Responding to Coronavirus & a Second Major Incident

Springtime is practically upon us.  Trees are budding, asparagus is growing (yes, I mentioned asparagus), birds are chirping, and snow is melting.  And it’s raining.  Some people call it spring, others call it the first flood season of the year.  Flooding isn’t the only hazard we face right now.  It’s still early enough for the threat of snow and ice storms, and we’ve already seen tornado activity in the US.  Oh, and by the way, we’re dealing with a pandemic.  EDIT: In the midst of writing this post and also exchanging emails re Coronavirus with a client in Utah, he exclaimed in one of his responses that a 5.7 earthquake had just struck with an epicenter just outside Salt Lake City.  As one of my old bosses used to say, you can’t make this stuff up. 

So often we are used to dealing with one disaster at a time.  Yes, sometimes we get hit with a one-two punch, or other times the same incident, such as a hurricane, persists, but these are typically localized, not a nation-wide concern, much less global.  When our resources are already strained from dealing with Coronavirus, it can be a challenge to respond to another significant incident, especially when there is little mutual aid to be had.  I often think back to an example I use back from my days in EMS, and that’s the multi-trauma patient.  Most EMS instructors, following the standard curriculum, will teach you how to treat lacerations, fractures, burns, and the like.  But rarely do we learn about how to deal with those things when they all happen at once. I remember back when I was a young pup EMT, my first multi-trauma patient was a victim of a motor vehicle accident (as it probably was for most EMTs).  I recall having a brief moment of panic because that’s not what we were taught to handle.  My brain quickly reset, and I went back to my ABCs, assessing and stabilizing the patient in priority order. 

Another personal example I have is the crash of American Airlines Flight 587 on November 12, 2001 – two months and one day after 9/11.  The plane crashed in Queens borough of New York City as the result of a critical structural failure.  260 souls on board, plus 5 on the ground died.  This occurred in the midst of the response to one of the most impactful disasters in US history.  In a way we ‘lucked out’ that the incident occurred in New York City.  On a normal day, the City of New York can leverage more resources in a response than some US states and even nations.  November 2001 was anything but ‘normal’ with a massive amount of additional resources still rotating into the City to support 9/11 activities.  While at this point, two months following 9/11, things were reasonably stable in and around ground zero, the crash of Flight 587 still required a significant change in operations.  From my recollection, in the State EOC in Albany, we actually split some of our staff for a brief period of time (within the same chain of command), with some staying focused on 9/11 activity while others were focused on the crash.  We didn’t create a new organization, but there were people in Operations and Planning committed specifically to monitoring and supporting the new incident.  Like a Venn diagram, there were some different needs in the initial response with some overlapping needs between the two incidents.  As the two circles moved closer together, creating more overlap, we re-integrated our staff to track and support both incidents collectively.  I recall the reintegration occurring after only a few operational periods. 

So what to do when an incident occurs during our current pandemic?  There are a few concerns, some related to incident management, others related to our tactical responses and humanitarian needs.  While our general response times are likely to be improved, many resources are already strained.  We are likely in an operational continuity mode already, currently working with or ready to work with fewer staff as Coronavirus impacts our people and their families.  It’s incredibly important to be rotating your emergency staff, keeping people as rested as possible.  We can also leverage the lead agency status that is presently at play in most jurisdictions, with public health having the lead, and emergency management agencies and others supporting them.  If something occurs other than a second public health event, the emergency management agency may be able to pivot to be the lead coordinating agency for the new incident while still supporting public health.  (Of course, I say this fully recognizing that the vast majority of emergency management offices are one-person shops.)  If you are able to split off some staff within your Coronavirus organization (really speaking in terms of your EOC) similar to my Flight 587 example, that may be a workable strategy.  Another strategy could be the reverse of that, where most of your organization is focused on the new incident, since that is in its critical early stages, leaving a few other staff to continue supporting Coronavirus needs.  I generally wouldn’t consider creating parallel organizations as most jurisdictions simply don’t have the capacity for that, plus EOCs are intended to be able to support multiple incidents.  The splitting off of staff is generally only for the early response to ensure that we are gathering information and providing the support that is needed.  We can still leverage the organization as a whole (you probably don’t have a need to dedicate anyone in Logistics or Finance specifically to the new incident, though expenses should be tracked separately), and the chain of command still remains intact.  Your planning process, likewise, should accommodate both incidents. Depending on the scope of the new incident, certain subject matter experts may need to be brought in to address specific response and disaster recovery needs for the new incident.  Overall, flexibility is key.  I’ll also say that all this can be done while still adhering to organization tenants of ICS (even if your EOC doesn’t purely use ICS). 

From a more tactical perspective, the main concerns are staffing and safety.  Staffing, as mentioned before, may be a challenge as we progress through the most infectious stages of this pandemic.  Your continuity plans must absolutely address this.  I mention safety not only in regard to whatever hazards the new incident brings about, but also the continued safety measures we need to maintain for Coronavirus.  The most prominent of these safety measures are those involving an expanded circle of exposures for responders and the public; dealing with large numbers of victims, perhaps displaced from a building who may need shelter and other care.  Mass care is a big concern. Certainly, for smaller numbers of victims, hotels may be more appropriate than a shelter, but we know that we need to prepare for a credible worst-case scenario.  How?

  • We must ensure that our responders, VOAD, and social services agencies are prepared to address needs. 
  • With so many facilities being closed, we need to ensure that we still have access to identified shelters and the people and resources necessary to support them. 
  • Many of the VOAD organizations and social services agencies may have limited operations due to Coronavirus, with staff working from home.  Do they have the resources and equipment at-hand to support a response or do they need to retrieve these from their offices? 
  • Do they have an ability to recall staff? 
  • Is there any change in their capability and capacity? 
  • Are the supply chains we use for shelter food and supplies still viable?    
  • What needs to be done to support social distancing and limit exposure within a shelter environment?
  • How will you address isolation needs for those who may have been exposed or are symptomatic?
  • Are their activation and notification procedures impacted by Coronavirus? 

