NIMS Implementation Objectives and A Shot of Reality

Happy 2018 to all my readers!  Thanks for your patience while I took an extended holiday break.  A minor surgery and the flu had sidelined me for a bit, but I’m happy to be back.

This morning, FEMA issued NIMS Alert 01-18: National Engagement for Draft NIMS Implementation Objectives.  NIMS Implementation Objectives were last released in 2009, covering a period of FY 2009-FY2017.  With the release of the updated NIMS last year, FEMA is updating the implementation objectives and has established a national engagement period for their review.

So first, a bit of commentary on this document…

The new objectives are broken out by major content area of the updated NIMS document, including: Resource Management, Command and Coordination, and Communication and Information Management; as well as a General category to cover issues more related to management and administration of the NIMS program.  What we also see with these updated objectives are implementation indicators, which are intended to help ground each objective.  Overall, the number of objectives in this update has been cut in half from the 2009 version (28 objectives vs 14 objectives).

All in all, these objectives appear to be consistent with the current state of NIMS implementation across the nation.  They are certainly suitable for most matters in regard to the oversight of implementing NIMS and it’s various components.  The biggest sticking point for me is that this document is intended for use by states, tribal governments, and territories.  If the goal is to have a cohesive national approach to implementation, I’d like to know what the implementation objectives are for FEMA/DHS and how they compliment those included in this document.

Objectives 8 through 11 are really the crux of this document.  They are intended to examine the application of NIMS in an incident.  These objectives and their corresponding indicators (which are largely shared among these objectives) are the measure by which success will ultimately be determined.  While it’s a good start for these to exist, jurisdictions must be more open to criticism in their implementations of NIMS and ICS.  In addition, there should be an improved mechanism for assessing the application of NIMS and ICS.  While formal evaluations occur for exercises under the HSEEP model, we tend to see inconsistent application of the feedback and improvement activities to correct deficiencies.  Proper evaluations of incidents, especially at the local level, are often not performed or performed well. For those that are, the same issue of feedback and improvement often stands.

Extending this discussion into reality…

The reality is that many responders are still getting it wrong.  Last year my company conducted and evaluated dozens of exercises.  Rarely did we see consistently good performance as far as NIMS and ICS are concerned.  There are several links in this chain that have to hold firm.  Here’s how I view it:

First, the right people need to be identified for key roles.  Not everyone is suited for a job in public safety or emergency management in the broadest sense.  Organizations need to not set up individuals and their own organization for failure by putting the wrong person in a job.  If a certain job is expected to have an emergency response role, there must be certain additional qualifications and expectations that are met.  Further, if someone is expected to take on a leadership role in an ICS modeled organization during an incident, there are additional expectations.

Next, quality training is needed.  I wrote a couple years ago about how ICS Training Sucks.  It still does.  Nothing has changed.  We can’t expect people to perform if they have been poorly trained.  That training extends from the classroom into implementation, so we can’t expect someone to perform to standards immediately following a training course.  There is simply too much going on during a disaster for a newbie to process.  People need to be mentored.  Yes, there is a formal system for Qualification and Certification in ICS, but this is for proper incident management teams, something most local jurisdictions aren’t able to put together.

Related to this last point, I think we need a new brand of exercise.  One that more instructional where trainees are mentored and provided immediate and relevant feedback instead of having to wait for an AAR which likely won’t provide them with feedback at the individual level anyway.  The exercise methodology we usually see applied calls for players to do their thing: right, wrong, or otherwise; then read about it weeks later in an AAR.  There isn’t much learning that takes place.  In fact, when players are allowed to do something incorrectly and aren’t corrected on the spot, this is a form of negative reinforcement – not just for that individual, but also for others; especially with how interrelated the roles and responsibilities within an ICS organization are.

While I’m all for allowing performers to discover their own mistakes and I certainly recognize that there exist multiple ways to skin the proverbial cat (no animals were harmed in the writing of this blog), this is really done best at a higher taxonomy level.  Many people I see implementing portions of ICS simply aren’t there yet.  They don’t have the experience to help them recognize when something is wrong.

