Managing an Exercise Program – Part 1

This post is part of a 10-part series on Managing an Exercise Program. In this series I provide some of my own lessons learned in the program and project management aspects of managing, designing, conducting, and evaluating Homeland Security Exercise and Evaluation Program (HSEEP) exercises. Your feedback is appreciated!

Managing an Exercise Program – Part 1

Managing an Exercise Program – Part 2: Develop a Preparedness Strategy

Managing an Exercise Program – Part 3: Identify Program Resources and Funding

Managing an Exercise Program – Part 4: Conduct an Annual Training & Exercise Planning Workshop.

Managing an Exercise Program – Part 5: Securing Project Funding

Managing an Exercise Program – Part 6: Conducting Exercise Planning Conferences

Managing an Exercise Program – Part 7: Develop Exercise Documentation

Managing an Exercise Program – Part 8: Preparing Support, Personnel, & Logistical Requirements

Managing an Exercise Program – Part 9: Conducting an Exercise

Managing an Exercise Program – Part 10: Evaluation and Improvement Planning

 

From inception to improvement planning, I think preparedness exercises provide great value to the jurisdictions, companies, and organizations that do them.  From a seminar to a full-scale exercise, there is much to be learned by participants as well as the strengths and areas for improvement identified from emergency plans.  I’ve been inspired to write a series of blog posts on each of the phases within the Homeland Security Exercise Evaluation Program (HSEEP) cycle.  The cycle, shown below, encompasses not just the steps in executing an exercise (project management), it includes exercise program management as well, which I think is often neglected.  Doings exercises is great, but to ensure continuity, quality, and continuous improvement, any entity that does exercises should have an exercise program.  Having a structured exercise program will ensure that your organization capitalizes on your exercise investments to the greatest degree possible.  Just like any other functional program, it needs to be managed.

HSEEP Cycle

Each blog post will give some insight and lessons learned from my own experiences with exercises large and small and I will reflect on exercise program management responsibilities throughout the cycle.  For more in-depth information on exercise program management, I refer you to HSEEP Volume I.  I will also have an update on this HSEEP volume in the near future as DHS will soon release a revision.

The first thing I want to cover is exercise program management as a general concept.  As stated in HSEEP Volume I, “Exercise program management is directed toward achieving the objectives established during the multi-year planning process…”.  As an exercise program grows, so should the responsibilities of managing it.  Most organizations don’t need a full-time exercise program manager, but they will require someone with the flexibility to vary how much time they spend on the exercise program.  The planning and conduct of an exercise can take up a considerable amount of time, and the program manager needs to shepherd this process.  In small organizations, the exercise program manager may be one of the few people involved in these activities as well.

Obviously the person in charge of an exercise program needs to be knowledgeable and experienced in exercises.  As with the oversight of any program, you need to have the right person in place.  Some caution should be used here, however – there are plenty of folks with LOTS of exercise experience… BUT the vast majority of experience out there is as a player.  Players, as a general rule, don’t experience all the machinations behind putting an exercise together.  Someone may have been a player in the largest exercise known to human kind, but that doesn’t make them adept at exercises.  There is plenty of training out there addressing various areas of exercises: the HSEEP training course, Exercise Design, Exercise Evaluation, and others.  These are great – but the world is full of ‘trained’ people.  Do they have the experience to do the job?  It doesn’t take a lot of experience, in fact, in my opinion, a little experience can go a long way – especially if it’s the right experience and they were taught the right way to do it from someone with a lot of experience.  I’ve fully immersed interns in many of the areas of exercise program management and would be fully confident in their ability to run a program for an organization.

As mentioned above, exercise program management centers on the multi-year training and exercise plan (MYTEP), which makes sense as this document will outline requirements, goals, and benchmarks for the program.  Building this plan is not the first, though.  We know that before we can write a plan, we need to do an analysis or an assessment of where we stand.  This is why the first step in the HSEEP cycle (above) is Updating Preparedness Assessments.  As much of a fan as I am of the HSEEP documents, they do fall rather short on providing guidance relative to this step.  It can be broken down easily enough, though.

A preparedness assessment, to me, would identify where we stand and where we want to be in terms of preparedness.  The resultant gap would then feed the second step in the HSEEP cycle – developing a preparedness strategy.  Let’s define preparedness: traditionally, it involves planning, training, and exercising; we can build from this to give us the data we need.  An absolute priority is identifying and assessing risk.  Hopefully your jurisdiction has a recent hazard analysis or THIRA, or your company or organization has a recent business impact analysis (BIA).  Having a recent hazard analysis done will identify the threats you need to be prepared for.  If you don’t have a recent one of these, I would suggest that you are way ahead of yourself with exercises and need to take a step back in emergency management to do one of these and build a plan.  Based upon the results of your hazard analysis, do you have the necessary plans (and are they up to date?) to address the hazards?