Now is the time to convene your VOAD and social services agencies (by tele/video conference, of course) to answer these questions and ensure that a written plan (an amendment to your standing sheltering/human needs plan) is developed and circulated for common understanding. 

Regardless of the circumstances, we cannot allow ourselves to become so focused on Coronavirus that we forsake the challenges we would face should another major incident strike, the changes to our capability and capacity, and the continued preparedness we need to maintain.  Remember, preparedness doesn’t stop simply because we are in the midst of a disaster. I’ll also mention that I’m certainly not the first to consider this issue.  Over the past few days, several people, including Ralph Fisk and Dr. Samantha Montano have posted their concerns about our ability to respond to other disasters in the midst of the Coronavirus response and impacts.  It’s something that shouldn’t just be on our minds, it’s something we need to be prepared for.  Developing a contingency plan for your EOC operations and other related support is something that should absolutely be taking place sooner rather than later.

I’m sure I didn’t cover all possibilities or considerations on this topic (I rarely do on any topic), but my intent is to get your mental juices flowing and to plant some ideas.  Please be sure to share any ideas or considerations you have in your contingency preparedness. 

Be smart, stay safe, stay healthy, and be good to each other. 

© 2020 Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC

Improving the HSEEP Templates

For years it has bothered me that the templates provided for the Homeland Security Exercise and Evaluation Program (HSEEP) are lacking.  The way the documents are formatted and the lack of some important content areas simply don’t do us any favors.  These templates go back to the origination of HSEEP in the early 2000s and they have seen little change since then.  It gives me concern that the people who developed these have struggled with concepts of document structuring and don’t understand the utility of these documents. 

I firmly believe that the documents we use in exercise design, conduct, and evaluation should be standardized.  Many of the benefits of standardization that we (should) practice in the Incident Command System (ICS) certainly apply to the world of exercises, especially when we have a variety of different people involved in each of these key phases of exercises and entering at different times.  Much like an incident, some people develop documents while others are users.  Both should count on a measure of standardization so they don’t have to figure out what they are looking at and how to navigate it before actually diving into the content.  That doesn’t mean, however, that standards can’t evolve to increase utility and function. 

I’ve written in the past about the dangers of templates.  While they are great guides and reminders of certain information that is needed and give us an established, consistent format in which to organize it, I still see too many people not applying some thinking to templates.  They get lost in plugging their information into the highlighted text areas and lose all sense of practicality about why the document is being developed, who the target audience for the document is, and the information they need to convey. 

Some of my bigger gripes…

  • Larger documents, such as ExPlans, SitMans, Controller/Evaluator Handbooks, and After-Action Reports MUST have a table of contents.  These documents can get lengthy and a TOC simply saves time in finding the section you are looking for. 
  • Some exercises are complex and nuanced.  As such, key documents such as ExPlans, SitMans, and Controller/Evaluation Handbooks must have designated space for identifying and explaining those situations.  This could be matters of multiple exercise sites and site-specific information such as different scopes of play for those sites, limited scopes of participation for some agencies, statements on the flow and execution of the exercise, and others.
  • Recognize that the first section of an EEG (Objective, Core Capability, Capability Target, Critical Tasks, and sources) is the only beneficial part of that document.  The next section for ‘observation notes’ is crap.  Evaluators should be writing up observation statements, an analysis of each observation, and recommendations associated with each observation.  The information provided by evaluators should be easily moved into the AAR.  The EEG simply does not facilitate capturing this information or transmitting it to whomever is writing the AAR. 
  • The AAR template, specifically, is riddled with issues. The structure of the document and hierarchy of headings is horrible.  The template only calls for documenting observations associated with observed strengths.  That doesn’t fly with me.  There should similarly be an analysis of each observed strength, as well as recommendations.  Yes, strengths can still be improved upon, or at least sustained.  Big missed opportunity to not include recommendations for strengths.  Further, the narrative space for areas of improvement don’t include space for recommendations.  I think a narrative of corrective actions is incredibly important, especially given the very limited space in the improvement plan; plus the improvement plan is simply intended to be an implementation tool of the AAR, so if recommendations aren’t included in the body of the AAR, a lot is missing for those who want to take a deeper dive and see specifically what recommendations correlate to which observations and with an analysis to support them. 

Fortunately, strict adherence to the HSEEP templates is not required, so some people do make modifications to accommodate greater function.  So long as the intent of each document and general organization remains the same, I applaud the effort.  We can achieve better execution while also staying reasonably close to the standardization of the templates.  But why settle for sub-par templates?  I’m hopeful that FEMA’s National Exercise Division will soon take a look at these valuable documents and obtain insight from benchmark practitioners on how to improve them.  Fundamentally, these are good templates and they have helped further standardization and quality implementation of exercises across the nation.  We should never get so comfortable, though, as to let tools such as these become stagnant, as obsolesce is a regular concern. 

I’m interested in hearing what you have done to increase the value and utility of HSEEP templates.  How would you improve these?  What are your pet peeves? 

© 2020 Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC®

Operational Readiness in Emergency Management

Back in 2017 I wrote a piece on defining operational readiness.  It’s a topic, which, after some recent discussion with a colleague, I think bears revisiting and expanding upon.  Specifically, how we apply it in emergency management, or not.  Readiness is really a final comprehensive perspective of preparedness.  That is, once you have reached a certain level of preparedness, you can be ready, but being prepared doesn’t necessarily make you ready.  Preparedness is generally perceived as an ongoing process, though a state of readiness is typically a snapshot in time.

