The State of New Columbia

Rolling Summary Report

June 1, 2014

Preface

In October 2013, the State held a Training and Exercise Planning Workshop where the Governor declared that her top priorities for the State are to expand its capabilities in Cybersecurity, Supply Chain Integrity and Security, and Infrastructure Systems. The State’s Multi-year Training and Exercise Plan reflects these priorities and outlines the State’s progressive exercise series. Thus far, the State has conducted 5 exercises in the series: a seminar, 2 drills, a tabletop exercise, and a full-scale exercise. The major findings have been that increased awareness of the State’s Cyber Response Plan through a seminar with private sector critical infrastructure partners, and that key gaps were discovered while exercising the State’s Infrastructure Systems Recovery Plan in a full-scale exercise. Corrective actions have been taken to address these gaps and the revised Infrastructure System Recovery Plan will be tested in an upcoming tabletop exercise. The detailed results of all exercises conducted to date and identified key findings are contained in this Rolling Summary Report. Additionally, the outcomes of this year’s exercise series are compared to the outcomes of the 9 exercises conducted in 2013.

Points of Contact (POCs)

State Administrative Agent:

Mark Casas

State Director

Emergency Management Agency

123 Resilience St.

Capital, NW 12345

222-333-4444 (office)

111-222-5555 (cell)

Mark.casas@ncema.gov

Exercise POC:

Steven Jones

Exercise Officer

Emergency Management Agency

123 Resilience St.

Capital, NW 12345

222-111-4444 (office)

111-333-8888 (cell)

Steven.jones@ncema.gov

Training POC:

Becky Bunn

Training Officer

Emergency Management Agency

123 Resilience St.

Capital, NW 12345

222-111-4444 (office)

111-333-8888 (cell)

Christine.bunn@ncema.gov

Purpose

The purpose of the Rolling Summary Report (RSR) is to provide stakeholders with a periodic analysis of a series of exercises such as those covered in a Multi-year Training and Exercise Plan. The RSR is designed to:

Inform elected and appointed officials on the progress of exercise programs;

Provide data to support preparedness assessments and reporting requirements; and

Enable exercise planners to modify objectives and the exercise schedule to reflect knowledge gathered from exercises process, organizations can address known shortfalls prior to exercising capabilities.

Overview of Exercises

Below are the exercises that have been completed thus far in the series:

Name	Date	Scenario	Type
Hardening Our Critical Infrastructure	1/09/2014	Cyber Incident	Seminar
Stopping Food Terrorism	1/30/2014	Terrorist Act	Drill
Spread the Message	2/25/2014	Cyber Incident	Tabletop Exercise
Can You Hear Me Now?	3/20/2014	Transportation Accident	Drill
Beware of Hurricane Medusa	5/14/2014	Hurricane	Full-Scale Exercise

Exercise Outcomes

Common Core Capabilities

Exercise Performance Ratings:

Core Capability	Year	(P) Performed without Challenges	(S) Performed with Some Challenges	(M) Performed with Major Challenges	(U) Unable to be Performed
Planning	2012	1	1
2013	1
Public Information and Warning	2012	1
2013	1
Operational Coordination	2012	3	2	1
2013	2	1

Key Findings:

The State’s efforts to expand its social media presence and competency contributed to an improved public information and warning capability.

The State continues to excel at operational coordination.

Prevention Core Capabilities

Exercise Performance Ratings:

Core Capability	Year	(P) Performed without Challenges	(S) Performed with Some Challenges	(M) Performed with Major Challenges	(U) Unable to be Performed
Forensics and Attribution	2012	1
2013	2

Key Findings:

Prevention/Protection Core Capabilities

Exercise Performance Ratings:

Core Capability	Year	(P) Performed without Challenges	(S) Performed with Some Challenges	(M) Performed with Major Challenges	(U) Unable to be Performed
Intelligence and Information Sharing	2012	1
2013	1
Interdiction and Disruption	2012	1
2013	1
Screening, Search, and Detection	2012	3
2013	1	2

Key Findings:

Performance in the Screening, Search, and Detection capability has improved dramatically since last year likely due mainly to a new inter-jurisdiction training program.

Protection Core Capabilities

Exercise Performance Ratings:

Core Capability	Year	(P) Performed without Challenges	(S) Performed with Some Challenges	(M) Performed with Major Challenges	(U) Unable to be Performed
Access Control and Identity Verification	2012	1
2013	1
Cybersecurity	2012	1	4
2013	2
Physical Protective Measures	2012	1
2013	1
Risk Management for Protection Programs and Activities	2012	3
2013	3
Supply Chain Integrity and Security	2012
2013	5	1	1

Key Findings:

Increased awareness of the State’s Cyber Response plan through a seminar including private sector partners led to capability gains at the Spread the Message tabletop exercise.

Mitigation Core Capabilities

Exercise Performance Ratings:

Core Capability	Year	(P) Performed without Challenges	(S) Performed with Some Challenges	(M) Performed with Major Challenges	(U) Unable to be Performed
Community Resilience	2012	2
2013	2
Long-term Vulnerability Reduction	2012	3
2013	2	1
Risk and Disaster Resilience Assessment	2012	1
2013	2	1
Threats and Hazard Identification	2012	4	5
2013	5	4

Key Findings:

The State is continuing to develop exercises to test mitigation capabilities.

Response Core Capabilities

Exercise Performance Ratings:

Core Capability	Year	(P) Performed without Challenges	(S) Performed with Some Challenges	(M) Performed with Major Challenges	(U) Unable to be Performed
Critical Transportation	2012	1
2013	1
Environmental Response/ Health and Safety	2012	2
2013	1
Fatality Management Services	2012	2	4
2013	6	1
Mass Care Services	2012	1
2013	3	4	3
Mass Search and Rescue Operations	2012	1	1
2013	1
On-scene Security and Protection	2012	1
2013	1
Operational Communications	2012	1
2013	1	4
Public and Private Services and Resources	2012	2
2013	1	2
Public Health and Medical Services	2012	1
2013	1
Situational Assessment	2012	1	6
2013	5

Key Findings:

During the Beware of Hurricane Medusa exercise Environmental Response/Health and Safety gaps were discovered in the Infrastructure Systems Recovery Plan. These gaps have been corrected, and the updated plan will be tested at an upcoming tabletop exercise.

Response/Recovery Core Capabilities

Exercise Performance Ratings:

Core Capability	Year	(P) Performed without Challenges	(S) Performed with Some Challenges	(M) Performed with Major Challenges	(U) Unable to be Performed
Infrastructure Systems	2012
2013

Key Findings:

Recovery Core Capabilities

Exercise Performance Ratings:

Core Capability	Year	(P) Performed without Challenges	(S) Performed with Some Challenges	(M) Performed with Major Challenges	(U) Unable to be Performed
Economic Recovery	2012	1
2013	1
Health and Social Services	2012	3	4
2013	1
Housing	2012	1
2013	1
Natural and Cultural Resources	2012	3	5
2013	4

Key Findings:

In 2013, the State focused on testing and validating recovery core capabilities. In 2014, we are focusing on expanding capabilities in Cybersecurity, Supply Chain Integrity and Security, and Infrastructure Systems.