Emergency Management

Presented by Steve DavisPrincipal, DavisLogic & All Hands Consulting

Agenda

Definitions

Comprehensive Emergency Management

Incident Command System (ICS)

Are We Ready For Anything?

Eighty-one per cent of CEOs say that their company's plans were inadequate to handle the myriad of issues arising from the World Trade Center tragedy

Definitions

What is Emergency Management?

Emergency Management is the process of mitigating threats and preparing for,

responding to, and recovering from an emergency.

Planning is only one component of a CEMP. Hazard mitigation, preparedness, training, testing, and coordination are all equally important activities.

What’s an Emergency?

An unexpected situation or event, which places life and/or property in danger and requires an immediate response to protect life and property.

Emergency Management

“Organized analysis, planning, decision-making, and assignment of available resources to mitigate, prepare for, respond to, and recover from the effects of all hazards. The goal of emergency management is to save lives, prevent injuries, and protect property and the environment if an emergency occurs.”

Comprehensive Emergency Management (CEM)

An integrated approach to the management of all emergency programs and activities for all four emergency phases (mitigation, preparedness, response, and recovery), for all types of emergencies and disasters (natural, man-made, and attack.)

Includes continuity, disaster recovery, and related activities.

CEMP Plan

Contains policies, authorities, concept of operations, legal constraints, responsibilities, and emergency functions to be performed. Agency response plans, responder SOPs, and specific incident action plans are developed from this strategic document.

CEMP Program

Provides the framework for development, coordination, control, and direction of all CEM planning, preparedness, readiness assurance, response, and recovery actions

The plan documents the program

Crisis Management

The overall coordination of an organization's response to a crisis, in an effective, timely manner, with the goal of avoiding or minimizing damage to the organization's profitability, reputation, or ability to operate.

CEM Planning Activities

1. Conducting a Hazard Identification and Vulnerability Assessment;

2. Obtaining executive support;

3. Developing a work schedule;

4. Assembling and coordinating the plan; and,

5. Maintaining the plan and the program.

The Four Phases of Emergency Management

Mitigation

Recovery

Preparedness

Response

Mitigation

Mitigation is any action of a long-term, permanent nature that reduces the actual or potential risk of loss of life or property from a hazardous event.

Mitigation Examples

Building and Facility Design

Critical Infrastructure Protection

Acquisition or Relocation of Structures

Hazards Control Measures

Public Education, Awareness, Outreach

Preparedness

Preparedness is planning now on how to respond in case of emergency in order to protect human lives and property, and developing capabilities and programs that contribute to a more effective response.

Preparedness Examples

Establishing an Emergency

Management Program

Develop Plans

Capability Assessment

Training and Education

Tests and Exercises

Insurance

Response

Emergency response activities are conducted during the time period that begins with the detection of the event and ends with the stabilization of the situation following impact.

Response Examples

Implement Preparedness Measures

Emergency Response Teams

Provide Emergency Assistance

Confront Hazard Effects & Reduce

Damage

Enhance Recovery Potential

Recovery

Recovery refers to those non-emergency measures following disaster whose purpose is to return all systems, both formal and informal, to as normal as possible.

Recovery Examples

Crisis Counseling

Business Resumption

Debris Clearance (non-critical)

Develop Recovery Strategy

Temporary Housing

Disaster Assistance

Reconstruction

Other Terms

Civil Defense/Emergency PreparednessBusiness Continuity/Contingency PlanningCrisis or Consequence ManagementDisaster Recovery, Management or ServicesEmergency ServicesHazard Management or MitigationRecovery/Business Resumption PlanningRisk Management

What Does Comprehensive Emergency Management Include?

Comprehensive Emergency Management

Contingency Planning Disaster Recovery

Security Business Continuity

Crisis Communications

Traditional Emergency Management

CEMP Plan Components

CEMP MitigationDisaster Recovery

Business Continuity

Business Resumption

Contingency Planning

ObjectivePrevent or Reduce Impact

Critical Computer Apps

Critical Business Processes

Process Restoration

Process Workaround

Focus PreventionData Recovery

Process Recovery

Return to Normal

Make Do

Example

EventFlood Proofing

Mainframe or server failure

Laboratory Flood

Building FireLoss of Application

Solution Check ValveHot Site Recovery

Dry Out & Restart

New Equip. New Bldg.