It struck me that the military tends to have more of a focus on readiness, while emergency management has a focus on preparedness.  While you will find both concepts within the doctrine of emergency management and military, the actual applications are considerably skewed.  After my discussion, I began to wonder why there this difference exists and what we can learn from it.

Having worked a considerable amount with various National Guard elements, I’ve come to highly respect their processes and their endeavor for readiness.  Not that we don’t have similar rigor in emergency management, but the focus seems to be more on the processes of preparedness rather than a state of operational readiness.  Sometimes the differences are so subtle that I have to sit back and think them through, but they are certainly there, and they are meaningful.  Given the military’s focus on operational readiness, they serve as a good source of information, though it needs to be properly filtered for application to emergency management.

As I’ve applied more thought to this, I’ve assembled a refined definition of readiness as it applies to emergency management, that being:

[Readiness is the nexus of benchmark outcomes of preparedness matched with the needs of a specific kind and type of response. A state of operational readiness is achieved when all applicable preparedness benchmarks are met and the organization is willing and able to adequately leverage the resulting capabilities against a corresponding threat or hazard.]

I’ve put together a graphic I think reasonably represents this relationship below.  Readiness is represented by a cloud because, as I explore further in this writing, it is itself rather amorphic and complex.

Readiness

To explain the components of my definition…  Readiness comes from a culmination of outcomes from preparedness activities, but only when each of these outcomes achieves a specific benchmark state.  The achievement of benchmarked preparedness activities define a measure of capability.  These capabilities are associated with a specific threat(s) or hazard(s).  As such, that state of readiness is only applicable to a specific kind (threat or hazard) and type (size and complexity) incident.  To help illustrate my points, here are a couple of examples using field response scenarios:

We can assume that a volunteer fire department is prepared to handle a room and contents fire.  They should have all the elements needed to do so, and in fact, these elements have standards (benchmarks) defined by the NFPA and state fire marshals.  Does this mean they have achieved readiness?  Hopefully yes, but perhaps not.  Given the rather extensive crisis of low membership in volunteer fire departments, the department in question may not have adequate staff to respond to this fire if it occurs, for example, in the middle of a week day.  This gives them a measure of degraded, or even negligible readiness.

Similarly, if we take the same fire department, having accomplished the benchmarks of preparedness for response to a room and contents fire, and even given adequate staff to do so, they may not have a state of readiness to fully address a hazardous materials incident.  While many of the elements of preparedness apply to both types of incidents, there are some critical differences which they would have to overcome to establish a state of readiness for a different type of incident.  Likewise, we could revert back to the room and contents fire and make it bigger – say a fully involved structure fire. While the department might have operational readiness to address the room and contents fire, they may not have the operational readiness to address a structure fire.

I think it’s fair to say that we can be prepared for something without having operational readiness for it.  Years ago, when there was a planetary ‘near miss’ by a meteor, a news outlet contacted our state OEM PIO.  They asked if we had a plan for a meteor strike.  The PIO acknowledged that we didn’t have a plan specific to that, but we did have a comprehensive emergency management plan, through which, and supported by various functional annexes, we were prepared to respond to such an incident and its effects should it occur.  Was the PIO wrong?  Not at all.  Assuming the other elements of preparedness were reasonably in place (and they were), it would be fair to say we were generally ‘prepared for anything’.  Were we ready, however?  Absolutely not.  The operational readiness needs for such an extraordinary, high impact incident are near-impossible to achieve.

When we examine this, it’s important to identify that a state of readiness can wax and wane, based on our ability to apply the identified preparedness measures to the incident in question. Considering the first example of the fire department and the room and contents fire, the department has a state of operational readiness when, as included in the definition I gave, all the preparedness benchmarks are met and they are willing and able to adequately leverage the resulting capabilities against a corresponding threat or hazard.  Changes in capability and/or the willingness or ability to apply those capabilities will result in degradation of readiness.  Depending on the factor in question, it may fully disqualify their readiness, or it may decrease their readiness by some measure.

So why is readiness important?  Readiness is the green light.  If we accomplish a state of operational readiness, we increase our chances of success in addressing the threat or hazard in question.  If we haven’t achieved readiness, we still can obviously be successful, but that success may come at a greater cost, longer period of time, and/or increased error.

How do we achieve readiness?  The current approach we have in emergency management certainly isn’t enough.  While some efforts may culminate in operational readiness, there is, as a whole, a significant lack of focus on operational readiness.  This seems to largely be a cultural issue to overcome.  In general, we seem to have the attitude that preparedness equates to readiness, and that preparedness itself is an end state. Even though we intuitively, and doctrinally, know that preparedness is a cycle, we seem to take comfort in ‘completing’ certain tasks among the preparedness elements – planning, organizing, equipping, training, exercises, and improvement – and then assuming readiness.  Readiness itself is actually the end state, though it is a dynamic end state; one that we can easily lose and must constantly strive to maintain.  To accomplish and maintain operational readiness, it is imperative that we aggressively and rigorously pursue activity in each of the elements of preparedness.  We must also continually monitor our ability to execute the capabilities we are preparing.  That ability, ultimately, is our measure of readiness.

The scale and unit of measuring readiness is something I’m not exploring in depth here (it really warrants its own deliberate effort), but expect to revisit in the future.  I surmise that the factors may be different based upon the various capabilities, and types and kinds of threats/hazards we are trying to address.  We need to examine capability requirements at a granular (task) level to truly assess our current state of readiness and identify what we need to address to increase our readiness.  I also assume that there is a somewhat intangible factor to readiness, one that likely revolves around the human factor. Things like leadership, decision-making, confidence, and ability to improvise. The measure of readiness may also involve certain external factors, such as weather.  The measurement of readiness certainly is complex and involves numerous factors.

