July 31, 2008
July 28, 2008
House Homeland Chairman Responds with Risk-Based Rebuttal
The primary obstacle to a risk-based homeland security strategy is not the need for a Congressional reorganization. During a hearing my committee held last month, expert witnesses asserted the need for a “chief risk officer” at D.H.S., as well as a new presidential directive committed to carrying out risk-management principles in all homeland security functions. Unfortunately, this administration has not demonstrated an effective risk-management approach, a failure that inevitably leads to political interference from both sides of the aisle. We need a risk-based approach to homeland security that allocates our limited resources proportionally to risk. D.H.S. then needs to make periodic assessments to gauge our progress in mitigating those risks. This is not being done because the administration is unwilling to make the tough choices that will make our country safer.
Task Force Visits Los Alamos, Sandia
July 24, 2008
Nuclear Forensics Gets European Attention
"Nuclear forensics may provide information on the history, the intended use and possibly on the origin of nuclear material.” "This scientific discipline is at the interface between physical science, prosecution, non-proliferation and counter-terrorism."For our part, the U.S. has formed the National Technical Nuclear Forensics Center (NTNFC) under the DNDO. It represents an important reorganization. While the Department of Homeland Security is not responsible for the entire spectrum of nuclear forensics, the NTNFC is a step forward in two clearly needed capabilities: 1. Across the government, unify various competencies and programs that are focused on aspects of the forensics mission. 2. Develop, enhance, and maintain technical forensics capabilities for pre-event needs. The FBI provides the Deputy Assistant Director at the NTNFC, and it also provides a senior liaison from the FBI lab. The Department of Defense and the Department of Energy both provide detailees. The Forensics Center also has a Working Group, made up of members from each relevant federal agency and members of the intelligence community, which meets regularly. There is an “Interagency NTNF Program & Budget Crosscut” under development to help align relevant programs and harmonize budget requests. Lastly, the NTNFC – and the DNDO in general – work with interagency partners in planning and executing exercises that support the research, development, and deployment of technologies, as well as shared concepts of operations.
July 22, 2008
DHS International Programs Under Scrutiny
July 21, 2008
DHS (Again) Calls to Consolidate Congressional Committees
July 16, 2008
Obama Sets Top National Security Priorities
Every American depends – directly or indirectly – on our system of information networks. They are increasingly the backbone of our economy and our infrastructure; our national security and our personal well-being. But it's no secret that terrorists could use our computer networks to deal us a crippling blow. We know that cyber-espionage and common crime is already on the rise. And yet while countries like China have been quick to recognize this change, for the last eight years we have been dragging our feet. As President, I'll make cyber security the top priority that it should be in the 21st century. I'll declare our cyber-infrastructure a strategic asset, and appoint a National Cyber Advisor who will report directly to me. We'll coordinate efforts across the federal government, implement a truly national cyber-security policy, and tighten standards to secure information – from the networks that power the federal government, to the networks that you use in your personal lives. To protect our national security, I'll bring together government, industry, and academia to determine the best ways to guard the infrastructure that supports our power. Fortunately, right here at Purdue we have one of the country's leading cyber programs. We need to prevent terrorists or spies from hacking into our national security networks. We need to build the capacity to identify, isolate, and respond to any cyber-attack. And we need to develop new standards for the cyber security that protects our most important infrastructure – from electrical grids to sewage systems; from air traffic control to our markets.For a brief speech, this was about as much detail as we can expect from a candidate. However, the next president is going to have to delve into such challenges as how effectively to draw the line between monitoring, detecting, dissuading, deterring, and defeating cyber threats. And should we actually endure an attack, we’ve yet to carve out our conops for response, recovery, and retaliation. What does it mean to retaliate for a cyber attack that steals secrets? Or one that shuts down an electrical grid, leading to actual casualties? Or one that isolates our armed services from its chain of command? Cyber security ought to be a presidential priority and it is positive to see Senator Obama call it out as a strategic concern. We’ll see if John McCain is focused on cyber should his campaign offer a counter-speech.
July 14, 2008
Cyber Security Symposium at Maxwell AFB
Europe Steps In to Bridge Mediterranean. But Where’s the U.S.?
