various stakeholders in their economic sector or geographic region.
The goal of developing the challenge was to create a portable training application that could be customized to address a range of vulnerabilities without a significant investment. Based on earlier case studies and focus areas proposed by the NCHRP Project 20-125 panel, the team selected three module topics:
The traditional approach for climate-vulnerable communities to improve resilience has involved vulnerability assessments using climate modeling tools, investing in strengthening the most vulnerable critical infrastructure and documenting policies and procedures for disaster response and recovery. Agency-sponsored workshops and simulation exercises have also been popular to engage interdependent partners and develop instinctive reactions through practice about what to do when a disruption occurs. In short, most climate-focused resilience training is highly customized, in-person and on-site, and requires a significant investment of time and resources by the host agency.
In contrast, the U.S. Department of Defense (DOD) has been managing and addressing attacks on data networks since George Washington established the first spy network in colonial America. Today, anyone wishing to work with or for the DOD is required to complete data security training. The current version of this training is called Cyber Challenge 2022.83 The Transportation Network Resilience Awareness Challenge follows the DOD’s example in being portable and relevant to organizational missions.
Packaged as the Transportation Network Resilience Awareness Challenge, each module was designed to introduce information about transportation network resiliency and provide resources to state and local agencies as well as their stakeholders. The development of the materials followed the process used by the National Highway Institute for developing instructor-led training courses. Before populating the three slide decks with content, an outline of each proposed module was presented in a preliminary lesson plan (PLP). The following text box and table provide examples from the PLPs presented to the project panel for approval.
The following figures and exhibits provide examples from the PLP assembled for each module and presented to the NCHRP Project 20-125 panel. Figure D.1 provides an example of the PLP introduction discussing the module learning objectives, methods, and target audience. Figure D.2 provides a one-page summary of the module content, timing, and presentation method. A storyboard using PowerPoint slides is presented in Figure D.3.
Once the PLP and proposed module storyboards were approved, the research team began to populate the PowerPoint slide decks with content.
When the draft modules were assembled, the team reached out to the following organizations and individuals for feedback on the draft content, requested consideration of recording expert video content, and solicited help in distributing the Transportation Network Resilience Awareness Challenge modules to potential pilot participants:
With feedback from these organizations and individuals, the final content for each module was completed. Microsoft PowerPoint (MS PPT) was chosen as the primary software due to its widespread use and versatility.
It was decided each slide would be narrated to make the slide decks as user-friendly as possible. A self-narrated recording proved to be more challenging than initially assumed. Therefore, detailed notes for each slide were converted to an audible narration using an inexpensive voiceover software called Speechelo Videos from private industry. Other topical experts were recorded using another off-the-shelf video software called Vouch. With the embedded audio and video files, each MS PPT module file grew quite large, with some files approaching 200 MB.
To address the file size issue, the presentations, complete with audio and video files, were uploaded to a web-based training application called TalentLMS. TalentLMS allowed the MS PPT files to be broken into logical sub-elements and stitched the submodules into one video file. The TalentLMS environment also tracks users, tallies survey and quiz responses, and improves portability by eliminating the need to transfer or download large files resulting from embedded audio and video.
Organizations that wish to customize the modules can easily revise the base MS PPT slide deck content, modify the narration notes, and use the same or similar software packages to create custom training modules.
Once the three modules were posted on TalentLMS, the links to the modules were distributed to various organizations and mailing lists, including AASHTO’s resiliency committee and ITS America. A particular emphasis was put on soliciting input from the maritime sector through the American Association of Port Authorities’ facility and security committees and the TRB Ports and Channels Committee. Stakeholders from these groups were invited to take the Transportation Network Resilience Awareness Challenge through individual emails. This first email was followed up 10 days later with an email requesting their participation in this research.
Based on the NCHRP Project 20-125 panel’s input, direct contact was made with the Port of San Diego and Port of Bremerton to participate in the Transportation Network Resilience Awareness Challenge. In addition, an email distribution list was created from select members of the TRB resiliency committees.
Two of the three regional locations (Flagstaff and Atlanta) distributed the Transportation Network Resilience Awareness Challenge to their stakeholders.
