Month November 2018

Reviewing The 2018 National Preparedness Report

Tim Riecker, The Contrarian Emergency Manager Leave a comment

The 2018 National Preparedness Report was released last week.  For the past few years, I’ve provided my own critical review of these annual reports (see 2017’s report here).  For those not familiar with the National Preparedness Report (NPR), it is mandated by the Post-Katrina Emergency Management Reform Act (PKEMRA).  The information is compiled by FEMA from the State Preparedness Reports (SPR), including the Threat and Hazard Identification and Risk Assessment (THIRA) data submitted by states, territories, and Urban Area Security Initiative (UASI) – funded regions.  The data presented is for the year prior.  The SPRs and NPR examine the condition of our preparedness relative to the 32 Core Capabilities identified in the National Preparedness Goal.

Overall, the NPR provides little information, certainly nothing that is really shocking if you pay attention to the top issues in emergency management.  Disappointingly, the report only covers those Core Capabilities identified for sustainment or improvement, with no more than a graphic summary of the other Core Capabilities.

Core Capabilities to Sustain

Operational Coordination was identified as the sole Core Capability to sustain in this year’s report.  I’ve got some issues with this right off.  First of all, they summarize their methodology for selecting Core Capabilities to sustain: ‘To be a capability to sustain, the Nation must show proficiency in executing that core capability, but there must also be indications of a potentially growing gap between the future demand for, and the performance of, that capability.’  To me, what this boils down to is ‘you do it well, but you are going to have to do it better’.  I think most EM professionals could add to this list significantly, with Core Capabilities such as Planning; Public Information and Warning; Public Health, Healthcare, and EMS; Situational Assessment; and others.  Distilling it down to only Operational Coordination shows to me, a severe lack of understanding in where we presently are and the demands that will be put on our systems in the future.

Further, the review provided in the report relative to Operational Coordination is pretty soft.  Part of it is self-congratulatory, highlighting advances in the Core Capability made last year, with the rest of the section identifying challenges but proving little analysis.  Statements such as ‘Local governments reported challenges with incident command and coordination during the 2017 hurricane season’ are put out there, yet their single paragraph on corrective actions for the section boils down to the statement of ‘we’re looking at it’.  Not acceptable.

Core Capabilities to Improve

The 2018 report identifies four Core Capabilities to improve:

  • Infrastructure Systems
  • Housing
  • Economic Recovery
  • Cybersecurity

These fall under the category of NO KIDDING.  The writeups within the NPR for each of these superficially identifies the need, but doesn’t have much depth of analysis.  I find it interesting that the Core Capability to sustain has a paragraph on corrective actions, yet the Core Capabilities to Improve doesn’t.  They do, instead, identify key findings, which outline some efforts to address the problems, but are very soft and offer little detail.  Some of these include programs which have been in place for quite some time which are clearly having limited impact on addressing the issues.

What really jumped out at me is the data provided on page 9, which charts the distribution of FEMA Preparedness grants by Core Capability for the past year.  The scale of their chart doesn’t allow for any exact amounts, but we can make some estimates.  Let’s look at four of these in particular:

  • Infrastructure Systems – scantly a few million dollars
  • Housing – None
  • Economic Recovery – Less than Infrastructure Systems
  • Cybersecurity – ~$25 million

With over $2.3 billion in preparedness funding provided in 2017 by FEMA, it’s no wonder these are Core Capabilities that need to be improved when so few funds were invested at the state/territory/UASI level.  The sad thing is that this isn’t news.  These Core Capabilities have been identified as needing improvement for years, and I’ll concede they are all challenging, but the lack of substantial movement should anger all emergency managers.

I will agree that Housing and Cybersecurity require a significant and consolidated national effort to address.  That doesn’t mean they are solely a federal responsibility, but there is clear need for significant assistance at the federal level to implement improvements, provide guidance to states and locals, and support local implementations.  That said, we can’t continue to say that these areas are priorities when little funding or activity is demonstrated to support improvement efforts.  While certain areas may certainly take years to make acceptable improvements, we are seeing a dangerous pattern relative to these four Core Capabilities, which continue to wallow at the bottom of the list for so many years.

The Path Forward

The report concludes with a two-paragraph section titled ‘The Path Forward’, which simply speaks to refining the THIRA and SPR methodology, while saying nothing of how the nation needs to address the identified shortcomings.  Clearly this is not acceptable.

~~

As for my own conclusion, while I saw last year’s NPR as an improvement from years previous, I see this one as a severe backslide.  It provides little useful information and shows negligible change in the state of our preparedness over the past year.  The recommendations provided, at least of those that do exist, are translucent at best, and this report leaves the reader with more questions and frustration.  We need more substance beginning with root cause analysis and including substantial, tangible, actionable recommendations.  While I suppose it’s not the fault of the report itself that little improvement is being made in these Core Capabilities, the content of the report shows a lack of priority to address these needs.

I’m actually surprised that a separate executive summary of this report was published, as the report itself holds so little substance, that it could serve as the executive summary.  Having been involved in the completion of THIRAs and SPRs, I know there is information generated that is simply not being analyzed for the NPR.  Particularly with each participating jurisdiction completing a POETE analysis of each Core Capability, I would like to see a more substantial NPR which does some examination of the capability elements in aggregate for each Core Capability, perhaps identifying trends and areas of focus to better support preparedness.

As always, I’m interested in your thoughts.  Was there anything you thought to be useful in the National Preparedness Report?

© 2018 – Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC

Finding Local Hazard Information

Tim Riecker, The Contrarian Emergency Manager Leave a comment

Among all the information shared across the internet, something that would be of great assistance to many stakeholders is local hazard information.  It surprises me how inaccessible this information is.  Typically, in most places around the US, ‘local’ will mean a city, village, or town, and depending on the structure of government in the state, counties (or other similar governmental units) may also be considered local.  Specific to this discussion, I’m referencing the most local level of government which has an emergency management function.

