National Cyber Security Awareness Month

Recognizing the importance of cybersecurity, President Obama designated October as National Cyber Security Awareness Month (NCSAM). NCSAM is designed to engage and educate public and private sector partners through events and initiatives with the goal of raising awareness about cybersecurity and increasing the resiliency of the nation in the event of a cyber incident. October 2012 marks the ninth annual National Cyber Security Awareness Month sponsored by the Department of Homeland Security in cooperation with the National Cyber Security Alliance (NCSA) and the Multi-State Information Sharing and Analysis Center (MS-ISAC).
Follow these simple steps to keep yourself, your personal assets, and your private information safe online:

• Set strong passwords and don’t share them with anyone.
• Keep your operating system, browser, and other critical software optimized by installing updates.
• Maintain an open dialogue with your family, friends, and community about Internet safety.
• Limit the amount of personal information you post online and use privacy settings to avoid sharing information widely.
• Be cautious about what you receive or read online – if it sounds too good to be true, it probably is.

Check out the resources for information security on the "Resources" page of the Preparedness, LLC website.

NFPA 1600 Report on Comments Published

The National Fire Protection Association (NFPA) has posted the “Report on Comments” for the 2013 edition of NFPA 1600. This report includes much of the text of the proposed document.
The official NFPA 1600 committee web page provides information on the current edition, the status of the next edition, information on the technical committee, and guidance on how to post questions. You can also view the NFPA 1600 page on the Preparedness, LLC website to obtain information.
If you would like to view and listen to a presentation by NFPA 1600, committee chair Don Schmidt, visit the Emergency Management Forum website.
NFPA 1600 is revised every three years. The technical committee encourages you to submit your thoughts regarding the next edition.

Natural Gas Explosion in Forestville, MD

Having served as a firefighter in Prince Georges County, MD many years ago, my interest in a television news story was peaked last night. Firefighters in PG County responded to a natural gas leak and moments after evacuating the strip mall, it exploded.

Here is the accounting from PG County Fire/EMS:

"At 12:54 PM on Thursday, May 7, 2009, Prince George’s County Firefighter/Medics were dispatched on a call that no one is soon to forget. Firefighters were alerted to respond to the Penn-Mar Shopping Center, a large 1-story strip mall, in the 3400 Block of Donnell Drive in Forestville and arrived at 12:59 PM. First arriving crews initiated an investigation into a strong odor of natural gas inside the businesses. Firefighters evacuated 5 of the 6 stores that were in the area of the odor, a sixth store was vacant. Forty-five people were evacuated from the 5 stores and firefighters then started ventilation efforts and called for assistance of the Washington Gas Company. Firefighters discovered natural gas bubbling up from the ground on the exterior rear of the vacant store and minutes later reported that there was a fire on the interior. Within a minute, at about 1:20 PM, a massive explosion occurred. A MAYDAY call was sounded and additional resources including paramedics and a second alarm of firefighters were summoned to the scene."

Take this time to think about your facility. What if someone smells gas? What are you going to do? Take the time now to review your emergency plan to ensure it properly addresses gas leaks. Ensure the plan addresses:

• prompt alerting of the public fire department and gas company
• warning occupants to evacuate using travel paths that are away from the source of the gas leak
• assembling evacuees at a location safely away from the potential blast zone (the North American Emergency Response Guidebook calls for isolating the leak area for at least 100 meters (330 feet) in all directions.)
• and shuting off the gas (who should shutoff the gas, when is it safe to do so, where is the wrench, and how do you do it).

Video of the incident is linked to the Fox Television in Washington, DC. A YouTube video is also available. A brief audio from engine 826 is available from the PG County Fire/EMS website linked to the title of this blog article.

FDA Recall: ZOLL Medical Corporation AED Plus Defibrillator

If you have AEDs (Automated External Defibrillators) in your facility(ies), then you should check to see if you have the ZOLL AED Plus Defibrillator manufactured from May, 2004 through February, 2009 and distributed from May, 2004 through February 9, 2009. These models have been recalled by the FDA because the AED failed to deliver the defibrillation energy.

