Integrated Risk Management - Decision Maker Workshop

1. INTEGRATED RISK MANAGEMENTDecision Maker WorkshopFebruary 26, 2013Franklin County Emergency Management and Homeland Security

2. Agenda Authorities Integrated Risk Management Overview Risk/Capability/Gap Formula Risks Capabilities Gaps Recommended Actions

3. FCEM&HS Emergency Management Authority • Franklin County Emergency Management and Homeland Security (FCEM&HS) is authorized under Chapter 5502 of the Ohio Revised Code and organized under the 1988 Countywide Agreement to coordinate countywide all-hazards emergency management and disaster preparedness functions for the 42 local government jurisdictions of Franklin County. • “…are designed or undertaken to minimize the effects upon the civilian population caused or that could be caused by any hazard and that are necessary to address mitigation, emergency preparedness, response, and recovery.”

4. FCEM&HS Core Competencies Ohio Revised Code: 5502.21 – 5502.51 • Warning Systems: “The control and use of emergency communications, lighting, and warning equipment and systems.” • Emergency Operations Center: “The development and construction of emergency operations centers for the conduct and support of coordination, direction, and control activities.” • Resources:“The development of resource initiatives.” • Recovery: “All activities required and necessary to return an area to its former condition to the extent possible following the occurrence of any hazard.”

5. FCEM&HS Core Competencies Ohio Revised Code: 5502.21 – 5502.51 • Planning: “The development of an all-hazards emergency operations plan that has been coordinated with all agencies, boards, and divisions having emergency management functions.” • Training: “The recruitment, retention, and training of personnel.” • Exercises: “The preparation and conduct of an annual exercise of the all-hazards emergency operations plan.” • Citizen Preparedness: “Activities that may be necessary for survival and the overall health, safety, and welfare of the civilian population.” • Grants: Administration of SHSP, EMPG, Citizen Corp, HMEP, PUCO.

6. Integrated Risk Management (IRM) In 2009, FCEM&HS changed the Homeland Security paradigm for Franklin County by implementing a risk-based approach to better prepare for, respond to and recover from all-hazards. This innovative, risk-based approach resulted in a partnership between FCEM&HS, Ohio EMA and policy makers from Department of Homeland Security (DHS). FCEM&HS was selected by DHS as a pilot program to develop an Integrated Risk Management philosophy and program.

7. Integrated Risk Management (IRM) Taking a risk-based approach, assessing our capabilities, and identifying our gaps, is instrumental in our ability to shape the emergency management and homeland security strategic planning and policy-making process. Integrated Risk Management is a process to fuse, unify, and inform the Homeland Security Enterprise. You are all a strategic part of the Homeland Security Enterprise.

8. “Silo-ed” Approach EMA Non- Profits NGOs Fire LE Citizens Federal State Decision Makers Private Sector CEOs Health

9. Integrated Approach EMA Emergency Partners Fire LE Citizens State and Federal Partners Local Jurisdictions Federal State Health Decision Makers Non- Profits Private Sector CEOs NGOs

10. Homeland Security Enterprise Local Emergency Partners State and Federal Partners Jurisdictional CEO’s FCEM&HS • Participation by Decision Makers in the Homeland Security Enterprise is key to fully realizing integrated risk management. Communication & Coordination • Homeland Security Enterprise (HSE) is a “whole community” approach. • Utilizes partnerships among emergency management, law enforcement, public health, local/state/federal government, private sector, nongovernmental organizations, faith-based & community-based organizations, and the public. • Federal guidance focus is on all-hazards preparedness; local HSE partners must share info regardless of threat or hazard, man-made or natural. • Foundation of IRM is understanding the Risk  Capabilities  Gaps  Decision-Making process.

11. Risk/Capability/GapFormula Decision Maker Education and Engagement Risk Risk Capabilities Capabilities Gaps Gaps Results Recommended Actions Resource Allocation, Planning, Training, Exercises, Funding Priorities Franklin County Threat Hazard Identification & Risk Assessment (THIRA) Franklin County Core Capability Assessment Franklin County Gap Analysis Resource Allocation, Planning, Training, Exercises, Funding Priorities Homeland Security Enterprise Decision Maker Review & Updates