As I’ve said before, this isn’t a school yard game of kickball.  Lives are at stake.  We can do better.  We MUST do better.

As always, thoughts are certainly appreciated.

© 2018 – Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC SM

 

 

Learning From a 10-Year-Old Report

I’ll admit that I’m often dismissive of information, especially in the field of emergency management and homeland security, if it’s over 10 years old.  There is a lot that’s changed in the past 10 years, after all.  But, realistically, for as much as we’ve changed, things have stayed the same.  Arguably, the first decade of this millennium saw much more change in EM/HS than the second decade has, at least so far.  The first decade saw events like 9/11 and Hurricane Katrina.  Yes, there certainly have been major events in this second decade, but none, it seems, were as influential to our field of practice than those in the first decade.

It’s important to reflect upon lessons observed and to examine what lessons we’ve actually learned.  How far have we come in implementing improvements from the 9/11 Report?  What still needs to be accomplished to meet the intent of the Post-Katrina Emergency Management Reform Act (PKEMRA)?  Perhaps when I have some time to devote I’ll review those documents again and look on them reflectively and provide my thoughts here.

Yesterday I received the latest email from DomesticPreparedness.com.  I refer often to their work in my articles.  This weekly brief included an article from one of my favorite authors in this field, John Morton.  I’ve referenced his work in a few of my past articles.  This article, titled The What If Possibility: A Chilling Report, talks about planning for a rogue nuclear attack, the likely lead role the federal government would have to take in response to such an attack (versus a locally-led response), and what the situation would be the day after.  With the threat of North Korean nuclear weapons capability looming, this article was an interesting read and spot-on.  I noticed a problem, though… It referenced Ash Carter as an assistant secretary of defense in the Clinton administration.  While this was true, Carter’s highest office was SecDef under President Obama.  Surely John Morton, with his incredible attention to detail that I’ve come to recognize couldn’t have made this error.

Nope.  No error on his part.  I looked at the date of the article.  June 27, 2007 – over a decade old.  Incredibly, this article is still highly relevant today.  The article does reference the drafting of certain federal plans for nuclear attack.  Plans which I am not privy to, but that must assuredly exist today.  I’m curious as to the model these plans follow, what has been learned from exercising them, and how we might be able to apply elements of these plans to other catastrophic occurrences.

Despite change, so much seems to stay the same. Of course a decade isn’t that long.  Given that emergency management and homeland security are primarily government roles, we have to acknowledge that the (usually necessary) bureaucracy simply doesn’t move that quickly.  Unfortunately, there are things we are far too slow to adopt, not just from a government perspective, but socially.  As a lover of history and sociology, I see lessons observed from the 1900 Galveston hurricane as well as the eruption of Mt Vesuvius in 79 CE.  There is much that history can teach us, if we are willing to listen. Lessons observed, but not learned.

© 2017 – Timothy Riecker

Emergency Preparedness Solutions, LLC

Private Sector Logistics Support for Disasters, aka. To Stockpile or Not to Stockpile

I recently had an article brought to my attention by my friend Keri.  The article is titled Home Depot or Homeland Security and is written by Max Brooks. Before I dive into some commentary on the article and related matters, I want to give a bit of an introduction of Max Brooks.  While many of you may not know of him, you might know of his work; and I’m quite sure you know of his father and his father’s work.  What seems so unlikely is that this article, and others, have been written by Max for West Point’s Modern War Institute.

Max Brooks is the author of, among other books, the New York Times best seller World War Z.  His father is Mel Brooks, who, in my opinion, is the greatest comedic writer and director of all cinema.  Max is a non-resident fellow at the Modern War Institute (MWI).  He has published three zombie-themed books: World War Z, the Zombie Survival Guide, and The Zombie Survival Guide: Recorded Attacks.  I’ve written in the past about the perspective that unorthodox scenarios can bring to homeland security and emergency management.  Max’s writings inspire just that, bringing him to be recognized by the MWI and Naval War College.  You can check out his biography and other information about him here.

