CONTINUITY TRAINING AND EXERCISE PROGRAM Kevin Clement, CEM®, TEM© January 15, 2014 PURPOSE To provide information and highlight a recognized “best practices” in the development of a continuity training and exercise program for Texas State Agencies. 2 CONTINUITY TRAINING AND EXERCISE PROGRAM Overview References Training Level I Level II ERG Teams Reconstitution Exercises Training Seminars Alert/Notification Drills Tabletop Exercises Full Scale Exercises 3 CONTINUITY TRAINING AND EXERCISE PROGRAM Learning Objectives 1. Identify Texas requirements for State Agencies 2. Identify FEMA recommendations for TT&E Programs Training of Continuity Manager Training of Continuity Personnel Training of Reconstitution Team 3. Understand “HSEEP-compliant” guidance 4. Understand “sequential and progressive” guidance 5. Identify COOP training and exercise “best practices” 4 CONTINUITY TRAINING AND EXERCISE PROGRAM TESTING AND TRAINING 5 CONTINUITY TRAINING AND EXERCISE PROGRAM References Primary references are: Continuity Guidance Circular I (CGC 1), Annex K: Testing, Training and Exercise Program State Continuity Policy Letter, October 2013 Homeland Security Exercise and Evaluation Program (HSEEP), Department of Homeland Security, April 2013 IS-139, Exercise Design, FEMA Independent Study Course 6 CONTINUITY TRAINING AND EXERCISE PROGRAM Policy Letter Requirements “By November 30, 2013, designate a Continuity Coordinator for the agency and provide contact information to SORM. A qualified Continuity Coordinator should be trained in continuity planning and certified by a recognized organization such as FEMA’s emergency management Institute (Continuity Practitioner Level I or Level II…” (page 2) 7 FEMA provides a robust training and certification program for: Continuity Practitioner – Level I, and Continuity Practitioner – Level II or Master Continuity Practitioner (MCP) Training is a combination of: Independent Study Classes Classroom Instruction Continuity Tabletop Exercises 8 CONTINUITY TRAINING AND EXERCISE PROGRAM Continuity Practitioner – Level I • • • • • • • • • • • • • • • • IS-546.12: COOP Awareness Course IS-547.a: Introduction to COOP IS-242.a or equivalent E/L/G course: Effective Communication IS 548: COOP Manager’s T-t-T Course E/L/G 550: COOP Planner’s T-t-T Workshop or L 552: Continuity of Operations for Tribal Government Course IS-100.b: Intro to Incident Command System (ICS) IS-200.b: Incident Command System (ICS) for Single Resources and Initial Action Incidents IS-230.b : Fundamentals of Emergency Management IS-700.a: Intro to National Incident Management System (NIMS) IS-800.b: A National Response Framework (NRF), An Introduction IS 139: Exercise Development Course/Exercise Design Complete attendance in continuity exercise Pandemic Influenza (PI) Determined Accord Workshop IS 520: Introduction to Continuity of Operations Planning for Pandemic Influenzas and IS 522: Exercising Continuity Plans for Pandemic Course ; or Resilient Accord Cyber Security Workshop or Guardian Accord Terrorism Awareness Workshop ** NARA/CoSA Vital Records Training (optional, recommended) 9 CONTINUITY TRAINING AND EXERCISE PROGRAM Master Continuity Practitioner (MCP) Applicants must attain a Continuity Excellence Series – Level I, Professional Continuity Practitioner • IS-130: Exercise Evaluation and Improvement Planning or E 132 (limited to EMI Resident MEPP candidates) or G130: Exercise Evaluation • IS-240 or IS-240.a or equivalent E/L/G course: Leadership and Influence • E/L/G or IS 551: Devolution Planning Workshop • E/L 156: Design for Homeland Security T-t-T Course for Continuity of Operations or E/L 155: Building Design for Homeland Security • E/L 262: Instructional Delivery for Subject Matter Experts or G265:Instructional Delivery Skills (formerly G261: Instructional Presentation Skills) or E 605: Instructional Delivery or E/L 141: Instructional Presentation & Evaluation Skills Course • Instruct E/L/G or IS 548: COOP Manager’s T-t-T Course • Facilitate E/L 550 or IS 551: Devolution Planning Workshop or Determined Accord Pandemic Preparedness Workshop for Continuity Managers or Facilitate Resilient Accord or Guardian Accord or Reconstitution Planning Workshop • Written Comprehensive Exam (150 questions) – Applicants are eligible to take the comprehensive exam once they have met all other Level II requirements 10 CONTINUITY TRAINING AND EXERCISE PROGRAM Policy Letter Requirements “By October 31, 2014, develop an agency-level continuity training program to ensure mission-critical personnel are prepared to perform required continuity functions during an emergency.” (page 2) 11 CONTINUITY TRAINING AND EXERCISE PROGRAM FEMA Training Recommendations An organization’s training program should include: 1. Annual continuity awareness briefings (or other means of orientation) for the entire workforce. 2. Annual training for personnel (including host or contractor personnel) who are assigned to activate, support, and sustain continuity operations. 3. Annual training for the organization’s leadership on that organization’s essential functions, including training on individual position responsibilities. 