I do know that practice is a significant factor in operational readiness.  Earlier I mentioned my experience with the National Guard.  Much of that revolves around exercises, which is one of the best (though not the only) measures of readiness.  Operational military units seem to constantly exercise.  Sometimes small scale, sometimes large.  They exercise different aspects, different scenarios, and different approaches.  It’s the regular repetition that builds competence and confidence, along with identifying shortfalls within the capability such as planning gaps, equipment failures, and the need to anticipate and prepare for certain contingencies.  While we exercise a fair amount in emergency management, we still don’t exercise enough.  I see a lot of people in emergency management leadership develop a complacency and virtually declare that ‘close enough is enough’.  It’s absolutely not enough to exercise a plan or capability once a year, which is something we often see (and often at best).

Preparedness is not something we achieve, it’s something we do; but through it we strive to achieve and maintain readiness.

It’s interesting to note that at the level of federal doctrine, we have a National Preparedness Goal.  We need to recognize that preparedness isn’t the goal – Readiness is.  A possible starting point for change would be the assembly of a blue-ribbon panel, likely by FEMA, to explore this topic and provide recommendations on a unified way ahead for emergency management to recognize the need for operational readiness, including purposeful changes in doctrine and culture to emphasize this desired end state.  We need a solid definition, means of measurement, guidelines for implementation, and an identification of the barriers to success with recommendations on how to overcome them (yep, I already know money and staff are the big ones).

I hope I’ve given some food for thought in regard to readiness.  The simple act of writing this and the bit of associated reading and thinking I’ve done on the topic certainly has me thinking about things differently.  As always, I’m curious to hear your thoughts on operational readiness, what it means to you, and what we can do to achieve it.

© 2020 Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC®

 

 

 

NEW: 2020 HSEEP Revision

Earlier today FEMA dropped the latest version of the Homeland Security Exercise and Evaluation Program (HSEEP) doctrine.  Doing a quick comparison between this new version and the previous (2013) version, I’ve identified the following significant changes:

  • They replaced the ‘Elected and Appointed Officials’ mentions within the document with ‘Senior Leaders’. This makes sense, since often the elected and appointed officials simply aren’t involved in many of these activities.  The previous terminology is also exclusionary of the private sector and NGOs.
  • The document specifically references the Preparedness Toolkit as a go-to resource.
  • A big emphasis through the document is on the Integrated Preparedness Cycle (see the graphic with this post). The Integrated Preparedness Cycle covers all POETE (Planning, Organizing, Equipping, Training, and Exercising) elements plus Evaluate/Improve.  The graphic also eludes to these activities not necessarily happening in a specific order, as well as the consideration of Preparedness Priorities and Threats, Hazards, and Risks.  Developing a preparedness plan is something I wrote about back in 2016.
  • Integrated Preparedness Cycle
    • Going along with the Integrated Preparedness Cycle, they have done away with the Training and Exercise Plan (TEP) and replaced it with the Integrated Preparedness Plan (IPP), which is developed through input obtained during an Integrated Preparedness Planning Workshop (IPPW). I serious HOPE this shift is successful, as I’ve mentioned in the past how often the training aspect of the TEP was ignored or phoned in.  This approach also does a lot to integrate planning, organizing, and equipping (but ESPECIALLY planning) into the effort.  This is all tied together even more if a jurisdiction has completed a THIRA.  The Integrated Preparedness Cycle and IPP are the things I’m happiest about with the updated document.
  • The new document provides easier to find and read layouts for information associated with exercise types and each of the planning meetings.
  • For years, HSEEP doctrine has suggested (though thankfully not required) an ICS-based organization for exercise planning. I’ve never used this as I found it awkward at best (though I know others often use it and have success in doing so).  The update provides a different suggestion (better, in my opinion) of a functionally organized planning team organization.  Consider that this is still a suggestion, and that you can use it, or a version of it, or an ICS-based one, or anything else you desire.
  • The update provides better delineation between the planning and conduct needs of discussion-based exercises vs those of operations-based exercises. Those of us who have been doing it for a while know, but for those who are new to exercises this should be very helpful.
  • Lastly, the document suggests making corrective actions SMART, as these are really objectives.

FEMA is hosting a series of webinars (listed on the HSEEP website) to discuss these changes.

I’m very happy with the changes made to the doctrine.  It’s a great continued evolution of HSEEP and preparedness as a whole.  For as much as I’m a champion of the Integrated Preparedness Plan, though, having it (thus far) only included in the HSEEP doctrine makes it easy to miss or dismiss by some.  I’m hopeful broader promotion of this concept, perhaps even including it as an emergency management performance grant requirement, will help adoption of this concept.

What are your thoughts?

© 2020 Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC®

ICS Training Sucks: A Revival

It’s sad to say that in the past four and a half years of stumping for changes in ICS training, we have seen little progress.  I was recently sent a response org chart developed by an agency that completely tore apart ICS and rebuilt it in a fundamentally different image.  ICS is a standard.  It shouldn’t be changed.  Once you change it, especially at fundamental levels, you no longer have a standard.  It has innate flexibility, but those are applied without changing the fundamentals.  I vented some of my frustration about this last night on Twitter, to a mix of celebration and naysayers, as expected.  Some of those naysayers think the system simply doesn’t work. Others think the system simply can’t accommodate their type of agency.

(note that I’m using the word ‘agency’ here to mean any type of government, non-government, or private sector organization.  I decided to use it since I’m also heavily using the term ‘organization’ in regard to the structure we apply for a response)

So let’s back up a bit.  Why is this happening?  It starts with people having some knowledge of ICS and, with good intentions, wanting to adapt it to their agency and their circumstances.  But there is simply no reason to do any adaptation.  The functions outlined in ICS are all you need in a field-level response.  I’ve heard all the excuses – “We need to make it work for us.”  “FEMA needs to build an ICS for our type of agency.”  “It’s not you, it’s me.” I’ve worked with a lot of stakeholders across a lot of sectors across the whole country, and I have yet to find a field-level response that I can’t organize without violating the fundamentals of ICS.

