Is the Department of Defense Planning for a Zombie Attack?

No, not really.  But they are using the zombie scenario as highly effective training tool.

I reference, of course, the recent news releases (such as this one from ForeignPolicy.com) concerning the United States Strategic Command document titled: CONPLAN-8888 – Counter-Zombie Dominance (April 30, 2011).  You’ll see in the Disclaimer section of the document, beginning on the second page, that this scenario was selected because of its improbability of occurring, unlike other scenarios which may be used as the basis for training and exercises, which could be mis-perceived by the public.

The training they refer to is the Joint Operations Planning Process (JOPP).  Typically the word ‘Joint’ in military doctrine refers to activities which include two or more branches of military service. Not only do the US Military Services use joint planning and conduct joint operations, but the Army and Air National Guards do as well.  For as much as it makes sense, the concept of ‘jointness’ has really only seen large-scale attention in the last decade or so.  Having worked extensively with the National Guard in recent years, the ‘jointness’ has become the foundation of nearly all activity.  This is a great accomplishment as there is considerable competition between the branches, sometimes to the level of disdain, and certainly a great many differences, even in terminology and rank structure.  Despite the decades-long existence of the Joint Chiefs of Staff, true joint integration at an operational level rarely occurred and was generally not executed well.

Joint operations are simply a military version of the Incident Command System (ICS), where different disciplines and agencies – some often very different from each other – can function together within one organizational structure for the purpose of addressing an incident.  If you are interested in additional information on Joint Planning and Operations, I suggest you visit the DoD’s Joint Electronic Library where you can find documents which I have referenced often when working with the National Guard on preparedness and response activities – including the Universal Joint Task List (UJTL) (similar to the old DHS Universal Task List, in concept) and the Joint Publications (such as Joint Publication 5-0, Joint Operation Planning – which is the foundation for JOPP).

As mentioned in earlier posts, I love the integration of zombies and other apocalyptic lore into preparedness activities.  While tongue in cheek, they help planners and responders do away with pre-conceived notions they may have with other, more realistic scenarios.  In emergency management, we know that every incident is different.  While we learn from our experiences and hopefully apply what we learned to the new challenges we face, we sometimes go into the next incident with a bias.  The introduction of totally fictional scenarios, such as a zombie attack, help make the situation faced completely new – while many of the specific problems faced are things we do have plans for, such as mass fatalities, hazmat, contagious diseases, etc.  It’s a great approach which I strongly advocate.  The only caution we may have is that the premise of the scenario itself may cause some to not take the activity seriously or may cause a distraction.

Have you used any non-traditional or totally fictional scenarios?  What were they?  How were they received?

/s/

Tim Riecker

Managing an Exercise Program – Part 9: Conducting an Exercise

This post is part of a 10-part series on Managing an Exercise Program. In this series I provide some of my own lessons learned in the program and project management aspects of managing, designing, conducting, and evaluating Homeland Security Exercise and Evaluation Program (HSEEP) exercises. Your feedback is appreciated!

Managing an Exercise Program – Part 1

Managing an Exercise Program – Part 2: Develop a Preparedness Strategy

Managing an Exercise Program – Part 3: Identify Program Resources and Funding

Managing an Exercise Program – Part 4: Conduct an Annual Training & Exercise Planning Workshop.

Managing an Exercise Program – Part 5: Securing Project Funding

Managing an Exercise Program – Part 6: Conducting Exercise Planning Conferences

Managing an Exercise Program – Part 7: Develop Exercise Documentation

Managing an Exercise Program – Part 8: Preparing Support, Personnel, & Logistical Requirements

Managing an Exercise Program – Part 9: Conducting an Exercise

Managing an Exercise Program – Part 10: Evaluation and Improvement Planning

Image

Since writing Part 8, the new HSEEP guidance (April 2013) was published. Thankfully this update didn’t dictate wholesale changes in the process we’ve all come to be familiar with. There were some subtle changes, such as changing ‘planning conferences’ to ‘planning meetings’, and stressing the involvement of elected officials in the exercise planning process. Similarly, I’m thankful that certain changes weren’t made – one of which was the proposed elimination of terminology of ‘discussion based exercises’ and ‘operations based exercises’. These general identifiers have become commonplace amongst exercise designers for decades. Upon having the opportunity to review a draft version of the new HSEEP guidance, I was quite opposed to that change.

Obviously conducting the exercise is the most exciting part of the process. It’s where all of your hard work comes together. That said, this is where it can all fall apart if you haven’t prepared property in the first eight parts and if you don’t pay attention to detail. I’m breaking exercise conduct down into four smaller parts: Set up, briefings, play, debrief. Remember that my intent with these postings is not to be fully comprehensive, but to emphasize areas where I have learned or have seen others struggle. In all facets of emergency management we need to continue a culture of sharing if we are to be successful.

Set up

The preparations for your exercise should have been finalized in Part 8 where you addressed logistical requirements. You should know where your exercise venue is, how people will be seated/where they will be working, the location and support for a SimCell (if you’re having one), and even matters such as parking, food, restrooms, and audiovisual equipment. Additionally, set up includes having print material available for all participants. When setting up, consider the flow of people, quite literally from the road to the parking lot, from the parking lot to the facility, into the facility through security, sign in, and to their first location for the exercise (this may be their only destination or it may be a large briefing room). Having conducted exercises in locations not familiar to some participants as well as these exercises being larger than the facility’s parking lot can handle, you must ensure that invitation packages have specific directions on how to get to the parking area and how to get from the parking area to the venue. Be sure that signage is prominently displayed. It may even help to have staff directing people. Be sure to also let them know what manner of identification is required to enter the facility. Again, signage is often necessary to get people from the building entrance to check in location and then to the meeting location. Signage for the refreshment area and restrooms may also be needed.

Have everything set up for people before they arrive. Use table tents, if needed, to help identify seating, and have copies of all necessary materials at their seating location. Materials like SitMans and ExPlans have a lot of content, so it’s nice to have these materials available for the early-comers to being reading through.

Be sure to set up early and test EVERYTHING. Make sure AV equipment and communications equipment are tested.

Briefings

Depending on the type of exercise you are conducting, there can be a number of briefings needed to take place before the exercise begins. Some of these briefings may need to take place well in advance, even a day or more before the exercise, depending on availability of audiences for each of them.

The new HSEEP guidance includes a specific briefing for elected and appointed officials. This is something to usually conduct well in advance of the actual exercise to outline the agenda/timeline of the exercise and what will be expected of them. They will likely want to interface with any media and should know what to say about the exercise. They may also want to ‘kick off’ the exercise at the player briefing.

Controllers, evaluators, and SimCell personnel should receive a briefing to ensure they are familiar with the exercise and their rolls. They all need to know what is expected of them and of the players, how and when to interact with the players, and what may need to be reported to their respective leaders and/or to the exercise director. Evaluators will need to become familiar with their assigned EEGs and what the expectations are for evaluating. Additional time will need to be spent with SimCell personnel to familiarize them with the equipment being used, how the MSEL is structured, and how injects will be delivered. If any actors are being used, they will also need to be briefed on their rolls and what their expectations are. Ensure that everyone is familiar with the safety word in the event of the necessity to immediately stop the exercise.

If observers are expected at the exercise, have a briefing ready for them. I suggest treating them like VIPs when possible (most of them usually are). Don’t just let them walk around to figure things out for themselves. Give them tour guides who can take them throughout the venue and talk about what is happening. Schedule their arrival when possible, and consider having an elected or appointed official there to greet them. Keep in mind that some observers will be very high tier VIPs. Vigilant Guard exercises are often visited by the head of the National Guard Bureau – a four star General. These visits are fantastic and very much emphasize the importance of the exercise, but they can also be a little disruptive. These high-tier VIPs will often come with their own entourage and/or security. They will want a brief tour and will stop often to shake hands and have pictures taken. They may even want a break in the exercise to speak. Try to be aware of these expectations up front if at all possible. If not, just go with the flow and be flexible.

The media is another form of observer. All media should be scheduled. Be sure to make it worth their while, where they can catch some video/picture footage of interesting activities. Maps and wall displays make for great footage as well. Remember operational security! If something is sensitive or classified, it should not be anywhere where it can be seen. The media should also be provided a tour and an opportunity to get a statement from the elected and/or appointed officials. They may also want to interview players. I generally don’t allow this without preparation of the specific player to ensure that the right messages are delivered. Also, be sure to let players know during the player brief that there will be observers and media coming through and what is expected of them.

Lastly, the player briefing. This briefing will introduce players to the purpose of the exercise, the ground rules, the facility, timeline, controllers and evaluators, and expectations. Players should be briefed on how and when to interact with the SimCell if you have one. It should always be reinforced that the exercise is ‘no fault’, and that they, individually, are not being evaluated, rather it is the plans, policies, and procedures they are using that are being evaluated. Lastly, players are briefed on the scenario. Be sure that the ExPlan/SitMan has the detailed scenario for their reference.

Exercise Play

Finally the moment of truth arrives! Remember that the purpose of the exercise is to accomplish the objectives, however, know that you may not accomplish all the objectives in the timeframe you have. Being flexible, and knowing you have to be flexible, are two very important aspects of running an exercise. Regardless of how well we think we’ve written an exercise, the responses to our prompts are entirely up to the players. They may accomplish the objectives faster or slower than you expected. Likewise, they may struggle a bit. This is where good exercise control comes in. Controllers/facilitators should observe the tempo of the exercise. Is everyone engaged? Are they needlessly overwhelmed and frustrated? Are they bored? Are they not following through on activities? All these observations should be reported back to the exercise director and SimCell so the tempo can be moderated.

Be sure to have contingencies in the event that players do or request the unexpected. Additional injects that are held back are always a good idea. You may need them to prompt certain activities in the event that players do not take the initiative to do so. Players may also ask questions or make requests of the SimCell that aren’t expected. While we can’t anticipate every need, we can be prepared for them. Have copies of plans, policies, procedures, and maps available to the SimCell. They may have to take some time to research and come up with an answer then get back to the individual. The SimCell manager should be smart when situations like this arise, however. They should always consider if a potentially inaccurate but reasonable answer is acceptable or if the answer must be completely accurate… or even if the answer is required for exercise play at all. There is no sense having SimCell personnel research an answer if the answer doesn’t much matter within the scope of the exercise.

Multi-day exercises may require the exercise staff to meet at the end of every day for a mini hotwash and to evaluate how the exercise is progressing. Where are the players in respect to where you expected them to be in your design of the exercise? Do you need to retool anything in the MSEL?

On large exercises, it helps for the exercise director to have an aide-de-camp, or assistant. Just like any individual in charge of a large operation, the exercise director is having their attention pulled in many directions and may simply not have the time to address everything, especially in large or multi-venue exercises. Having an assistant is also a great way to train up and coming exercise staff. Certainly consider the use of portable radios to help facilitate communication as well. The exercise director will spend most of their time managing and trouble shooting. They may also have to address some VIP concerns. Be sure to walk around to get a good sense for the exercise as a whole. Are evaluators properly positioned? Are controllers present and visible? Is the SimCell responding to questions adequately? Are players engaged and challenged? Perhaps most importantly, is the boss (the elected/appointed official) happy?

Evaluation is such an important aspect of exercise that I will cover it in its own section – Part 10.

Debriefs

Two significant debriefing activities should take place immediately following the exercise: 1) a player hotwash, 2) an exercise staff debriefing. Players should be led through a facilitated hotwash, reviewing the objectives of the exercise, with evaluators capturing their responses to if/how the objectives were accomplished. Encourage and capture responses both in the positive and the negative: i.e. what did we do well and what do we need to improve upon?

After the player hotwash, a similar process should take place with all exercise staff – controllers, evaluators, and SimCell. I like to not only capture their impressions of if/how objectives were accomplished, but I also like to discuss the conduct of the exercise, again capturing what went well and what needed to be improved upon.

 

How to Replace Five Common Vital Records

I was sent the following from USA.gov on Friday.  It’s a good reminder to keep copies of these documents so you at least have a starting point and can reference the registration numbers of each.  I also keep copies of my driver’s license and credit cards (all front and back).

From a business perspective, you should also consider what documents you maintain copies of.  What records are vital to you?  Are the copies up to date?  Are they stored off-site?