4. Annual training for all organization personnel who assume the authority and responsibility of the organization’s leadership if that leadership is incapacitated or becomes otherwise unavailable during a continuity situation. 12 5. Annual CONTINUITY TRAINING AND EXERCISE PROGRAM FEMA Training Recommendations 5. Annual training for all pre-delegated authorities for making policy determinations and other decisions, at the field, satellite, and other organizational levels, as appropriate. 6. Personnel briefings on organization continuity plans that involve using, or relocating to continuity facilities, existing facilities, or virtual offices. 7. Annual training on the capabilities of communications and IT systems to be used during an incident. 8. Annual training regarding identification, protection, and ready availability of electronic and hardcopy documents, references, records, information systems, and data management software and equipment needed to support essential functions during a continuity situation. 13 CONTINUITY TRAINING AND EXERCISE PROGRAM FEMA Training Recommendations 9. Annual training on an organization’s devolution option for continuity, to address how each organization will identify and conduct its essential functions during an increased threat situation or in the aftermath of a catastrophic emergency. 10. Annual training for all reconstitution plans and procedures to resume normal organization operations from the original or replacement primary operating facility. 14 CONTINUITY TRAINING AND EXERCISE PROGRAM EMERGENCY RELOCATION GROUPS (ERG) TRAINING 15 CONTINUITY TRAINING AND EXERCISE PROGRAM Emergency Relocation Teams (ERG) • Pre-designated staff who move to a relocation site to continue essential functions in the event that their normal work locations are threatened or have been incapacitated by an incident. The ERG is composed of an advance team plus emergency personnel. • Normally, ERGs must be able to alert, assemble, and deploy to the agency’s designated facility in order to reestablish essential functions within 12 hours • Drills. – Alert and assemble within a specified timeline – Inventory drive away kits 16 CONTINUITY TRAINING AND EXERCISE PROGRAM Emergency Relocation Teams (ERG) Identify and describe specific functions and tasks Identify required skill sets to perform essential function(s) If more than one essential function is addressed, members should be cross-trained and vertically trained – Accepted practice in the event of a pandemic influenza – Able to perform the functions of their peers – Able to perform the functions of the person above and below them during emergencies Identify required reporting and communications requirements Developing Emergency Relocation Group (ERG) Member Planning Guides, June 2009 17 CONTINUITY TRAINING AND EXERCISE PROGRAM RECONSTITUTION TRAINING 18 CONTINUITY TRAINING AND EXERCISE PROGRAM Reconstitution Training Some suggested courses: IS 208.a State Disaster Management Course IS 559: Local Damage Assessment IS-395: FEMA Risk Assessment Database Rapid Damage Assessment FEMA 452 Risk Assessment FEMA 455 Rapid Visual Screening for Buildings L-156: Building Design for Homeland Security 19 CONTINUITY TRAINING AND EXERCISE PROGRAM CONTINUITY EXERCISES 20 CONTINUITY TRAINING AND EXERCISE PROGRAM Policy Letter Requirements “Beginning as soon as practicable, but no later than Fiscal Year 2015, conduct an annual exercise of agency continuity plans and report completion to SORM. Schedule and post exercise information on www.preparingtexas.org. Exercises should be compliant with the Homeland Security Exercise and Evaluation Program (HSEEP) and should be sequential and progressive in nature.” (page 2) 21 CONTINUITY TRAINING AND EXERCISE PROGRAM An organization’s exercise program should include: 1. An annual opportunity for continuity personnel to demonstrate their familiarity with continuity plans and procedures and to demonstrate the organization’s capability to continue its essential functions. 2. An annual exercise that incorporates the deliberate and preplanned movement of continuity personnel to an alternative facility or other continuity location. 3. Communications capabilities and both inter- and intraorganization dependencies. 4. An opportunity to demonstrate that backup data and records required to support essential functions at continuity facilities or locations are sufficient, complete, and current. 22 CONTINUITY TRAINING AND EXERCISE PROGRAM 5. An opportunity for continuity personnel to demonstrate their familiarity with the reconstitution procedures to transition from a continuity environment to normal activities as appropriate. 6. An opportunity for continuity personnel to demonstrate their familiarity with the devolution procedures to reconstitute from a continuity environment to normal activities as appropriate. 7. A comprehensive debriefing after each exercise, which allows participants to identify systemic weakness in plans and procedures and to recommend revisions to the organization’s continuity plan. 8. A cycle of events that incorporates evaluations, AARs, and lessons learned into the development and implementation of a Corrective Action Program, including an Improvement Plan (IP) 23 9. CONTINUITY TRAINING AND EXERCISE PROGRAM 9. Organizational participation: conducting and documenting annual assessments of their continuity TT&E programs and continuity plans and programs. 