As a fellow of the MWI, Max Brooks has been working on a series of lectures and papers.  The one I’m discussing here was posted about a year ago by the MWI.  In his paper, he briefly outlines the role of the Defense Logistics Agency and the importance of the private sector in supporting disaster response and recovery as well as the military.  He smartly identifies this as a potential vulnerability, but I’ve also seen first-hand the reality behind it.

During the 9/11 response, a representative from Grainger sat in the Logistics Section of the NYS Emergency Operations Center.  While the State of New York owns a lot of resources, the availability of those resources, the practicality of moving those resources, and the timeliness of getting those resources to where they were needed (generally the metro-NYC area) sometimes wasn’t workable, despite the nature of the emergency – especially when those resources are more in the nature of supplies and small equipment, and needed in mass quantity.  With several warehouses in and around the metro-NYC area, Grainger could have orders processed and delivered quickly and efficiently.  The same holds true for other companies, which were also leveraged during this response.

Stockpiling is a smart practice, but it needs to be looked at from a practical and fiscal perspective.  The Civil Defense era saw a lot of stockpiling.  Food, water, cots, blankets, radiological detection equipment, fuel, and other supplies.  Most of this went unused for years until officials saw the utility of drawing on these stockpiles in times of natural disaster.  Still, food and water have a shelf life, as does fuel.  Stocks had to be rotated to ensure viability.  Rodents, insects, and water damage goods like cots and blankets.  Mechanical equipment needs to be maintained, even in dis-use.  The physical space, money, and people needed to manage these rarely used stockpiles have a limited return.

Still, stockpiling is a good thing.  You just have to be smart about what you stockpile and where you position it.  Many states maintain several emergency equipment stockpiles.  The purpose of the stockpiles is to support local governments in extended life-safety activities.  Generators, chain saws, and potable water distribution are among the equipment available.  These do, indeed take up space and require regular maintenance.  The prevalence of floods and storms in the northeast, however, make these high demand items by local governments.  The positioning of the stockpiles helps ensure a timely delivery, often with the support of other state agencies.

There are limits, though, to the ability of a government agency to store, maintain, and distribute supplies and equipment.  Some aren’t often requested, so don’t make sense to stockpile.  Others have such a short shelf life or require expensive maintenance that don’t make financial sense.  Still others may very often be available locally, albeit by the private sector.

Emergency management agencies in recent years have not only looked to private vendors to support supply needs, they have also looked to the private sector to model the management of logistics and resource tracking.  Companies like FedEx or UPS, despite leaving my packages at the wrong door, do an unparalleled job of moving and tracking goods.  Companies like WalMart and Target, who are often victims of local disaster impacts themselves, have a presence in disaster areas to not only restore their own operations, but to also provide as much as they can to communities in need.  Lowes and Home Depot have been better able to meet demands prior to and following disasters with tarps, building materials, generators, and sump pumps.  Despite improvements, the bureaucracy of government simply doesn’t have the capability or capacity to move the quantity of goods needed.

While I acknowledge that there is some vulnerability, as Max Brooks points out, in having a third party as a critical component of your supply chain, we also have strength and efficiency through these partnerships.  Emergency management must continue working with private sector partners, locally, nationally, and internationally to strengthen these partnerships and support the private sector in supporting response and recovery endeavors.

What are your thoughts on the depth of involvement of the private sector in supporting response and recovery?  Do we rely on them too much?  If so, what’s our alternative?

© 2017 – Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC

 

Taking Care of Your Staff After a Disaster

We are slowly seeing Continuity of Operations (COOP) Plans becoming more popular for organizations ranging from government, private sector, and not for profit.  There are numerous lessons learned that promote the benefits of these efforts to reduce the impacts from an incident on your organization, decrease down time, and increase the overall chances of your organization surviving a disaster.  Most COOP plans, however, are focused on organizational operations and mission essential functions, which is great, but organizations must remember that none of these can be performed without staff.