Use Manual Process

Emergency Planning Concepts

Incident Command System (ICS)All Hazards AddressedAll-inclusive – Everyone ParticipatesEmergency Response CoordinationEffective Crisis CommunicationTraining for Responders and EmployeesDisaster Recovery Communication and Information Sharing

Planning Process

Assess - identify and triage all threats (BIA)

Evaluate - assess likelihood and impact of each threat

Mitigate - identify actions that may eliminate risks in advance

Prepare – plan for contingent operations

Respond – take actions necessary to minimize the impact of risks that materialize

Recover – return to normal as soon as possible

Emergency Support Functions1 Laws and Authorities 2 Hazard Identification and Risk Assessment 3 Hazard Management 4 Resource Management 5 Planning 6 Direction, Control and Coordination 7 Communications and Warning 8 Operations and Procedures 9 Logistics and Facilities 10 Training 11 Exercises 12 Public Education and Information 13 Finance and Administration 

NFPA 1600

A “Standard on Disaster/Emergency Management and Business Continuity.

It may become the industry standard for all organizations, including governments and businesses.

Describes the basic criteria for a comprehensive program that addresses disaster recovery, emergency management, and business continuity.

1600 Methodologies

Addresses methodologies for defining and identifying risks and vulnerabilities and provides planning guidelines which address: Restoration of the physical infrastructure Protecting the health and safety of personnel Crisis communications procedures Management structures for both short-term

recovery and ongoing long-term continuity of operations

Capabilities Assessment for Readiness

The aim of a CAR project is to research, identify, and report on the scope of the Organization’s Emergency Management Program to ensure compatibility with federal and state emergency management standards. The report will support strategic planning by identify program areas needing immediate development, updating, or improvement, and those elements to be accomplished during the later planning phases.

Capabilities Assessment for Readiness Benefits

Identify existing strengths and weaknessesEvaluate the current state of readinessDevelop strategic plans to improve identified weaknesses for terrorism and other threatsJustify existing program staffing and budgetDemonstrate need for additional program development resources, e.g. staff, budget, support from other community agencies, etcSupport professional development and accreditation programs

Using the Incident Command Structure

Background

The Incident Command System in use today is an outgrowth of California’s FIRESCOPE program developed in the 1970s to improve management of large wildfires. It was designed to provide a commonly accepted management structure that would result in better decisions and more effective use of available resources. It was specifically designed for incidents that involve many local, state, and federal agencies and multiple political jurisdictions.

ICS Features

Standard Organization Incident Facilities Incident Action Plan Span of Control Unity of Command Common Responsibilities

Common ICS Terminology

Organizational Functions: Operations, Intelligence, Logistics, and Finance. Functions pre-designated and named for the ICS.

Resources: Refers to the combination of personnel and equipment

used in response and recovery.

Facilities: Common identifiers used for those facilities in and around

the incident area which will be used during the course of the incident. These facilities include the command center, staging areas, etc.

Modular Organization

ICS's organizational structure is modular.

As the need arises, functional areas may be developed.

Several branches may be established.

Structure based upon the needs of the incident.

One individual can simultaneously manage all major functional areas in some cases.

If more areas require independent management, someone must be responsible for that area.