I’m sure I’ve said this before, but adhering to the standard is important because if we don’t adhere to a standard, we are out of the loop.  If enough people don’t adhere to a standard, it’s no longer a standard.  Either way, the benefits of having a standard are crumpled up and thrown away.

One problem is that a lot of entities, particularly large agencies with multiple components, like to ensure that every function or department within their static structure is represented in an ICS model.  This isn’t what ICS is built for.  If you are seeking specific representation, you can assign agency representatives to the ICP or the EOC, or use a department-based EOC model, but the foundational ICS structure itself isn’t intended to reflect your static organization.  You have an animal control officer.  Do they need to be represented in your pre-planned ICS org chart?  No, they are brought in as a resource if needed, likely in Operations.  You have an IT department.  Do they need to be represented in your pre-planned ICS org chart?  Not as a department. But their capability is identified, likely for assignment within Logistics.  It’s not about recreating ICS to fit your static organization.  It’s about knowing the capabilities of your static organization and applying them within the established ICS structure when and how they are needed. 

Let’s put this out there… ICS isn’t just for you, it’s for everyone.  What I mean is that the greatest benefit of ICS (the prime reason it was actually devised) is for multi-agency operations.  In a local incident of any significance, your agency is likely to be part of a multi-agency response.  Depending on the type of incident, scope, location, and other factors, certain positions will be staffed with personnel selected from the agencies with primary responsibility and, hopefully, with qualified staff.  So that carefully crafted org chart you have developed for your agency’s response is largely irrelevant in a multi-agency operation.  Yes, your agency certainly should have a go-to model for single-agency responses, but consider that a single-agency response probably isn’t going to need a full-blown org chart.

There is a difference, though… and that’s for EOCs, or more specifically departmental emergency operations centers.  These are, by definition, not multi-agency, and established to support your own agency’s needs for deployment, sustainment, internal coordination, and matters that may not be addressed at the field-level.  EOCs have a variety of organizational models available to them, which don’t necessarily need to be ICS.   A problem I often see is agencies trying to accomplish everything in one org chart.  They are trying to fit executive level positions in with field response.  Stop.  Take a breath and figure out what you are trying to accomplish.  It’s OK (and perhaps necessary) for your agency to have two organizational models to accomplish what you need, depending, of course, on your agency’s role, responsibilities, and capabilities.  You may need a field-level organization that addresses a tactical response (this is ICS-based) and an EOC organization that supports that response and the needs of your agency as a whole in regard to the incident (again, lots of options for the EOC organization).  Also consider, depending on your agency, that a policy group may be necessary to guide things.  A policy group is non-operational and they essentially exist to make the broad-reaching decisions on behalf of the organization.

Why are we seeing such extensive mis-applications of ICS?  First, people still don’t understand ICS.  Second, they aren’t truly considering the needs of their agencies.  The irony is that many of the people doing this DO think they understand ICS and that they are making changes to it to better serve the needs of their agencies.  So… we’re still maintaining that ICS Training Sucks.  Do I have a total solution to that problem?  No. But in the articles you find in that link, I certainly have some ideas.  I’ve also found a great many kindred spirits in this whole crusade that agree with the need for change in how we train people in ICS.

What I do know is that the solution isn’t as straight forward as we would like it to be.  Considerations:

First, we are considerably tainted by our knowledge of current and past ICS curricula.  When talking with people about how to fix ICS training, I have to regularly remind myself to push that knowledge aside and look at the problem with fresh eyes.  Lessons learned aside; we can’t move forward when we are still planting ourselves in what is in use now.

Second, we need to consider that there may not be a single solution that fits all needs.  I still think we may need a curriculum structure similar to that used for HazMat training, which addresses the needs of different user groups (i.e. Awareness, Operations, Technician, Planner, Commander).

Third, we need to actually teach people how to apply ICS.  At present, with only a bit of exception, true application of ICS isn’t deliberately instructed until someone takes position-specific and incident management team training.  This in no way meets the needs of most agencies, many of which are volunteer, and have limited availability to go away for several weeks to get the training they need.

Fourth, recognize that if you aren’t using ICS regularly (and I mean at a large scale), your knowledge and skill degrades.  Refresher training should be required and scenario-based learning should be incorporated across the curriculum.

Fifth, stop trying to re-develop ICS.  Trust me, all the needed capabilities of your agency for a field-level response fit within an ICS org chart.  It’s not about your static organization, it’s about capabilities.  Identify and assign capabilities.

I love the continued dialog and attention this topic gets.  The only way we will see positive change is by continuing that dialog.  Please share these blogs and your ideas with colleagues.  Let’s keep spreading this and striving for change.

© 2020 Timothy Riecker, CEPD

Emergency Preparedness Solutions, LLC

~~

In memoriam: I humbly dedicate this post to a friend and colleague who recently lost a battle with cancer.  Phil Politano is known by many for his good nature, his gregarious laugh, and his incredible knowledge as a Public Information Officer.  I’ve known Phil since about 2002, and had worked with him on incidents, taught classes with him, and learned a lot from him.  Phil eventually left Central NY and moved his family a bit south, taking a job with FEMA’s Emergency Management Institute.  There, his talents were applied to their greatest extent.  He reshaped PIO training, spread that gospel to people from all around the world, and supported large scale responses with his knowledge, skills, and abilities.  He was a master in his craft and shared his mastery with anyone who wanted to learn.  He was an incredible practitioner, a great friend, and a wonderful person.  He made us all better simply by knowing him.   He is missed by so many.  Rest well.