July 11, 2008
Advisers to Obama, McCain Camps Opine on HLS Priorities
July 9, 2008
U.S.-EU Info Exchange Steps Into Shady Territory
no "clear rules on purpose limitation" or on the storage period. "First," he said, "which data are of concern is not really completely clear. Second, who are the competent authorities on the U.S. side? Third, and most important, there is a lack of independent supervision in the United States over data protection." In European states, independent privacy commissions safeguard the privacy rights of citizens, he said.If we have social security numbers of Supreme Court Justices being accidentally shared on the Internet, I can see why he might want further assurances. The Post article points out that Schaar’s questions over which “data are of concern is not really completely clear,” may actually be addressed. Unfortunately, it is disturbing which data is to be shared. According to the news:
The agreement, which was described by two European officials, also allows for the transmission of "personal data revealing racial or ethnic origin, political opinion or religious or other beliefs, trade union membership or information concerning health and sexual life" in cases where they are "particularly relevant to the purposes of this agreement." It defines personal data as "any information relating to an identified or identifiable natural person."Political opinion, trade union membership, or information concerning sexual life? This is too much. That the agreement “shall take suitable safeguards, in particular, appropriate security measures, in order to protect such data," does not provide the convincing assurance that such information would not be accessed by the ill-intended (like the State Department employees illegally accessing passport records) or the clumsy (like the case of the investment firm above). But such assurances seem secondary in comparison to the apparent lack of connection between someone’s sexual orientation, political affiliation, or membership in a trade union to a criminal act. I can see why such things as previous travel destinations, the purchase of a one-way ticket, or the use of a suspicious credit card would be relevant to an investigation with cause, but knowing if the traveler is gay, a Republican, or a member of the American Federation of Teachers seems too much.
July 8, 2008
Counsel for New National Emergency Communications Plan
~Guest Blog~
The Office of Emergency Communications (OEC) in the Directorate for National Protection and Programs at the U.S. Department of Homeland Security will soon be releasing the new National Emergency Communications Plan (NECP). OEC's mission is, "to support and promote the ability of government officials and emergency responders to continue to communicate in the event of a natural disaster, act of terrorism, or other disaster, and to ensure and advance interoperable emergency communications capabilities nationwide."
The NECP will provide recommendations for ensuring interoperable emergency communications nationwide. At the same time, the ongoing DHS grants process which is driving interoperability at the state and local level in particular has been in motion for many months. First responders, public safety and emergency management personnel are well down the road with respect to ongoing and well-funded interoperability planning, and training, along with related equipment purchases.
As a result, OEC must be careful to roll out an NECP that is consistent with, and supportive of, current decisions and guidance involving policies, procedures and protocols which in turn greatly influence planning and training. To not introduce what is in effect a truly user-friendly NECP means that OEC may end up disrupting or somehow impeding current state and local efforts to address established interoperability goals.
In its March 2008 report on FEMA preparedness, the DHS Office of Inspector General (OIG) emphasizes that, "there are no fewer than 10 federal interoperability initiatives underway. In light of the importance of interoperability and such large expenditures to strengthen it, the effective management of federal interoperability grants and programs is essential."
The OIG report added that, "there is no single mechanism in place to link and orchestrate the numerous programs and initiatives underway, nor is there a clear line of accountability. Second, OEC is currently operating with a skeletal, full-time equivalent staff. OEC has assumed a large portion of responsibilities and programs directed at improving interoperable communications, and it requires additional staff and an adequate budget."
The long-running interoperability program at DHS known as Project SAFECOM is now split between OEC which supports SAFECOM's development of guidance, tools and templates, and the Office for Interoperability and Compatibility (OIC) in the Science and Technology Directorate which supports SAFECOM-related research, development, testing, evaluation and standards.
Under the Interoperable Communications Technical Assistance Program (ICTAP), for example, OEC addresses technical issues, policy-making and operational concerns. Assessing and updating existing Tactical Interoperable Communications Plans (TICPs) have been an important offshoot of this activity. Along with TICPs, all states and territories have Statewide Communication Interoperability Plans (SCIPs) that have already been approved by DHS.
Besides the above-mentioned TICPs, SCIPs and ICTAP-related work, there is a Public Safety Interoperable Communications (PSIC) program and Interoperable Emergency Communications Grant Program (IECGP). IECGP is jointly run by FEMA and OEC with over $48 million awarded to states in FY08. PSIC grants will total over $1 Billion.