The second assessment should be a capabilities assessment.  You can reference FEMA‘s list of core capabilities to ensure that you are examining everything you need to.  Keep in mind that not everyone needs to have every capability.  You may not have a need for certain capabilities or it may not be feasible for you to have it based upon costs – so long as you can obtain that capability from someone else in times of disaster.  However, there are certain capabilities, based upon your hazards, that you want to ensure that you have.  If you don’t have them, they need to be developed.  That’s a gap.

A third assessment, related to the second, would be to identify needs to develop personnel capabilities – specifically through the means of training.  Yep, a Training Needs Assessment.  I’ve blogged previously about this.  Your identified needs become another gap to include in your preparedness assessment.

Lastly, you should do an assessment of exercises and real life events to date.  While you are just starting to formalize your exercise program, I still think an assessment of exercise progress to date is important.  While you may not have had a formal program, you have likely done some exercises or at least participated in someone else’s.  What plans have been tested with these exercises?  How long ago were they conducted?  Do you have After Action Reports?  (Read my article in Emergency Management Magazine on the importance of AARs and implementing corrective actions).  How about lessons learned and after action reports from actual incidents?  What gaps from these still need to be addressed?

All of this data and these documents can be pulled together and referenced in a simple, cohesive document outlining your preparedness needs.  It seems like a lot of work, but without identifying our needs, we can’t move forward with an effective exercise program.

What are your thoughts on identifying preparedness needs?  Is there anything I’ve missed?

Thanks for reading and be on the lookout for part two of Managing an Exercise Program where I will outline the development of a preparedness strategy.

 

The Emergence of Whole Community Planning

FEMA has contracted the development of a national Whole Community disaster training program.  This should result in some of the best planning guidance ever put forward by FEMA since CPG-101.  What is ‘Whole Community’ planning?  Whole Community planning takes into account everything in your community, not just the hazards, but also the vulnerable populations, as well the community’s resources – all of them, to include the private sector.  This is smart planning!

Timothy RieckerI don’t know what the final guidance will look like, but I’m imagining a process, imbedded within our existing planning process, which is similar to a SWOT analysis (strengths, weaknesses, opportunities, and threats) which has long been used as a business analysis tools.  Strengths and weaknesses are internal reflections, while opportunities and threats have you looking to the outside.  From the perspective of an emergency planner for a community, strengths and weaknesses would reference their innate government-based capabilities (remember capabilities-based planning?  I’m still a big fan); while opportunities and weaknesses would reference what is brought to the table by the rest of the community (i.e. private sector, NGO, and even the citizens themselves – such as a neighborhood watch or CERT).

In many ways, good planners and emergency managers have already been doing this.  They have been capitalizing on relationships with the private sector and NGOs and building plan annexes based upon these relationships – such as human services oriented plans and logistics plans.  Moving forward as a ‘branded’ concept, Whole Community planning will become the standard, not just a best practice, and will evolve as more people do it and make it better.  This concerted effort will ensure that the entire community is moving forward in a coordinated fashion and with common goals in the response to and recovery from an incident.  I’m also hopeful that this Whole Community guidance will give some input on community preparedness as well.

The project will be released in phases over the next three years, so be looking out for it.

10 Years of the Department of Homeland Security

A few days ago I looked at four different links related to the 10 year anniversary of the US Department of Homeland Security (DHS).  Every one of these links (here’s one of them) called for the abolishment of the department and decried everything they have done and stand for.  Being the relative moderate that I am, I take a slightly different view on this – let’s make some changes, but in the end DHS will still stand – albeit a different agency.

On November 25, 2002 President George W. Bush signed into law the Homeland Security Act of 2002, which authorized the largest governmental reorganization in the US since the creation of the Department of Defense.  The goal was to bring, in whole or in part, 22 US agencies which were chartered in some way with domestic terrorism protections under one agency umbrella.  Interestingly enough, two agencies who took a lot of heat for perceived intelligence and coordination  failures prior to the 9/11 attacks – the FBI and CIA – were not included in this reorganization… thankfully!  It seems that over the last decade, nearly every entity brought into DHS has suffered in some way.

Looking back, there absolutely was a need for increased coordination amongst federal agencies when it came to intelligence.  The US Intelligence Community is significant, with a multitude of agencies all playing a necessary role.  In my humble opinion, there should have been a strengthening of the role and powers relative to intelligence coordination of the Director of National Intelligence.  Perhaps even some agencies could have been merged, in whole or in part, to streamline missions.