This device is used by emergency or medical personnel, by others who have completed CPR AED training courses, or the public at large. It is intended to treat patients in cardiac arrest. The device analyzes an unconscious patient’s heart rhythm and instructs the user to press a button that delivers an electrical shock to the heart to restore a normal heart rhythm.

The company sent their distributors and customers an initial recall letter on February 12, 2009 by certified mail. This letter instructed customers to replace their batteries every three years. The company then sent their distributors and customers a follow-up recall letter on March 31, 2009 by certified mail. This letter instructed customers to download new software for their devices and to remove any battery replacement reminder labels.

ZOLL will send an email notice to all customers who included their email address as part of their contact information. ZOLL will also publish information about the recall in industry magazines.

Contact Information

For more information about this recall, please see the company’s website at: http://www.zollaedplusbatteryhelp.com/

ZOLL Medical Corporation 269 Mill RoadChelmsford, Massachusetts 01824, (978) 421-9655

FEMA CGC 1 "Continuity Guidance for Non-Federal Entities"

The Federal Emergency Agency has just published "Continity Guidance Circular 1" (CGC 1) with subtitle "Continuity Guidance for Non-Federal Entities ." "The Department of Homeland Security, Federal Emergency Management Agency, in coordination with non-federal partners, developed this guidance document to provide direction for the development of continuity plans and programs for non-federal entities. " "In this guidance document, the elements of a viable continuity capability are identified and discussed. The provisions of this guidance document are applicable for State, local, territorial and tribal governments and the private sector. " The document provides good information, and it's worth a look. Just prepare yourself for the government terminology and view of the world of business continuity.

Improvised Explosive Device Awareness - Course of Actions

Every facility emergency operations plan should include procedures for bomb threats and receipt of suspicous packages. When I reviewed the following article, I thought it was timely advice worth passing along. The following advice is reprinted from the Emergency Management and Response Information Sharing and Analysis Center (EMR-ISAC) CIP Bulletin 11-08, December 22, 2008. If you would like to obtain additional resources for bomb threats and suspicious packages, please check out the "Bomb Threats & Suspicious Packages" links on the "Resources" page of the Preparedness, LLC website.

Overview

Improvised Explosive Devices (IEDs) can be arranged in a number of configurations, the only limitation to their design and functionality is the bomber’s imagination. The first action for awareness is identification of the suspect IED. Unattended or suspicious packages or containers could potentially contain an explosive device and should be reported to security personnel immediately. Likewise, individuals behaving suspiciously or vehicles that seem out of place could also represent an explosive threat and should be reported immediately to security personnel.

Preliminary Actions

Authorities, first responders, and citizens should take the following actions to strengthen the existing security posture in the event of a bomb threat:

• Most bomb threats are received by phone. Remain calm and try to obtain information necessary for responders. (Be sure a bomb threat checklist like the one available from ATF is posted at all phones that can receive incoming calls--especially whoever answers the main incoming line.)
• Preserve any evidence if the threat is received in a note or letter, and do not handle it.
• Conduct a cursory search of the venue/facility for items or packages that may be out of place.
• Use CCTV capabilities to monitor activities inside the facility, and along the periphery of the building, after notification of a threat.
• Follow evacuation procedures keeping clear of the location of any suspected device and assemble at a safe location distant from or protected frm the location of the suspected device.
• Check to be sure the pre-designated evacuation route and assembly area is clear of any potential threats, such as a secondary device. A secondary location should be identified in advance, in the event the first site is compromised.
• Be vigilant for characteristics of a suspect suicide bomber (e.g., wearing bulky clothing or coat, or attire uncharacteristic for the season; exhibiting nervousness or a distant look; sweating profusely, etc.)

Immediate Actions

Follow these steps when a suspect IED is encountered:

• Once out of the immediate area of the suspect IED, call 911 immediately;
• Employees should be trained not touch or disturb suspect items in any way;
• Immediately evacuate the surrounding area, for small packages (e.g. pipe bomb, briefcases etc.) a minimum of 300 ft is recommended;
• Prior to evacuation, check the designated evacuation assembly site, to ensure additional IEDs have not been placed to target those evacuating the venue.
• Do not use cellular phones or two-way radios in the immediate area of the device, since this action may cause the device to detonate.
• Remain vigilant for any additional suspicious activity.
• Identify interdependencies in the immediate area that could compound the effects of a detonation (e.g. gas lines, electric grids etc.), and consider increasing evacuation distances.

