NIMS Change – Information and Communications Technology Branch

FEMA recently released a draft for the National Incident Management System (NIMS) Information and Communications Technology (ICT) guidance, providing a framework for incorporating ICT into the Incident Command System (ICS). The draft guidance in many ways formalizes many of the functional changes ICS practitioners have been incorporating for quite a while.

Essentially, the guidance creates an ICT branch within the Logistics Section. That branch can include the traditional Communications Unit as well as an Information Technology (IT) Service Unit. They also make allowances for a Cybersecurity Unit to be included the branch – not as an operational element for a cyber incident, but largely in a network security capacity. The creation of an ICT branch is also recommended for emergency operations centers (EOCs), regardless of the organizational model followed.

The IT Service Unit includes staffing for a leader, support specialists, and a help desk function, while the Cybersecurity Unit includes staffing for a leader, a cybersecurity planner, a cybersecurity coordinator, and a cyber support specialist. The position descriptions and associated task books are already identified pending final approvals and publication of this guidance, with the Cybersecurity and Infrastructure Security Agency (CISA) seemingly ready to support training needs for many of the new positions.

I’m fully in support of this change. FEMA is accepting feedback through October 20, 2022, with instructions available on the website provided previous.

Not being a communications or IT specialist myself, I’m interested in the perspectives of others on this.

© 2022 Tim Riecker, CEDP

Emergency Preparedness Solutions, LLC®

New EOC Toolkit Documents

FEMA announced the release of five EOC Toolkit documents on their website. In downloading these documents, I’m actually finding six documents, all with file dates of January 8, 2021. What’s there:

  • Tips for Healthcare Professionals: Coping with Stress and Compassion Fatigue
  • Tips for Disaster Responders: Preventing and Managing Stress
  • An Exercise for Creating Position Task Books from EOC Skillsets
    • Exercise Cards for the above referenced exercise (probably why they indicate only five documents, though this is a separate download)
  • EOC Financial Tools Reference Fact Sheet
  • EOC Operations Period Briefing Template

A quick review:

Coupling together the Tips for Healthcare Professionals and Tips for Disaster Responders as they both deal with workplace stress; these are really good documents that provide information, tools, and resources for recognizing and managing stress. Both are developed by the HHS Substance Abuse and Mental Health Services Administration. What I’d like to see, though, are documents actually developed for EOCs. It might seem a bit petty, while nearly 100% of the information in these documents is applicable to an EOC environment, this is yet another example of emergency management needing to borrow best practices from others and not getting something of our own. A simple change in the title and focusing the scope of the documents can go a long way. I would hope that FEMA and the National Integration Center would be supporting emergency management a bit more by at least giving us things that are intentionally developed for us.

I’m also coupling together the two documents of the EOC Skillsets Exercise instructions and cards; the purpose of the exercise is to create position task books (PTBs) from the list of EOC Skillsets. The exercise is used to help familiarize participants with the EOC Skillsets and to give leaders a practical, scenario-based experience in building position qualifications based on an organization’s needs and resources. I’ll be honest that I have some mixed feelings about this. I’m not sure of the real value of this exercise. Sure it’s nice to teach people new things and an exercise like this can be useful for getting buy-in on the qualifications certain positions should have, but the EOC Skillset Guide already gives us alignment of the EOC Skillsets for each of the primary EOC positions for the common, NIMS-identified EOC model organizations. That said, if your EOC has an organizational deviation from these models, the exercise could be helpful.

The EOC Financial Tools Reference Fact Sheet is a pretty good overview and list of resources for incident financial management, including guidelines and practices for reimbursement. A solid document. I think the document could be expanded upon by some experienced Finance/Admin Section Chiefs, Public Assistance SMEs, and Individual Assistance SMEs – to not only provide additional information, guidance, and tools, but also to address the continuum of financial management and reimbursement that starts with preparedness and goes through response then into disaster recovery, with the ultimate goal of maximizing reimbursement for eligible expenses.

Lastly, the EOC Operations Period Briefing Template. The document provides the pretty standard guidance for an Ops Period Briefing seen in ICS-related publications and introduces a couple of topics that are important to EOCs which are typically not found in field-level applications. That said, this is called a template. It’s laid out as a template. The instructions even say that the template is customizable. They give you the document as a PDF. <shrug>

Wrapping this up, these are documents that really can help EOCs and EOC personnel, but we see some shortfalls because of simple lack of thought, perspective, and utility. Continuous improvement, however, should always be a goal, and we need to start somewhere. I’m hoping these, and other documents will evolve as needs and opportunities are identified.

© 2021 Timothy Riecker, CEDP

The Contrarian Emergency Manager™

Emergency Preparedness Solutions, LLC®

Contingency Planning

I’m going to wrap up 2020 by discussing contingency planning, which is a practice not seen often enough. Before I get started, I should contextualize my use of the term ‘contingency plan’. My general use of the term, at least in emergency management applications, is intended to refer to a plan which may be needed to address the disruption of current event management, incident response, or recovery operations. Essentially, it’s the emergency plan to use while dealing with an emergency, in the event that something bad occurs.

When might you need a contingency plan? Contingency plans should be developed for the kind of situations that have you looking over your shoulder or asking ‘what if…’. Weather events are often good examples, such as a response taking place during some very active tornado weather. You might be responding to the impacts of an earlier tornado, or something completely unrelated, but a tornado warning is in effect, meaning that one could materialize at any time. This could also be a response taking place in a low-lying area during a flash flood warning. We sometimes build contingency plans into our standard operating guidelines or procedures (SOPs/SOGs) by having back-up teams, such as rapid intervention teams (RITs) in the fire service, which are standing by to rescue firefighters in trouble during an interior firefighting operation. Assessing risks on an ongoing basis and developing contingency plans should be part of your incident management battle rhythm.

Where to start with contingency planning? Let’s fall back to the CPG 101 planning process. Yep, that works here, too. The first step is to build your planning team. Contingency planning is a responsibility of the Planning Section, but others need to be involved. Working from a traditional ICS structure, I’d certainly suggest involving Safety and Operations, at a minimum, but depending on circumstances, you may wish to expand this, such as considerations for failures in the supply chain (thus Logistics and Finance/Admin), which may be less of a life safety matter, but can heavily impact operational continuity.