The ability of an organization to care for its staff, to the greatest extent possible, will not only support the organization’s recovery, it’s also the right thing to do.  Consider that taking care of staff also includes taking care of their families.  It’s difficult for a staff member to come to work focused on your mission when they have family members endangered by a disaster.

What can you do?  I don’t think anyone expects their employer to take care of all needs, but a bit of support and understanding go a long way.  If your organization has a direct role in emergency or disaster response or recovery, the support you provide your staff is even more critical.  While I have a number of tips and lessons learned from my own experiences on this, I came across a paper recently published by the US Department of Health and Human Services (HHS) Office of the Assistant Secretary for Preparedness and Response (ASPR).  While ASPR’s mission is to support hospitals and other healthcare facilities, this four-page document provides great information for all organizations.

Remember – the time to prepare is now!

© 2017 – Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC

Congressional Primer on Responding to Major Disasters and Emergencies

I believe the Congressional Research Service (CRS), which is a research arm of the Library of Congress, publishes an updated version of this document for each Congress.  While the primary audience is Congressional representatives, it provides a good overview of disaster response fundamentals and the relationship between the federal and state/territorial/tribal governments which can be a good reference for many, including practitioners, students, state and local officials, and members of the media.

Give it a look and pass it on to others.

https://www.hsdl.org/?abstract&did=804217

– TR

Nationwide EAS Test Scheduled

From FEMA~

Mandatory Nationwide Test of the Emergency Alert System to be Conducted September 27

The Federal Emergency Management Agency (FEMA), in coordination with the Federal Communications Commission (FCC), will conduct a mandatory nationwide test of the Emergency Alert System (EAS) on September 27, 2017 at 2:20 pm EDT. The test will assess the readiness for distribution of the national level test message, as well as verify its delivery.

The EAS test is made available to radio, television, cable, and direct broadcast satellite systems, and is scheduled to last approximately one minute. The test’s message will be similar to the regular monthly test message of the EAS with which the public is familiar, only inserting the word “national.” “This is a national test of the Emergency Alert System. This is only a test.”

Significant coordination and regional testing has been conducted with the broadcast community and emergency managers in preparation for this EAS national test. The test is intended to ensure public safety officials have the methods and systems that will deliver urgent alerts and warnings to the public in times of an emergency or disaster. Periodic testing of public alert and warning systems is also a way to assess the operational readiness of the infrastructure required for the distribution of a national message and determine whether technological improvements are needed.

Conducting the test following Hurricanes Harvey, Irma, Jose, and Maria will provide insight into the resiliency of our national-level alerting capabilities in impacted areas. The test will also provide valuable data into how the Integrated Public Alerts and Warning System performs during and following a variety of conditions. With two major hurricanes already making landfall, and a potential for two more impacting our nation, we need to have the ability to maintain the continuity of critical infrastructure under various conditions.

Receiving preparedness tips and timely information about weather conditions or other emergency events can make all the difference in knowing when to take action to be safe. FEMA and our partners are working to ensure alerts and warnings are received quickly through several different technologies, no matter whether an individual is at home, at school, at work, or out in the community. The FEMA App, which can be downloaded on both Android and Apple devices, is one way to ensure receipt of both preparedness tips and weather alerts. The FEMA App can be downloaded at https://www.fema.gov/mobile-app.

The back-up date for the test is October 4, 2017, at 2:20 pm EDT, in case the September 27 test is cancelled. More information on the IPAWS and Wireless Emergency Alerts is available at https://www.ready.gov/alerts.

This is the third mandatory nationwide test of the EAS. The first test was conducted in November 2011, in collaboration with the FCC, broadcasters, and emergency management officials. The second mandatory test was conducted in September 2016. You can also access a video, FEMA Accessible Emergency Alert System IPAWS Test Message, in American Sign Language.