 

 

Public-Private Partnerships Should be a Two-Way Relationship

Public-private partnerships are not a new concept to emergency management.  There are municipalities, regional areas, and states that have formed committees and strategized how the private sector can provide support during a disaster.  Certainly we have seen a lot of support, on both a large scale and locally, from the ‘big box’ stores, such as Wal-Mart, Lowes, and Home Depot.  Tide’s Loads of Hope program, something so simple but extraordinarily impactful, provides a means for disaster victims to have clean clothing.  Insurance companies have established a response capability to expedite their assessments and services to their clients.  Private sector partners know that these things are not just good public relations, but that they have a means of supporting communities that government and relief organizations may not.

There is another aspect to public-private partnerships that doesn’t seem to be widely addressed, and that’s the community business.  How can they help the community in a disaster?  First, business continuity is essential, since they may also be impacted by the disaster.  Small businesses don’t have the level of capability to leverage that large companies do.  Yes, the SBA can help them with long-term recovery, but the ability of some small businesses to get back to operations quickly can directly help a community recover.  I work with a lot of small communities, many of them serviced by small shops and independent grocers.  There are no big box stores for many, many miles.  For grocers, power outages result in spoiled food.  Road closures result in crippling supply chain problems.  While we’d like all businesses to have mitigation measures and preparedness for disasters, many small businesses simply don’t have the capitol to invest in things like generators and they obviously can’t control road closures.

What’s to be done?  Local municipalities absolutely need to bring these small business owners to the table, establish relationships, identify their needs, and consider identifying them as part of the community’s critical infrastructure.  The resilience of small grocers, lumber companies, and other purveyors is essential to the resilience and recovery of so many small towns.  The impacts are easy to see… if a store can keep running, they are not only providing essential goods and services to the community, they are also supporting the economy by keeping their employees working. What do they need?  Things like power and access, obviously, but tangential things like the availability of child care is huge.  Following disasters schools usually close and often become community shelters. Many parents work when their kids are in school.  If school is closed, they need access to child care.

How far can government go in supporting the private sector?  Many governments tend to avoid supporting the private sector as if it were some kind of disease.  It took many months to convince FEMA in the aftermath of Sandy to make dredging of private marinas eligible for disaster cost recovery.  These marinas (mostly small businesses themselves) support capabilities of fire and police watercraft, recreation (which has economic impact), and a significant fishing and crabbing industry, which is the livelihood of many off and on shore.  Obviously, FEMA needs to maintain accountability of funds and ensure they are being spent appropriately, but a big part of this was resistance to the idea of government providing direct support to the private sector.

While I agree that there are many nuances to this situation, it seems that in many cases the impact of small, local businesses in short-term recovery are disregarded, especially by state and federal governments, and that there exists a one-way door for business participation, where in this ‘partnership’ they are asked to provide goods and services, but how is government contributing to that partnership?  With the big box stores and other large companies, local governments certainly help with some permit expediting and perhaps physical space to set up and access to utilities, there is typically not much support required beyond that.  Small businesses may need more direct support to recover.  They may need help clearing their private access road or parking lot.  They may need the public road they are located on to be cleared for traffic sooner.  They may need a generator that can power their building.  They may need quantities of potable water brought on-site.  Their employees may need child care or public transportation.  These are things they either can’t immediately afford or simply don’t have access to. Local government may have better access to these resources, though, and with the justification of these small businesses providing essential goods and services to the community, the choice is easy.

Does this open government to potential criticism?  Absolutely.  Some business owners may claim discriminatory practices of government supporting some businesses and not others.  Some tax payers may even complain about the use of tax dollars in such a fashion.  While people may always complain, legal consequences and public relations problems should certainly be mitigated.  The road to addressing this is preparedness.  Engage your local attorney and the legal council for the state’s emergency management agency.  Municipal laws and state laws regarding authorities that can be enacted during a state of emergency need to be explored to not only make sure that local government has the legal ability to provide this support, but the conditions and procedures required for doing so.  The legal sources and procedures and standards for providing this support should be documented and made part of the local emergency plan. The municipality should have a criteria for determining what types of businesses could be included in such direct support (what is regarded as the municipality’s privately owned critical infrastructure?), and even outline requirements for those businesses, such as having a business continuity plan, implementing certain resiliency measures, or participating in coordination activities prior to a disaster.  Memoranda of understanding may be required, or other legal tools to identify the terms and conditions of support.

While this type of support from government to the private sector isn’t common, there are some municipalities who do it well.  I’m certainly interested in hearing what you’ve implemented and what best practices you’ve identified.

© 2020 Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC®℠

Thoughts on How to Improve the Planning Standard

I hope everyone is settling into the new year nicely.  One of the things I started off this year doing was going through CPG 101 and providing input to FEMA for the update of this foundational document.  (note: if you haven’t yet, get your comments in now as the deadline is soon approaching!)  CPG 101, and its predecessors, are time tested and well honed in the guidance provided on the process used for planning.  While it’s frustrating to see and hear that some people still don’t use it, that’s no fault of the document itself, but rather one of human implementation, or lack thereof.

I thought I’d share some of the feedback I sent along to FEMA on what I would like to see in the CPG 101 update.  Looking over my submission, there were two main themes I followed:

  1. Integration of other doctrine and standards
  2. Development of job aids to support use and implementation

I feel that integration of other relevant doctrine and standards into CPG 101 is incredibly important.  We know that preparedness covers an array of activities, but planning is the foundational activity, which all other activities reflect upon.  In past articles I’ve addressed the need to identify these various standards collectively, to show that while these are individual activities with their own outputs, identifying how they can and should be interconnected, offering greater value if used together.  Things like Community Lifelines, THIRA/SPR, HSEEP, and Core Capabilities need to not only be mentioned often, but with examples of how they interconnect and support planning and even each other.