With consideration to the Safety Officer, I’d argue that tactical safety is the primary focus of the Safety Officer; while things that can have much broader impact to the incident, while still a concern of the Safety Officer, may require more in-depth and coordinated planning, thus why I tag the Planning Section to lead contingency planning efforts. My experience has always had the Planning Section taking the lead in this. That said, your incident management organization may decide to assign this to the Safety Officer or an assistant Safety Officer. That’s totally fine in my book, so long as it’s being addressed.

Step two of the planning process is to understand the situation. Some of your risks might be really apparent, such as the tornado warning, but others may require a bit more assessment and discussion. If you need to dig deeper, or are looking at a potential need for a variety of contingency plans, I’d recommend using a risk assessment matrix to help assess the likelihood and impacts of the risks you are examining. Here’s an example of a risk assessment matrix from the United States Marine Corps. Sadly, the risk assessment matrix is not yet a common tool in our incident management doctrine and practices in the US, though I do see it referenced elsewhere. In looking at the tool, obviously those with higher probabilities and severity of impact are the priorities on which to focus. Be sure to consider cascading impacts! Keep in mind that this risk assessment, depending on the duration and kinetics of your response and the dynamics of the environment, may need to be performed more than once throughout your operations. It should at least be considered every operational period.

Step three is to identify goals and objectives. Of course, in the broadest sense, our operational priority is always life safety, but we need to refine this a bit based on the specific hazard we are planning for. Second to life safety, we should also be considering operational continuity, ensuring that we can return to current operations with the least disruption possible OR be able to immediately respond to emergent needs created by the hazard in the event of the hazard creating a more kinetic environment. Your plan may also need to address impacts to the public at large (essentially anyone not part of your incident management organization). Depending on your operational scope and the area of responsibility, this may actually exceed the capacity and mandate of your incident management organization. You will need to determine how to ‘right size’ the scope of your planning efforts. This is perhaps a good opportunity to consult the local emergency manager. Don’t lose focus, though. The contingency plan is not intended to save the world. Remember, responder safety is our number one priority.

Step four is developing the plan. This is largely an outline of the essential elements. There are a number of components to consider for your plan. First, with consideration of cascading impacts, we should identify what aspects of the hazard we can mitigate and how. If there are hasty mitigation steps we can take, those may help limit the risk to life, resources, and operations. Next, consider your concept of operations for the life safety aspect of this plan. As with any other emergency operations type of plan, we need to maintain situational awareness and have protocols for notification and warning. Using the tornado warning (during an active response) as an example, who is responsible for maintaining a watchful eye on the skies and keeping tabs on dynamic weather products? If they see something of concern, who do they notify and how? Is there an emergency radio frequency that everyone’s radio will automatically go to if used? Perhaps three blasts of an air horn? Identify what will work for your operating environment. Keep in mind that if the matter is of urgent life safety, you want to minimize the number of steps and the amount of time taken between awareness and notification to responders. Next, upon notification, what is the emergency action plan – i.e., what needs to take place? Evacuation? Shelter in place? Some other action? A great reference for this from the wildfire incident management community is Lookouts, Communications, Escape Routes, and Safety Zones (LCES), which is part of their incident safety analysis.

What happens after those protective actions? Ideally some kind of status check-in of the impacted personnel for accountability and continued situational awareness. Who is responsible for communicating that and to whom is it communicated? Is it wise to have some sort of rescue team standing by incase anyone is in trouble? If so, what resources need to be tasked to it, what is its organization, and what are their operating protocols? Can you reasonably keep the rescue team out of harm’s way to help ensure continuity of their capability?

You may also have a continuity of operations (COOP) aspect to this plan, to address how the incident management organization will minimize down time, restore prior operations, and possibly even identify alternate methods of operations. Depending on the hazard, a reassessment of the operation may need to take place to see if objectives will change to address a new situation created by impacts from this secondary incident.

Consider the current operational environment that every jurisdiction is facing at this moment. Jurisdictions, EOCs, and others should certainly have a contingency plan in place right now that addresses things like potential Coronavirus exposures, symptomatic personnel, and personnel that test positive. Many have been dealing with it, but do they have their protocols in writing? Most do not. In New York State, all public employers are now required to develop a plan to address these and other factors for public health emergencies.

Step 5 is plan preparation, review, and approval. This is the actual writing of the plan. Of course, you are in the middle of an incident, and it’s likely that the contingency(ies) you are planning for is breathing down your neck. Depending on how much haste is needed, your plan might be a few bullet points, or it could be a few pages long with more detail. Obviously do whatever is appropriate. Have the planning team members review the plan to ensure that it addresses all critical points and accurately reflects the necessary steps. Have you identified what will trigger the plan? Who is responsible for monitoring the situation? Who is responsible or activating the plan? How will they activate it and notify others? What are the responsibilities of others once they are notified?  Once you and the planning team are satisfied that you’ve addressed all the important points, the plan should be forwarded to the appropriate authority for approval, such as the incident commander, EOC manager, agency administrator, etc.

I’ll also note here that if you have multiple threats and/or hazards for which you are developing contingency plans, try to keep your contingency operations as similar as possible. The more complexity you have, especially to deal with different hazards, the more problems can occur during implementation. For example, your means and methods for notifying personnel of a tornado and a flash flood can likely be the same if their protective actions are also the same.

Lastly, step 6 is implementation of the plan. This is where someone should be working on any mitigation actions that you identified and personnel should be briefed on the plan, so they know what they are responsible for and what they need to do, when, and how.

It seems like a long process, but it can be done in a few minutes for urgent hazards. Some contingency plans may certainly be longer and more complex, especially if you are preparing for something that has a lower risk factor or something that isn’t yet a hazard, like a distant weather front. Several years back, I was part of the overhead team for a state-wide months-long debris removal initiative in the aftermath of a late season hurricane. As operations went on, we eventually entered the next hurricane season, and with that we identified the threat of future tropical storms to our area of operations (an entire state) and the operations we were responsible for. We needed to identify who and how systems would be monitored, trigger points for activation of the plan, and how to communicate emergency actions to several debris removal and debris monitoring contractors. We had time leading into hurricane season and were able to develop a well-crafted plan to meet this need. Fortunately, we didn’t have to use it.