10. Each organization should develop a Corrective Action Plan (CAP) to assist in documenting, prioritizing, and resourcing continuity issues identified during TT&E, assessments, and emergency operations 24 CONTINUITY TRAINING AND EXERCISE PROGRAM Corrective Action Plan (CAP) The purpose of CAP is to accomplish the following: a. Identify continuity deficiencies and other areas requiring improvement and provide responsibilities and a timeline for corrective action; b. Identify program and other continuity funding requirements for submission to the organization leadership; c. Identify and incorporate efficient acquisition processes, and where appropriate, collect all inter-organization requirements into one action; and d. Identify continuity personnel requirements for an organization’s leadership and their supporting Human Resource Offices. 25 CONTINUITY TRAINING AND EXERCISE PROGRAM Continuity Guidance Circular I – Annex K An organization’s testing program should include: 1. Annual testing (at a minimum) of alert, notification, and activation procedures for continuity personnel, with recommended quarterly testing of such procedures for continuity personnel. 2. Annual testing of plans for recovering vital records (both classified and unclassified), critical information systems, services, and data. 3. Annual testing of primary and backup infrastructure systems and services (e.g., for power, water, fuel) at continuity facilities. 4. Annual testing/exercising of required physical security capabilities. 26 Continuity Guidance Circular I – Annex K 5. Testing and validating equipment to ensure the internal and external interoperability and viability of communications systems, through quarterly testing of the continuity communications capabilities outlined in Annex H (e.g., secure and non-secure voice and data communications). 6. Annual testing of the capabilities required to perform an organization’s essential functions, as identified in the BPA. 7. A process for formally documenting and reporting tests and their results. 8. Conducting annual testing of internal and external interdependencies identified in the organization’s continuity plan, with respect 27 Continuity Guidance Circular I – Annex K NOTE: The aforementioned guidance does not require separate training events. Multiple requirements can be incorporated into one exercise event. 28 CONTINUITY TRAINING AND EXERCISE PROGRAM Homeland Security Exercise and Evaluation Program The Homeland Security Exercise and Evaluation Program (HSEEP) doctrine consists of fundamental principles that frame a common approach to exercises. Applying these principles to both the management of an exercise program and the execution of individual exercises is critical to the effective examination of capabilities. Further information found at: https://www.llis.dhs.gov/HSEEP 29 RECOMMENDATIONS Annual Continuity Plan Training Seminar “Teach the Plan” through annual Training Seminar - Assumes that not everyone reads the plan All personnel attend (both leadership and employees) Ensures that all have a base threshold of knowledge - Typically this is a PowerPoint presentation that takes personnel thru each phase of the plan This scripted presentation can be turned into a Webinar for New Hires or personnel absent at the time of presentation 30 RECOMMENDATIONS ERG Drills Conduct periodic Alert/Activation Drills for the ERG Team No Notice Recommend drills be conducted at least quarterly Inspect “Drive Away” Kits Both Section and Personal Reward for meeting timelines and having complete kits (?) Compensatory Time or Time off (?) Letter of Commendation (?) 31 RECOMMENDATIONS Tabletop Exercise - Leadership Conduct an annual Tabletop Exercise (TTX) for agency leadership (to include leaders of the ERG Team) The TTX is used to simulate a continuity event in an informal, stress-free environment. The participants, usually people on a decision-making level, gather around a table to discuss general problems and procedures in the context of an emergency scenario. The focus is on training and familiarization with roles, procedures, or responsibilities Integrate use of the synchronization matrix 32 RECOMMENDATIONS Full-Scale Exercise Conduct a Full Scale Exercise for Continuity Personnel. Note: It is not necessary to involve or send the entire agency home per a continuity event – for them, it is business as usual. ERG team alerts, assembles, and deploys to its alternate facility and performs tasks necessary to perform its essential functions. - Meets accepted timelines - Evaluated by another agency’s ERG Team members** Agency leaders are engaged in receiving reports and making decisions in accordance with exercise play. Followed by a Hotwash and After Action Report 33 Comments and Discussion 34 Contact Information Kevin M. Clement, CEM®, TEM©, MCP Texas Office of Homeland Security 1033 La Posada Drive, Suite 160 Austin, Texas 78752 512.377.0031 (Office) 512.626.5413 (Cell) Kevin.Clement@dps.texas.gov 35