So often, we advise businesses and organizations to work with their local emergency managers on preparedness initiatives, yet necessary information lacks in availability or accessibility.  One of the foundational elements of information for all emergency management activities is a hazard analysis.  While every organization should conduct their own to ensure that their own hazards are identified and analyzed, an informed hazard analysis will consider information from other sources.  What better source, we would assume, than the hazard analysis conducted at the most local level of government possible?  Sadly, this information is not often regularly available.

Many governments who conduct comprehensive emergency management activities post plans on their websites, which is a good start.  Often these are hazard mitigation plans and sometimes even emergency operations plans (EOPs).  Both of these plans, if well written, should include hazard analysis information.  Typically, if EOPs include this information, it’s a very brief summary, perhaps only a small chart or table.  Hazard mitigation plans are really centered on a comprehensive hazard analysis, but as I’ve written before, most hazard mitigation plans are not truly ‘all hazard’.  Most commonly, hazard mitigation plans only address and examine natural hazards and some human-caused incidents such as dam failures or hazardous materials incidents.  Because so much effort goes into the hazard analysis conducted for a hazard mitigation plan, many jurisdictions will then only reference this hazard analysis in their preparedness activities, such as developing EOPs.  Fundamentally, this then means that many jurisdictions are not properly preparing for other threats, such as an active shooter/hostile event response (ASHER) incident.

So there are really two issues here, one being that of making information readily available, the other is ensuring quality of information.  Ideally, I’d like to see jurisdictions post hazard analysis information on their websites.  People working for organizations or businesses who are less familiar with emergency management aren’t likely to read through a hazard mitigation plan to find this information.  A stand-alone document with a reasonable summary of this information can easily be provided.  Aside from organizations and businesses, such a practice would also make this information more accessible to the general public.  With so much time and effort spent on telling people they need to prepare, perhaps we should make the information more accessible which tells them what they need to prepare for?

What are you doing to make hazard information more accessible?

© 2018 – Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC℠

A Discussion on Training Needs for the EOC Incident Support Model

Tim Riecker, The Contrarian Emergency Manager Leave a comment

Last week I wrote a piece on the Incident Support Model for Emergency Operations Centers (EOCs).  The article got a good amount of attention which prompted some dialogue both on and off line with a variety of practitioners.  So for those who might be integrating this model into their plans, let’s consider what training might be needed to support implementation.

First, I’ll say that I feel foundational ICS training (hopefully we’ll eventually have something better than what we have now since ICS training still sucks) is still necessary, even though the Incident Support Model deviates significantly from the traditional ICS model.  A couple of reasons… first, others are still using ICS, be it in EOCs or in the field.  Second, the principles and concepts of ICS still largely apply to the Incident Support Structure, regardless of the differences in organizational composition.  Perhaps only to the ICS 200 level is necessary since those functioning in an Incident Support Model organization only need be aware of it.

Next, I think we then need an overall Incident Support Model course.  I would envision this similar to an ICS-300 course, which has a more in-depth exploration of the entire organizational structure of the Incident Support Model and discusses the processes inherent in the system, such as the planning process, which would see some revisions to at least the positions involved under this model as compared to that for ICS.

Position-specific training is important, be it for an in-house EOC team(s) or for incident management teams which may be deployed to EOCs using this model.  While many of the position-specific courses in existence for a traditional ICS model are analogous to what we see in the Incident Support Model, there are significant enough changes, I think, to require different training specific for this model if we expect a professionally functioning organization (and we do).

One thing currently missing in the position specific courses is an EOC manager course.  While there is an Incident Commander course, which provides a lot of great information, there are significant enough differences between running an EOC and running an incident command post.  That said, I’m not so sure we need an entirely different course.  Given the propensity for incident management teams (IMTs) to work in EOCs, I think an additional module in the IC training may suffice to ensure that ICs are equipped to work in all environments.

Looking at the composition of the general staff of the Incident Support Model, we can first start with the Situational Awareness Section Chief.  From the ICS IMT model, we have great training for Situation Unit Leaders, which can largely apply to this position in the Incident Support Model with just a few changes, mostly addressing the expansion and elevation of the role.

The new Planning Support Section Chief would require very different training from what current exists for the IMTs. While in-depth training on the planning process is still relevant (with changes to make it specific to this model), as is training on demobilization planning, new training is required to address future planning, which doesn’t have as much content in the current Planning Section Chief course as needed.

Center and Staff Support Section Chief training is largely internal logistics, so really just requires a course that is narrowed in scope from the traditional Logistics Section Chief course, with perhaps some additional content on occupational and facility support matters.

Lastly, the Resource Support Section Chief.  This one is a monster.  It’s really an amalgamation of the Operations Section Chief, the Logistics Section Chief, and the Resource Unit Leader, along with Finance/Admin (if you subscribe to putting it in this section).  There is clearly a lot going on here.  Very little of the traditional ICS IMT courses really apply to this in an EOC environment given the difference in scope and mission for an EOC.  This largely requires completely new training based on functional coordination, mission assignments, and support to deployed resources.  This is a course that will require a lot of work to ground it in reality while also providing enough flexibility to allow for how each EOC may organize within this section.  Similar to the Operations Section in a traditional ICS model, this section may have the most variety from facility to facility and incident to incident.

Certainly other training may be needed, but the command and general staff positions are probably the most urgent to address.  In lieu of FEMA providing this training, some are developing their own training to support implementation of this model.  I’d love to hear about what has been done, the challenges faced, and the successes had.  Given my own passion and interest, I’d certainly love an opportunity to develop training for the Incident Support Model.

© 2018 – Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC