United States Department of the Interior



Similar documents
United States Department of the Interior

Subject: National Preparedness

Emergency Support Function #11 Agriculture and Natural Resources Strategic Plan

South Dakota Department of Public Safety Office of Homeland Security Senior Advisory Committee Charter

**MT op» ^chv. Adapted Privacy Impact Assessment. Google Analytics. March 19, Contact

This page intentionally left blank.

Deputy Chief Financial Officer Peggy Sherry. And. Chief Information Security Officer Robert West. U.S. Department of Homeland Security.

National Exercise Program (NEP) and the Homeland Security Exercise and Evaluation Program (HSEEP)

U.S. Department of Energy Office of Inspector General Office of Audits and Inspections. Evaluation Report

THE WHITE HOUSE. Office of the Press Secretary. For Immediate Release February 12, February 12, 2013

Cyber Incident Annex. Cooperating Agencies: Coordinating Agencies:

Office of Inspector General

GAO HOMELAND DEFENSE. U.S. Northern Command Has a Strong Exercise Program, but Involvement of Interagency Partners and States Can Be Improved

STATEMENT OF SYLVIA BURNS CHIEF INFORMATION OFFICER U.S. DEPARTMENT OF THE INTERIOR BEFORE THE

Emergency Management Performance Grant (EMPG) Administrative Plan

Subject: Critical Infrastructure Identification, Prioritization, and Protection

a GAO GAO INFORMATION SECURITY Department of Homeland Security Needs to Fully Implement Its Security Program

WORKING CAPITAL FUND

Department of Homeland Security

City of Bellevue Emergency Management Program Strategic Plan

Performs the Federal coordination role for supporting the energy requirements associated with National Special Security Events.

EPA Needs to Improve Continuity of Operations Planning

Relationship to National Response Plan Emergency Support Function (ESF)/Annex

U.S. Department of Energy Office of Inspector General Office of Audits & Inspections. Evaluation Report

Cyber Incident Annex. Federal Coordinating Agencies. Coordinating Agencies. ITS-Information Technology Systems

GAO DEPARTMENT OF HOMELAND SECURITY. Actions Taken Toward Management Integration, but a Comprehensive Strategy Is Still Needed

EPA s Final Water Security Research and Technical Support Action Plan May Be Strengthened Through Access to Vulnerability Assessments

Department of Homeland Security Information Sharing Strategy

DHS, National Cyber Security Division Overview

United States Department of the Interior

6 FAM 400 GENERAL SERVICES AND DOMESTIC EMERGENCY MANAGEMENT

GAO CRITICAL INFRASTRUCTURE PROTECTION. DHS Could Better Manage Security Surveys and Vulnerability Assessments. Report to Congressional Requesters

Commonwealth of Pennsylvania National Incident Management Implementation Strategy to 2019

January 9, 2009 MEMORANDUM FOR THE HEADS OF EXECUTIVE DEPARTMENTS AND ESTABLISHMENTS, CHIEF FINANCIAL OFFICERS, AND INSPECTORS GENERAL

GAO QUADRENNIAL HOMELAND SECURITY REVIEW. Enhanced Stakeholder Consultation and Use of Risk Information Could Strengthen Future Reviews

Evaluation Report. Weaknesses Identified During the FY 2013 Federal Information Security Management Act Review. April 30, 2014 Report Number 14-12

The Interagency Security Committee and Security Standards for Federal Buildings

FY2010 CONFERENCE SUMMARY: HOMELAND SECURITY APPROPRIATIONS

NATIONAL CREDIT UNION ADMINISTRATION OFFICE OF INSPECTOR GENERAL

NASA OFFICE OF INSPECTOR GENERAL

Brief Documentary History of the Department of Homeland Security

December 17, 2003 Homeland Security Presidential Directive/Hspd-7

INADEQUATE SECURITY PRACTICES EXPOSE KEY NASA NETWORK TO CYBER ATTACK

INSPECTION CLOUD COMPUTING SECURITY DOCUMENTATION IN THE CYBER SECURITY ASSESSMENT MANAGEMENT SOLUTION

Office of Inspector General

GAO HOMELAND SECURITY. DHS Needs Better Project Information and Coordination among Four Overlapping Grant Programs. Report to Congressional Requesters