All participants who completed at least one of the three modules were invited to participate in providing feedback either through a survey or a focus group. The summary of the focus groups can be found in Appendix D.2.
Videos of the modules are available at https://vimeo.com/showcase/10741790, or by searching the National Academies Press website (nap.nationalacademies.org) for NCHRP Research Report 1118: Incorporating Resilience into Transportation Networks.
Facilitator(s): Jeannie Beckett/David Proffitt
Recorder: David Proffitt
Participants: (This should be pre-populated if possible)
| Name | Organization |
|---|---|
| 1. David Wessel | Metro Plan (Flagstaff MPO) |
| 2. Elizabeth “Bizzie” Collins | Mountain Line Transit |
| 3. Barney H. | Flagstaff Pulliam Airport |
| 4. Jennifer O’Connor | Northern Arizona Council of Governments |
| 5. | |
| 6. | |
| 7. | |
| 8. | |
| 9. | |
| 10. |
Facilitators may distribute the participant handout via email prior to the virtual meeting. The purpose of the handout is to help participants record their thoughts, especially thoughts they may not get a chance to express verbally due to time limitations.
Ask participants to email their worksheets at the end of the session to: kate.beasley@quetica.com
Approximate Timing (1 hour total)
Questions 1–3: 15 minutes total
Questions 3–6: 10 minutes each
5 minutes to wrap up and summarize the discussion
Recorders should help facilitators keep track of time and indicate when they have used up the time allotted for each question.
Facilitator: First, thank you for taking the time to try the resilience challenge, and meeting with us today. To begin, I would like to quickly go around the virtual room for brief introductions. Can you please state your name, organization, and a bit about your role?
Q 1: Ok great. To begin with, how many of you completed all three modules? Two?
One? Which modules did you complete? Indicate the number that completed each module.
| Infrastructure Module | Cybersecurity Module | ||
| Supply Chain Module |
David W had not completed any of the modules before the focus group. Jennifer and Elizabeth had both completed parts of the infrastructure and supply chain modules. Barney arrived late so was not asked the question formally, but he referred to the supply chain and cybersecurity modules in the conversation.
Q2: What was your impression? Did you like the online environment? Was it easy to use? Do you have any suggestions of how it could be better? And I know those are three questions, so you can take any of those in any order.
Q3: Following up on the comment that resilience is already in your lifestyle or in your professional spectrum. Did you find that you learned anything new or was it all old stuff compared to your professional development level?
Q4: What kind of information would be most helpful in training like this? Regardless of whether you saw it or not in the current resilience challenge incarnation, was there something that you found yourself looking for that you didn’t see or something that you hope to see?
A question for the MPO and the COG: Do you see resiliency planning as part of your charter? Or because you don’t own assets, you are a planning organization, but you don’t own any assets. Are you more of an advocate or a champion for your agencies that are part of your membership to have their own resiliency plan, or would you see that a COG or an MPO would have one itself?
We were just having a conversation basically for the MPO/COG participants on their opinions on whether they need a resiliency plan or whether they were more of a champion or advocate for their members to develop such a plan. So as an expert employee that had airport connections and clients that have airports, I’m pretty sure you have some kind of plan. It may not be called a resiliency plan. It may be called a continuation of operations. It may be business continuity, but I would be surprised if you said “No, we don’t have a plan.”
Jeannie: So, when COVID hit, did your emergency plan have a section that you were able to use for COVID, or did you have to make that up on the fly?
Q5: What is the level of regional coordination about resilience? And how much recognition is there about some of the interdependencies between the airport, the transit system, and the transportation system in Flagstaff to some of the other areas outside the metro area up into NACOG territory, whether there are plans or not? How much do you all think you should talk to each other and what would you need to help build those conversations or build recognition of those interdependencies?
Let’s explore this nonemergency aspect a little bit. Who are the people that you regularly talk to—or feel like you should regularly talk to—in terms of economic development or other kinds of social needs? Another way to think about that is, who are the stakeholders or audiences that your resilience planning really has to work for and benefit?
Q6: Are there certain types of information or other kinds of tools that might help you and your organizations coordinate better or help you prepare for disruptions to the broader transportation network and how that might affect you?