In 2007, FEMA began modernizing the nation’s public alert and warning system by integrating new technologies into the existing alert systems. The new system, known as IPAWS became operational in 2011. Today, IPAWS supports more than 900 local, state, tribal, and federal users through a standardized message format. IPAWS enables public safety alerting authorities such as emergency managers, police, and fire departments to send the same alert and warning message over multiple communication pathways at the same time to citizens in harm’s way, helping to save lives. For more information on FEMA’s IPAWS, go to: www.fema.gov/ipaws. For more preparedness information, go to www.ready.gov.

Is New Media Really Journalism?

This is a concept I’ve been struggling with for a while.  I see bloggers, podcasters, and YouTubers portray themselves as journalists quite often.  But are they?

The more traditional part of me wants to laugh at their pipe dream, considering that newspapers, TV and radio, and magazines fit into the definition of media and journalism that I’ve had most of my life.  But times, they are a changin’.  The term ‘new media’ isn’t new anymore.  Bloggers, podcasters, and YouTubers, as a whole, are mainstream and it appears they are here to stay.

While I’ve seen this on occasion in governmental and emergency management media relations, I see this most often in another facet of my life – pop culture.  Along with being a blogger on emergency management and homeland security matters, I’m also a co-host on several pop-culture and entertainment related podcasts.  Looking at things like fan conventions (think ComicCon and similar events), dozens and even hundreds of media badges are given to bloggers, podcasters, and YouTubers.  While some media credentials go to more traditional media outlets, the proportion is rather staggering.  In entertainment and pop culture this makes sense to a great extent.  Many who pay heed to pop culture also seem likely to consume blogs, podcasts, and YouTube content.  It’s also not necessarily location-bound (i.e. following a new media provider because they are local to you and report on local things – although some do).  The free media badges given out by convention organizers turns into free promotion of the goings-on of their events – so it makes sense, but what are the limits?  The sheer number of people applying for media badges for these events is staggering, and many are denied.

Why is new media so popular?  On the provider end, the barriers to entry are insanely low.  Generally, you need a computer, an internet connection, and an account to whatever portal you want to push your content through.  There are a few other resources needed depending on the actual medium, such as cameras and microphones, editing software, etc., but good quality in all of these can be found at very reasonable prices.  You can also go really lean and do it all from your smart phone.  Certainly there are the intangibles such as talent, good ideas, and persistence, which all tends to cull the herd.

On the consumer end, people crave new media content to read, hear, or see more about the things that entertain and interest them.  Despite things said about people’s attention spans, most blogs I read (as well as my own) have a reasonable length to them.  Most podcasts run 30-90 minutes.  YouTube videos tend to be shorter, but obviously tend to have a higher production value.  There is also a huge variety of new media available, with differing opinions and formats, and generally something for everyone.

But the question still remains, is new media actually journalism?  Obviously, I haven’t missed the irony in this.  Despite having and maintaining a blog for several years as well as my involvement in podcasts, I don’t consider myself a journalist.  At best, I’m an op-ed writer on the blogging side; and whatever the equivalent is on the podcasting side.  I appreciate that people value the content and opinions I put out there, but I’m no Walter Cronkite (really who is, but Walter himself?).

At the risk of taking heavy fire from my fellow bloggers and podcasters, I’m reluctant to broadly categorize much of new media as journalism.  It just seems there needs to be something that qualifies you to use the title.  I’m not saying a certification or anything bureaucratic like that, but honestly I don’t know what it should be.  When any person on any given day with little investment can suddenly announce that they are a journalist (or honestly anything), that tends to not sit well with me.  There needs to be a demonstration of commitment and professionalism.

There are some bloggers, podcasters, and YouTubers that I would consider journalists because of their longevity, their professionalism, and their following, but these are few.  I think most new media folks are entertainers.  Some are informers, yet still not journalists.  But there are some that are journalists, and they should be respected as such.

On the event management side of this (both in regard to pop culture as well as emergency management), where does the paradigm sit and does it need to change? How do you determine who you will give a media badge to?  In emergency management and government as a whole, it’s long been a best practice to maintain positive relationships with media outlets.  What kind of relationships, if any, are you maintaining with bloggers, podcasters, and YouTubers?  Do you need to?

