Homeland Security Watch

News and analysis of critical issues in homeland security

February 10, 2012

Supply chain leaders: You are invited, the courtesy of a response is requested.

Filed under: Private Sector,Strategy — by Philip J. Palin on February 10, 2012

Last week a former client — I had not heard from him in over three years — called me in a (typically) titanic rage.

With expletives deleted, he said something similar to: “@$%& can they be serious about supply chain security without involving me?  And @##$%! is this about increased redundancy, do they have any ##$%^ idea how much that could cost?”  And so on.

“Surprised to hear from you Gary,” I replied (not his real name).  ”Been a long time.”

One of the reasons I retired was bombastic, reality-distorting,  self-serving, narrow-minded, tactically-driven, context-challenged so-called leaders like Gary.   When an American business implodes, it’s usually got more than one Gary scattered among its executive ranks.  They are a minority, but sadly very active.

Since he evidently reads this blog, I guess that bridge has been effectively burned and pushed into the chasm.  Glad to have a wide chasm between me and Gary.

Considerably more frustrating was an email received yesterday.   A national organization closely related to the supply chain industry had just completed a meeting of its government affairs committee.  At the meeting they reviewed the new National Strategy for Global Supply Chain Security.  The note distributed indicates they will take “a wait and see position until they can  determine whether  this is in fact a priority initiative for the Administration.”

Eleven months ago the squishy soft underbelly of the global supply chain was nakedly exposed by a hard-hit to an economically peripheral area of Japan.  In the fourth quarter of 2011 the same sort of expensive embarrassment was produced by Thai flooding.    These events seriously affected the bottom-lines of some top global brands. Billions of dollars in value and productivity evaporated.  Other examples could be offered, fortunately none — yet — involving crucial agricultural, industrial or financial keystones.

In the context of these real-world challenges the President personally signs-out a new National Strategy.  He sends a cabinet secretary to the World Economic Forum to unveil the new strategy.  He orders follow-on work to be done.

Many are arguing this is a top-tier national security concern.  The President sets out a fairly narrow time-frame in which to come back with an implementation plan.

To which at least some in  private sector respond with, “Well, let’s wait and see”.  I almost feel the need to join my former client in yelling !@#$%?

The United States has the most advanced domestic supply chain in the world.  It is fundamental to our economic competitiveness and our way of life.   We are a key player in a global supply chain that is increasingly complex and on which we more and more depend.  This is a national priority.  It is also — mostly — a private sector responsibility.

The National Strategy is explicit regarding its goal to “engage government, private sector, and international stakeholders. The purpose of this engagement is to seek specific recommendations to inform and guide our collaborative implementation of the Strategy.”

The President of the United States is asking for your help.  He is giving the supply chain community the opportunity to get ahead of this problem and shape the solution-space.  This is a fantastic moment for a good dose of enlightened self-interest.

Gary is a bomb-thrower, but at least he wants to be involved.  I hope some of his more constructive peers accept the invitation.

February 8, 2012

Supply chain testimony

Yesterday several DHS officials and others were on the Hill giving testimony related to the new National Strategy for Global Supply Chain Security.  Please see: http://homeland.house.gov/hearing/subcommittee-hearing-balancing-maritime-security-and-trade-facilitation-protecting-our-ports

Three quick impressions:

1. Constructive example of “stovepipes” being brought together around a supposedly stovepipe-busting strategy.

2. The tension between security and resilience is real, persistent, and difficult to effectively engage.   Security is tough enough.  Resilience requires even more creativity.

3. It is striking to have a hearing on this topic without hearing directly from the private sector as well.

This is an early step in rolling-out the new strategy.  Much more to come.

February 7, 2012

One day in February: Natural, accidental, and intentional threats

Filed under: Catastrophes,Preparedness and Response,Strategy,Terrorist Threats & Attacks — by Philip J. Palin on February 7, 2012

On February 7, 1812 President Madison wrote to Thomas Jefferson:

“The re-iterations of the Earthquakes continue to be reported from various quarters. They have slightly reached the State of N. Y. and been severely felt W. & S. Westwardly. There was one here [Washington, D. C.] this morning at 5 or 6 minutes after 4 OC. It was rather stronger than any preceding one, & lasted several minutes, with sensible tho very slight repetitions throughout the succeeding hour.”

According to a good piece recently published in the Washington Post,

The New Madrid quakes started nine days before Christmas in 1811 and culminated in a massive shock on Feb. 7, 1812, which some experts believe was one of the largest quakes ever to strike the center of a continent.

In the then thinly populated mid-Mississippi Valley it seemed the end-of-the-world had arrived.  The ground split open, geysers of sand covered forests, the Mississippi river reversed course.  After-shocks continued for months.

A few years ago a friend was named head of strategic planning for a major healthcare system with most of its hospitals in St. Louis and nearby.  After he had been there awhile I asked about the status of their earthquake plans.  He was not from the region and had never heard about the New Madrid fault.  After my question, he asked about pre-existing plans.  There were none.

On this day in 1904 a great fire engulfed Baltimore, then the sixth largest American city.  It started at mid-morning on a Sunday. The cause has never been confirmed, but is assumed to have been accidental.  Over the next thirty hours the fire consumed over 1500 buildings and most of the central business district. There are several online resources, I especially recommend: The Great Baltimore Fire of 1904.

Three of many lessons learned:

Interoperability – Since at least the Great Chicago Fire of 1871 many had encouraged standardization of fire equipment, and especially hose couplings.  Despite the recognized vulnerability very little progress had been made.  As a result, when firefighters and their equipment arrived in Baltimore from Washington, Philadelphia, Wilmington, New York and elsewhere their effectiveness was seriously undermined.  For more see: Major U.S. Cities Using National Standard Fire Hydrants, One Century After the Great Baltimore Fire (National Institute of Standards and Technology)

Mutual Aid –  Twenty-one cities and over 1000 firefighters provided mutual aid as Baltimore burned, most arriving Sunday afternoon.   The speed of this response was made possible by the B&O railway providing special trains at no cost.  The first reinforcements arrived from Washington D.C. only 38 minutes after the request was made (!). The U.S. Navy, Maryland State Militia, and police from several cities, especially Philadelphia and New York, also responded.   But the mutual aid — both private and public — so generously and quickly extended was often under-utilized through lack of technical and strategic preparedness.

Recovery –  A few years after the fire a survivor wrote, “The boldness with which Baltimore in the very moment of its devastation, planned and put into execution a great scheme of public improvements, seemed to act as a charm to dissolve the spell of ultra-conservatism, and to inspire the people with confidence in themselves and in the future of the city.”  Throughout the late 19th Century there had been many efforts to re-conceive the old port as a modern metropolis.  The fire opened the space that provided the opportunity to implement those plans. (An early example of Advance Recovery Planning.) Within two years Baltimore newspapers were claiming the city had been reborn much better than before.

The Facebook motto — “Done is better than perfect” — may be a fair summary of how Baltimore was rebuilt so quickly.   From this distance it’s tough to say what may have been lost along the way, but for the first time a sewer system was laid, parks were created, streets were substantially widened, and electrical and telephone lines were put underground.  Personally, I’m infatuated with much of the post-fire architecture that still graces Baltimore.

The survivor quoted above, longtime insurance executive C.C. Hall, also wrote, “A splendid audacity, resting upon a basis of intelligent comprehension, replaced the old-time hesitancy with which large projects had been received. To create rather than be created became the dominant impulse of the community.”