D&CP BUREAU OF INFORMATION RESOURCE MANAGEMENT. Resource Summary ($ in thousands)

Appropr iated Accounts Department-wide Systems and Capital Investment Program

PROTECTING CRITICAL CONTROL AND SCADA SYSTEMS WITH A CYBER SECURITY MANAGEMENT SYSTEM

EMBARGOED UNTIL 6:00AM ET, WEDNESDAY, May 14, THE WHITE HOUSE Office of the Press Secretary EMBARGOED UNTIL 6:00AM ET, WEDNESDAY, May 14, 2014

Department of the Interior Privacy Impact Assessment

EVALUATION U.S. DEPARTMENT OF THE INTERIOR S ADOPTION OF CLOUD COMPUTING TECHNOLOGIES

EVALUATION SECURITY OF THE U.S. DEPARTMENT OF THE INTERIOR S PUBLICLY ACCESSIBLE INFORMATION TECHNOLOGY SYSTEMS

Homeland Security Presidential Directive/HSPD-5 1

Statement of Gil Vega. Associate Chief Information Officer for Cybersecurity and Chief Information Security Officer. U.S. Department of Energy

INSPECTION U.S. DEPARTMENT OF THE INTERIOR WEB HOSTING SERVICES

Cornell University PREPAREDNESS PLAN

December 18, Dear NIMS Stakeholders:

Lesson 1: What Is the National Incident Management System (NIMS)? Summary of Lesson Content

Federal Continuity Directive 1 (FCD 1)

NATIONAL INCIDENT MANAGEMENT SYSTEM INTEGRATION CENTER

EPA Should Continue to Improve Its National Emergency Response Planning

Development of Homeland Security Presidential Directive (HSPD) - 7 Critical Infrastructure Protection Plans to Protect Federal

Critical Manufacturing Sector Government Coordinating Council Charter

The Homeland Security Exercise and Evaluation Program (HSEEP)

Determinations Committee:

U.S. DEPARTMENT OF THE INTERIOR OFFICE OF INSPECTOR GENERAL Verification of Previous Office of Inspector General Recommendations September 2009

Office of Inspector General

How To Audit The Mint'S Information Technology

EXECUTIVE DIRECTIVE NO. 18

PamHa~Y"'-.~ \_-..\<J.L.'e_

NUMBER OF MATERIAL WEAKNESSES

Contingency Planning in ICSA Member Countries

United States Department of Agriculture Office of Inspector General

I. Purpose - 1 MD # 0005

Audit Report. Management of Naval Reactors' Cyber Security Program

2015 Explanatory Notes Office of the Secretary Office of Homeland Security and Emergency Coordination. Contents

How To Check If Nasa Can Protect Itself From Hackers

GAO CYBERSECURITY HUMAN CAPITAL. Initiatives Need Better Planning and Coordination

United States Department of Agriculture. Office of Inspector General

Homeland Security Virtual Assistance Center

I. U.S. Government Privacy Laws

Subj: EXERCISE PROGRAM MANAGEMENT AND NATIONAL EXERCISE PROGRAM IMPLEMENTATION ROLES & RESPONSIBILITIES

Texas Department of Public Safety Texas Division of Emergency Management. Preparedness Standards for Emergency Management in Texas TDEM-100

Department of the Interior Open Data FY14 Plan

A Year in Review: Outcomes and Lessons Learned from Implementing Agency-Led TechStat Reviews Across the Federal Government.