I’m interested in thoughts and opinions on this – from everyone.  Are you a producer of new media – Do you consider yourself a journalist?  Are you a traditional journalist – what’s your take on this?  On the government and emergency management side – are you involved in media relations, and if so, what are your ideas?  Are you not involved in either, but have an opinion?  Please share it!

© 2017 – Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC

 

Exercises: Simple is Usually Better

I find often that people want to run exercises they aren’t quite ready for.  Sometimes those exercises are too complex, or they simply aren’t the appropriate type.  Most often, we run exercises to test plans, policy, and procedures; but sometimes those plans, policies, and procedures aren’t quite ready to be tested.  Last year I advised a client to run a workshop instead of a tabletop exercise.  The initial goal of the tabletop was to validate a new plan, but this plan wasn’t ready to be validated.  The problem was that many stakeholders hadn’t yet seen the plan, and the review of that plan by our team in preparedness for the exercise wasn’t favorable.  The plan had much of the needed content, but it was disjointed and didn’t have any logical flow.  By conducting a scenario-based workshop, we were able to identify not only the ideal flow of the plan by flagging benchmark activities, but we were also able to discuss expectations of and for each stakeholder agency in the plan.  The client was then able to apply the results of the workshop to restructure their plan and make some needed substantive changes.

Similarly, I’ve encouraged a current client to conduct a workshop instead of a tabletop.  The initial goal of this tabletop was to identify how a new group of stakeholders could integrate into an existing plan.  In this situation, the tabletop would have been less than effective as the new stakeholder group isn’t yet identified in the plan.  The outcome of the workshop will be to identify how this integration can occur.

I think that sometimes people gravitate to certain exercises simply because they are more popular in a certain application.  That preconceived notion might be too complex or simply a poor choice for what you really need to accomplish.  When it comes to discussion-based exercises, most people default to a tabletop.  With operations-based exercises, it can vary.  Drills are often used for tactical applications, but we don’t see them as much in EOCs.  Drills certainly have a place in an EOC if you are looking to test a very specific function or activity.  While full-scale exercises are fun and sexy, I’ve been to the site of plenty that are total chaos because the fundamental premise of certain plans hasn’t been worked out (or some stakeholders aren’t familiar with them), which perhaps should have been done through a discussion-based exercise or a drill or functional exercise first.  Running a drill to test and familiarize the process of setting up key equipment prior to doing it for the first time in a full scale will pay a lot of benefits, and certainly prevent dozens or hundreds of other people being held up in a full scale.

Another issue I often see with exercises is very long and complex Master Scenario Events Lists (MSELs).  The MSEL is essentially the timeline or script of the exercise.  Along with listing all injects, it also identifies all benchmarks in the management of the exercise, such as StartEx and EndEx, and the introduction of new elements or transition to a different segment.  While there is no particular rule of thumb for how many injects are needed for different exercise types, everything needs to associate back to the objectives of the exercise.  I hate injects that are crafted simply for ‘noise’ (unless it’s an intel exercise), or injects intended to just give someone something to do.  Arguably, if the participants take an exercise seriously, such as a functional exercise, and play out the situation as they would in real life, you can engage an entire EOC for a few hours with even ten well-crafted injects.  While some functions are very focused, consider that the vast majority of what we do in emergency management requires coordination among a variety of elements and functions.  Capitalize on that.  One inject may engage multiple agencies or functions because of the need to coordinate and problem solve.  It’s not enough to identify a solution to the problem, but work through where the resources will come from, how they will get to where they need to go, and what support is needed for them and how long.  That’s a lot of problems to solve and will often transcend every function within the incident command system.  Exercises don’t need to be complex to be effective.  Create a handful of objectives and make sure everything relates back to them.  Simplicity can work.