12. Integrated Risk Management Components Capability Assessment Gap Analysis Recommended Actions Risk Assessment Enhancement • Develop likely, worse-case scenarios • Identify risk factors • Weight risk factors • Score risks • Update Risk Assessment based on new methodology and scoring risks • Use Capability Assessment to identify Gaps • Prioritize to ensure the higher priority Gaps are accurately identified • Identify Solution Areas to determine ways to close the Gaps • Finalize with written Gap Analysis • Develop Gap Closures, i.e. actions to close identified gaps • Prioritize Gap Closures based on survey results and stakeholder input • Develop Recommended Actions from Gap Closures to present to Decision Makers • Identify priority Core Capabilities based on scenarios • Develop Capability Survey based on THIRA results • Assess Capability current levels with preparedness goals based on survey results

13. Risk Process • Develop likely, worse-case scenarios • Identify risk factors • Weight risk factors • Score risks • Update Risk Assessment based on new methodology and scoring risks

14. 2010 Risks Risk Results 2013 Risks Risk scoring process can be found in the Risk Assessment Executive Summary & Methodology (Tab 4) Flooding Severe Winter Weather Dam Failure Terrorism Infectious Disease Tornadoes Severe Summer Weather Extreme Heat Hazardous Materials Incidents Drought Utility Interruptions or Failures Invasive Species Air and Water Pollution/Contamination Transportation Accident – Aircraft Civil Disturbance Earthquake • Tornadoes • Dam Failure • Flooding • WMD Terrorist Incident • Cyber-Terrorism • Infectious Disease • Severe Winter Weather • Hazardous Material Incident • Transportation Accident - Aircraft • Severe Summer Weather • Utility Interruptions or Failures • Civil Disturbance • Lone-Wolf Terrorist • Air and Water Pollution/ Contamination • Extreme Heat • Drought • Invasive Species • Earthquakes

15. Capability Process • Identify priority Core Capabilities based on scenarios • Develop Capability Assessment Survey based on the Threat and Hazard Identification and Risk Assessment (THIRA) • Assess Capability current levels with preparedness goals • Identify “Top 13” Capabilities based • on survey results THIRA can be found in Tab 5 & Survey Results in Tab 6

16. Priority Core Capabilities RECOVER RESPOND PROTECT PREVENT MITIGATE Planning Planning Planning Planning Planning Public Information and Warning Public Information and Warning Public Information and Warning Public Information and Warning Public Information and Warning Operational Coordination Operational Coordination Operational Coordination Operational Coordination Operational Coordination Access Control and Identity Verification Forensics and Attribution Community Resilience Economic Recovery Critical Transportation Cybersecurity Long-Term Vulnerability Reduction Health and Social Services Intelligence and Information Sharing Environmental Response / Health and Safety Risk and Disaster Resilience Assessment Intelligence and Information Sharing Interdiction and Disruption Fatality Management Services Housing Interdiction and Disruption Screening, Search, and Detection Infrastructure Systems Threats and Hazard Identification Infrastructure Systems Physical Protective Measures Mass Care Services Natural and Cultural Resources Risk Management for Protection Programs and Activities Mass Search and Rescue Operations On-Scene Security and Protection Screening, Search, and Detection Operational Communications Supply Chain Integrity and Security Public and Private Services and Resources Public Health and Medical Services Situational Assessment

17. Capability Assessment Results Capability Prioritization process can be found in the Gap Analysis (Tab 7)

18. Gap Process • Use Capability Assessment to identify Gaps • Prioritize to ensure the higher priority Gaps are accurately identified • Identify Solution Areas to determine ways to close the Gaps • Finalize with written Gap Analysis

19. Gaps Analysis Results Entire Gap Closure list can be found in the Gap Analysis (Tab 7)

20. Recommended Actions • Implement an Annual Decision Maker meeting to review IRM progress and continue to encourage, educate and generate more involvement and support from elected officials • Continuation of training and multi-discipline, regional exercises • Maintain organizational structures and current working groups to ensure emergency management and homeland security partners continue to collaborate despite declining grant funding • Develop a Cybersecurity Workgroup to build organizational structures and relationships among the whole community in Franklin County

21. Risk/Capability/GapFormula Decision Maker Education and Engagement Risk Risk Capabilities Capabilities Gaps Gaps Results Recommended Actions Resource Allocation, Planning, Training, Exercises, Funding Priorities Franklin County Threat Hazard Identification & Risk Assessment (THIRA) Franklin County Core Capability Assessment Franklin County Gap Analysis Resource Allocation, Planning, Training, Exercises, Funding Priorities Homeland Security Enterprise Decision Maker Review & Updates

22. QUESTIONS/DISCUSSIONFranklin County Emergency Management and Homeland Security