Emergency Preparedness at Nuclear Power Plants

DHS Department of Homeland Security

INFORMATION MANAGEMENT

TREASURY INSPECTOR GENERAL FOR TAX ADMINISTRATION

Center for Biosecurity of UPMC

National Incident Management System (NIMS) Update. Matthew P Bernard NIMS Coordinator FEMA Region X April 2012

All Eyes: A Security Breach Exercise. Disaster Recovery/Security and Business Continuity Readiness

The Department of the Treasury s HR Connect Human Resources System Was Not Effectively Implemented. February Reference Number:

Performance Audit Report

Emergency Support Function 14 Long-Term Community Recovery and Mitigation

Homeland Security Presidential Directive/HSPD-9 Subject: Defense of United States Agriculture and Food January 30, 2004

DEPARTMENT OF HOMELAND SECURITY

Fiscal Year 2014 Federal Information Security Management Act Report: Status of EPA s Computer Security Program

DEPARTMENT OF THE INTERIOR. Privacy Impact Assessment Guide. Departmental Privacy Office Office of the Chief Information Officer

Transcription:

United States Department of the Interior OFFICE OF EMERGENCY MANAGEMENT Washington, D.C. 20240 December 28, 2009 Memorandum To: From: Bureau/Office Emergency Coordinators Laurence I. Broun /s/ Director, Office of Emergency Management Subject: Emergency Management Policy Guidance Bulletin 2009-1: Department of the Interior (DOI) Emergency Management Corrective Action Program PURPOSE: This memorandum provides policy guidance to assist bureaus and offices in establishing corrective action programs to document observations, develop corrective action recommendations from response operations and emergency preparedness exercises, and to manage improvement plans to remedy shortfalls. This memorandum also describes the Departmental Corrective Action Program which manages and tracks corrective action recommendations that impact multiple bureaus or offices or those that require interagency coordination. BACKGROUND: Homeland Security Presidential Directive 8 (HSPD-8), National Preparedness, establishes policies to strengthen the preparedness of the United States to prevent and respond to threatened or actual domestic terrorist attacks, major disasters, and other emergencies. HSPD-8 states that the Secretary of the Department of Homeland Security (DHS) shall develop and maintain a system to collect, analyze, and disseminate lessons learned, best practices, and information from exercises, training events, research, and other sources, including actual incidents. HSPD-8 also states that the head of each Federal department or agency shall undertake actions to support the national preparedness goal, including adoption of quantifiable performance measurements in the areas of training, planning, equipment, and exercises for Federal incident management and asset preparedness, to the extent permitted by law. DHS guidance for identifying and tracking shortfalls found during exercises is provided in the Homeland Security Exercise Evaluation Program (HSEEP).

The Departmental Corrective Action Program implements the requirements of HSPD-8 and the HSEEP to identify and track shortfalls found during Interior s exercises and response operations. Each Department of the Interior (DOI) bureau and office is responsible for developing, implementing, and managing an HSPD-8-compliant corrective action program for use in their respective organizations. Bureau implementation of a corrective action program is monitored by the Interior Readiness (I- READ) Index, as required by the Department of the Interior Strategic Plan. POLICY GUIDANCE: 1. Bureaus and Offices Bureaus and offices are required to capture observations during exercises, training, and emergency events in order to track and manage corrective actions when deficiencies are found. To support this task, bureaus and offices may utilize a copy of the Departmental Corrective Action Program (CAP) software housed on Safetalk. Alternatively, bureaus/offices may use other methods for capturing observations, recommendations, and corrective actions. Issues which have a department-wide impact should be forwarded to the Office of Emergency Management (OEM) for inclusion in the Departmental CAP. Bureaus and offices will submit observations which have a department-wide impact, affect multiple organizations, and/or those observations that cannot be resolved at the bureau/office level to OEM for inclusion in the Departmental CAP. All observations submitted to OEM for inclusion in the Departmental CAP must contain the following information to ensure proper entry into CAMS on Safetalk. a. Name of Event/Exercise b. Date of Observation c. Submitting bureau/office d. Problem Statement e. Discussion f. Recommendation. 2. Departmental Corrective Action Program (CAP) OEM will capture observations from bureaus and offices, DOI after action reports, Government Accountability Office (GAO) reports, DOI Inspector General findings, interagency reports or other sources for inclusion in the Departmental CAP. OEM will analyze each observation to determine its disposition within the CAP. A sub-committee of the Emergency Management Council (EMC) may be convened to assist in the process. Once analyzed, observations will be categorized as follows: a. Lesson Learned; b. Roll Into (Existing Recommendation); c. Single Agency Action; d. Noted Observation; or e. Corrective Action Recommendation.