Have you written contingency plans for incidents and events? What lessons have you learned from contingency planning?

~~

As a final bit on 2020, we are all certainly happy to see it pass. Keep in mind that while the new year offers a mental benchmark, we still have months ahead of us continuing to manage the consequences of the pandemic and our response to it. We have learned a lot of lessons from this response, which every organization should be capturing, if you haven’t already. As we go into the new year, resolve to do something meaningful with those lessons learned. Don’t just let them languish in yet another after-action report. Implement those corrective actions!

Stay safe.

© 2020 Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC

Updated NIMS Training Program

FEMA recently released an updated NIMS Training Program document. While the document addresses new emergency operations center (EOC) and provides recommendations for joint information system (JIS) and Multi Agency Coordination (MAC) Group training, it doesn’t give us anything really visionary, it simply captures what is. Granted, no where in the document introduction does it say that it’s intended to be a visionary document or something that is goal setting in regard to NIMS training, but to be honest, it should be. I’d like to see a more frequently updated document that not only establishes a current standard, but establishes goals for forward motion and focus.

I’m also disappointed with the insistence that that ICS 400 remains yet another ‘check-the-box’ style of course. As has been mentioned in the past, the ICS 400 is truly an advanced level course that needs to have a bit more context applied in terms of the target audience – not simply ‘incident personnel designated as leaders/supervisors’. Most people taking this course simply don’t need it. In further regard for the ICS 400 course, however, I would say that should also be included in the more advanced levels of training for EOC personnel. Similar to the true need that does exist at higher levels of ICS training, the ICS 400 does have similar value in this track, as EOCs are often key elements of these more complex incident management structures and relationships that are discussed in the ICS 400.

Speaking of training for EOC personnel, I’ll continue to rail against the ELG 2300 course. While it does have some value and may have a place in the training program for EOC personnel (mostly for those planning EOCs, not necessarily working in EOCs), it is not an equivalent of the ICS 300 course for an EOC environment. The ICS 300 course still stands as the course with the highest utility for incident management personnel, though still itself requires considerable improvements.

It’s great to see that the NIMS Training Program does recommend other training opportunities within both the ICS and EOC tracks, such as the Integrated Emergency Management Course (IEMC) and incident management team (IMT) courses, but as I’ve written before, there is still a significant gap in training to meet incident management needs for most local personnel. They require more than just the ICS or EOC courses to bring them the actual realm of application, yet aren’t likely to become part of a formal incident management team. Incident management training as a whole also seems to be missing an extremely important key element – management. It’s one thing to teach someone about the Incident Command System, but the lack of training and guidance to make them good managers of the incident and assigned personnel and resources is considerably lacking. I see this issue more and more, and it’s become very apparent during the Coronavirus response where jurisdictions have very limited ability to call on mutual aid systems for incident management support and are forced to use organic personnel and others who clearly lack in incident management, despite having checked the boxes of completing identified training courses.

I do appreciate that the document encourages development of an organizational training plan, and provides a bit of guidance on that, though even a standard referenced in their guidance is out of date, as it references a multiyear Training and Exercise Plan (TEP), which was replaced in the revised HSEEP doctrine earlier this year with the Integrated Preparedness Plan (IPP). Is it too much to ask that two houses within FEMA communicate with each other?

While the NIMS Training Program document only gives us a view of the training program as it currently exists, it’s not the best picture. It’s clear that certain decision-makers are unwilling to break from traditions that are largely rooted in the history of ICS and the way we have, for far too long, done things in emergency management training. What’s the plan? How are we moving forward? How are we meeting needs? Is anyone even paying attention to needs or are we just recycling much of the same courses and content, simply changing dates and pictures every few years? While some progress has been made, I still see far too much of emergency management and incident management training hung up in approaches that predate 9/11. Where is the vision?

What are your thoughts? What is your vision of incident management training?

© 2020 Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC®

Responding to Coronavirus & a Second Major Incident

Springtime is practically upon us.  Trees are budding, asparagus is growing (yes, I mentioned asparagus), birds are chirping, and snow is melting.  And it’s raining.  Some people call it spring, others call it the first flood season of the year.  Flooding isn’t the only hazard we face right now.  It’s still early enough for the threat of snow and ice storms, and we’ve already seen tornado activity in the US.  Oh, and by the way, we’re dealing with a pandemic.  EDIT: In the midst of writing this post and also exchanging emails re Coronavirus with a client in Utah, he exclaimed in one of his responses that a 5.7 earthquake had just struck with an epicenter just outside Salt Lake City.  As one of my old bosses used to say, you can’t make this stuff up. 

So often we are used to dealing with one disaster at a time.  Yes, sometimes we get hit with a one-two punch, or other times the same incident, such as a hurricane, persists, but these are typically localized, not a nation-wide concern, much less global.  When our resources are already strained from dealing with Coronavirus, it can be a challenge to respond to another significant incident, especially when there is little mutual aid to be had.  I often think back to an example I use back from my days in EMS, and that’s the multi-trauma patient.  Most EMS instructors, following the standard curriculum, will teach you how to treat lacerations, fractures, burns, and the like.  But rarely do we learn about how to deal with those things when they all happen at once. I remember back when I was a young pup EMT, my first multi-trauma patient was a victim of a motor vehicle accident (as it probably was for most EMTs).  I recall having a brief moment of panic because that’s not what we were taught to handle.  My brain quickly reset, and I went back to my ABCs, assessing and stabilizing the patient in priority order. 