 

How to Replace Five Common Vital Records

Vital records, like birth and marriage certificates and military service records are often necessary to access a variety of government benefits and services. But sometimes life happens and those vital records go missing. Maybe they were misplaced in a move, were stolen or got damaged in a fire.

USA.gov has information to help you find copies and replacements of your vital records so you can apply for whatever benefits and services you need.

Birth, Marriage and Death Certificates

These records come from the states. To find a copy, you’ll have to contact that state office where the life event occurred. Find the contact information for state and territory offices that can help you.

Passport

Report lost or stolen passports to the State Department right away by calling 1-877-487-2778. To report and replace the lost or stolen passport, you’ll have to submit forms DS-11 and DS- 64 in person at a passport agency or acceptance facility. If you lose a passport, and then find it again, you won’t be able to use it to travel. You should return the lost passport and request a new one.

Military Service Records

You often need copies of military service records to apply for a variety of government programs available for veterans, like health care, retirement or education benefits. The National Archives keeps copies of all veterans’ services records, and you can apply online to receive a copy of yours or an immediate family member’s if they are deceased. If you prefer to mail or fax a request for your records, you can download form SF-180. You can also find out how to replace lost military medals and awards.

Social Security Card

If you can’t find your Social Security card, you may not actually need to replace it. As long as you know your Social Security number, you will still be able to collect Social Security benefits, get a job and apply for many government benefits and services. However, if you do want to replace the card, you’ll need to gather documents proving your identity and citizenship to mail or take to a local Social Security office.

Green Card

If you have a U.S. Permanent Resident (Green) Card, you may need to replace it if it was lost, stolen or damaged or if your name or other biographical information has legally changed since it was issued. You can easily request a new one online. If you’re outside the United States and have lost your green card, you should contact the nearest U.S. consulate or immigrations office before you apply online for a new card.

If you need help getting copies of other vital records like tax returns or school records, you can find the information you need to replace them at USA.gov.

 

Emergency Management and Considerations for Visiting Populations

Radar loop, Labor Day 1998 Upstate New York.  This storm impacted the New York State Fair.

Radar loop, Labor Day 1998 Upstate New York. This storm impacted the New York State Fair.

The inspiration for this blog was a paper posted to LLIS by Dr. Susanne Becken, Professor of Sustainable Tourism at Griffith University (Australia) and Lincoln University (New Zealand).  The paper is titled The Christchurch Earthquake and the Visitor Sector, which is also available from this link if you don’t have LLIS access.

Dr. Becken highlights the Christchurch earthquake of February 22, 2011, which killed 185 people from more than 20 nations, 80 of which were listed as visiting, rather than residing in, Christchurch.  She states that as a result of this M 7.1 earthquake infrastructure was badly damaged, accommodation capacity was reduced by half, and the number of international visitors dropped by almost 30 percent in the aftermath.  Dr. Becken identifies many of the challenges visitors had, including loss of travel documentation and other important items, and the value of the tourism industry in the area to assist response efforts (such as providing lodging for displaced citizens as well as responders from out of the area).

This paper brings to mind the vast amounts of visitors and transient populations that are found in many communities across the nation.  When visiting an attraction such as an amusement park, where tens of thousands of people congregate on any given summer day, take a look around.  Many of the amusement parks I know of are in fairly rural areas.  These towns are likely to have small volunteer fire departments and may not even have their own police services, instead relying on a county Sheriff’s Department or State Police.  How about a small city that has popular attractions at certain times of the year, such as horse tracks or other sporting events?  These events will also draw tens of thousands of people from near and far, staying in hotels, motels, and campgrounds.  Sure, these small cities might have a 24-hour staffed fire department, and probably even a small police force.  But how prepared are these types of areas for an incident that can cause mass casualties and fatalities?

Incidents such as this underscore the need for our preparedness to be through and needs-based.  As part of our Threat and Hazard Identification and Assessment (THIRA), which is the latest evolution of the traditional hazard analysis (see CPG-201), we must be sure to recognize visitors and transient populations and the events that bring them to our areas.  We should consider tourist attractions, field days, concerts and performances, large conventions, sporting events, and even college populations.  The potential impacts, in the event of a disaster, are certainly greater with these populations given that they are likely to be unfamiliar with the area, don’t reside locally and probably have no local contacts, and aren’t familiar with the threats.  Given the nature of the event they are attending, they may very well be consuming alcohol, as well.  All this makes for a rather fragile and dependent population in the event of disaster.

