Arizona: One Approach to doing a THIRA

1. Session 5-5Program Management and Sustainment Arizona: One Approach to doing a THIRA Presented by: Lisa Hansen, Assistant Director, Planning and Preparedness, Arizona Department of Homeland Security Steve Davis, Project Consultant, All Hands Consulting

2. Introductions • Lisa Hansen - Assistant Director, Planning and PreparednessArizona Department of Homeland Security • Steve Davis – Project Manager,Phoenix Strategic Planning ProjectAll Hands Consulting

3. Preparedness • Preparedness is based on strengthening our collective security and resilience through systematic preparation for the threats that pose the greatest risk. Adapted from the Strategic National Risk Assessment - 2011

4. Arizona’s Previous efforts • The Arizona Department of Homeland Security (AZDOHS) conducted a Target Capabilities Assessment. • Arizona Division of Emergency Management (ADEM) conducted a Hazard Identification and Risk Assessment (HIRA) • AZDOHS completed the 2011 State Preparedness Plan (SPR)

5. AZ Target Capabilities Assessment

6. State of Arizona HIRA • Hazard Identification and Risk Assessment(Does not include Adversarial Threats)

7. Arizona SPR Capability Scores (5) 100% Capable Arizona SPR (4) (3) (2) (1) No Capability 0% Not assessed

8. State Strategy • State Strategy Goals: • Enhance Arizona’s CommonCapabilities (Plans, Comms, etc.) • Prevent Terrorist Attacks • Enhance Border Security • Protect Critical Infrastructure & Key Resources • Respond to Incidents • Recover from Incidents

9. Phoenix UASI Strategy Project • Phoenix needed to update their Urban Area Homeland Security Strategy. • Phoenix asked to include a THIRA as part of the process. • THIRA guidance was not yet issued. • So, working with the State, we decided to validate the 2011 SPR as a means of doing the THIRA.

10. UASI Homeland Security Grant Lifecycle THIRA Prioritized Core Capability Targets October Prioritize Core Capabilities September November Funding Allocation August UASI Initial Budget to SAA December Develop Initial Budget Final Regional Training & Exercise Plan July January June February DHS Guidance Review DHS Guidance Training & Exercise Plan Workshop May March April Draft Regional T&E Plan Develop Investment Justifications Guidance Summary & Budget Guide Inner Ring – Time Middle Ring – Process Outer Ring – Product Draft UASI Investment Justifications Final UASI Investment Justifications Capability Assessment Revised Homeland Security Strategy Capabilities Assessment UASI Strategy Assessment/ Review Conduct THIRA Planning Begins for New Grant Cycle New Budget Improvement Plan Conference Improvement Plan

11. Phoenix Strategy • Phoenix Strategy: • Focused on Rapid Response Teams • Goals largely achieved • Needed to be updated Phoenix wanted a fresh start and asked that the new Strategy be based on an assessment of threats and capabilities.

12. Project Approach • Research • Stakeholders • THIRA • Threat Assessment • Capabilities Assessment (Estimation) • Gap Analysis • Update Strategy

13. THIRA guide – It’s Simple • Assesses your threats and hazards • Assesses the vulnerability to those hazards • Estimate the consequences of those threats and hazards impacting the community • Establish capability targets • Estimate current capability vs. target • Captures the results of the THIRA and use it to update your Strategy

14. Our thira Process Objective: Conduct a State Preparedness Report (SPR) Validation Exercise to:  • Conduct a Threat and Hazard Identificationand Risk Assessment • Conduct a Capabilities Estimation • Perform a Gap Analysis • Prioritize Select Capabilities to Sustain and Enhance • Build and Resource Implementation Steps - Allocate Resources Based on Results

15. This is nothing new • We all have been doing threat assessments, capability assessments, analyzing gaps, and updating Strategies for almost 10 years now. • Now we do THIRA, capability estimation, and gap analysis to update the Strategy. • This should be part of the grant lifecycle. • The difference is: How will the THIRA data be used?

16. The 800 Pound gorilla

17. Why the Concern about THIRA? • What are they going to do with thedata? • Will it impact funding allocation? • Inquiring minds want to know!

18. How will thira impact us? “There are no details yet as to whether states would be required to provide local governments with any role in the THIRA examination. FEMA would then choose which projects to fund from each state’s THIRA based on national priorities." National League of Cities

19. National Preparedness System

20. National Preparedness System • Identify and assess risk (THIRA) • Estimate capabilities needed to address risks • Build or sustain required levels of capability • Develop and implement plans to deliver those capabilities • Validate and monitor progress • Review continuous improvement efforts

21. The State Preparedness Report tool tracks closely to the THIRA process: • Identify the Threats and Hazards of Concern. (Select a target for each threat/hazard selected.) • Give Threats and Hazards Context. (Determine which threat/hazard will require the maximum capacity.) • Examine the Capabilities using the Threats and Hazards. (Assess capabilities based on threat.) • Set Capability Targets. (What level do you need to achieve based on the threats.) • Apply the Results. (Use the results to drive Strategy.)