Another personal example I have is the crash of American Airlines Flight 587 on November 12, 2001 – two months and one day after 9/11.  The plane crashed in Queens borough of New York City as the result of a critical structural failure.  260 souls on board, plus 5 on the ground died.  This occurred in the midst of the response to one of the most impactful disasters in US history.  In a way we ‘lucked out’ that the incident occurred in New York City.  On a normal day, the City of New York can leverage more resources in a response than some US states and even nations.  November 2001 was anything but ‘normal’ with a massive amount of additional resources still rotating into the City to support 9/11 activities.  While at this point, two months following 9/11, things were reasonably stable in and around ground zero, the crash of Flight 587 still required a significant change in operations.  From my recollection, in the State EOC in Albany, we actually split some of our staff for a brief period of time (within the same chain of command), with some staying focused on 9/11 activity while others were focused on the crash.  We didn’t create a new organization, but there were people in Operations and Planning committed specifically to monitoring and supporting the new incident.  Like a Venn diagram, there were some different needs in the initial response with some overlapping needs between the two incidents.  As the two circles moved closer together, creating more overlap, we re-integrated our staff to track and support both incidents collectively.  I recall the reintegration occurring after only a few operational periods. 

So what to do when an incident occurs during our current pandemic?  There are a few concerns, some related to incident management, others related to our tactical responses and humanitarian needs.  While our general response times are likely to be improved, many resources are already strained.  We are likely in an operational continuity mode already, currently working with or ready to work with fewer staff as Coronavirus impacts our people and their families.  It’s incredibly important to be rotating your emergency staff, keeping people as rested as possible.  We can also leverage the lead agency status that is presently at play in most jurisdictions, with public health having the lead, and emergency management agencies and others supporting them.  If something occurs other than a second public health event, the emergency management agency may be able to pivot to be the lead coordinating agency for the new incident while still supporting public health.  (Of course, I say this fully recognizing that the vast majority of emergency management offices are one-person shops.)  If you are able to split off some staff within your Coronavirus organization (really speaking in terms of your EOC) similar to my Flight 587 example, that may be a workable strategy.  Another strategy could be the reverse of that, where most of your organization is focused on the new incident, since that is in its critical early stages, leaving a few other staff to continue supporting Coronavirus needs.  I generally wouldn’t consider creating parallel organizations as most jurisdictions simply don’t have the capacity for that, plus EOCs are intended to be able to support multiple incidents.  The splitting off of staff is generally only for the early response to ensure that we are gathering information and providing the support that is needed.  We can still leverage the organization as a whole (you probably don’t have a need to dedicate anyone in Logistics or Finance specifically to the new incident, though expenses should be tracked separately), and the chain of command still remains intact.  Your planning process, likewise, should accommodate both incidents. Depending on the scope of the new incident, certain subject matter experts may need to be brought in to address specific response and disaster recovery needs for the new incident.  Overall, flexibility is key.  I’ll also say that all this can be done while still adhering to organization tenants of ICS (even if your EOC doesn’t purely use ICS). 

From a more tactical perspective, the main concerns are staffing and safety.  Staffing, as mentioned before, may be a challenge as we progress through the most infectious stages of this pandemic.  Your continuity plans must absolutely address this.  I mention safety not only in regard to whatever hazards the new incident brings about, but also the continued safety measures we need to maintain for Coronavirus.  The most prominent of these safety measures are those involving an expanded circle of exposures for responders and the public; dealing with large numbers of victims, perhaps displaced from a building who may need shelter and other care.  Mass care is a big concern. Certainly, for smaller numbers of victims, hotels may be more appropriate than a shelter, but we know that we need to prepare for a credible worst-case scenario.  How?

  • We must ensure that our responders, VOAD, and social services agencies are prepared to address needs. 
  • With so many facilities being closed, we need to ensure that we still have access to identified shelters and the people and resources necessary to support them. 
  • Many of the VOAD organizations and social services agencies may have limited operations due to Coronavirus, with staff working from home.  Do they have the resources and equipment at-hand to support a response or do they need to retrieve these from their offices? 
  • Do they have an ability to recall staff? 
  • Is there any change in their capability and capacity? 
  • Are the supply chains we use for shelter food and supplies still viable?    
  • What needs to be done to support social distancing and limit exposure within a shelter environment?
  • How will you address isolation needs for those who may have been exposed or are symptomatic?
  • Are their activation and notification procedures impacted by Coronavirus? 

Now is the time to convene your VOAD and social services agencies (by tele/video conference, of course) to answer these questions and ensure that a written plan (an amendment to your standing sheltering/human needs plan) is developed and circulated for common understanding. 

Regardless of the circumstances, we cannot allow ourselves to become so focused on Coronavirus that we forsake the challenges we would face should another major incident strike, the changes to our capability and capacity, and the continued preparedness we need to maintain.  Remember, preparedness doesn’t stop simply because we are in the midst of a disaster. I’ll also mention that I’m certainly not the first to consider this issue.  Over the past few days, several people, including Ralph Fisk and Dr. Samantha Montano have posted their concerns about our ability to respond to other disasters in the midst of the Coronavirus response and impacts.  It’s something that shouldn’t just be on our minds, it’s something we need to be prepared for.  Developing a contingency plan for your EOC operations and other related support is something that should absolutely be taking place sooner rather than later.

I’m sure I didn’t cover all possibilities or considerations on this topic (I rarely do on any topic), but my intent is to get your mental juices flowing and to plant some ideas.  Please be sure to share any ideas or considerations you have in your contingency preparedness. 

Be smart, stay safe, stay healthy, and be good to each other. 

© 2020 Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC

ICS Training Sucks: A Revival

It’s sad to say that in the past four and a half years of stumping for changes in ICS training, we have seen little progress.  I was recently sent a response org chart developed by an agency that completely tore apart ICS and rebuilt it in a fundamentally different image.  ICS is a standard.  It shouldn’t be changed.  Once you change it, especially at fundamental levels, you no longer have a standard.  It has innate flexibility, but those are applied without changing the fundamentals.  I vented some of my frustration about this last night on Twitter, to a mix of celebration and naysayers, as expected.  Some of those naysayers think the system simply doesn’t work. Others think the system simply can’t accommodate their type of agency.