Planning on the macro (community) level should consider the specifics mentioned above.  With this information you can estimate the resources needed for certain scenarios (this is part of your THIRA), which will lead you determine gaps which you then plan to address.  Take some time to examine the demographics of the visiting populations.  These demographics will help determine their level of need in the event of a disaster and some areas of support you may need to provide.  Your local chamber of commerce and/or tourism authority can be an important planning partner for this information and other purposes.  Certainly consider the nature of the events and the age range of the attendees.  Are there language or cultural issues that should be prepared for?  Much of this specific information can be obtained event by event, looking at the micro (event-specific) level of planning for these events.  In New York State, a mass gathering permit is supposed to be issued for any event estimating attendance over a certain number.  The primary purpose of these permits is to ensure that officials are aware of the event and that potable water and sanitation is appropriately available, as well as other caveats.  Most states have a similar type of permitting requirement.  Become familiar with it and use it to your advantage.

In any of these events, how will you handle alert and notification in the event of a disaster?  You may have sirens in place, but would a visitor know what it means?  Given that such a high percentage of people have cell phones, use of area blast messaging may be an appropriate consideration.

A lesson learned from airline crashes can and should be brought into your planning: family assistance centers.  Family assistance centers were brought about in the aftermath of the crash of TWA Flight 800, realizing the importance of providing support and information to the families and loved ones of victims.  This concept has been applied as a standard to other mass fatality incidents since then and has proven to be beneficial to all parties.

Be sure to conduct preparedness exercises on these plans, and include members of your local hospitality and tourism industry as they will certainly be involved in some aspect of the greater response should an incident occur.

Sometimes local communities view visiting populations as a hassle, particularly when they don’t have the care for the host community that the locals do.  These populations are usually important to the economy of the local area and, depending in the event, will be back year after year.  No matter what your take is on that argument, you must consider the safety of any visitors or tourists as if they were your own citizens.  Be prepared through regular planning, training, and exercising activities and be sure to include your local chamber of commerce, tourism and hospitality industry as they are not only stakeholders, but they have a great deal of support and information to provide.  Most importantly, remember that all good preparedness efforts begin with a solid needs assessment.  Conduct a THIRA for your community, you might be surprised with what you discover!

What experiences do you have with planning for visiting populations?

Planning in Perspective

planI just finished reading an article by Lucien Canton, CEM – who is a well-respected and often published emergency management professional.  He maintains a blog, which he posts to often, and provides great insight to various EM-related topics.  The article that struck my interest was ‘Paper Plans and Fantasy Documents’.  Canton poses the question as a subtitle to his article – ‘Are we over-thinking planning?’.  In all actuality, based on his article and my own experiences, no – in fact we’re under-thinking it by maintaining a cookie cutter approach across the entire nation.

Canton’s commentary is similar to the thoughts I had in an earlier post on the (mis)use of templates in emergency planning.  Standards are good to have in every industry, certainly in emergency management and homeland security.  There are folks who become true experts through a great deal of experience, research, and trial and error.  The best ones share their expertise with the rest of the world in the hopes that we can all benefit.  Eventually, these standards become embraced by ‘standard setters’ – those in government or regulatory bodies who can pass laws, regulations, or codes to compel others to adhere to these standards.  This is all absolutely necessary – but, as Canton mentions, these standards become the basis for how people plan.

Just like I often write in my training-related posts, it’s all about the audience.  Our planning priority must be to meet the needs of the jurisdiction/company/organization who will be using the plan.  The plan must have utility – i.e. it must be usable.  Just because a plan meets established standards, does not mean that it can be operationalized.  Obviously our plans must still meet standards, but that really is a secondary concern to usability.  I think we are missing the forest for the trees and need to seriously re-think how we plan.

Any ideas?

Safeguarding our Electrical Grid – Reblog

More thoughts on the vulnerabilities of our electrical grid.  Great post.

Andy (אברהם נפתלי) Blumenthal's avatarandyblumenthal

Image

Popular Science (28 January 2013) has an interesting article on “How To Save The Electrical Grid.”