Although it is doubtful that anyone would want to challenge the need for the NECP, due to an unfortunate sequence of events, state and local governments may in fact be way out ahead of OEC in this instance, thanks to all these IECGP and soon PSIC grants. And for this reason, the NECP must adapt to this set of circumstances or risk annoying and possibly alienating state and local stakeholders.
Charlottesville (VA) Fire Chief Charles Werner shares good news in this respect. He chairs the SAFECOM Executive Committee, and serves on both the International Association of Fire Chiefs Communications Committee and Virginia's Statewide Interoperability Executive Committee.
"When you see the NECP, it will begin to make sense. The NECP does not do anything to diminish the progress that has been made by the states and the SCIPs but moreover builds upon them to further define, and direct the future development of the SCIPs through realistic and measurable performance outcomes (not methods or technology)," he says. "OEC Director Chris Essid, who was Virginia's former Interoperability Coordinator, is very aware of the states' efforts and the dynamics. OEC and SAFECOM have been working directly with the development, review and approval of the SCIPs. The fact that every state and territory has submitted a plan demonstrates that this program is working and should be recognized as a phenomenal accomplishment."
He points out that, among other things, more money is coming that is specifically available for additional planning at the state and local levels.
In conclusion, Chief Werner's assurances deserve attention, given that the OEC has been described as understaffed and perhaps underfunded. Clearly the OEC has its hands full as it completes and implements the NECP which must be a user-friendly document above all else. And as OEC moves ahead, effective partnering with state and local governments is essential to ensure that the NECP is successful, and that other interoperability goals are quickly and easily achieved.
Peter J. Brown, a freelance writer from Maine, writes frequently about the role of satellite technology in disaster response and emergency management operations.
July 7, 2008
Just What is Homeland Security?
1. Terrorism. Homeland security is a concerted national effort by federal, state and local governments, by the private sector, and by individuals to prevent terrorist attacks within the United States, reduce America's vulnerability to terrorism, and minimize the damage and recover from attacks that do occur. 2. All Hazards. Homeland security is a concerted national effort to prevent and disrupt terrorist attacks, protect against man-made and natural hazards, and respond to and recover from incidents that do occur. 3. Terrorism and Catastrophes. Homeland security is what the Department of Homeland Security — supported by other federal agencies — does to prevent, respond to, and recover from terrorist and catastrophic events that affect the security of the United States. 4. Jurisdictional Hazards. Homeland security means something different in each jurisdiction. It is a locally-directed effort to prevent and prepare for incidents most likely to threaten the safety and security of its citizens. 5. Meta Hazards. Homeland security is a national effort to prevent or mitigate any social trend or threat that can disrupt the long-term stability of the American way of life. 6. National Security. Homeland security is an element of national security that works with the other instruments of national power to protect the sovereignty, territory, domestic population, and critical infrastructure of the United States against threats and aggression. 7. Security Über Alles. Homeland security is a symbol used to justify government efforts to curtail civil liberties.A good deal of Dr. Bellavita’s treatment of these definitions is familiar terrain. That he has cogently organized these into a dispassionate analysis showing both sides of each argument makes this a critical read. Importantly, he takes on the often misunderstood concept of “all hazards,” explaining the difference between addressing those consequences common to multiple threats and the “anything’s possible” approach to securing the homeland. As this blog is known to do, we should highlight how the definition of homeland security is broader than convention usually permits. Bellavita describes the way in homeland security is interconnected with most of our society’s other great challenges as “meta hazards.” These are generational developments that pose risks on a significant scale, but are slow-moving and often regarded as distinguishable and independent of one another. Bellavita casts a wide net here and does not spend time explaining how each of the following are exactly related to HLS:
1. Growing federal fiscal debt 2. Global warming 3. Inferior math, science, and engineering education 4. Decaying physical infrastructure 5. The privatization of government services 6. Dependence on foreign energy 7. Aging population 8. Inadequate health care 9. Drug-resistant disease 10. Food security 11. Open borders 12. Mass immigration 13. Cyber security 14. Pandemics 15. Foreign ownership of U.S. debtThese long-term concerns can undermine America’s competitiveness, independence, and overall societal coherence. Some are obvious connections to HLS (i.e. cybersecurity, pandemics, food security), but this is because they can be brought on by adversaries. The critical point here is that a number of these risks are self-inflicted – and therefore self-remedied.