(note that I’m using the word ‘agency’ here to mean any type of government, non-government, or private sector organization.  I decided to use it since I’m also heavily using the term ‘organization’ in regard to the structure we apply for a response)

So let’s back up a bit.  Why is this happening?  It starts with people having some knowledge of ICS and, with good intentions, wanting to adapt it to their agency and their circumstances.  But there is simply no reason to do any adaptation.  The functions outlined in ICS are all you need in a field-level response.  I’ve heard all the excuses – “We need to make it work for us.”  “FEMA needs to build an ICS for our type of agency.”  “It’s not you, it’s me.” I’ve worked with a lot of stakeholders across a lot of sectors across the whole country, and I have yet to find a field-level response that I can’t organize without violating the fundamentals of ICS.

I’m sure I’ve said this before, but adhering to the standard is important because if we don’t adhere to a standard, we are out of the loop.  If enough people don’t adhere to a standard, it’s no longer a standard.  Either way, the benefits of having a standard are crumpled up and thrown away.

One problem is that a lot of entities, particularly large agencies with multiple components, like to ensure that every function or department within their static structure is represented in an ICS model.  This isn’t what ICS is built for.  If you are seeking specific representation, you can assign agency representatives to the ICP or the EOC, or use a department-based EOC model, but the foundational ICS structure itself isn’t intended to reflect your static organization.  You have an animal control officer.  Do they need to be represented in your pre-planned ICS org chart?  No, they are brought in as a resource if needed, likely in Operations.  You have an IT department.  Do they need to be represented in your pre-planned ICS org chart?  Not as a department. But their capability is identified, likely for assignment within Logistics.  It’s not about recreating ICS to fit your static organization.  It’s about knowing the capabilities of your static organization and applying them within the established ICS structure when and how they are needed. 

Let’s put this out there… ICS isn’t just for you, it’s for everyone.  What I mean is that the greatest benefit of ICS (the prime reason it was actually devised) is for multi-agency operations.  In a local incident of any significance, your agency is likely to be part of a multi-agency response.  Depending on the type of incident, scope, location, and other factors, certain positions will be staffed with personnel selected from the agencies with primary responsibility and, hopefully, with qualified staff.  So that carefully crafted org chart you have developed for your agency’s response is largely irrelevant in a multi-agency operation.  Yes, your agency certainly should have a go-to model for single-agency responses, but consider that a single-agency response probably isn’t going to need a full-blown org chart.

There is a difference, though… and that’s for EOCs, or more specifically departmental emergency operations centers.  These are, by definition, not multi-agency, and established to support your own agency’s needs for deployment, sustainment, internal coordination, and matters that may not be addressed at the field-level.  EOCs have a variety of organizational models available to them, which don’t necessarily need to be ICS.   A problem I often see is agencies trying to accomplish everything in one org chart.  They are trying to fit executive level positions in with field response.  Stop.  Take a breath and figure out what you are trying to accomplish.  It’s OK (and perhaps necessary) for your agency to have two organizational models to accomplish what you need, depending, of course, on your agency’s role, responsibilities, and capabilities.  You may need a field-level organization that addresses a tactical response (this is ICS-based) and an EOC organization that supports that response and the needs of your agency as a whole in regard to the incident (again, lots of options for the EOC organization).  Also consider, depending on your agency, that a policy group may be necessary to guide things.  A policy group is non-operational and they essentially exist to make the broad-reaching decisions on behalf of the organization.

Why are we seeing such extensive mis-applications of ICS?  First, people still don’t understand ICS.  Second, they aren’t truly considering the needs of their agencies.  The irony is that many of the people doing this DO think they understand ICS and that they are making changes to it to better serve the needs of their agencies.  So… we’re still maintaining that ICS Training Sucks.  Do I have a total solution to that problem?  No. But in the articles you find in that link, I certainly have some ideas.  I’ve also found a great many kindred spirits in this whole crusade that agree with the need for change in how we train people in ICS.

What I do know is that the solution isn’t as straight forward as we would like it to be.  Considerations:

First, we are considerably tainted by our knowledge of current and past ICS curricula.  When talking with people about how to fix ICS training, I have to regularly remind myself to push that knowledge aside and look at the problem with fresh eyes.  Lessons learned aside; we can’t move forward when we are still planting ourselves in what is in use now.

Second, we need to consider that there may not be a single solution that fits all needs.  I still think we may need a curriculum structure similar to that used for HazMat training, which addresses the needs of different user groups (i.e. Awareness, Operations, Technician, Planner, Commander).

Third, we need to actually teach people how to apply ICS.  At present, with only a bit of exception, true application of ICS isn’t deliberately instructed until someone takes position-specific and incident management team training.  This in no way meets the needs of most agencies, many of which are volunteer, and have limited availability to go away for several weeks to get the training they need.

Fourth, recognize that if you aren’t using ICS regularly (and I mean at a large scale), your knowledge and skill degrades.  Refresher training should be required and scenario-based learning should be incorporated across the curriculum.

Fifth, stop trying to re-develop ICS.  Trust me, all the needed capabilities of your agency for a field-level response fit within an ICS org chart.  It’s not about your static organization, it’s about capabilities.  Identify and assign capabilities.

I love the continued dialog and attention this topic gets.  The only way we will see positive change is by continuing that dialog.  Please share these blogs and your ideas with colleagues.  Let’s keep spreading this and striving for change.

© 2020 Timothy Riecker, CEPD

Emergency Preparedness Solutions, LLC

~~

In memoriam: I humbly dedicate this post to a friend and colleague who recently lost a battle with cancer.  Phil Politano is known by many for his good nature, his gregarious laugh, and his incredible knowledge as a Public Information Officer.  I’ve known Phil since about 2002, and had worked with him on incidents, taught classes with him, and learned a lot from him.  Phil eventually left Central NY and moved his family a bit south, taking a job with FEMA’s Emergency Management Institute.  There, his talents were applied to their greatest extent.  He reshaped PIO training, spread that gospel to people from all around the world, and supported large scale responses with his knowledge, skills, and abilities.  He was a master in his craft and shared his mastery with anyone who wanted to learn.  He was an incredible practitioner, a great friend, and a wonderful person.  He made us all better simply by knowing him.   He is missed by so many.  Rest well.

 

 

EOC Management Organization

FEMA recently released a draft Operational Period Shift Brief Template for EOCs, open to public comment.  The document is fine, though there was one glaring issue… it assumes an ICS-based model is in use in the EOC.