Typical EOC Organization

P u b lic In fo rm ationE xte rn a l R e la tion s

In fo rm ation Tech n o log yA n a lys is

V u ln erab ility an dTh rea t A ssessm en tC on tin g en cy P lan s

P lan n in g

C os tTrack in gP o lic ies

A d m in /F in an ce

S u p p liesR esou rces

L og is tic s

In fras tru c treP rocesses

L in e-o f-B u s .L ife S a fe ty

O p era tion s

E m erg en cy M an ag er

C h ie f E xecu tive

Emergency Response and Recovery Teams

Incident Commander

SAFETY

Liaison

PublicRelations

LOGISTICS OPERTATIONS PLANNINGFINANCE

MEDICALUNIT

SECURITYFACILITIES

FOOD

COMMUNICATIONS

SUPPORTSERVICES

TIME

COST

DOCUMNETATION

Cisco’s EOC

Based on the Incident Command System

Incident Commander

In Charge at the Incident

Assigned by Responsible Jurisdiction or Agency

May Have One or More Deputy Incident Commanders

May Assign Personnel for Command Staff & General Staff

EOC Manager

Manages the EOC - not the incident

Makes sure everything is working

Maintains a safe environment

Optimizes efficiency

Facilitates and coordinates

Solves problems

EOC Staff Members

Check-in with the EOC Manager.Review the situation report (SitReps) and incident logs.Make sure that your name is listed on the current EOC organization chart.Review the staff Operating Guide (SOG) and set up your work station.Start an incident log which details your actions (chronologically.)

Incident Action Plan (IAP)Concepts

Planning process has been developed as a part of the ICS to assist planners in the development of a plan in an orderly and systematic manner.

Incidents vary in complexity, size, and requirements for detailed plans.

Not all incidents require detailed plans.

Incident Action Plan (IAP)Responsibilities

Planning Chief - conducts a planning meeting and coordinates preparation of the incident action plan.

Incident Manager - conducts planning meeting and coordinates preparation of the IAP.

Operations Chief - conduct the planning meeting and coordinates preparation of the IAP.

Finance Chief - provides cost implications of control objectives as required.

Logistics Chief - ensures resources.

IAP Meeting Participants

For major incidents, attendees should include:

Incident Manager

Command and general staff members

Resource unit leader

Situation unit leader

Communications unit leader

Technical/Specialists (As Required)

Agency representatives (As Required)

Recorders

IAP Briefing on Situation and Resource Status

The planning section chief and/or resources and situation unit leaders should provide an up-to-date briefing on the situation as it currently exists.Specify Tactics for Each Division.Place Resource and Personnel Order.Consider Communication Requirements.Finalize, Approve, and Implement the Incident Action Plan.

It’s Not Enough Just to Plan

Use focus groups and brainstorming Seek “what can go wrong” Find alternate plans & manual work arounds Find innovative solutions to risks

Plans must be exercised Hold table top exercises for disasters Conduct “fire drills” of plans Train staff for action during emergencies

Using Scenarios

Be creative but not too creativeThink about how bad it should be Loss of Lifelines? Supply Chain Disruptions? Civil unrest?

Develop likely scenarios and develop scenario-based plans

Emergency Operations Centers

The Purpose of the EOC

The EOC’s purpose is to coordinate incident information and resources for management.  The EOC must receive, analyze, and display

information about the incident to enable CEO decision-making. 

The EOC must find, prioritize, deploy, and track critical resources. 

The EOC must enhance decision making, communication, collaboration, and coordination.

The EOC is really a place where: 

Uncomfortable people

Meet in cramped conditions

To play unfamiliar roles

Making unpopular decisions

Based on inadequate information

In much too little time

While drinking way too much coffee….

A Good Concept of Operations Good Space Good Teams Good Staff Good Communications Good Technology

What Makes the EOC Work?

Basic Management Functions Objective Based Incident Action Planning Unity of Command Delegation Span of Control Support Staff

What Makes the EOC Work?

The Challenge of Coordination

The Ideal Information System

Easy to use and robust information and decision management system

Central command and control Early alert communications function Event tracking and logging SOP and automated check lists Resource management Documentation of response actions for due

diligence

Virtual EOCs

A “Virtual EOC” enables managers to: participate in critical decision-making

processes regardless of physical location effectively direct and control resources automate processes and methodologies assign and track tasks efficiently communicate real-time information protect communication and data with needed

redundancy and flexibility

Advantages of a Virtual EOC

Augments physical centersAnyone, anywhere can participateLower investmentEase of use, flexibilityRequires shared communications and dataData can be hosted off-site using redundant servers in hardened sitesLittle or no infrastructure required – uses readily available Internet technology

Management Strategies

Lead a top-notch team

Assess all hazards and risks

Complete and test contingency plans

Design a robust Command Center

Drill the Command Center

Implement a system for command, control, communication, and intelligence

A Good Plan

"The plan is nothing.

Planning is everything.“

General Eisenhower

For More Information

Contact:

Steve Davis, Principal

All Hands Consulting

AllHandsConsulting.com

Steve@ AllHandsConsulting.com