For each Corrective Action Recommendation, a primary bureau/office will be identified by the Corrective Action sub-committee of the EMC to lead resolution of the issue. Following EMC review, OEM will submit Corrective Action Recommendations to the Assistant Secretary Policy, Management, and Budget (AS PMB) utilizing the surname process to obtain concurrence from all applicable bureaus and offices. Upon approval by the AS PMB, Corrective Action Recommendations will be entered in the Corrective Action Management System (CAMS) on Safetalk for tracking and follow up. Once a Corrective Action Recommendation is entered in CAMS, the primary bureau/office responsible for resolution will submit a Corrective Action Improvement Plan (IP) within 90 days. The IP will include a timeline for resolution of the approved Corrective Action Recommendation, report projected resource needs, and be tracked in CAMS. The following information must be captured in the IP and should be submitted to OEM for inclusion in the CAMS. a. Name of Event/Exercise b. Date of Observation c. Submitting bureau/office d. Problem Statement e. Discussion f. Recommendation g. Milestones h. Point of Contact (POC) for each milestone, as needed i. Timeline j. Due Date As part of the CAP continual improvement process, OEM will periodically review all entries in CAMS. This will include a review of IPs with the primary bureau or office to determine implementation progress. The review will also include an administrative reassessment of CAMS data which may be obsolete or require adjustment. OEM will report the status of IPs in the CAMS to the AS PMB on a semi-annual basis. Figure 1 illustrates the business process for the Departmental CAP.

Figure 1. Departmental CAP Business Process

ANNEX A: Acronyms AS PMB CAMS CAP HSPD HSEEP I-READ IP OEM DOI Assistant Secretary, Policy, Management, and Budget Corrective Action Management System Corrective Action Program Homeland Security Presidential Directive Homeland Security Exercise and Evaluation Program Interior Readiness Index Improvement Plan Office of Emergency Management

ANNEX B: Definitions Corrective Action Management System (CAMS) Software system used as part of the Departmental Corrective Action Program to track Corrective Action Recommendations approved by the AS PMB and maintain the corresponding Improvement Plans. Corrective Action Program (CAP) Program to collect and categorize emergency management observations, derive Corrective Action Recommendations, and manage Improvement Plans. Corrective Action Recommendation At the Department level, recommendations developed based on a single or combination of observation(s) which may have department-wide consequences or cannot be resolved at the bureau level that require corrective action. They are deliberately tracked and managed by OEM to resolve deficiencies and improve procedures. At the bureau/office level, these are recommendations developed based on a single or combination of observation(s), which require corrective action within the bureau/office. Improvement Plan (IP) Plan developed by the assigned primary bureau/office to detail the corrective action steps, timeline, resources required, and progress to address the Corrective Action Recommendation. Improvement Plans are attached to the Corrective Action Recommendation housed in the Corrective Action Management System and are reviewed semi-annually for progress. Lesson Learned Knowledge and experience, positive or negative, derived from actual incidents, as well as those derived from observations and historical study of operations, training, and exercises. Within the Departmental Corrective Action Program, the disposition of an observation which should be retained for educational purposes, but requires no further corrective action. Noted Observation Disposition of observation which requires no further corrective action, but is retained for recording purposes. Observation Concise description of an issue, problem, or suggestion from exercises, trainings, or emergency events. Primary Agency DOI bureau or office assigned primary responsibility to resolve an AS PMB-approved Corrective Action Recommendation. Roll Into Disposition of new observation which is included in an existing Corrective Action Recommendation for resolution. Single Agency Action

Disposition of observation which affects, and may be resolved by, an individual bureau or office. Surnaming Process Process which indicates concurrence with the content of a written document by a designated official.