22. Validating the SPR • Highest Risk Hazard/Threats (Rated 5) • Flood • Drought • Nuclear Accident • Dam Failure • Armed Assault

23. Validating the SPR • Each threat/hazard is used to put the capabilities into context. • For each threat/hazard, we need to explain the different conditions under which a threat or hazard might occur. • The Crosswalk Worksheet lists core capabilities vertically and threats/hazards are listed horizontally.

24. Step 1: Select a target for eachapplicable threat/hazard • Choose the most appropriate incident descriptions for each threat/hazard. • These escalate in severity - minor to very severe. • Select the highest severity incident that you aim to manage using local capabilities only. • This is your target operational level, not your current capability. • Outside mutual aid should not be considered.

25. Transportation What is a “Transportation System Failure” and should it be considered a hazard? • Failure in single-use transportation system; Impact limited to immediate geographical area. • Failure in single-use transportation system; Highly localized effects on other transportation systems or other services. • Failure in multi-use transportation system; Localized effects, potentially impacting other services. • Failure in multi-use transportation system; Multi-state/regional effects impacting other services and sectors. • Failure in multi-use transportation system; National effects impacting other services.

26. Step 1: Select a target for eachapplicable threat/hazard We worked in the SPR spreadsheet tool to validate the entries in the SPR.

27. Step 2: Provide one threat/hazard context for each capability "Which threat or hazard will require the maximum capacity?"

28. Validating the THIRA • For each capability, select the single threat/hazard that most stresses it. • Base your selection the threats/hazards that are relevant to your jurisdiction. • Which threat/hazard requires the maximum capacity for this capability?

29. Step 3: Conduct an assessment of each core capability "How close to the target is the jurisdiction?" • Current capability levels are assessed in terms of how close you are to meeting the target hazard level. • Assessments are made for each of six POETE capability elements. • Consider organic assets only. (More later) • If mutual aid improves your overall assessment, you indicate the extent of the improvement separately. • If a capability gap exists, provide a description of the specific nature of the gap.

30. (5) 100% Capable Assessing Capabilities (4) (3) • Scores indicate the estimated level of preparedness for each POETE element. • The assessment uses a 1‐5 scale, where level 1 indicates little‐to‐no capability and level 5 indicates 100% of the capability desired. • Each POETE capability element is rated on the 1‐5 scale. (2) (1) No Capability 0% Not assessed

32. Gap Analysis • Each POETE category has a place to capture a description of gaps, advances and notes.

33. SPR as THIRA Issues • Organic Capability and Mutual Aid. • Impact on Investments • Understanding Risks • Using a State Preparedness for a UASI • Capabilities Issues • The new NPGP “Vision”

34. Organic Capability • New term, needs to be understood. - The term was only used in DoD from what we saw. • Organic does not mean having a capability without chemicals. • It means having a standing capability - the POETE to do the job. • We included automatic mutual aid but not resources that required the state or feds. • However the State had plans and resources that could not be ignored.

35. Impact on Investments • The THIRA will be used to support Investment Justifications. • If an Investment Justification is not linked to THIRA results, projects may not be funded. • The Federal Preparedness Coordinator (FPC) in each FEMA Region is to review State and UASI THIRAs.

36. Using the SPR for a uasi • The SPR is done at a State-level, UASIs need to adjust if for their own perspective on threats and capabilities. • Threats/Hazards need to be looked at locally based on what is in other plans and stakeholder experience. • While hazards are addressed in HIRA, threats are not well known in terms of likelihood – it is more about what you want to prepare for.

37. Capabilities issues • Capabilities may be driven by events outside of your region. New Madrid, upheaval in Mexico, or a Northridge scenario may send evacuees to your area for mass care. • Need to think about that and how resources such as ARC may be depleted. • The SPR tool has the same core capability showing up in different mission areas. This was confusing. • Cross cutting capabilities looked at by each mission group but then need to be combined, they have different perspectives on most stressing hazard and gaps.

38. Translating this to a Strategy • We updated the Strategy to: • Align with the new Core Capabilities • Address the gaps for priority Core Capabilities • Align with the AZDOHS Strategy • Base implementation steps on resourcing the prioritized Core Capabilities.

39. Resourcing the Strategy • Once gaps have been identified you need to work to close the gaps. • Capabilities (objectives) prioritized based on gaps. • Implementation Steps designed close gaps for priority capabilities. • Implementation Steps need to be funded to close the gaps.

40. AZ State 2011 SPR Phoenix UASI 2012 SPR

41. Gap Analysis • The Gap Analysis is to be based on the difference between the consequences of the threats and current levels of capabilities • A capability of 5 has no gap • A capability of 4 has a small gap • A capability of 3 a bigger gap, etc…

42. New UASI Strategy • New goals aligned with the NPG Mission Areas and Core Capabilities. • Improve Prevention Capabilities • Improve Protection Capabilities • Improve Mitigation Capabilities • Improve Response Capabilities • Improve Recovery Capabilities • Improve Programmatic Capabilities

43. The End Questions? Contact: Lisa Hansen: LHansen@azdohs.gov Steve Davis: Steve@AllHands.us