Job aids are tools that support implementation.  I think job aids can and should be developed and included in the updated CPG 101 for each step of the planning process.  While some of us write plans fairly often, there are many who don’t or are going into it for the first time.  These are essentially the ideal conditions for job aids.  They help guide people through the key activities, provide them with reminders, and ultimately support better outcomes. Not only would I like to see job aids, such as check lists and work sheets, for each step, I’d also think that something that covers the whole process comprehensively, essentially a project management perspective, would be incredibly helpful to many people.

There were a couple of one-off suggestions that might not fit the categories mentioned above.  One of which was having more emphasis on the value of data from the jurisdiction’s hazard mitigation plan.  The hazard analysis conducted for hazard mitigation planning is considerably thorough, and can provide great information to support a hazard analysis (or even a THIRA for those brave enough) for purposes of emergency planning.  To be honest, this was something I didn’t really learn until about ten years into my career.  Many of the people I learned from in Emergency Management often leaned so far into response that they disregarded the value of things like mitigation or recovery.  I still find this a lot in our profession.  Once I finally took the time to go through a hazard mitigation plan, I realized the incredible amount of information contained within.  In many cases, there is more information than what is needed for the hazard analysis of an emergency plan, as the narrative and analysis in a hazard mitigation plan often goes into a measure of scientific detail, but this, too, can certainly have value for emergency planning.  Similarly, I also suggested that FP 104-009-2 (the Public Assistance Program and Policy Guide) be included as a reference in CPG 101.  Jurisdictions will strongly benefit from having plans, such as those on debris management, meeting FEMA’s reimbursement guidelines.

Lastly, I encouraged FEMA to include any content that will support plan writers in developing plans that are simply more useful.  So many plans are just a lot of boilerplate narrative, that in the end don’t tell me WHO is responsible for WHAT and HOW things will get done.  It’s so easy for us to be dismissive of action steps when writing a plan, assuming that people will know who has the authority to issue a public alert or the steps involved in activating an EOC.  CPG 101 should reinforce the need for plans to define processes and actions, identify authority, and assign responsibility.  Flow charts, decision trees, maps, charts, and other graphics and job aids are incredibly helpful to ensure that a plan is thorough while also being useful.

That’s the feedback I provided to FEMA, along with a bit of narrative as to why those things are important for inclusion in an updated CPG 101.  I’m curious to hear about the feedback that others provided.  We all tackle these documents from different perspectives, and that’s why I truly appreciate the efforts FEMA makes in these public calls for comment when they are updating certain key documents.

© 2020 – Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC®℠

 

A New National Response Framework

Yesterday FEMA announced the release of an updated National Response Framework (the fourth edition).  The most notable changes in this version of the NRF are the inclusion of Community Lifelines and a change to Emergency Support Function (ESF) #14.  Previously, ESF #14 was Long-Term Community Recovery.  With efforts to further engage and coordinate with the private sector in disaster response, ESF #14 has been changed to Cross-Sector Business and Infrastructure.

So what of Long-Term Community Recovery?  The National Disaster Recovery Framework (2016) outlines Recovery Support Functions (RSFs), which, at the federal level, are organized as coordinating structures along with the ESFs.  There are six RSFs, which generally align with the Core Capabilities for the Recovery Mission Area.  For anyone who has worked with FEMA in disaster recovery operations, you know these can be massive organizations, so why create an even large organization?  This structure should support the ESFs in focusing on immediate needs, while the RSFs can address long-term recovery.  When the Federal disaster response organization is initially set up for a disaster, the ESFs are immediately put to work to support state and local emergency needs.  In this phase, the RSFs are able to organize, gather data, and plan for eventually being the lead players as response transitions to recovery.  Recovery is very much a data-driven operation.  As this transition occurs, with the RSFs taking over, many of the ESF resources can be demobilized or tasked to the RSFs.

What does this mean for states and locals?  Fundamentally, nothing.  States simply need to have an appropriate interface with the new ESF #14.  Do states and locals need to mirror this organization?  No, and in fact most of the time when I see an organization centered around ESFs, I tend to cringe.  The ESF/RSF system works for the federal government because of the multitude of federal agencies that have responsibility or involvement in any given function.  Fundamentally, ESFs/RSFs are task forces.  Recall the ICS definition of a task force, being a combination of resources of varying kind and type.

Certainly, most local governments, aside from perhaps the largest of cities, simply don’t have this measure of complexity and bureaucracy.  It can work for some state governments, but for many it may not make sense.  Let’s consider ESF #1 – Transportation.  How many state agencies do you have that have responsibility and assets related to transportation?  In some states, like New York, there are many, ranging from State DOT, NYS Parks, the Thruway Authority, and the multitude of other bridge, road, and transit authorities in the State. Smaller states may only have a State DOT.  One agency doesn’t make a task force.  There are other options for how you organize your emergency operations plan and your EOC that can make more sense and be far more effective.  Essentially what I’m saying is to not mirror the way the feds organize because you think you have to.  All plans must be customized to YOUR needs.

On to the integration of community lifelines.  The goal of the new ESF #14 is to not only engage the private sector, but also coordinate cross-sector operations for stabilizing community lifelines.  I’m interested to see how this plays out, since the community lifelines are already addressed by other ESFs, so I suspect that once the new framework is tested, there may be some supplemental materials that come out to balance this.  That said, the integration of community lifelines is a good thing and I’m glad to see this gaining more traction and truly being integrated rather than existing as a good idea that’s never actually tasked.  Integration of community lifelines is something that every state and local government can at least track, if not take action on, depending on their capability and resources.  The updated NRF added some additional context to community lifelines, with information that supports integrating this concept into planning, response, and recovery.  I happen to appreciate this community lifeline focused timeline that is in the NRF.