A key takeaway from this focus group relates to the idea that resilience is a more mature capability for many firms in the private sector, especially for large firms dealing with complex supply chains or transportation operations. An emergency management professional noted that for Class 1 railroads, dealing with disruptions is an almost daily occurrence, and advanced planning and training gives them the ability to address almost any form of operational disruption. It was suggested that even though the private sector may be ahead of the public sector in their ability to plan for and adapt to disruptions, the public sector has different priorities. To make resilience of value to everyone, public transportation agencies must remain open and inclusive, establish lines of communication for when disruptions do occur, and provide relevant information of value to everyone in the community. It was described as a constant effort to normalize relationships and communications with partners and members of the community.
Participants of this focus group also noted several improvements that could be made to the resilience challenge modules to make them more useful and relevant, including a checklist at the end of each module covering actions that should be considered during each phase of the resilience cycle.
Facilitator(s): Mark Berndt/Jeannie Beckett
Recorder: Mark Berndt
Participants: (This should be pre-populated if possible)
| Name | Organization |
|---|---|
| 1. Ann Schneider | Ann Schneider Associates (Former DOT Secretary/former National Freight Advisory Committee Chair) |
| 2. Joaquin Mixco | Utah DOT Emergency Manager |
| 3. | |
| 4. | |
| 5. | |
| 6. | |
| 7. | |
| 8. | |
| 9. |
Facilitators may distribute the participant handout via email prior to the virtual meeting. The purpose of the handout is to help participants record their thoughts, especially thoughts they may not get a chance to express verbally due to time limitations.
Ask participants to email their worksheets at the end of the session to: kate.beasley@quetica.com
Approximate Timing (1 hour total)
Questions 1–3: 15 minutes total
Questions 3–6: 10 minutes each
5 minutes to wrap up and summarize the discussion
Recorders should help facilitators keep track of time and indicate when they have used up the time allotted for each question.
Facilitator: First, thank you for taking the time to try the resilience challenge and meeting with us today. To begin, I would like to quickly go around the virtual room for brief introductions. Can you please state your name, organization, and a bit about your role?
Q1: Ok great. To begin with, how many of you completed all three modules? Two?
One? Which modules did you complete? Indicate the number that completed each module.
| Infrastructure Module | Cybersecurity Module | ||
| Supply Chain Module |
Ann completed all three. Joaquin completed the infrastructure module.
Q2: To begin the discussion, what was your impression of the module format? Was the online environment easy to navigate?
(Note Ann S. was a little late joining the discussion and did not directly answer this first question).
Q3: Regardless of the module or modules you completed, did you feel like the informational content provided you with new information? What information or resources were most memorable from your experience?
Q4: Thinking about the module or modules you completed, if you could add or subtract any particular information what would it be?
Q5: One of the underlying pillars of building resilient communities and organizations is that they understand network dependencies. In other words, they understand that resilience requires communication and information exchange among partners in a network, be it a transportation network, supply chain, or data network. How could you see this type of tool assist or support communications among network partners?
In some modules, we did use case studies to tell a story, but we didn’t really try and tell the whole life-cycle story.
You raise a good point: What is the self-interest that may bring the private sector to the table? So, for example, among the railroads, what might bring them to the table? And maybe that’s a point of research we probably can’t answer right now. But we could at least get them to take a few minutes and think about it.
Have you ever been invited to discuss emergency operations at a freight advisory committee or group?
Q6: Ok, last question. What one thing would you suggest to make this more useful in creating a tool that would facilitate the broader understanding and adoption of practices to support resilient transportation networks?
A major conclusion from this focus group is that it is difficult to get both public and private sector employees and stakeholders to integrate resiliency into their daily activities. Participants emphasized that resilience typically becomes a top priority at organizations they are familiar with only after a disruptive event affects their delivery of services. This lagging attention to resilience planning was described as something integral to the nature of a private company versus a public agency in that private firms are focused on serving their customer base and surviving a disruptive event. Thus, private companies are focused on returning to operations and, in many cases, have policies and plans that can be implemented quickly.
Currently, the private sector (shippers, carriers, etc.) will move to the recovery stage immediately following a disruption if the affected asset is an important link in their supply chain and they have control over it. In the following example, a landslide closed both a rail line and a highway, but the railroad completed repairs and got the line back into service quickly compared to the state agency in charge of the highway, which had to methodically work through their policies and procedures before the highway could be repaired.