With the release of the NIMS refresh, we were given some ‘official’ options for EOC management structures.  Unfortunately, we aren’t seeing much material that supports anything other than an ICS-based structure.  An ICS-based structure may certainly be fine, but every organization should examine their own needs to identify what works best for them.  Story time…

We recently completed a contract that included the development of a plan for a departmental operations center for a state agency.  The plan had to accommodate several considerations, including interaction with regional offices and operations, interaction with the State EOC, and integration of a call center.  When we talked to people, examined form and function, and looked at fundamental needs, the end result was an ICS-based organization.  While accommodations had to be made for translating their own agency structure and mission, it fit rather well.

For a contract we are currently working on, we are developing an EOC plan for a private utility.  Again, we reviewed documents, talked to people, and identified the fundamental needs of the company and the EOC organization.  The end result is shaking out to be something a little different.  At a glance, it’s largely ICS-based, but has some aspects of the Incident Support Model, while also having its own unique twists.  One particular observation was that their company’s daily structure has functions combined that we would normally break up in traditional ICS.  Breaking these functions up for an incident would be awkward, disruptive, and frankly, rather absurd.  Not only would personnel be dealing with something out of the ordinary, they would be changing the flow of corporate elements that have been placed together by necessity in their daily operations, which would detract from their efficiency during the incident.

My third example is a contract we are just getting started on.  This project involves developing an EOC plan for a municipality.  While we’ve had some initial discussions, we aren’t sure what the end result will be just yet.  The client isn’t set on any particular structure and is open to the process of discovery that we will be embarking on.  As I’ve thought about their circumstances and the recent and current work we’ve done on this topic, there are a few things that have come to mind.

  1. While NIMS is all about standardization and interoperability, the range of utility of emergency operations centers, in any form, and the mission, organization, an innate bureaucracy of the ‘home agency’ have a heavy influence on what the EOC’s organization will look like.
  2. While there still should be some standard elements to an EOC’s organization, there is generally less fluidity to the composition of an EOC, especially as it compares to a field-level incident command where the composition of the responding cadre of organizations can radically differ.
  3. Consider the doctrinal core concepts of ICS as really core concepts of incident management, thus we can apply them to any structure. These concepts are fundamental and should exist regardless of the organization used.  Some examples…
    1. Unity of Command
    2. Modular organization
    3. Manageable span of control
    4. Consolidated action plans
    5. Comprehensive resource management
  4. We need to acknowledge that the full benefit of organization standardization, exhibited by the ability of incident management personnel to be assigned to a new EOC and be able to immediately function, is potentially compromised to an extent, but that can be largely mitigated by adherence to the core concepts of ICS as mentioned previous. Why?  Because the system and processes of incident management are still largely the same.  These new personnel need just a bit of an orientation to the organizational structure being used (particularly if they are to be assigned in a leadership capacity at any level).

The most important consideration is to develop a plan.  That will provide extensive benefit, especially when done properly.  Follow the CPG 101 guidance, build a team, do some research, and weigh all options.  The end goal is to identify an organizational structure that will work for you, not one that you need to be forced into.  Bringing this around full circle, we need to know that with whatever system you decide to use, expect that you will need to develop your own training, job aids, and other support mechanisms since they largely don’t exist for anything outside of an ICS-based structure.  Note that even for an ICS-based model, there are needs… consider that there is no ‘official’ planning P for EOCs (one that is less tactics-focused), and, of course, that ICS training alone isn’t enough to run your EOC by.

I don’t place any blame for this need… consider that FEMA, with finite resources just like the rest of us, tries to produce things that are of the greatest utility to as much of the nation as possible, and right now, most EOCs are run on an ICS-based model.  While I hope this will expand over time, every entity will still be responsible for developing their own training on how they will organize and respond.  No training developed by a third party for a mass audience can ever replace the value of training designed specifically to address your plans.

I’m interested in hearing what changes are being made to your EOC organizations and how you are addressing needs.

© 2019 Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC

A Deeper Review of FEMA’s E/L/G 2300 EOC Intermediate Course

A couple months ago I got my hands on the materials for the ELG 2300 EOC Intermediate course.  Back in early June I gave an initial review of this course, based on information from a webinar and the course’s plan of instruction.   Unfortunately, upon reviewing the actual course materials, my initial concerns have been reinforced.

First, I’ll start off with what I think are the positives of this course. The course doesn’t stray from NIMS, and applies a practical integration of the NIMS management concepts, which we are mostly used to seeing in ICS, into the EOC environment.  This is 100% appropriate and should always be reinforced.  The course also references the EOC National Qualification System skillsets.  It’s great to see the NQS referenced in training as they otherwise receive very little attention, which actually brings about a lot of concern as to their overall adoption.  Two units within the course provide some incredibly valuable information.  Those are Unit 5 (Information and Intelligence Management) and Unit 7 (EOC Transition to Recovery).

On to the down side of things… As mentioned in my review a couple months back, the course objectives simply don’t line up with what this course needs to do – that is, it needs to be teaching people how to work in an EOC.  So much of the content is actually related to planning and other preparedness activities, specifically Units 3, 4, and 8. Unit 3 dives into topics such as position tack books, organizational models, EOC design, staff training and qualifications, exercises and more.  Though, ironically enough, there is little to no emphasis on deliberate PLANNING, which is what all this relates to.  This isn’t stuff to be thinking about during an EOC activation, but rather before an activation.  Unit 4, similarly, gets into triggers for activation, how to deactivate the EOC, and other topics that are planning considerations.  Unit 8 dives more into design, technology, and equipment.  While it’s valuable for people to know what’s available, this is, again, preparedness content.

There is a lot of repetitive content, especially in the first few units, along with some typos, which is really disappointing to see.  There are also some statements and areas of content which I wholeheartedly disagree with.  Here are a few:

  • There is ‘no common EOC structure’.   There are actually a few.  Hint: they are discussed in the NIMS document.  I think what they are getting at with this statement is that there is no fixed EOC structure.
  • ‘EOC leaders determine the structure that best meets their needs’. False. Plans determine the structure to be used.  While that organizational model is flexible in terms of size of staff and specific delegations, the lack of context for this statement seems to indicate that the EOC Manager or Director will determine on the fly if they will use the ICS-based model, the Incident Support Model, or another model.
  • One slide indicates that use of the ICS-based model doesn’t require any additional EOC training beyond ICS for EOC staff. Absolutely false!  In fact, this sets you up for nothing but failure.  Even if the model being applied is based on ICS, the actual implementation in an EOC is considerably different.  I’ve written about this in the past.
  • The Incident Support Model ‘is not organized to manage response/recovery efforts’. Wrong again.  With the integration of operations functions within the Resource Support Section, response and recovery efforts can absolutely be managed from the EOC.

There is another area of content I take particular exception with.  One slide describes ‘incident command teams’, and goes on to describe the Incident Command Post (which is a facility, not a team), and an Incident Management Team, with the formal description of a rostered group of qualified personnel.  Not only is this slide wrong to include an Incident Command Post as a ‘team’, they are fundamentally ignoring the fact that ‘incident command teams’ are comprised every damn day on the fly from among responders deploying to an incident.  These are the exact people I espouse the need to train and support in my discussions on ICS.

My conclusions… First of all, this course does not do as it needs to do, which is training people how to work in an EOC.  While the preparedness information it gives is great, operators (people assigned to work in an EOC) will be taking this course expecting to learn how to do their jobs.  They will not learn that.  I’ve advocated before for most training to be set up similar to HazMat training, utilizing a structure of Awareness, Operations, Technician, Management, and Planning focused courses which are designed to TEACH PEOPLE WHAT THEY NEED TO KNOW based upon their function.  Largely, this course is a great Planning level course, that is it’s ideal for people who will be developing EOC operational plans, standard operating guidelines, position qualification standards, and other preparedness material.  I think that Operations, Technician, and Management level training is going to be left to jurisdictions to develop and implement, as it certainly isn’t found here.

I urge a lot of caution to everyone before you decide to teach this course.  Take a look at the material and decide if it’s really what your audience needs.

What are your thoughts on this course?  Will your jurisdiction get use out of it?

© 2019 – Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC®

New FEMA EOC Training Courses Announced

Last night FEMA issued a NIMS Alert (13-19) announcing the release of some new and revised Emergency Operations Center (EOC) training courses.  These include:

E/L/G 191 – Emergency Operations Center/Incident Command System Interface

IS 2200 – Basic Emergency Operations Center Functions

E/L/G 2300 – Intermediate Emergency Operations Center Functions

This is also including an updated G 402 NIMS Overview for Senior Officials.

FEMA is hosting a series of webinars on these courses next week.  Information can be found at the bottom of this post.

First, a bit of background on the nomenclature, for those who might not be familiar.

  • E-coded courses are those offered ‘in residence’ by FEMA, typically at the Emergency Management Institute (EMI)
  • L-coded courses are those delivered by FEMA at various locations, typically at the request of state and local governments
  • G-coded courses are those able to be delivered by state emergency management offices
  • IS-coded courses are independent study courses available from training.fema.gov

Providing a bit of context to these courses.  First, the E/L/G 191 course.  This course has been in dire need of a re-write for a very long time.  While FEMA/EMI certainly have a challenge of developing courses that are applicable to most jurisdictions, I’ve long found the 191 course to be inadequate for most.  Interestingly enough, I found the content of the new IS 2200 course alone to be far superior to any previous content of the 191 course.  That said, I’m interested in seeing what the redesign has brought for the 191 course, hopefully increasing the utility of this course to participants.

Speaking of the IS 2200 course, I just completed this course on EMI’s Independent Study website.  Overall, I found the course to be solid, addressing all the foundational information needed by stakeholders to understand what an EOC is a does, in general terms, how it might be organized, and what it’s primary tasks are.  The course has heavy reference to NIMS, as expected, and provides several hyperlinks to additional resources of relevant interest.  While the course does reflect much of the EOC content from the updated NIMS document, the materials were thoughtfully organized with a fair amount of supplement and context, examples, and even small scenario-driven activities to support a better understanding of EOCS.  As indicated previous, it has a fair amount of information on the concepts of the ICS/EOC interface, which I think are of significant value to people who are new to the world of EOCs.  The course also stresses the value of emergency operations plans, something that had been missing from ICS courses for years prior to an earlier update.

There are some areas where I find the IS 2200 course to be lacking.  First of all, there were some typos and grammatical errors in the product.  While this might not seem like a big deal to some, quality counts.  Similarly, many of the photos used in the course are recycled from many years back of training and are of poor quality and resolution.  Granted, photos from EOCs are generally not exciting or sexy, but higher quality and updated hair styles do contribute to quality.  The traditional Planning P was referenced quite a bit in the course, with the caveat that the EOC should develop its own planning cycle.  I found this to be a bit lazy and would have liked to see some guidance on an EOC-oriented Planning P.  Lastly, I would have liked to see some material on departmental EOCs (DOCs) as well as the interface between a dispatch/public safety answering point (PSAP) and a local EOC.  Perhaps we will see this latter topic addressed in either the 191 course or the Intermediate EOC course.

E/L/G 2300 is the Intermediate EOC course.  I’m very curious to learn more about this course when I sit in on one of next week’s webinars.  The biggest challenge that FEMA has in this course, as I see it, is that there are several organizational models which can be used by EOCs, including the ICS-based model, the incident support model, the departmental model, and the emergency support function model.  This variety, which I think is good to have to help jurisdictions and agencies manage in the way that is most comfortable for them, does create significant difficulty to teach how, in any significant detail, an EOC should function.  While I would love for this course to dive into the EOC’s planning process and key in on roles and responsibilities of positions similar to the ICS 300 course, I think that detail might need to be reserved for a customized course, which I’ve built for various entities through my career.  That said, I’ll be sure to report out following the webinars on my thoughts on the information we are provided.


Additional information is available on these offerings through a series of webinars hosted by FEMA.  The dates and times of the webinars:

  • May 28, 2019 at 11:00 am (EST)
  • May 28, 2019 at 3:00 pm (EST)
  • May 30, 2019 at 11:00 am (EST)
  • May 30, 2019 at 3:00 pm (EST)

 The webinars will be presented through their NIMS ICS Training Forum – Adobe Connect platform here:

The Adobe Connect platform is for displaying visuals and for chatroom only. Audio will be provided using the following conference call line and pin #:

  • Conference Telephone #: 800-320-4330
  • Pin #: 884976

© 2019 Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC®℠

 

 

 

 

 

 

 

 

 

 

10 Considerations for Your EOC

Many jurisdictions, agencies, and organizations have emergency operations centers (EOCs) identified in their emergency plans to support incident response and recovery operations.  Through my career, I’ve seen all manner of EOCs, used to support entire incidents or just specific missions, ranging in size from just a handful of people to well over 100 people, various organizational models, and even varying degrees of successful implementation.  I’ve also seen many different locations for EOCs.

An EOC can be established anywhere, but just like any broad statement, there are a number of caveats to that.  Here are 10 things to consider in identifying a location for your EOC:

  1. Out of harm’s way

While it’s difficult to determine where an incident will strike, most jurisdictions have areas that may be less susceptible than others.  While it’s certainly convenient to have your EOC off a major highway, consider that a significant accident on that highway will impact access to your facility.  Locating your EOC near an industrial district or in a flood plain is just asking for trouble.  Be smart about where you locate your EOC relative to your geographic risk profile.

  1. Plenty of parking and accessibility

Few things are more frustrating than arriving to an EOC and not having a place to park.  That’s simply a silly problem to have and reflects greatly on shortsightedness.  If you are stuck in a certain location, plan for an overflow lot, signage, and a shuttle.  Also make sure your building is accessible.  I’ve seen far too many EOCs located either in basements or upper floors without any elevators or other ability for access for people with disabilities.

  1. Utility services and communications with redundancies

It practically goes without saying in our current age of technology, but we need to ensure full utility service in our EOCs.  This includes the basics like electricity, HVAC, and water, but also internet, terrestrial telephone, cellular service, television service (either cable or satellite), and radio communications.  The best facilities will have redundancies in these services to the greatest extent possible.  Generators (with fuel) are rather essential.  Engage your IT staff to ensure maximum flexibility and connectivity with wifi and wireless printing, while still maintaining secure networks.  Each work space should also be able to easily access outlets without running an excess of extension cords (but always have some on hand!).

  1. Meal and break rooms

Constant engagement fuels stress and exhaustion which leads to degradation of our ability to perform.  While work in an EOC may not be so physically strenuous, it can be mentally draining and having respite locations are important.  Both for respite and the sake of keeping work spaces clean, you want to have a separate dining area that can accommodate seating for everyone (at least in shifts), a place to wash hands, refrigeration of food and beverages, potable water and coffee/tea, and space for prepared food to be delivered and maintained within safe temperatures.

  1. Seating and tables

It seems odd to have to say this, but adequate seating is quite important.  I’ve been in EOCs that simply didn’t have it.  While I appreciate the ability of a jurisdiction to set up an ad-hoc EOC, a single six foot table and a few folding chairs aren’t likely to meet your needs.  If you don’t have a dedicated EOC (not everyone needs one!), meeting and conference rooms may have plenty of seating, though if they are too small, you will be extremely limited.  Thankfully folding tables and chairs are reasonably inexpensive and easy to store.  Consider the functional spaces you need to accommodate your EOC’s organization, be it ICS-based, Incident Support Model-based, or Emergency Support Function-based.  Functional groups should have their own work spaces and the arrangement and workspaces they need to accommodate and facilitate their functions.  Always plan for more people than you expect!

  1. Away from distractions

Your EOC shouldn’t be in a space that other wise will receive a lot of foot traffic.  While co-location of facilities can seem like a great idea before an incident, having your EOC in the same building as a shelter or your fire department is probably a bad idea.  It’s not only distracting, but also infringes on utility and communication usage, and even security.

  1. Security

Speaking of security, ensure that access to your EOC is limited only to those who should be there.  Generally, personnel not working in or serving the EOC should not have access to it.  It’s a pain to have civilians, the media, or other random persons wandering into an EOC, especially when they want immediate answers to complicated questions or feel their needs should be addressed first.  Along with ensuring access controls, security procedures should be in place, including a staffed reception desk and sign-in.  Personally, I also prefer armed security (law enforcement) for most EOCs.

  1. Meeting and briefing space

Meetings and briefings are a necessity in incident management.  It’s a way in which we share information, work through problems, and make decisions.  Of course there is always the danger of personnel getting stuck in a perpetual meeting, but that’s a topic for another blog post.  Ideally, your EOC should have adequate breakout space for these meetings and briefings.  An open space with a podium may be necessary for media briefings, and meeting rooms with conference call and video conference capabilities may also be required.  Having a separate space allows a meeting to take place without distraction from the general EOC activity while also being able to discuss sensitive information.

  1. Display space

One of the hottest commodities in an EOC is display space.  Space to project with an LCD projector, hang chart paper or maps, and write on with a dry-erase marker is pretty essential to helping ensure that people are informed and information is tracked.  Higher-tech EOCs may elect to have flat screen monitors mounted on the wall, as well.  Easel stands and portable white boards can augment this and make your space more flexible as well.

  1. A good backup site

One of the best tips I can provide about having a great space for an EOC is to have two!  You will be thankful you have that second space identified and planned for in a continuity situation.  If you don’t need it, it can always be used for something else, but if you do need and don’t have it, you will be scrambling to find a location, get your personnel there, and ensure you have supplies, equipment, and other needs addressed.

 

There are certainly a number of other considerations for EOCs, but paying heed to these ten will get you far.  Your EOC doesn’t need to be a dedicated facility.  It can be any reasonably flexible open space, such as town hall, a large meeting space, a training facility, a hotel conference space, or even a warehouse – your needs should determine your space.  Once you have identified your space, make it functional and ensure that you have an EOC plan and procedures. Train staff, develop job aids to support their tasks, and exercise your plans regularly!

© 2019 – Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLC®℠