While the focus of the NRF is on how the federal government will response, it is intended to be reflective of a whole community response.  It doesn’t necessarily provide guidance (nor should it) on planning, but it certainly serves as a reference.  Since it seems the feds are going all in on the community lifeline concept, I urge state, local, tribal, and territorial governments to examine how they can integrate them into your operations.  That all starts with planning.  It may begin as a function of situational awareness, but then what actions should a jurisdiction take when lifelines are impacted?  Even if a jurisdiction doesn’t have the capabilities to address the root cause, they still need to address the affects.

What thoughts do you have on the NRF update?

© 2019 – Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC

A New Vision for ICS Training

Yep, I’m still at it.  It seems with every post about the condition of Incident Command System training as we know it, I’m able to draw more people into our cause (aka the Crusade).  While I’ve never espoused there to be an easy solution, the training that we currently provide for ICS falls well short of doing us any favors.  People walk out of each subsequent training course with a marginally increased understanding of the system and how to use it.  And that’s really the fundamental problem, isn’t it?

Perhaps at some point, someone had the idea of developing ICS 100-400 to be knowledge-based courses, with position-specific training to be more about application.  Unfortunately, that’s a significant disservice to responders and the populations they serve, which was further exacerbated by the NIMS training requirements, creating a type of a false sense of security in which people believed that they have ‘been trained in ICS’, therefore all is well in the world.  Responders, in the broadest sense, at supervisory levels within every community should be trained not only in what ICS is but also how to implement it.  Not every community, for a variety of reasons, has reasonable access to position-specific training, so the core ICS curriculum absolutely MUST do a better job in teaching them how to implement the system.

This also goes further than just training.  ICS, like so many other things, is a knowledgebase that tends to degrade over time.  Without practice, you tend to lose the skills.  This is how people who are on Incident Management Teams or those who work regularly in an ICS-based Emergency Operations Center are so well practiced in the system.  In the absence (hopefully!) of actual incidents, planned events and exercises go a long way to keeping skills sharp.  Even those, however, can get costly and time-consuming to design and conduct.  Enter the hybridization of scenario-based training, which is something I’ve written on in the past.  Not only do we need to include more scenario-based training in everything, we need to include a scenario-based ICS skills refresher course as part of the core ICS curriculum.

While I continue to have various thoughts on what there is to be done with the ICS curriculum as a whole, here is my current vision…

ICS-100: (What is ICS?)  Pretty much keep this as is, with options for on-line and classroom delivery.  The purpose of this course is to serve as an introduction to ICS concepts for those who are likely to come into contact with it and work in lower levels within the system.  This is levels one (knowledge) and two (comprehension) of Bloom’s taxonomy.  It shall serve as a prerequisite to further ICS classes as it provides much of the fundamental terminology.

ICS-200: (How do I work within the system?)  Tear down/burn down/nuke the on-line version and never look back.  Simply making it ‘more accessible’ doesn’t mean that it’s good (it’s not).  The purpose of this course is to expand on knowledge and begin to approach functionality.  I expect content to reach deeper than what is currently within the course.  Without looking at specific content areas, I envision this course to be mostly level two (comprehension) of Bloom’s taxonomy with some touches on level three (application).  Perhaps the only level one content that should be introduced in this course are some fundamentals of emergency management.  Some of the content areas currently in the ICS 300 absolutely need to be moved into the ICS 200 to not only make the ICS 200 more impactful, but to also set up the ICS 300 as being fully focused on implementation of the system.  Expanded content may mean taking this course to a duration of up to three days (it even feels taboo writing it!). ICS 100 (taken within six months) is a prerequisite.

ICS-300: (How do I manage the system?) The most recent update of the ICS 300 course begins to approach the vision for what we need, but more work needs to be done.  This course needs to be much less about the system and more about how to IMPLEMENT and MANAGE the system.  This course is firmly rooted in level three (application) of Bloom’s taxonomy, with perhaps some level four objectives, which gets into analysis (troubleshooting and creative solutions… because that’s what emergency management is really all about!).  Much of this course is scenario-based learning centered on implementation and management of an incident through the use of ICS.  Less instruction, more guidance.  And because, at this point, ICS isn’t the only thing at play in real life, concepts of broader incident management are also applied.  ICS 200 is naturally a prerequisite, and should have been taken within a year.

ICS Implementation Refresher Course: This would be designed as a post- ICS 300 course, taken every year or two.  Reasonably, this can be accomplished in a day of intensive scenario-based training.

ICS-400: (A prerequisite for position-specific training).  Eliminate this from the core curriculum.  Seriously.  Most of the current content of this course is not needed in the core ICS curriculum.  Time is better spent in a more intensive ICS 300 course than teaching people about some (largely) obscure applications of ICS which are usually only ever performed by incident management teams.  The current content is largely fine, it just has such little impact on local implementation of ICS and is really rather awkward within the continuity of the curriculum.

Thoughts and feedback are always appreciated.  If we are to succeed and build a better mouse trap, it will be through dialogue and sharing of ideas.

© 2019 – Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC®

Spreading the Word

Some of you may have noticed that Lucien Canton, who writes the monthly Emergency Management Solutions newsletter, has featured some of my articles over the past few months.  (Thanks Lu!)

While Lu and I have never met, we have periodically corresponded over the past several years.  He is a highly experienced emergency manager and consultant, speaker, and author in the field, who, like me, has a passion for writing.  He covers a variety of topics in his newsletters and articles, from emergency management, to business acumen, and more.  Lately, he has been kind enough, in the collaborative nature of emergency management, to feature other bloggers, such as me, in his newsletter as well.

You can check out his current and past newsletters and featured articles here, along with other services and materials he offers.  Be sure to subscribe to this newsletter, which has great information every month!

-TR