My last recommendation is to keep your exercise planning team a manageable size.  I’ve been the lead planner for some very large exercises.  These exercises, largely due to their sponsors, ended up involving massive exercise planning teams – and by massive I mean over five or six dozen people – or more.  These are just sheer insanity.  Not every agency or organization involved in the exercise needs to be directly represented, nor does each organization need to send a small army of people.  What you do need is consensus from those organizations on the objectives and their scope of play.  That doesn’t mean they have to be involved in every aspect of planning the exercise.  Just like any other meeting or group project, a large exercise planning team can be cumbersome and management by committee is never efficient.  If need be, stakeholder groups can be developed based upon function.  For example, a fire service exercise planning team would develop their contributions to the exercise.  Just make sure that these groups are well coordinated and the overall exercise planning effort is unified, otherwise you’ll end with a disjointed exercise effort.

In the end, simplicity rules.  As you begin planning your exercise, consider, in every step if it can or should be simplified.  Always refer back to your intent and your objectives.  Chances are you can create a simpler exercise that is just as impactful, or perhaps more impactful.  When our inclination is to make things overly complicated, we often miss the point entirely.

© 2017 – Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC

 

 

Awareness of Public Health Preparedness Requirements – CMS

Emergency management and homeland security are collaborative spaces.  Think of these areas a Venn diagram, with overlapping rings.  Some of the related professions overlap with each other separately, but all of them overlap in the center.  This overlap represents the emergency management and homeland security space.  What’s important in this representation is the recognition that emergency managers and homeland security professionals, regardless of what specific agency they may work for, need to have awareness of that shared space and the areas of responsibility of each contributing profession.  One of the biggest players in this shared space is public health.Presentation1

For nearly a year, public health professionals have been talking about new requirements from CMS, which stands for The Centers for Medicare and Medicaid Services.  How does Medicare and Medicaid impact emergency management?  CMS, part of the Department of Health and Human Services (HHS) covers over 100 million people across the US – far more than any private insurer.  As an arm of HHS and a significant funding stream within public health, they set standards.

The most relevant standard to us is the Final Rule on Emergency Preparedness Requirements for Medicare and Medicaid Participating Providers and Suppliers.  The rule establishes consistent emergency preparedness requirements across healthcare providers participating in Medicare and Medicaid with the goal of increasing patient safety during emergencies and establishing a more coordinated response to disasters.

The CMS rule incorporates a number of requirements, which include:

  • Emergency planning
  • Policies and procedures
  • Communications planning with external partners
  • Training and exercises

These are all things we would expect from any emergency management standard.  Given the different types of facilities and providers, however, the implementation of the CMS rule can be complex.  A new publication released by the HHS ASPR (Office of the Assistant Secretary for Preparedness and Response) through their TRACIE program (Technical Resources, Assistance Center, and Information Exchange), provides some streamlined references to the CMS rule.  It’s a good document to study up on and keep on hand to help keep you aware of the requirements of one of our biggest partners.

© 2017 – Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC

Public Area Security National Framework

The Transportation Security Administration (TSA) recently released this report in cooperation with a variety of stakeholders which provides information and guidance on preparedness, prevention, and response activities to strengthen the public spaces of transportation venues.  While the focus of the document is on airports, the information in the document is great not only across all transportation venues, but other public spaces as well.  I think there are great takeaways for other areas of vulnerability, such as malls, convention centers, event spaces, and others.

To be honest, there is nothing particularly earthshattering in this document.  The document is brief and identifies a number of best practices across emergency management and homeland security which will help agencies and organizations prevent, protect, prepare, and respond to threats, particularly attacks.  That said, the document does accomplish providing concise information in one document on key activities that absolutely should be considered by entities which control public-access spaces.  I would also suggest that this document is still 100% relevant to those which have some access controls or entry screenings.

Information in the document is segmented into three key tenets: Information Sharing, Attack Prevention, and Infrastructure and Public Protection.  Within these tenets are found recommendations such as relationship building, communication strategies, vulnerability assessments, operations centers, planning, training, and exercises.  Most of the recommendations provide examples or leading best practices (although no links or sources of additional information, which is a bit disappointing).

The framework is worth a look and can probably serve as an early foundation of activity for those who haven’t yet done much to prepare their spaces for an attack.

© 2017 – Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC