Managing an Exercise Program – Part 8: Preparing Support, Personnel, & Logistical Requirements

This post is part of a 10-part series on Managing an Exercise Program. In this series I provide some of my own lessons learned in the program and project management aspects of managing, designing, conducting, and evaluating Homeland Security Exercise and Evaluation Program (HSEEP) exercises. Your feedback is appreciated!

Managing an Exercise Program – Part 1

Managing an Exercise Program – Part 2: Develop a Preparedness Strategy

Managing an Exercise Program – Part 3: Identify Program Resources and Funding

Managing an Exercise Program – Part 4: Conduct an Annual Training & Exercise Planning Workshop.

Managing an Exercise Program – Part 5: Securing Project Funding

Managing an Exercise Program – Part 6: Conducting Exercise Planning Conferences

Managing an Exercise Program – Part 7: Develop Exercise Documentation

Managing an Exercise Program – Part 8: Preparing Support, Personnel, & Logistical Requirements

Managing an Exercise Program – Part 9: Conducting an Exercise

Managing an Exercise Program – Part 10: Evaluation and Improvement Planning

As I forge ahead in this series on Managing an Exercise Program (thank you all for reading!!), I expect the revised Homeland Security Exercise and Evaluation Program (HSEEP) foundation document to be released soon from the US Department of Homeland Security (DHS).  Once that document is released, I’ll be sure to include a summary update in my blog.  Having been a reviewer of the draft document about a year ago, I don’t expect a lot of changes, but what does change will have some bits of significance on how we do business in the design, conduct, and evaluation of preparedness exercises.

This installment of Managing an Exercise Program gets us two steps away from actually conducting the exercise.  As you can see, putting an exercise together is no small feat.  I find that this particular step: Preparing Support, Personnel, and Logistical Requirements, is the one most often glossed over in documents and training.  As an example, HSEEP Volume I dedicates only one paragraph to exercise logistical support.  As Volume I states in its single paragraph, logistical elements ‘can make the difference between a smooth, seamless exercise and one that is confusing and ineffective.’  Let’s break down our considerations:

The location of the exercise is of significant concern.  Often times we are examining facilities, but some exercises are conducted outdoors with no use of facilities at all.  If outdoors, you still need to ensure the proper environment and support services, such as restrooms, being available.  If your exercise requires water for fire suppression, then proximity to hydrants is essential, unless you are looking to incorporate tanker operations into your exercise.  We’re looking for a location that is minimally disruptive to the surrounding area, including traffic and ensuring citizen safety.  Consider the need for public messaging, such as static displays, variable message signs (you can get these from your public works connections), and media releases to inform the public of the exercise.  Doing so will help satisfy their curiosity, will give you some positive media exposure, and will help you minimize disruption.  As an example, I’ll cite an urban search and rescue (USAR) component of the Vigilant Guard New York exercise which I led.

Working with local officials, our USAR specialist and a representative of the New York National Guard exercise team were able to select an appropriate cite for their activities.  Set up was extensive, involving multiple loads of building demolition debris and a few cars to be hauled in and specifically placed with the use of heavy equipment.  On one side of this lot were a number of three-story apartment buildings, which we sought to minimize impact to.  All hauling and set up operations took place during the day while exercise activities, which were 24 hour operations for several days, were minimized during the night.  USAR folks come with a lot of equipment… and I’m not just talking a few boxes of stuff, either.  Many have tractor trailers and cargo containers to transport their gear.  They set up tents where they can unload and unpack much of their gear and provide areas for briefing and down time for personnel.  This exercise brought in first responder and National Guard USAR assets from around the state, other states, and Canada.  An eating area needed to be on site as well as sanitation.  Obviously all these areas needed to be well out-of-the-way of operational areas of the exercise to ensure safety and allow room for the rescue activities.  Portable diesel-generated light towers were set up to support night-time operations.  A media time was scheduled to allow media to catch some of the action during the week as well.  Since some teams were only coming in to exercise for a day, a schedule needed to be established to ensure that they could be accommodated and a traffic plan had to be established to get them to the site.  The exercise, which included multiple venues, covered a period of time which included Election Day.  With caravans of first responder and National Guard equipment rolling through the area during this time period, we were sure to schedule movements off rush hour and I even had a conversation with the County Board of Elections.  In this conversation I briefed them on the locations and activity of the exercise to ensure that it didn’t interfere with their polling locations and provided them with my cell number which I told them to call if there was even the slightest hint of a problem or complaint.

Indoor exercises require the same measure of preparation.  You have to ensure that the spaces you use are safe and large enough to accommodate participants.  You may have a need for one or more break out rooms or meeting rooms, both for exercise management staff and for players.  Unless players are responsible for setting everything up themselves, ensure that power, internet, and telephonic communications are available for them… and can support their needs.  Back to Vigilant Guard, the EOC component of the exercise was significant.  Based on anticipated use, we actually brought in state emergency management capability for satellite digital communications to support the simcell with internet with phone so we wouldn’t draw on and degrade the in-house capability for players in the EOC.  Similar to an outdoor venue, you need to pay heed to needs for parking, restrooms, and food service.  It’s also a good media opportunity, so be sure to schedule that well in advance with the media and some VIPs.

In regard to personnel, we’ve touched upon the need for controllers, evaluators, and simulators in previous posts, mostly in regard to planning these needs and ensuring that they are covered with the necessary documents to help with their tasks, such as exercise evaluation guides (EEGs), controller/ evaluator plan, master scenario events list (MSEL), and Exercise Plan.  Identify the exercise leadership early – the exercise director, simcell and MSEL managers, and lead controller and evaluator.  These individuals, and the supporting staff for them, including simulators, controllers, and evaluators, are likely to come from your exercise planning team.  Some may have experience in these tasks, while others may not… something to keep in mind for development of the documents as well as the briefings you conduct for them just prior to the start of the exercise (that’ll be the next part of this series).  Don’t just assign folks randomly to positions, draw on their experience.  If someone has a strong EMS background, assign them to be controllers, simulators, or evaluators for that area of practice.  Be sure that your simulators also have some local experience as well if you are conducting this exercise for an area outside your own.  Local flavor brings realism and context to an exercise for the players.  Consider radios for controllers and evaluators, especially in large exercise areas.  This will allow the exercise director to speak with them and for them to interact with the simcell, letting them know if they need to speed up or slow down.  Also consider providing the exercise director with an assistant on large exercises.  Often times I’ve found the need for someone to aid me directly in resolving problems, gathering people, and handling miscellaneous tasks that are too much for any one person to handle.  It’s also a great learning experience for someone who wants to advance.

Overall, be sure to plan early for all logistical, support, and personnel needs.  Plan early for food contracts, ensure that all participants have the necessary supplies to conduct their jobs.  Plan ahead for safety as well, ensuring a safe work environment proactively and a good plan and personnel who can react to situations should they arise.  Be ready on-the-fly for changes and little or no-notice occurrences, as they almost always happen!  Make sure the players have everything they need for the exercise – if not, that lack of preparedness will be what they remember.

What experiences or ideas do you have with supporting an exercise?

Emergency Management and Considerations for Visiting Populations

Radar loop, Labor Day 1998 Upstate New York.  This storm impacted the New York State Fair.

Radar loop, Labor Day 1998 Upstate New York. This storm impacted the New York State Fair.

The inspiration for this blog was a paper posted to LLIS by Dr. Susanne Becken, Professor of Sustainable Tourism at Griffith University (Australia) and Lincoln University (New Zealand).  The paper is titled The Christchurch Earthquake and the Visitor Sector, which is also available from this link if you don’t have LLIS access.

Dr. Becken highlights the Christchurch earthquake of February 22, 2011, which killed 185 people from more than 20 nations, 80 of which were listed as visiting, rather than residing in, Christchurch.  She states that as a result of this M 7.1 earthquake infrastructure was badly damaged, accommodation capacity was reduced by half, and the number of international visitors dropped by almost 30 percent in the aftermath.  Dr. Becken identifies many of the challenges visitors had, including loss of travel documentation and other important items, and the value of the tourism industry in the area to assist response efforts (such as providing lodging for displaced citizens as well as responders from out of the area).

This paper brings to mind the vast amounts of visitors and transient populations that are found in many communities across the nation.  When visiting an attraction such as an amusement park, where tens of thousands of people congregate on any given summer day, take a look around.  Many of the amusement parks I know of are in fairly rural areas.  These towns are likely to have small volunteer fire departments and may not even have their own police services, instead relying on a county Sheriff’s Department or State Police.  How about a small city that has popular attractions at certain times of the year, such as horse tracks or other sporting events?  These events will also draw tens of thousands of people from near and far, staying in hotels, motels, and campgrounds.  Sure, these small cities might have a 24-hour staffed fire department, and probably even a small police force.  But how prepared are these types of areas for an incident that can cause mass casualties and fatalities?

Incidents such as this underscore the need for our preparedness to be through and needs-based.  As part of our Threat and Hazard Identification and Assessment (THIRA), which is the latest evolution of the traditional hazard analysis (see CPG-201), we must be sure to recognize visitors and transient populations and the events that bring them to our areas.  We should consider tourist attractions, field days, concerts and performances, large conventions, sporting events, and even college populations.  The potential impacts, in the event of a disaster, are certainly greater with these populations given that they are likely to be unfamiliar with the area, don’t reside locally and probably have no local contacts, and aren’t familiar with the threats.  Given the nature of the event they are attending, they may very well be consuming alcohol, as well.  All this makes for a rather fragile and dependent population in the event of disaster.

Planning on the macro (community) level should consider the specifics mentioned above.  With this information you can estimate the resources needed for certain scenarios (this is part of your THIRA), which will lead you determine gaps which you then plan to address.  Take some time to examine the demographics of the visiting populations.  These demographics will help determine their level of need in the event of a disaster and some areas of support you may need to provide.  Your local chamber of commerce and/or tourism authority can be an important planning partner for this information and other purposes.  Certainly consider the nature of the events and the age range of the attendees.  Are there language or cultural issues that should be prepared for?  Much of this specific information can be obtained event by event, looking at the micro (event-specific) level of planning for these events.  In New York State, a mass gathering permit is supposed to be issued for any event estimating attendance over a certain number.  The primary purpose of these permits is to ensure that officials are aware of the event and that potable water and sanitation is appropriately available, as well as other caveats.  Most states have a similar type of permitting requirement.  Become familiar with it and use it to your advantage.

In any of these events, how will you handle alert and notification in the event of a disaster?  You may have sirens in place, but would a visitor know what it means?  Given that such a high percentage of people have cell phones, use of area blast messaging may be an appropriate consideration.

A lesson learned from airline crashes can and should be brought into your planning: family assistance centers.  Family assistance centers were brought about in the aftermath of the crash of TWA Flight 800, realizing the importance of providing support and information to the families and loved ones of victims.  This concept has been applied as a standard to other mass fatality incidents since then and has proven to be beneficial to all parties.

Be sure to conduct preparedness exercises on these plans, and include members of your local hospitality and tourism industry as they will certainly be involved in some aspect of the greater response should an incident occur.

Sometimes local communities view visiting populations as a hassle, particularly when they don’t have the care for the host community that the locals do.  These populations are usually important to the economy of the local area and, depending in the event, will be back year after year.  No matter what your take is on that argument, you must consider the safety of any visitors or tourists as if they were your own citizens.  Be prepared through regular planning, training, and exercising activities and be sure to include your local chamber of commerce, tourism and hospitality industry as they are not only stakeholders, but they have a great deal of support and information to provide.  Most importantly, remember that all good preparedness efforts begin with a solid needs assessment.  Conduct a THIRA for your community, you might be surprised with what you discover!

What experiences do you have with planning for visiting populations?

Lucien Canton Webinar Recording: Are Your Emergency Operations Plans Realistic?

Last week EM Forum hosted one of the better webinars I’ve attended recently.  The presenter was Lucien Canton, CEM, a fellow Emergency Management Consultant.  His topic was “Are your emergency operations plans realistic?  A group discussion on planning assumptions”.  This presentation was in obvious response to his excellent blog article, Paper Plans and Fantasy Documents, which I blogged about a few weeks ago.  In both his article and the webinar, Lu talks about the need to ensure that plans make sense and can actually be implemented, not just cover legal requirements.

For ease, I’ve pasted the EMForum follow up email here, which provides a link to the webinar recording in various formats.  Highly recommended if you didn’t catch the original airing!

 

The Webinar recording of the February 13th EMForum.org program, “Are Your Emergency Operations Plans Realistic? A Group Discussion on Planning Assumptions,” with emergency management consultant, Lucien G. Canton CEM®, is now available. This is a large file and requires Windows Media Player or Windows Media Components for QuickTime or a similar product to view. The recording is also available in MP4 format for mobile users. The TranscriptAudio Podcast, as well as Ratings and Comments are available from the Background Page. The Audio Podcast and MP4 recordings are also available from the iTunes Store.

Chinese Government Cyber Attacks

Homeland Security Today just linked to two related articles on Chinese government fueled hacker attacks.  The first article is ‘Report ties 100-Plus Cyberattacks on US Computers to Chinese Military’ and the second article is ‘China: Aiding Hacker Attacks on West’.

As mentioned in my most recent post on Cybersecurity, these attacks, intended to steal information, harm our infrastructure, and destabilize our economy need to be classified as acts of war.

How should we respond to these acts???

Collegiate Emergency Management

Ever since attending college at SUNY Oswego and serving as chief of our campus ambulance (the first and longest-serving all student-run college ambulance – SAVAC) I’ve had a completely different perspective than most students on the community that is a college campus.  This experience resonated with me through my emergency management career.  As a result, I’ve paid special attention to colleges and universities; helping university police, college public safety entities, and other campus partners to be better prepared by providing training, supporting exercises, and reviewing plans.  I’m fortunate to have friends and colleagues around the nation who are emergency managers for their colleges as well as those who are involved in emergency management degree programs which further the professionalism of our field.  All these folks have worked hard to enhance their colleges’ preparedness through efforts not only targeting college faculty and staff, but also students – which can be a challenge with this regularly changing population.  I’ve seen training offered to students ranging from CPR and First Aid courses, to Campus CERT (community emergency response team), to EMT training.  These types of courses, offered to students, are certainly an investment, but one that can pay off not only for the campus community but beyond the campus when these students graduate.

Colleges and universities have a tremendous amount of resources.  These resources allow a certain measure of self-sufficiency.  I was reminded of this by a recent article about Tufts University working to keep their campus operational after Nemo.  Campuses are truly communities, with hundreds or thousands of residents, hundreds of commuters, and an infrastructure to support it all including roads, facilities, healthcare, and food.  Not only must they have emergency plans in place, but also business continuity plans.  Largely, their number one hazard is fire – and colleges take fire safety very seriously – but they all have their own unique hazard profile which they must address just like any other community.

I have always encouraged colleges to work with their local communities and vice-versa.  There are a number of case studies out there, certainly of local communities aiding campuses during fires, shootings, and other emergencies and disasters.  But there are also instances of colleges helping the local communities.  Not only do campuses have public safety resources (these encompass the entire range of law enforcement – from security guards, to peace officers, to police), but they also have some public works resources, and a vast number of potential volunteers that can all be deployed to aid a local community.  Depending on the education the college provides, these volunteers can range from general labor, to those being trained as social workers, medical providers, veterinarians, and other professions which can provide direct assistance under the supervision of an experienced professional.  This is not only a huge force multiplier to aid the community but also provides real, hands-on experience to the students.  Likely an experience they will never forget.  We’ve also seen colleges and universities provide assistance to local communities on-campus.  Campuses have served as shelters (both in dorms and other facilities, such as gymnasiums) and feeding facilities through their dining halls.  When off term, campuses have massive potential to serve as incident bases, supporting the needs of a larger incident by providing services for incident personnel and resources (remember your ICS training?) through their lodging and feeding capability, medical facilities, loading docks, garages and maintenance facilities, and even just their open spaces.

Colleges and universities have to ensure their own preparedness just like any other community, but they should also work with their local communities and even their county emergency manager on cooperative emergency management relationships.  Local responders should be familiar with the campus, its hazards, facilities, and the people who operate it.  The campus can further relationships by hosting training programs for area responders and emergency managers and should include area responders in any preparedness exercises they conduct.  Engaging the student population in preparedness efforts will have great impact on the campus’s emergency program and will provide skills that the students will carry with them forever.

The Leading Edge of CyberSecurity… Where is it?

Tim RieckerI finally had a chance to read through Homeland Security Today’s publication of The Leading Edge Today.  The January edition was focused on cyber security.  The Producer’s Corner article (i.e. letter from the editor), cites a study and report compiled by Verizon and other entities from around the globe, including the US Secret Service.  This report, called the 2012 Verizon Data Breach Investigations Report, is staggering.  They cite 855 confirmed cases of enterprise data loss and say that most entities that are hacked aren’t aware of it for weeks or months – and are usually notified by someone else of the incident (i.e. law enforcement or an enterprise internet security firm).  The remainder of the publication offers some good information and insight on trends and prevention activities in the realm of cyber security.

Obviously The Leading Edge Today was published prior to the President’s signing of the cyber security executive order just a couple of days ago.  All reports so far indicate that the executive order really has no teeth.  It’s not law and only provides recommendations, although it does call for the establishment of a Cyber Security Framework (perhaps to parallel the National Response Framework?) and calls for the NIST to establish the standards of this framework.  DHS is charged with sector-specific outreach to engage the private sector.  It’s not the full package of what our nation needs, but it’s a start.  It’s apparently a political throwing-down of the glove to challenge Congress to promulgate and pass a cyber security bill.

I’ve not had the chance to do any research on it, but what are other nations doing?  I imagine that there must be countries out there who have not dragged their feet as much as we have on this matter; and hopefully they have been able to implement not only strategic plans that outline progress, but have also implemented tighter defenses.  This may also be an opportunity for a global defense against cyber crimes – particularly in consideration of the perpetrators and the victims often times being from around the world.  In my eyes, this cyber terrorism needs to be viewed as an attack on our sovereignty, on our economy, and on our personal and corporate privacies.  To fight it is to wage war against those who perform it and those nations who sponsor it – just like any other act of terrorism.

Critical Infrastructure Dependencies

Homeland Security Today published an article recently on the FCC’s examination of wireless network issues post Hurricane Sandy.  While the article speaks mostly on the need to bolster the wireless telecom infrastructure, it does mention the obvious dependencies that wireless has on our energy infrastructure.  These types of dependencies can be seen throughout all our critical infrastructure, linking them intimately, and demonstrating how fragile we really are without proper preparedness efforts and redundancies.  The illustration below outlines eight (of eighteen) of our critical infrastructure sectors: Fuel, Communications, Water, Banking, Electric Power, Transportation, Emergency Services, and Government Services.  I take no credit for the graphic, which was simply found on Google Images, but it is a great example depicting a number of the linkages (i.e. dependencies) that each of these sectors has on one another.  Like dominos, multiple sectors can be made to topple by exploiting vulnerabilities in one or more of them.  We’re not just talking about terrorism here, although preventing the intentional interference with critical infrastructure is obviously a major concern, but we’re also looking at natural hazards.

Critical Infrastructure Dependencies

Critical Infrastructure Dependencies

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

We’ve seen from real life on multiple occasions what damages to our infrastructure can cause.  Our electrical infrastructure is perhaps the most fragile, but is also the one linked to every other sector – no wonder there is so much attention paid to preparedness and mitigation efforts to make this sector more resilient.  The above graphic shows, not accidentally, the electrical sector being in the middle of all others.

There has been further attention brought to the matter recently by the National Infrastructure Coordinating Center (NICC).  In this article by Homeland Security Today, it was announced that the National Infrastructure Coordinating Center will be hiring contractor support as a force multiplier in their monitoring activities.  Last week FEMA just released IS-913, their Independent Study course on Critical Infrastructure Protection: Achieving Results Through Partnership & Collaboration.  This course compliments other critical infrastructure protection-oriented training programs of FEMA’s.  FEMA Independent Study courses are free and open to all US citizens.  I would strongly encourage that you explore what they have to offer if you haven’t already.

Critical Infrastructure Protection (CIP) is an important topic spanning all of emergency management and homeland security.  Additional information on CIP can be found from the DHS CIP website and other sources.

The Emergency Manager as a Consultant

Lately I’ve gotten into watching these reality consulting shows like Bar Rescue and Restaurant: Impossible.  Both of these shows use a similar model, providing a prolific expert (Bar Rescue’s Jon Taffer and Restaurant: Impossible’s Robert Irvine) in their respective fields to aid a failing business.  These consultants are supported by a team of specialists and often a construction crew to remodel the business.  Sometimes it’s a just a few tweaks of the menu that’s needed, other times it’s a whole new way of thinking on the part of owners, management, and employees.  These are some of the best shows out there displaying conceptually some of the things consultants can do, albeit in a compressed and slightly dramatic mode.

Robert Irvine, the Consultant with Restaurant: Impossible

Robert Irvine, the Consultant with Restaurant: Impossible

That said, as many of my readers know, I work as an emergency management and homeland security consultant.  I’ve worked in the ranks of emergency management and public safety now for nearly 19 years.  Through this time, I’ve had the pleasure of working with a multitude of emergency management professionals at many levels; including counties and local jurisdictions and corporations.  These emergency managers, I’ve found, often play the part of a consultant.

While other department heads in county and local governments or corporations often make recommendations to CEOs (in this case Chief Elected Officials or Chief Executive Officers) these usually only impact their own department or have minimal impact on other parts of the organization.  Emergency managers make recommendations that often times impact the entire jurisdiction or organization – be they recommendations on mitigation, preparedness, recovery – and especially response.  Sometimes, unfortunately, the emergency manager doesn’t report to the CEO on a daily basis – which I think is a major mistake.  While others may be primarily concerned with saving their own operations in the event of disaster, the emergency manager’s goal is to preserve as much of the jurisdiction or organization as possible – with the priorities being life safety, incident stabilization, and property conservation.  These three tenants, preached mostly in Incident Command System courses, are applicable to both government and the private sector.  In both sectors, these priorities lead us logically to business continuity, ensuring that we minimize our losses and are able to continue operations.

As the profession of the emergency manager continues to evolve, including myriad training opportunities, education up to and including Ph.Ds., and professional certifications, the emergency manager is viewed more and more as a specialist and subject matter expert.  Emergency managers are expected to provide expert advice and guidance.  The emergency manager needs to stay current and up to date with the profession; not that the ‘science’ of emergency management changes much, but there are certainly new best practices, trends, and legal and regulatory requirements that need to be kept up on.  Whether an organization calls upon the emergency manager as an employee or brings in an actual consultant, this person is providing expert recommendations that impact the jurisdiction or organization as an enterprise system, not just a name or a spot on a map.  Just like in Bar Rescue or Restaurant: Impossible, the emergency manager may make recommendations that some people don’t like; but they called upon the emergency manager for their expertise.  The emergency manager is the consultant that can save your organization!