Follow On Actions

The following actions are vital, since the possibility for an additional incident cannot be eliminated:

• Conduct immediate review of any video or pictures captured by CCTV system.
• Attempt to gain information from those evacuated regarding what they may have witnessed.
• Immediately record any details from witnesses for law enforcement needs.
• Determine if evacuees took any videos or photos prior to the attack, and attempt to obtain that documentation for evidentiary purposes for the authorities.
• Look for anyone monitoring the response and notify responding law enforcement authorities of these actions.. (e.g. videoing the site, conducting time checks, taking notes, monitoring radio traffic with a scanner etc.)

Title IX of Public Law 110-53: Updated Resource Links and Presentations

I have updated the Resources page within the Preparedness, LLC website to include links to the text of Public Law 110-53,"Implementing Recommendations of the 9/11 Commission Act of 2007," the text of Title IX of the law, DHS/FEMA resources, and a link to ANAB. ANAB is the organization that will develop program guidelines for the "certifying bodies" that will actually evaluate and accredit the private sector preparedness programs.

In addition, you can view PDF copies of presentations to the Securities Industry and Financial Markets Association and the NorthEast Disaster Recovery Information X-Change, which provide background on Title IX of PL 110-53 and NFPA 1600, which is one of the standards that may be used as criteria for evaluation of private sector preparedness programs.

Protecting the Education Infrastructure

As reported in the Emergency Management and Response Information Sharing and Analysis Center (EMR-ISAC) INFOGRAM 37-08, September 25, 2008: "Much effort has been expended to protect the nation’s critical infrastructures, including those of the Emergency Services Sector (ESS). However, Department of Education officials concede that educational institutions are not specifically identified as among America’s critical infrastructure sectors or key resources, which potentially makes soft targets of schools, colleges, and universities. Experts say learning facilities are vulnerable to terrorism, because of the high consequence of an attack against children. The Emergency Management and Response—Information Sharing and Analysis Center (EMR-ISAC) gleaned from various case studies that the threat to schools may not be detected or prevented by physical security measures alone. Therefore, the EMR-ISAC suggests that ESS leaders can offer encouragement and assistance to educational centers as they conduct emergency planning and develop crisis action plans. For example, it is important that a school’s emergency plans are effectively integrated with the emergency response plans of the community in which the teaching establishment resides. Case studies further indicate that municipal authorities and their ESS leaders consider the following activities to improve the overall security of the local education infrastructure:

• Deliver “all-hazards” awareness training for school administrators, staff, and students.
• Train school administrators and staff regarding emergency actions.
• Review and validate all school emergency response, crisis management, and communications plans.
• Conduct drills and exercises to test and refine emergency response and crisis management plans.
• Provide primary and secondary interoperable communications systems for each school.
• Implement and test plans to maintain reliable contact with schools and school buses.
• Arrange for a “closed-campus” environment with a single point of access for all personnel.
• Increase police presence on school grounds by ensuring frequent visits as part of patrol routes.

There are national standards, including NFPA 1600, that address the essential elements of emergency management program. In addition, a new school preparedness standard is being developed in conjunction with the U.S. Department of Education. I am principal author of that new standard, and I will provide updated information on the standard when it can be released to the public.

If you are interesting in learning more about school emergency preparedness, check out the resource links at http://www.preparednessllc.com/resources/resources.html.

References & Resources: Links to Helpful Information

I recently updated the "Resources" within the Preparedness, LLC website. It includes more than five printable pages of references and resources for risk assessment, prevention and mitigation, emergency planning, business continuity, training, and more. There are links for laws and regulations, codes and standards, government agencies, nonprofit/professional organizations, and more. There are also many links to excellent, peer reviewed technical documents that open in HTML or PDF format from their hosted websites. It will always be a work in progress, but I will do my best to keep it updated. If you have suggestions for additons to the page, please let me know.