Participants also pointed out the importance of champions at the top of the organization to drive resilience efforts. Private sector entities will participate in government-sponsored resilience efforts only when leadership within the organization sees a clear benefit to the company.
Facilitator(s): Mark Berndt/Jeannie Beckett
Recorder: Mark Berndt/Jeannie Beckett
Participants: (This should be pre-populated if possible)
| Name | Organization |
|---|---|
| 1. Bill Goins | Retired from FedEx |
| 2. Ed Hicks | Georgia DOT – Planning Office |
| 3. | |
| 4. | |
| 5. | |
| 6. | |
| 7. | |
| 8. | |
| 9. | |
| 10. |
Facilitators may distribute the participant handout via email prior to the virtual meeting. The purpose of the handout is to help participants record their thoughts, especially thoughts they may not get a chance to express verbally due to time limitations.
Ask participants to email their worksheets at the end of the session to: kate.beasley@quetica.com
Approximate Timing (1 hour total)
Questions 1–3: 15 minutes total
Questions 3–6: 10 minutes each
5 minutes to wrap up and summarize the discussion
Recorders should help facilitators keep track of time and indicate when they have used up the time allotted for each question.
Facilitator: First, thank you for taking the time to try the resilience challenge, and meeting with us today. To begin, I would like to quickly go around the virtual room for brief introductions. Can you please state your name, organization, and a bit about your role?
Q1: Ok great. To begin with, how many of you completed all three modules? Two?
One? Which modules did you complete? Indicate the number that completed each module.
| Infrastructure Module | Cybersecurity Module | ||
| Supply Chain Module |
Bill completed all three. Ed completed the infrastructure module.
Q2: To begin the discussion, what was your impression of the module format? Was the online environment easy to navigate?
Q3: Regardless of the module or modules you completed, did you feel like the informational content provided you with new information? What information or resources were most memorable from your experience?
Q4: Thinking about the module or modules you completed, if you could add or subtract any particular information what would it be?
Q5: One of the underlying pillars of building resilient communities and organizations is that they understand network dependencies. In other words, they understand that resilience requires communication and information exchange among partners in a network, be it a transportation network, supply chain, or data network. How could you see this type of tool assist or support communications among network partners?
Mark Berndt: You know, one of the underlying pillars, when we talk about resilience, is interdependencies, and so supply chains is a really good example, but it’s true as well when you talk about infrastructure networks because there are private and public elements. It’s true when you talk about data networks because there are private and public elements.
And in supply chains, we’ve seen this.
A great example I think is what happened with computer chips in the last couple of years. You have one industry where there is a severe shortage, but it affects many types of manufacturing and many types of consumers. And so, one of the goals of this tool was to try and bring about some common understanding between public and private sectors.
I think in putting it together, we hope that maybe this was something that freight advisory committees could take and share with their members and say, “Can we create a conversation?”, kind of like we’re having. But to be quite honest, we have had a difficult time even though the project panel that’s overseeing this specifically asked us to engage the private sector. We’ve had a difficult time. Jeannie and I talked about, well, who could we get to take these in the railroad industry.
And we basically said, you know, they do their own thing. They have their own resources. They deal with emergencies all the time. We don’t think they’re going to take the Challenge. We’ve had difficulty in the port sector getting folks to take it. So, I’m curious to hear your thoughts or any insights you might have on.
What? How could this be made more valuable to the private sector?
Or how might it be used to understand those interdependencies with the private sector?
Mark Berndt: You make a good point. If you recall, there was an interview with the American Trucking Association and their person about their information sharing and analysis center. They set up their ISAC [information sharing and analysis centers] and he indicated that it was really to try and get trucking companies within the industry to share more information about cyber vulnerabilities. But he said, quite frankly, no one wants to admit that they have vulnerabilities. So, it’s been very difficult even though they try to set up a resource.
As an internal industry, you’re learning that it’s even been difficult within the industry to get individual companies to share more information. So that’s a hurdle we’ll have to give some more thought to and do a little more research on. I think it may be a very ripe area for follow-up research.