Relative to the agencies brought into the fold of DHS, intelligence is a secondary or tertiary function to many of them (I speak of the function, not mental capacity).  Similar to streamlining missions amongst intelligence agencies, certainly there could have been some mergers, again in whole or in part, amongst these 22 DHS-bound agencies to help streamline the response, training, and critical infrastructure missions that many of them touch upon.  This would have had a much greater (positive) impact to the public safety and emergency management community than stuffing them all into one house and hoping they would get along.  Despite intelligence not being a primary function of these agencies, DHS has jumped head first into the deep end of intelligence as a knee jerk reaction instead of going about it the right way.  In this haste, we see some big mistakes with fusion centers, grabbing a lot of media attention.  In government there tends to be a desire to over-legislate things.  When we see a problem we create a bill and pass a law.  That law creates a new agency or charges an existing agency to do something different.  Often times, an existing agency is already doing what needs to be done or has the resources available to do it – which would be the easy fix.  Instead we see something called mission creep, where agencies will wander into mission areas already occupied by someone else, and using some legal charter to justify the action.  The creation of the US Department of Homeland security was the worst possible amalgamation of these circumstances, forcing changes in command structure and hierarchy of 22 different agencies – even taking away the cabinet-level position held by one of those agencies (FEMA) – a move that was realized as a significant mistake when Hurricane Katrina struck.  The Washington Times even reports that President Bush was resistant to the concept, not seeing a need for such a large agency.

DHS became a massive bureaucracy, not only through the merging of these 22 agencies, but through the creation of a substantial overhead organization.  That overhead organization does little to provide shared services for those 22 agencies such as HR, payroll, purchasing, finance, etc. – which would be an ideal use.  Instead, things grew so complex that for several years of the last decade, KPMG – one of the largest audit firms in the nation – was unable to complete an audit of the agency.  Hundreds of billions of dollars have been budgeted to DHS over the last decade – dollar amounts far in excess of the value to the American public.  Even their grants, which have benefitted many state, county, and local governments, have gone overboard and lack proper accountability.  Some of the grant rules are so cumbersome that many jurisdictions haven’t been able to spend grant funds going back several years.

But should we get rid of DHS?  I say no.  The Department of Homeland Security, originally created as the Office of Homeland Security (prior to the Homeland Security Act) was charged with developing a national strategy to secure our nation from terrorist attacks to include the coordination of detection, preparation, prevention, response, and recovery efforts.  The creation of DHS should have been a modest and conservative reflection of this original charter, drawing in the necessary agencies and resources to accomplish this mission.  It should not have swallowed agencies that have their own distinct missions, those that functionally don’t belong under another agency (i.e. emergency management as a function of homeland security) or those who best function with cabinet-level representation (i.e. FEMA).  Yes, I do stand in obvious defense of FEMA, but 21 other agencies were also impacted significantly by this.

It’s not too late to make the necessary changes.  As I’ve said in the past – let’s be smart and use some common sense.

Public-Private Partnerships: A Necessity in Emergency Management

Over the last several years there have been volumes of articles written on the value of public-private partnerships in Emergency Management.  So why is it still like pulling teeth?  Yes, we have great private sector partners in EM – the likes of WalMart, UPS, Grainger, and others.  The value of having these partnerships has certainly been demonstrated through the years, in both local disasters and national-level disasters.  Even in preparedness, these partnerships help carry our message to the masses.  FEMA promotes a program called PS-Prep, designed to engage private sector preparedness while encouraging their involvement locally in emergency management efforts.

Government simply can’t do it without the private sector.  It’s not because the public sector is lacking, it’s because of the position and resources available to the private sector.  They have more resources and greater flexibility.  Why wouldn’t they want to help?  Their customers and employees live in the area.  It’s a solid decision to invest in the community (or communities) in which your company is located.  It doesn’t always involve a financial commitment – it encourages preparedness for the business itself; it provides an opportunity to engage employees in community efforts (all with the company name being recognized – it’s free marketing!); and perhaps an opportunity to provide products – discounted or free – to relief efforts in the aftermath of a disaster.  Commodities such as building materials, water, and food are in great need in the aftermath of a disaster.  Even trucks and people.  Yes, these things all cost money, but there is a lot of free press and good will that goes along with it.

There are plenty of businesses that contribute after a disaster occurs – certainly they want to help.  They can all have more impact, however, by joining up with local emergency preparedness efforts before a disaster ever occurs.  Joining a community organization, such as a VOAD, or entering into memorandums of understanding with local emergency management agencies prior to a disaster makes a huge impact.  The partnerships made with other businesses, government agencies, and community organizations will also be to their benefit.

Businesses large and small – consider both the preparedness of your company and your community.  There are opportunities to be had with both!