Power use has skyrocketed with home appliances, TVs, and computers, causing a significant increase in demand and “pushing electricity through lines that were never intended to handle such high loads.”

Our electrical infrastructure is aging with transformers “now more than 40 years old on average and 70% of transmission lines are at least 25 years old” while at the same time over the last three decades average U.S. household power consumption has tripled!

The result is that the U.S. experiences over 100 mass outages a year to our electrical systems from storms, tornados, wildfires and other disasters.

According to the Congressional Research Service, “cost estimates from storm-related outages to the U.S. economy at between $20 billion and $55 billion annually.”

For example, in Hurricane Sandy 8 millions homes in 21 states lost power, and…

View original post 350 more words

Strenghtening 9-1-1 Systems

Tim RieckerThis morning, Government Security News (GSN) published an article regarding the FCC‘s examination of last June’s derecho storms that severely impacted Virginia, Maryland, West Virginia, DC, and Ohio.  The FCC looked into the long-lasting down time of 9-1-1 call centers in these impacted areas, provided comment, as well as recommendations – which largely are pretty sound.

If you’ve read earlier blog posts of mine, you’ll know that I more-often-than-not tend to defend utility companies.  Yes, we can all be better prepared, but I believe that sometimes the expectations are unreasonably high, especially with wide-spread disasters.   Also, utility companies are just that – companies – their primary goal is to be profitable.  With this in mind, there comes a point when the cost of mitigation may, at least in the short-term, make them unprofitable.  While in theory I would say ‘suck it up’, share holders tend not to see things that way.  So that does leave us with a bit of a quandary.

9-1-1 is an absolutely critical service.  Outages and disturbances in these systems occur every day throughout the nation, but are typically short in duration.  The derecho left 3.6 million people with interrupted 9-1-1 service, some for many days.  While there are general infrastructure issues that result from storms that can impact a utility system, this was compounded after the derecho by continued high winds for a few days, making many repairs impossible.  The FCC report cites, however, a few easy fixes that could have greatly reduced both the number of outages and the duration of many of these outages – including emergency power generators at central offices and distribution hubs.  There were also planning gaps that were discovered, that, once addressed should help reduce impacts by both number and duration.  I believe we also need to harness the technology we have to discover redundancies and back-ups that can be implemented in the even of future system failures.

Every incident is a learning experience for all involved – and hopefully even for those fortunate enough to not be involved.  The challenge is accepting these lessons learned and applying them to improve our measure of preparedness, increasing our awareness, and better enabling us to respond more effectively the next time around.

What lessons have you learned from disasters???

Today is the Day Before

I subscribe to disaster recovery e-mails from a company called Agility Recovery, whose primary focus is IT disaster recovery but they recognize the value of a comprehensive approach.  They have great marketing and outreach, including regular webinars on various emergency management topics.

This week’s ‘Disaster Recovery Tip’ from Agility made me aware of a new campaign by FEMA (and I must say, FEMA’s campaigns have gotten MUCH better over the last few years – Kudos to FEMA!!!).  This one is entitled ‘The Day Before’, and reminds us that we never know what will happen tomorrow, so we should always be prepared.  Link to the video below.

FEMA: The Day Before

NYPD Active Shooter Recommendations and Analysis – December 2012

Timothy Riecker

NYPD Logo

This document, updated by NYPD last month in the wake of the Sandy Hook shooting, was brought to my attention through LLIS.  It’s also posted on the NYPD’s website here.  This document is a good compilation of practitioner research; official recommendations suitable for schools, businesses, and public buildings; and reflects on the ‘Run, Hide, Fight’ recommendations we’ve seen (NYPD’s version is a little more of a mouth-full – Evacuate, Hide, Take Action).  I like that they provide some information relative to attackers including gender, age, number of attackers (98% of active shooter incidents are carried out by a single attacker), planning tactics, targets, number of casualties, location of attack, weapons used, attack resolution, and other statistics – with this data provided for over 300 case studies (all included in the document).

The real value of this document is that the information which is provided to the reader allows for better informed (instead of emotional or ‘trendy’) decisions on facility security and planning relative to active shooter scenarios.

Thanks to the fine folks at NYPD for doing this work and sharing it with the public safety community.