Mark Berndt: Yeah, we actually talked a little bit about case studies. One is the colonial pipeline attack and then the one you’re referring to, Bill, is the NotPetya malware attack in 2017. We did a case study on Maersk, which is the largest container shipping line and it cost them $200 to $300 million, took down their entire network. If not for one server that was off-line due to a power shortage, they would have not been able to rebuild their network as quickly as they did, but they were able to use that as a sort of blueprint of what they had.
Mark Berndt: The young man from the American Trucking Association, in talking about cybersecurity, said it used to be that before the pandemic we really looked at cybersecurity as potential attacks against a company that could cost them money.
But one of the things he noted is that the pandemic changed their mindset in the industry and that there may be actors out there that are going to try and cause disruption just for the sake of causing disruption. Kind of like the NotPetya attack, which was traced to the Russian army. And so, he said that in the industry, they’re kind of rethinking that supply chains are really critical infrastructure.
They’re not necessarily physical infrastructure, but they’re cyberinfrastructure. You’ve got infrastructure, you’ve got data networks and they’re all tied together in the supply chain. I thought that was an interesting observation. It may be a way to interest the state DOTs and other public agencies to think about this too; that the supply chain isn’t just a private sector activity. It’s tied into the public infrastructure, it’s dependent on the public infrastructure. I just thought that was a very interesting observation that he said the trucking industry is really rethinking how they view supply chains.
Mark Berndt: I read something recently where even a lot of our military complexes depend on those semiconductors out of Taiwan. That’s a good point.
Mark Berndt: We have had a good response among state devotees in terms of taking it because they’re one of the primary audiences for this tool. Many of them said they would do a follow-up survey, but we’ve gotten less response from them for these focus groups. But these discussions have been very helpful.
Jeannie Beckett: So, I have a question for the port of Savannah. Have you had any ability to get their attention and get them to participate in different activities?
Q6: Ok, last question. What one thing would you suggest to make this more useful in creating a tool that would facilitate the broader understanding and adoption of practices to support resilient transportation networks?
Mark: In some modules, we did use case studies to tell a story, but we didn’t really try and tell the whole life-cycle story.
One of the things I should note is that you know when we put these together, as you notice, they’re based on PowerPoint. So, these are PowerPoint slide decks. We then wrote out the text for the narration, and we used a rather inexpensive voiceover software. It was about $100 and
converted the PowerPoint text to a narration. So, it was automated narration. Then we used another inexpensive training software where we could convert the PowerPoints into a video course with quizzes and assessments to (1) make sure that the participants were taking the course, (2) gather baseline data of the participants, and (3) get their feedback on the effectiveness of the presentation of the material in this format.
Are you aware that in some of the modules, there are expert interviews from a variety of folks? The software we used made it easy to collect the interviews. We sent them a message that asked them a question; they could look into their laptop camera, record the video, and send it back to us. And then finally, we uploaded everything once it was ready into this training software, which again, was fairly inexpensive. So, the idea was that these modules should be fairly portable.
The research team’s idea was that the case studies or examples could be changed by the local agency to make them more relevant. And so, if an agency, say, GDOT, wanted to make this change, they easily could. Say, use the port of Savannah or a local company that had experienced a disruptive event. The PowerPoint presentation could be revised to include the local priorities, examples, or events.
It should be relatively easy to do. It shouldn’t take a lot of outside resources for any agency or company to say, “We’d like to use this and modify it to make it more personable.” So that was one of the goals. We used fairly well-known software and inexpensive software to create these modules.
Mark Berndt: So, when we do webinars, when we participate in webinars with USDOT, etcetera, lots of times you can download the PDF of the slides, and sometimes you can actually get a transcript. Would you like both? Would you like it in PowerPoint? Would providing the notes and pages, help?
Mark Berndt: Yeah, that should be possible. We can check with TRB staff. We can certainly print it out as a PDF with the notes and see if they will post it to the project page and send you a link.
Jeannie Beckett: A comment that we got in another focus group is that it would be nice to have a closed caption. So, depending on your surroundings, whether it’s hard to understand what the narrator is saying or some of the abbreviations then that might help too.
Mark Berndt: That’s one thing about the software, there are times you have to spell out an acronym, phonetically for the automated voice to get it correct.