On February 7, 1995 Pakistani and U.S. authorities captured Ramzi Yousef. He was later found guilty for his role in the 1993 World Trade Center bombing.  During his U.S. trial Yousef told the court, “Yes, I am a terrorist, and proud of it as long as it is against the U.S. government and against Israel, because you are more than terrorists; you are the one who invented terrorism and using it every day. You are butchers, liars and hypocrites.”  When arrested in Islamabad Youself was in possession of Delta and United airline tickets and was in the process of converting children’s toys into bombs.  He is currently serving a 240 year term in a federal penitentiary.

“What’s past is prologue,” is from Act 2, Scene 1 of The Tempest.  Shakespeare continues, “what to come, in yours and my discharge.”

February 3, 2012

Risk is often in the eye of the beholder

Filed under: Catastrophes,Infrastructure Protection,Port and Maritime Security,Strategy — by Philip J. Palin on February 3, 2012

Although we can say with near certainty that new outbreaks of disease and catastrophic natural disasters will occur during the next several years, we cannot predict their timing, locations, causes, or severity.  We assess the international community needs to improve surveillance, early warning, and response capabilities for these events, and, by doing so, will enhance its ability to respond to manmade disasters.

James R. Clapper
Director National Intelligence
Testimony, January 31, 2012

The intelligence chief’s comments regarding the Iranian threat were considerably more circumspect, “We assess Iran is keeping open the option to develop nuclear weapons, in part by developing various nuclear capabilities that better position it to produce such weapons, should it choose to do so.  We do not know, however, if Iran will eventually decide to build nuclear weapons.”

Yet Senators, the media, and perhaps General Clapper himself gave much more attention to the possible Iranian threat than the probable threat of natural catastrophe and pandemic.  The front page headline in the Washington Post was “U.S. spy agencies see new Iran risk.”

The same day the DNI was testifying on Capitol Hill, Mike Dunaway was making a presentation to a FEMA-hosted audience in Harrisburg, Pennsylvania.   In late 2008 and early 2009 a reasonable sample of  respondents answered a series of questions regarding their perceptions of relative threats to continuity of private sector operations, profitability or survival.

A couple of the survey findings stood out for me: Among 19 threats identified, the lowest perceived threat was “geologic disaster (earthquake, mudslide, volcanic action)”.  The survey was conducted prior to the earthquake-and-tsunami in Japan and none of the respondents were in California.   Perceptions will vary by time and place.

Also low on the list of threats was “interruption in supply or delivery chain.”   Several firms reeling from the loss of Japanese and Thai suppliers might answer differently.  But I don’t doubt the survey findings reflect general attitudes.  (Dr. Dunaway’s dissertation is chock-full of interesting findings.)

As addressed in two posts last Thursday and Friday, the President has signed-out a National Strategy for Global Supply Chain Security.  I appreciate Alan Wolfe and Bill Cumming commenting here on the posts.  Most friends, colleagues, and perhaps an adversary or two, decided to communicate more privately.  Below are a sample of the comments received.

“Just words on paper, very unlikely to really influence supply chain policy.”

“Despite a bow to resilience, this is a security strategy.”

“Lots of cargo and logistics talk, not much recognition of how the supply chain is really something new and different.”

“Though better than the earlier draft, it still seems to be mostly focused on security and less on resilience. However, I know from direct experience it is not easy to write about resiliency, and perhaps being secure is one of the first parts of being resilient.”

“Stalking horse for new (costly) regulations.”

“While it is a national strategy, it feels quite federal/global to me. I’m not sure if many state and/or local folks could conceive how they could contribute to helping realize the goals outlined. It is my belief that a resilient supply chain, like many things, starts and ends in localities around the world.

“C-suites will ignore and deploy their minions to be sure “efficiency” always trumps “resilience,” no matter how inefficient it may be to have a catastrophic collapse of supply chains.”

“The private sector is paramount. It seems to me that much, though certainly not all, of the role of government will be to encourage, support, oversee and in some instances force the private sector to do things. Left to themselves, I think other forces will drive the private sector to not do some of what has to be done to reduce risk and enhance resiliency.”

“To give this the status of a presidential strategy is sort of amazing. It’s made me stop to think. But I feel a bit like a Catholic must feel when it’s announced the Pope has convened a major meeting on an aspect of doctrine I had really never thought of before.”

“What am I supposed to do? I don’t know enough about supply chains to even start a conversation with private sector peers. Besides which private sector peers? These are not the security and EM guys I usually work with.”

“(The strategy is) better than I would have bet. But while behind closed-doors the operators agree it is a real issue, how do you convince CEOs, CFOs, and Boards of Directors? Japan didn’t persuade. Thailand didn’t persuade. White House stationary is easy to ignore. The only things these masters-of-the-universe understand is a swift kick in you know where… and by then it will be too late.”

Perceptions will vary by time and place.  But there is a strong tendency to give more attention to external threats than internal vulnerabilities.  There is more concern regarding possible evil intent elsewhere than accident, neglect, and denial close at hand. We see the splinter in the eye of the other much more quickly than we recognize the log in our own eye.

January 27, 2012

Supply chains: Innate tension between efficiency and resilience

Filed under: Catastrophes,Preparedness and Response,Strategy — by Philip J. Palin on January 27, 2012

Wednesday the White House released a new National Strategy for Global Supply Chain Security.   This is an issue easy to underestimate.  Like the plumbing in your house, it tends not to be at the forefront until something goes wrong: leaking, freezing, breaking, bursting, or when the well goes dry. Below is a quick take on context and potential implications.

–+–

On June 26, 1974 at a Marsh supermarket in Ohio, a pack of Wrigley’s Juicy Fruit chewing gum became the first retail product sold using a scanner and Universal Product Code symbol.  Our lives would never be the same.

The use of the UPC and other “bar codes” allows the supply chain to be digitally monitored, mapped, and managed as never before. Logistics became one aspect of a supply and demand chain.

Working through a private international standards-setting process a variety of bar codes provide a framework that pulls many products, services, and information about them across the network.

In effect, this information moves the supply chain itself.

Increasingly these standards – and the rich information and management resources they make possible – ensure effective, timely, and comparatively friction-free transactions between companies and nations. The ability to share this digital information in very close to real-time has transformed the modern supply chain from supply-push to demand-pull.

Farmers, miners, and fishermen still matter. Processors, truckers, wholesalers, and retailers still play a crucial part. Ports, railways, and highways are still required. Physical stuff of all sorts still has to move from point A to B (and usually on to points C, D, and Z). But at least in the United States, Europe, Pacific Rim and increasingly around the world, the digital signals that are sent along largely determine when and where product arrives.

When this strategic capacity for generating demand-pull information persists, the supply chain is very resilient. Demand-pull is an attractor around which the system self-organizes.

But if the digital stream dries up the supply chain goes blind, deaf, and immobile. This has important – and largely unprecedented – implications for catastrophe preparedness.

Given this strategic context we are clearly beyond the typical approach to Mass Care (ESF-6) or Logistics (ESF-7). The Emergency Support Functions are just as dependent on supply chain resilience as any other aspect of modern life.

Supply chain resilience is a matter of systemic strategic capacity. If the capacity is resilient, local capability will be restored sooner rather than later. If the capacity is lost, it may be very late indeed until local capability is restored. Moreover, as the supply chain has evolved into a scale-free network – a network where relatively few hubs concentrate the preponderance of connections – the supply chain has incorporated the characteristic strengths and weaknesses of such a network.

With particular attention to the weaknesses, Ted Lewis explains:

A scale-free network containing a highly linked hub and many sparsely linked nodes is more organized than a random network… When a highly organized system reaches its critical point, insignificant incidents become significant because they can collapse the entire system… As self-organization increases, typically in the form of larger hubs or nodes with high betweeness properties, the complex system also becomes more vulnerable to targeted attacks and normal accidents. The extreme case of self-organization is SOC (self-organized criticality) – a state in which small changes are likely to create large effects… As a system nears its critical point, consequences grow exponentially in size. As SOC grows, so does the multiplier effect on the overall system. (Lewis, Ted G., Bak’s Sand Pile: Strategies for a Catastrophic World, Agile (2011), Page 340)

For the last twenty years the modern supply chain has generated extraordinary benefits. Efficiencies have multiplied across the global network. But the same networked behaviors that multiply good outcomes can – especially in an unexpected context – multiply bad outcomes.

Surprisingly, optimizations and improved efficiencies have been shown to increase self-organized criticality, making optimized networks less resilient. There are a number of reasons for this non-intuitive result, but one obvious reason is that efficiencies often mean less redundancy and less (expensive) surge capacity.

Most owners and operators of supply chains will find this claim incredible. They will point to several years of data and experience demonstrating increasing stability, effectiveness and predictability. They are right, and it is the system’s predictability that is of particular concern.

The modern supply chain – at its best – is good at predicting market patterns. It recognizes early shifts in consumer behavior, signals these subtle changes across the network, and stimulates appropriate responses in terms of production, transportation, distribution and other functions. Nearly everyone operates on tight deadlines and scramble to meet shareholder profit expectations, but the overall volume is sufficient to keep cash, credit, and goods flowing just ahead of demand. A miniscule profit margin multiplied over millions of consumers is good business.

A big part of the magic is deferring to the expertise of others. Costs – and therefore the consumers’ price – are driven down by abandoning any function where there is not a clear comparative advantage. Increasingly dense network hubs are the result. Searching for comparative advantage has created “cylinders of excellence.”

The producer is very expert in producing, and depends on another expert to transport, and another expert to process, and another expert to package and so on across the network.

No one owns the supply chain. Very few even try to visualize more than their piece of the supply chain, the piece where they have comparative advantage. The level of risk-informed engagement with each piece ranges widely. Risk-informed engagement with other hubs in the network is uncommon.

V.G. Narayanan and Ananth Raman explain,

Most companies don’t worry about the behavior of their partners while building supply chains to deliver goods and services to consumers. Engineers – not psychologists – build supply networks. Every firm behaves in ways that maximize its own interests, but companies assume, wrongly, that when they do so, they also maximize the supply chain’s interests… That finding isn’t shocking when you consider that supply chains extend across several functions and many companies, each of which has its own priorities and goals. Yet all those functions and firms must pull in the same direction to ensure that supply chains deliver goods and services quickly and cost-effectively. Executives tackle intraorganizational problems but overlook cross-company problems because the latter are difficult to detect. They also find it tedious and time-consuming to define roles, responsibilities, and accountability for a string of businesses they don’t manage directly. Besides, coordinating action across firms is tough because organizations have different cultures and companies can’t count on shared beliefs or loyalty to motivate their partners. (Narayanan, V.G. and Raman, Ananth, Aligning Incentives in Supply Chains, Harvard Business Review on Supply Chain Management (2006), Pages 174-175))

The local grocer does not own his or her source of supply. Even the large grocery company does not usually own the trucking firm that delivers product to its loading docks. The distribution center does not own the means of producing what it distributes. The food supply chain is – and most supply chains are – a disaggregated set of functional specialties in tight relationship and mutually dependent, but much more a team of rivals than a true partnership.

The ubiquitous use of outsourcing in search of comparative advantage is widely thought to transfer risk down or across the network. The assumption is suspect.

Outsourcing more likely obscures the actual level of risk. For the reasons outlined by Narayanan and Arnanth the risk is not known, but it almost certainly exists. Wall Street rewards this behavior because it keeps inventory costs low across the supply chain and creates the impression of risk distribution.

Risk distribution can be illusory, especially in scale-free networks. Rather, risk is almost certainly being concentrated in those low-end operators most vulnerable to any major shift in the risk environment.Given the nature of the modern supply chain, this supposedly transferred risk is actually accumulating and will, probably (my judgment), be unleashed across the supply chain by some future event with catastrophic consequences.

The greatest value of the new Strategy is to create a window-of-opportunity before such an event when creative and collaborative attention can be focused on these issues, especially to mitigate systemic vulnerabilities and enhance the resilience of strategic capacity.

January 26, 2012

Global Supply Chain Strategy

Filed under: Catastrophes,Cybersecurity,Port and Maritime Security,Private Sector,Strategy — by Philip J. Palin on January 26, 2012

Yesterday at the World Economic Forum in Davos, Switzerland Secretary Napolitano unveiled the new National Strategy for Global Supply Chain Security (1.5 megabyte PDF).  The President signed-out the document on Monday.

The strategy offers two goals:

Goal 1: Promote the Efficient and Secure Movement of Goods – The first goal of the Strategy is topromote the timely, efficient flow of legitimate commerce while protecting and securing the supply chain from exploitation, and reducing its vulnerability to disruption. To achieve this goal we will enhance the integrity of goods as they move through the global supply chain. We will also understand and resolve threats early in the process, and strengthen the security of physical infrastructures, conveyances and information assets, while seeking to maximize trade through modernizing supply chain infrastructures and processes.

Goal 2: Foster a Resilient Supply Chain – The second goal of the Strategy is to foster a global supply chain system that is prepared for, and can withstand, evolving threats and hazards and can recover rapidly from disruptions. To achieve this we will prioritize efforts to mitigate systemic vulnerabilities and refine plans to reconstitute the flow of commerce after disruptions.

In my judgment we are much closer to achieving “efficient and secure movement” than we are to a “resilient supply chain”.  The new strategy could help with each, but the tougher task will be the effort “to mitigate systemic vulnerabilities.”

On January 11 the Wall Street Journal reported,

After a decade of streamlining their supply chains to make them less costly, the natural disasters and political upheavals that marked 2011 showed many multinational companies just how vulnerable those links have become.

A senior supply chain executive recently told me (clearly depending on me to protect his name and the name of his firm), “We have several known choke-points. I’m sure there are many more we don’t know about.  It won’t take a major disaster to disrupt supply, just a couple of unusual, probably simultaneous accidents.  I think — hope — there would be a similar impact on our competitors.  But that doesn’t help our consumers.”

“There are ways to mitigate our risk, but they’re all expensive,” another executive explains.  ”And for the last decade and the foreseeable future the lower cost of US supply chain management has been our principal economic advantage.  We’re much better than the Europeans, tons more efficient than the Chinese.  Increase supply chain costs and we lose just about the only advantage the US has left on most commodity trading and even a broad range of high-end specialty goods.”

Again from the Wall Street Journal:

Justifying redundancies is one of the toughest aspects of managing a supply chain, because backstopping doesn’t pay off unless there is a disaster. When CFOs ask about the return on such investments, the answer is, “If we’re lucky, absolutely zero return,” says Sean Cumbie, vice president in charge of global supply-chain management at genetics-testing company Qiagen NV, based in Germany.

The new strategy makes a glancing reference to “appropriate redundancy” which, for most supply chain executives, is like discussing the practical difference between manslaughter and murder.   Whatever you call it, the outcome ain’t pretty.

The senior supply chain guys (and a few gals) are the pioneers of the field.  In the last twenty years they have transformed the known world.  Not just the supply chain world, but the everyday world of billions of consumers.  Today the supply chain is faster, cheaper,  delivers much higher quality with much more assurance and transparency than a quarter century ago.

On most days the supply chain is also stronger, more flexible, and better at handling a range of emergencies and disasters.

But what we saw in Northeast Japan and Thailand has exposed a parallel reality.  Like all networked systems, risk tends to pool in unexpected ways and often unexpected places.  What if the earthquake-and-tsunami had hit the economic heartland of Tokyo and Osaka, instead of the Tohoku periphery?  What’s would the outcome be if  instead of Thai flooding it was an earthquake in San Francisco and down the east side of Santa Clara County?  What happens if the Port of Long Beach is seriously disrupted for an extended period?  What if cyber-vandals — or economic or national or terrorist adversaries –seriously target the digital systems on which the modern supply chain absolutely depends?

In a report — “New Models Addressing Supply Chain and Transport Risk” (7 megabyte PDF) —  released Tuesday, the World Economic Forum found:

Supply chain and transport networks have continuously evolved to deliver capacity, speed, efficiency and customer service through organizational trends such as globalization, specialization, volume consolidation and information availability. The focus on cost optimization has highlighted the tension between cost elimination and network robustness – with the removal of traditional buffers such as safety stock and excess capacity. These developments have shifted risk distributions…(while) their effects have often included sharing risk more broadly around the world, reducing high-frequency risks and focusing risk within sectors, common technologies or nodes. Another common feature has been to disassociate risk from responsibility, misaligning incentives and creating moral hazards – the notion that a party that is insulated from risk will behave differently from how it would behave if it had full exposure to risk.

Most supply chain managers I know tend to discount low frequency, high consequence risks (see related post).  They discount this kind of risk because over the last twenty years they have become true masters of risk management.   They also discount high impact risks because their CEO’s, Boards of Directors, and shareholders reward them for squeezing every possible penny out of supply chain costs.  They discount catastrophic risk because their creation — the modern supply chain — has never experienced a fundamental systemic failure.

Yet.

Many supply chain executives have become what economists sometimes call “risk preferers”, they have learned to maximize their return by skating with great style, grace, and confidence along the edge of chaos.   Each day they become more adept at mastering the chaos.   Is the experienced supply chain executive a sorcerer or  sorcerer’s apprentice?

The new National Strategy is the starting point for a collaborative process of discussion, analysis, and policy development.  It seeks to “develop a culture of mutual interest and shared responsibility” across government and the private sector.  It’s the right goal.  It’s the right way to pursue the goal.

It is a very ambitious goal.

January 20, 2012

Discounting risk can be costly

Filed under: Catastrophes,Preparedness and Response,Strategy — by Philip J. Palin on January 20, 2012

The chart is taken from a December edition of Fortune Magazine.  These estimated costs — almost certainly underestimated — reflect a record-setting $380 billion in global economic losses; nearly two-thirds higher than in 2005, the previous record year. (See more from Munich RE.)

This week’s leader in The Economist is entitled, “The Rising Cost of Catastrophes” (see below and for a link to a more detailed article).  In the run-up to the 2012 Davos Summit the World Economic Forum has identified key global risks and gives special attention to the implications of the earthquake-tsunami-nuclear emergency in Japan.  They warn about “seeds of dystopia” being planted worldwide.  Fortune, The Economist, and WEF… in the business world this is a thoughtleader trifecta.

The unprecedented scale and recurrence of these losses may — but I emphasize, may — have begun to influence strategic decisions by some major players.  A once-upon-a-time client lost nearly $1 billion as a result of the floods in Thailand. They are certainly learning from hard-knocks what a decade-ago I tried to communicate as a competitive opportunity as well as competitive risk.

So attention must be paid, either now through thoughtful mitigation or at some future point through even higher declared losses.

And yet, last week I was with three serious, practical business leaders who seemed unaware of the triple-header in Japan or the epic flooding in Thailand or the eventual shift in the San Andreas and New Madrid faults.   They have not personally experienced anything analogous.  Accordingly such high impact risks are only “theoretical”, which being serious, practical men they cannot allow to distract from what they know and know how to manage.

To ponder the experience of a peer from Sendai or Bangkok would require a kind of empathy, imagination and vulnerability that does not typically earn seven-figure bonuses.  Will the criteria for bonus payments shift to reflect a shifting context?  Hiring criteria?

The potentially catastrophic risks that I use as examples currently tend to be dismissed as either “ancient history” or “fanciful futures.”   It is helpful when Fortune and The Economist and the World Economic Forum begin to sing a similar tune.

Over the last year, Klaus Schwab, the founder of the World Economic Forum, has argued, “In the past the decisive factor in success was productivity, the efficiency with which you used resources.  Today the most important success factor is to recognize risks and mitigate those risks.”  If the pace of global economic growth continues to slow, risk-mitigation will become even more critical to bottom-line success… even survival.

– +–

The following was published in The Economist on January 14

COMMERCE has long been at the mercy of the elements. The British East India Company was almost strangled at birth when it lost several of its ships in a storm. But the toll is rising. The world has been so preoccupied with the man-made catastrophes of subprime mortgages and sovereign debt that it may not have noticed how much economic mayhem nature has wreaked. With earthquakes in Japan and New Zealand, floods in Thailand and Australia and tornadoes in America, last year was the costliest on record for natural disasters.

This trend is not, as is often thought, a result of climate change. There is little evidence that big hurricanes come ashore any more often than, say, a century ago. But disasters now extract a far higher price, for the simple reason that the world’s population and output are becoming concentrated in vulnerable cities near earthquake faults, on river deltas or along tropical coasts (see article). Those risks will rise as the wealth of Shanghai and Kolkata comes to rival that of London and New York. Meanwhile, interconnected supply chains guarantee that when one region is knocked out by an earthquake or flood, the reverberations are global.

This may sound grim, but the truth is more encouraging. When poor people leave the countryside for shantytowns on hillsides or river banks they are exposed to mudslides and floods, but also have access to better-paying, more productive work. Richer societies may lose more property to disaster but they are also better able to protect their people. Indeed, although the economic toll from disasters has risen, the death toll has not, despite the world’s growing population.

Preparing for the worst

The right role for government, then, is not to resist urbanisation but to minimise the consequences when disaster strikes. This means, first, getting priorities right. At present, too large a slice of disaster budgets goes on rescue and repair after a tragedy, and not enough on beefing up defences beforehand. Cyclone shelters are useless if they fall into disrepair. A World Bank study recommends using schools and other bits of normal public infrastructure in disaster-protection plans, so that the kit and buildings are properly maintained.

Second, government should be fiercer when private individuals and firms, left to pursue their own self-interest, put all of society at risk. For example, in their quest for growth, developers and local governments have eradicated sand dunes, mangrove swamps, reefs and flood plains that formed natural buffers between people and nature. Preserving or restoring more of this natural capital would make cities more resilient, much as increased financial capital does for the banking system. In the Netherlands dykes have been pushed out and flood plains restored to give rivers more room to flood.

Third, governments must eliminate the perverse incentives their own policies produce. Politicians are often under pressure to limit the premiums insurance companies can charge. The result is to underprice the risk of living in dangerous areas—which is one reason that so many expensive homes await the next hurricane on Florida’s coast. When governments rebuild homes repeatedly struck by floods and wildfires, they are subsidising people to live in hazardous places.

For their part companies need to operate on the assumption that a disaster will strike at some point. This means preparing contingency plans, reinforcing supply chains and even, costly though this might be, having reserve suppliers lined up: there is no point in having a perfectly efficient supply chain if it can be snapped whenever nature takes a turn for the worst. Disasters are inevitable; their consequences need not be.

January 9, 2012

Anniversary of a nuclear security paradigm shift

Filed under: Catastrophes,Radiological & Nuclear Threats,Strategy — by Arnold Bogis on January 9, 2012

Last Wednesday, January 4 marked the five year anniversary of the landmark Wall Street Journal op-ed, “A World Free of Nuclear Weapons:”

Reassertion of the vision of a world free of nuclear weapons and practical measures toward achieving that goal would be, and would be perceived as, a bold initiative consistent with America’s moral heritage. The effort could have a profoundly positive impact on the security of future generations. Without the bold vision, the actions will not be perceived as fair or urgent. Without the actions, the vision will not be perceived as realistic or possible.

We endorse setting the goal of a world free of nuclear weapons and working energetically on the actions required to achieve that goal, beginning with the measures outlined above.

The bi-partisan authors of these words, referred to in arms control circles as “The Four Horsemen,” are not traditional peace activists or long-time nuclear abolitionists.  Instead, their identity as realists, hawks, and Cold War warriors is what lent such weight to the argument for nuclear zero:

Mr. Shultz, a distinguished fellow at the Hoover Institution at Stanford, was secretary of state from 1982 to 1989. Mr. Perry was secretary of defense from 1994 to 1997. Mr. Kissinger, chairman of Kissinger Associates, was secretary of state from 1973 to 1977. Mr. Nunn is former chairman of the Senate Armed Services Committee.

The desire to rid the world of nuclear bombs is nearly as old as the weapons themselves. What was new about this particular call was not simply the sketch of concrete steps that could be taken at the beginning of such a journey, but the gravitas of the messengers.  In the abstract it seems almost silly to think that such ideas cannot inhabit a respected space in the relevant conversation without a blessing from above, but at the same time these “wise men” provided the rhetorical room for such a conversation to expand from a minority view to a wide-ranging debate across the foreign policy, international security, and defense worlds.

What does this have to do with homeland security?  There is the obvious impact that comes with a reduced reliance on nuclear weapons that includes a reduced risk of nuclear terrorism, accidental launch, and war with all it’s worldwide implications.  However, reference to this particular anniversary in other venues made me both appreciate the potential coercive power of such an opinion piece and made me wonder if there had been anythings similar in the homeland security sphere. If not, as I suspect, what could have a comparable effect?

Stephen Flynn and the idea of “resilience” is the only candidate that springs to mind.  Yet it introduced a new concept, one which in my opinion has been twisted into various shapes to fit various needs and definitions.  The Four Horsemen did not conjure a “world without nuclear weapons” out of nothingness, but instead by lending their voices to a relatively marginalized idea shifted the terms of conversation and analysis on which nuclear policy is grounded. Perhaps a true paradigm shift.

Are there possible candidates, authors and topics, in what is considered “homeland security” that could result in such a radical shift?

January 5, 2012

Defense strategy and homeland security

Earlier today the President signed out and the Secretary of Defense released new strategic guidance for the Department of Defense. Following are my quick-takes on those aspects of the document  most closely related to homeland security.

Page 1:

The demise of Osama bin Laden and the capturing or killing of many other senior al-Qa?’ida  leaders have rendered the group far less capable. However, al-Qa?’ida and its affiliates remain active in Pakistan, Afghanistan, Yemen, Somalia, and elsewhere. More broadly,violent extremists will continue to threaten U.S. interests, allies, partners, and the homeland.The primary loci of these threats are South Asia and the Middle East. With the diffusion of destructive technology, these extremists have the potential to pose catastrophic threats thatcould directly affect our security and prosperity. For the foreseeable future, the UnitedStates will continue to take an active approach to countering these threats by monitoring theactivities of non-state threats worldwide, working with allies and partners to establishcontrol over ungoverned territories, and directly striking the most dangerous groups and individuals when necessary.

Page 2:

In the Middle East, the Arab Awakening presents both strategic opportunities and challenges. Regime changes, as well as tensions within and among states under pressure toreform, introduce uncertainty for the future. But they also may result in governments that,over the long term, are more responsive to the legitimate aspirations of their people, and aremore stable and reliable partners of the United States.Our defense efforts in the Middle East will be aimed at countering violent extremists anddestabilizing threats, as well as upholding our commitment to allies and partner states.

Page 3:

To enable economic growth and commerce, America, working in conjunction with allies and partners around the world, will seek to protect freedom of access throughout the globalcommons ?– those areas beyond national jurisdiction that constitute the vital connective tissue of the international system. Global security and prosperity are increasingly dependent on the free flow of goods shipped by air or sea. State and non-state actors pose potential threats to access in the global commons, whether through opposition to existing norms orother anti-access approaches. Both state and non-state actors possess the capability and intent to conduct cyber espionage and, potentially, cyber attacks on the United States, with possible severe effects on both our military operations and our homeland. Growth in the number of space-faring nations is also leading to an increasingly congested and contested space environment, threatening safety and security. The United States will continue to lead global efforts with capable allies and partners to assure access to and use of the global commons, both by strengthening international norms of responsible behavior and by maintaining relevant and interoperable military capabilities.

Page 4:

Acting in concert with other means of national power, U.S. military forces must continue to hold al-Qa?’ida and its affiliates and adherents under constant pressure, wherever they may be. Achieving our core goal of disrupting, dismantling, and defeating al-Qa?’ida and preventing Afghanistan from everbeing a safe haven again will be central to this effort. As U.S. forces draw down in Afghanistan, our global counter terrorism efforts will become more widely distributedand will be characterized by a mix of direct action and security force assistance. Reflecting lessons learned of the past decade, we will continue to build and sustain tailored capabilities appropriate for counter terrorism and irregular warfare. We will also remain vigilant to threats posed by other designated terrorist organizations, such as Hezbollah.

Page 5:

Accordingly, DoD will continue to work with domestic and international allies and partners and invest in advanced capabilities to defend its networks, operational capability, and resiliency in cyberspace and space….

U.S. forces willcontinue to defend U.S. territory from direct attack by state and non-state actors. We willalso come to the assistance of domestic civil authorities in the event such defense fails or in case of natural disasters, potentially in response to a very significant or even catastrophic event. Homeland defense and support to civil authorities require strong,steady?–state force readiness, to include a robust missile defense capability. Threats to the homeland may be highest when U.S. forces are engaged in conflict with an adversary abroad.

Page 6:

The nation has frequently called upon its Armed Forces to respond to a range of situations that threaten the safety and well-being of its citizens and those of other countries. U.S. forces possess rapidly deployable capabilities, including airlift and sealift, surveillance, medical evacuation and care, and communications that can be invaluable in supplementing lead relief agencies, by extending aid to victims of natural or man-made disasters, both at home and abroad. DoD will continue to develop joint doctrine and military response options to prevent and, if necessary, respond to mass atrocities. U.S. forces will also remain capable of conducting non-combatant evacuation operations for American citizens overseas on an emergency basis.

You may see more.   The document includes considerable attention to WMD and cyber threats not excerpted above.

December 8, 2011

Deterrence: Retrieving the full spectrum

Filed under: Strategy,Terrorist Threats & Attacks — by Philip J. Palin on December 8, 2011

Wednesday’s joint House-Senate hearing on homegrown terrorism was interesting, enlightening, painful, embarrassing, and infuriating… sometimes in the course of a single minute or two.  If you were not in the hearing room or missed the C-SPAN broadcast (available in archived entirety), individual videos and prepared testimonies are available at the House Homeland Security Committee website.

One of those testifying was LT. COL. Reid Sawyer, Director, Combating Terrorism Center at West Point.  In his prepared testimony LT. COL. Sawyer noted,

The emergence of homegrown terrorism and the targeting of U.S. military forces requires a renewed examination of the nature of radicalization and the changing nature of autonomous radicalization—a process that today occurs largely in isolation from direct connection with external networks, creating new challenges for law enforcement and intelligence communities to detect, prevent and deter homegrown terrorism.

Most of Wednesday’s testimony, questions, answers, and occasional pontificating focused on detecting and preventing.  The lack of attention to deterring is unfortunate.  Especially in regard to homegrown terrorism there is a significant opportunity for deterrence… especially if deterrence is well-understood.

The Latin origin of deter, deterrent, and deterrence is deterrere.   During the classical era deterrere was much closer to our understanding of discourage or hinder than the Mutual Assured Destruction of Cold War deterrence.  There is even a positive aspect to the concept.

In Cicero’s Impeachment of Verres we read, “… testis praesertim , timidos homines et adflictos, non solum auctoritate deterrere, sed etiam consulari metu, et duorum praetorum potestate.”  A reasonable translation: “… witness in particular, timid and oppressed men, hindered not only by your own private influence, but fear of the consul, and the power of two praetors.”  The explicit distinction between deterrere (hindered) and metu (fear) is meaningful.  Moreover they are hindered by influence, while they fear power.

Deter entered English in the 1570s.  An early use is found in Milton’s Paradise Lost (1667):

Rather your dauntless virtue, whom the pain
Of death denounced, whatever thing Death be,
Deterred not from achieving what might lead
To happier life, knowledge of Good and Evil?
Of good, how just! Of evil-if what is evil
Be real, why not known, since easier shunned?

John Milton, Paradise Lost (l. Bk. IX, l)

Early English usage reflected the classical meaning.  In the passage above, dauntless virtue being not discouraged or not hindered seems more coherent with the tone than “not terrorized.”

In 1764  Cesare Beccaria published Dei delitti e delle pene (On Crime and Punishments) in which he argued for a systematic approach to what we would now call deterrence.

It is better to prevent crimes than to punish them. This is the fundamental principle of good legislation, which is the art of conducting men to the maximum of happiness, and to the minimum of misery, if we may apply this mathematical expression to the good and evil of life. But the means hitherto employed for that purpose are generally inadequate, or contrary to the end proposed. It is impossible to reduce the tumultuous activity of mankind to absolute regularity; for, amidst the various and opposite attractions of pleasure and pain, human laws are not sufficient entirely to prevent disorders in society.

To effectively prevent crime Beccaria recommended swift, consistent, and just punishment of proven wrongs combined with education, rewards, and application of science to encourage desired behavior.

The English philosopher Jeremy Bentham built on Beccaria’s foundation, gave considerable attention to the efficacy of punishment to prevent unwanted behavior, and called it a “deterrent” (introducing the word in 1829). But Bentham notes a distinction between a longer-term and nearer-term deterrent:

All punishment has a certain tendency to deter from the commission of offences; but if the delinquent, after he has been punished, is only deterred by fear from the repetition of his offence, he is not reformed. Reformation implies a change of character and moral dispositions.

The ultimate deterrent is change of disposition or what moderns might call motivation. Bentham certainly perceived we could be influenced by fear of detection, detention, and punishment.   But a more permanent form of prevention would, he argued at length, emerge from engaging the prospect of pleasure.  By understanding the fear of pain and the prospect of pleasure, Bentham perceived society can be constructively shaped:

Nature has placed mankind under the governance of two sovereign masters, pain and pleasure. It is for them alone to point out what we ought to do, as well as to determine what we shall do. On the one hand the standard of right and wrong, on the other the chain of causes and effects, are fastened to their throne. They govern us in all we do, in all we say, in all we think: every effort we can make to throw off our subjection, will serve but to demonstrate and confirm it.

From 1861, when “deterrence” first appeared in the English language, until the mid-Twentieth century the most common usage of the word related to issues of criminology.  Following World War II, however, deterrence was increasingly associated with military strategy and, particularly, the nuclear doctrine of Mutual Assurance Destruction.

In a January 1954 speech Secretary of State John Foster Dulles declared,

We need allies and collective security. Our purpose is to make these relations more effective, less costly. This can be done by placing more reliance on deterrent power and less dependence on local defensive power.

This is accepted practice so far as local communities are concerned. We keep locks on our doors, but we do not have an armed guard in every home. We rely principally on a community security system so well equipped to punish any who break in and steal that, in fact, would-be aggressors are generally deterred. That is the modern way of getting maximum protection at a bearable cost. What the Eisenhower administration seeks is a similar international security system. We want, for ourselves and the other free nations, a maximum deterrent at a bearable cost.

Local defense will always be important. But there is no local defense which alone will contain the mighty landpower of the Communist world. Local defenses must be reinforced by the further deterrent of massive retaliatory power.

Rather than carrot and stick, after Dulles deterrence was understood as the prospect of a very big stick pounding as hard as possible.

This Cold War definition was so deeply ingrained in our political culture that in the immediate aftermath of the 9/11 attacks President Bush asserted, “Deterrence—the promise of massive retaliation against nations—means nothing against shadowy terrorist networks with no nation or citizens to defend.”

Deterrence is being retrieved.  In defense policy there is considerable talk of a “new deterrence.”  In homeland security and counter-terrorism important work has been done by Matthew Kroenig, Brian Jenkins and Paul Davis. But we still tend to operate under the shadow of Dulles and his terrible swift sword.  For optimal deterrence we also need some beauty of the lilies, wisdom to the mighty, and succor to the brave.

December 2, 2011

525,600 minutes – how do you measure, measure a year? In daylights, in sunsets, in midnights, in cups of coffee. In inches, in miles, in laughter, in strife.

Filed under: Legal Issues,Preparedness and Response,Strategy — by Philip J. Palin on December 2, 2011

Can homeland security be measured? Consider a couple of possibilities:

One current project is concerned with supply chain resilience.  What is a resilient supply chain?  How does it behave?  How does it deal with threats and vulnerabilities?  According to interviews with senior supply chain owners, operators, and various experts no one has visibility over any single supply chain, much less the entire Supply Chain (like God, capitalized).  A supply chain seems to work best when it is widely distributed among several sometimes-competing, sometimes-collaborating players  who may or may not share what they know.  The Supply Chain is a complex adaptive system beyond measuring or managing in anything like a traditional understanding of these terms.

A second project is concerned with deterrence.  Is deterrence a short-term or long-term outcome? How is it achieved?  It seems to be the outcome of how positive and negative sanctions are applied to a well-defined audience for a specific purpose, often at a particular time-and-place.   Is there any way to accurately predict what mix of positive-and-negative, time-and-place will be most effective?  How do you measure absence? Isn’t this what deterrence means, the absence of something unwanted?  Almost everyone agrees that deterrence is an affective outcome, it is most effective when it influences motivations and unconscious tendencies.  How do you measure progress toward such a goal?  What does success look like?

It is reasonably clear and widely accepted that supply chain resilience and deterrence are each sub-elements of homeland security. Yet I am not at all sure how any of the three,  including homeland security, are to be defined — to be made finite — and thereby measurable (as traditionally understood).

I believe homeland security (as a practice, perhaps even a weird sort of verb), if effective, produces a public good called homeland security (a noun).  How do we assess such effectiveness?

Elinor Ostrom, the 2009 Nobel Laureate in Economics writes,

The task of measuring performance in the production of public goods will not yield to simple calculations.  Performance measurement depends instead on estimates in which indicators or proxy measure are used as estimates of performance.  By utilizing multiple indicators, weak measures of performance can be developed even though direct measures of output are not feasible. Private goods are easier to measure, account for, and relate to cost-accounting procedures and management controls.

Private goods are easier to measure because we can exclude potential users from consumption.  The private good of shelter is measured by, in part, the number of homeless… those excluded from shelter.  How would we exclude consumption of effective deterrence? How would we exclude free-riding on effective supply chain resilience?  How would we exclude effective homeland security? Why would we exclude?

Despite the complications, Congress wants better performance measures. GAO is a principled and persistent advocate of performance measures.   Any senior official with the temerity to quote Dr. Ostrom would, I expect, be received rather skeptically in most Hill hearing rooms. Most “masters of disaster” would, in any case, welcome meaningful measures.  So we keep looking.

Recently a senior FEMA official pointed to a possible relationship between mid-term sales-tax revenues, long-term recovery, and resilience.   This made some intuitive sense. We were encouraged.

After a disaster sales-tax revenue almost always shows an immediate spike. For example,  according to the Tuscaloosa News in the month following the April 27 tornado, local sales tax revenue of $2.5 million was about $160,000 higher than the same period in 2010 and about $300,000 more than in 2009.

What about one year or more later?  Sales tax revenue is a leading indicator, the FEMA official argued, for a whole host of other indicators: population, recovery of the retail sector, sustainable government services, overall economic activity, and more.  If following the immediate spike there is a long-term slide in sales-tax receipts this is almost always evidence of non-resilience. The reverse is also true he suggested: stable or higher sales tax revenues signals a range of resilience.

According to the Greater New Orleans Community Data Center, “City of New Orleans sales tax collections for the first six months of 2011 are at $78.5 million — higher than any other six–month period post–Katrina, and only 2 percent lower than the same months in 2005.”  Taken alone this could seem a sign of extraordinary resilience, especially for a city with a considerably reduced population and in the midst of a deep national recession.

Other indicators are mixed:  New Orleans school enrollment is 63 percent pre-Katrina numbers and the rate of violent crime is 80 percent higher than the national average.  New Orleans has not seen the collapse in employment of other places in the nation, but the biggest employment sectors — energy, tourism, and shipping — are all in decline.

Is New Orleans struggling or strong?  Resilient or just hanging on until the next big one?

Greensburg, Kansas is widely celebrated as a premier example of resilience in its creative, courageous response to the May 2007 tornado that devastated the community.  Between 2009 and 2010 Kiowa County — Greensburg is the county seat — saw sales tax revenue grow about 3 percent.   Does this quantity fairly capture the resilience of Greensburg?

How do we measure homeland security?  As input or output, might be the next question.

There is a Hebrew word — transliterated as ‘esher — that is usually translated as happy or blessed. This is the noun form of a verb — transliterated as ‘asher — that means to advance, go straight, make progress.

Do we achieve the noun by experiencing the verb or is experiencing the noun what motivates the action?

“How blessed (‘esher) is the man who finds wisdom and the man who gains understanding. For her profit is better than the profit of silver and her gain better than fine gold. “(Proverbs 3:13-14)

Gold and silver can be precisely measured, valued, and excluded.  Wisdom is worth even more,  but resists unambiguous measurement.  I don’t think wisdom can be excluded (in the economic sense of the term), but it can certainly be elusive.

October 19, 2011

Mitigation is to resilience as storm cellars are to root cellars

Filed under: Preparedness and Response,Risk Assessment,Strategy — by Philip J. Palin on October 19, 2011

The new National Preparedness Goal is “a secure and resilient Nation with the capabilities required across the whole community to prevent, protect against, mitigate, respond to, and recover from the threats and hazards that pose the greatest risk.”

The upgrade given mitigation is arguably the most important policy shift represented in the NPG.   Mitigate now joins Prevent, Protect, Respond, and Recover as “Mission Areas.”  Once the red-headed stepchild of preparedness, mitigate has — at least intellectually — been fully accepted as a strategic priority.

According to the NPG several “core capabilities” are necessary to achieve the mitigation mission area, including:

  • Community Resilience
  • Long-term Vulnerability Reduction
  • Risk and Disaster Resilience Assessment
  • Threats and Hazard Identification

The details of these capabilities are not — yet — specified.  The forthcoming National Preparedness System is likely to provide much more.  All of these capabilities have significant pedigrees in both research and practice.

There has tended to be an engineering orientation to mitigation.   Fifty-four of 77 examples in the FEMA Mitigation Best Practices Portfolio relate to flooding.  A specific threat is identified, vulnerabilities related to the threat are assessed, risk is reduced usually through some change in the built environment.  You can see this same logic embedded in the capability list.  All of this is helpful and works for earthquakes, wildfires, industrial accidents, and terrorism too.

According to the NPG mitigation is, “The capabilities necessary to reduce loss of life and property by lessening the impact of disasters.”  Unpacking the definition, this suggests that community resilience (see capability list above) contributes to mitigation.

As a strategic principle I would turn this around: mitigation contributes to community resilience.  Resilience and mitigation can be complementary.  But they are also quite distinct. The very best mitigation cannot ensure resilience.  Nor does less-than-full mitigation negate the possibility of significant resilience.   If I had to choose, I would choose resilience over mitigation.

Fortunately, we don’t have to choose.  Attention to both mitigation and resilience is helpful.

The NPG defines resilience as, “The ability to adapt to changing conditions and withstand and rapidly recover from disruption due to emergencies.”

The use of steel reinforcement to allow buildings to sway with an earthquake is an example of both mitigation and resilience.  The ability of the Internet to allow information-packets to find multiple open channels and opportunistically use whatever is available is another example of resilient design that can mitigate the impact of a threat.

But resilience and especially community resilience is much more than mitigating impact.

Last Thursday I was driving a narrow road through rural Virginia when the radio sounded a tornado warning.  The rain and wind were already strong.  At the first opportunity I pulled off at a convenience store to allow the tornado, about five miles ahead, to finish its run Northeast.

Paying for coffee and a cookie I asked the sales clerk if she had heard the tornado warning.  Glancing at the rain lashing the windows she replied, “Nope.  No radio.  Grew up in Oklahoma thought I’d gotten away from ‘em. ”

I showed her the tornado’s track on my smartphone’s screen.

“Funny thing.  Both my grands (grandparents) had storm cellars, purpose built in the backyard,” she said. “We never did and no basement neither.  Just a ranch house on a slab.  Was like we don’t believe in tornadas no more.”

The storm cellars — my mother’s parents in Oklahoma also had one — are examples of mitigation.   But as the sales clerk observed, before mitigation there was something the authors of the NPG would no doubt call “Threat and Hazard Identification” (this is tornado alley) and “Risk and Disaster Resilience Assessment”  (I need a place to be protected from a tornado) which leads to “Long-term Vulnerability Reduction” (I will build a storm cellar).  In other words, our grandparents actively acknowledged a realistic threat.

On May 22 the residents of Joplin, Missouri were alerted to a Tornado Watch at 1:30 PM local time.   A Tornado Warning was br0adcast at 5:09.  Sirens were sounded at 5:11.  The killer tornado touched down southwest of Joplin at 5:34.  According to a study conducted by the National Oceanic and Atmospheric Administration (NOAA),  ”The majority of surveyed Joplin residents did not immediately go to shelter upon hearing the initial warning.”  There were 159 deaths and several hundred injuries.

“Was like we don’t believe in tornadas no more.”

I was never in a storm cellar during a storm.  Several times I was in the cellar to retrieve a sack of potatoes or a jar of preserves.  Most storm cellars were also used to store what was harvested from the garden.  Every storm cellar I can remember was dug next to the garden.

You can argue that gardening is also a mitigation measure (against hunger).  But that would squeeze all the joy out of it.  My father’s parents owned grocery stores, but were also gardeners.  I have never had such luscious tomatoes, fresh or canned, since they stopped gardening.

Here’s my hypothesis:  As gardening declined and home refrigeration increased, storm (root) cellars fell into disuse, eventual disrepair, became a hazard themselves, and were filled in. The prospect of tornadoes was not sufficient  to sustain the mitigation activity.  The need for a cool dark place to store vegetables was a crucial indirect motivation for the mitigation.

We never really believed in “tornadas”, but once upon a time we believed in tomatoes (and green beans and peas and potatoes) and retrieving the taste of an August garden deep into February.

Resilience is the outcome of positive behaviors regularly practiced.  Resilience is being aware and appreciative of your environment. Resilience is being enmeshed in a dense network of human relationships.  Resilience is caring for yourself and others.

Resilience is about tomatoes.  Mitigation is about tornadoes.

–+–

For a more technical take on resilience:

Resilience: Five principles of good practice

A Super-cell outbreak is one kind of complex threat: Do the principles of good practice apply?

Principles of good practice for advancing resilience: Awareness of complex context and connections


October 14, 2011

Authority, attraction, and advocacy

Filed under: Strategy — by Philip J. Palin on October 14, 2011

A new national strategy for an important aspect of homeland security is nearly complete.  I expect it will emerge from the interagency process in another three to six weeks.

The subject matter is of particular interest to me.  Because of prior work done on the issue and relationships of trust within the homeland security community I received an unauthorized copy for review.

[un·au·thor·ised adj not having official permission]

With the benefit of the preview I have had conversations with various  parties involved in authoring the national strategy and those who are likely to be most affected by the national strategy.   I have tried to use these conversations to influence how the national strategy will be finalized and initially received.

[in·flu·ence n. A power affecting a person, thing, or course of events, especially one that operates without any direct or apparent effort.]

I happen to mostly agree with the draft I have seen.  It is short, truly strategic, and offers a substantive argument.  Even if you disagree with its goals, it will be helpful to engaging the issue.

Because I am drawn to the principles and priorities set out by the new strategy I am  inclined to portray it as being as  attractive as possible to those who will be affected by it.

[a·ttrac·tive adj 1. appealing to the senses or mind through beauty, form, character, etc. 2. arousing interest an attractive opportunity 3. possessing the ability to draw or pull an attractive force.]

Especially in terms of practicing mitigation and advancing resilience, I find the new strategy appealing. (It has other goals as well.) But some will perceive a potential threat.  Depending on how the new strategy is interpreted and implemented it might hurt as much as help.  Threats can also attract.

I perceive human life — and especially social life — as a complex adaptive system.  While certainly susceptible to over-abstraction, most humans and most societies are inclined to descend into deepening basins of attraction.   The deeper the basin the greater the stability.  But regardless of how deep or how shallow, once inside the basin the system tends to cycle again and again around a point (or points) of equilibrium.

[Basin of Attraction (physics) The collection of all possible initial conditions of a dynamical system for which the trajectories representing that system in phase space will converge to a particular attractor.]

We can conceive the Roman imperial system as an especially deep basin of attraction.  Even after the Western empire collapsed the cultural attractor continued to exercise considerable influence through Byzantine, medieval German, and Russian political systems and perhaps most directly through the Catholic Church.  Certain British and American notions of power and influence can be seen emerging from this basin.  I have spent a considerable part of my life in an ancient Roman plunge pool.  Two generations ago the pool was full.  Not today.

Every living society or culture can be conceived as a collection of basins — a veritable lake district — where from time to time there are periods of flood and drought.  One basin joins with another and another yet.  A single basin is divided in parts.  A once deep basin is filled by silt and debris becoming more and more shallow, finally evaporating away on one especially hot day.

As long as the basin of attraction persists it serves as a source of authority.  The deeper the attraction and the more who are attracted, the stronger the authority.

[authority early 13c., autorite "book or quotation that settles an argument,"from O.Fr. auctorité (12c.; Mod.Fr. autorité), from L. auctoritatem (nom. auctoritas) "invention, advice, opinion, influence, command," from auctor "master, leader, author".]

The book or citation that could claim real authority did so on the basis of broad and deep attraction.  We approached the Bible or Aristotle or symbols of tradition or the Congressman or the President with authentic respect, even affection.  Not today.

As I have worked to encourage a positive response to the forthcoming national strategy, the recurring question is whether or not it will make any difference.   Its origin in the federal interagency process, authored in the White House, and signed by the President is not sufficient and may, in some quarters, considerably heighten skepticism.

The process of framing and forming this new strategy and other official documents assume a basin of attraction that too often is nothing more than a muddy puddle. Authority is little more than a thin sheen.  It is not the intent, invention, or content of the document, decision, or initiative that produces this outcome; it is the time, place, and environment into which it is introduced.

I perceive we are living in a time of shallow and very permeable basins.  Rather than a lake district, our fitness landscape is more like a swamp.  There may be a deep clear pond out there, but that’s not where we are today in homeland security, national security, or most of modern life.

["Evolutionary adaptation is the process that increases the fit of a population to the fitness landscape it inhabits. As a consequence, evolutionary dynamics is shaped, constrained, and channeled, by that fitness landscape." (Critical Properties of Complex Fitness Landscapes)  My use of a basin's depth, rather than height reverses the most common visualization of a fitness landscape.]

For some — turtle, muskrat,  alligator, snake, many birds — the swamp is okay, even preferred.  For me it is not preferred.

I am looking for something deeper, something less susceptible to flooding and freezing.  I perceive the new national strategy may point to at least one way out of the swamp.  But authority will not get us there.  There must be attraction, sufficient attraction to move quite a number of stakeholders considerably upstream to higher ground and deeper basins.

It is an interesting challenge:  Can government eschew the mirage of authority enough to attract meaningful collaboration?

September 26, 2011

Even the sun shines on a dog’s…

Filed under: Catastrophes,General Homeland Security,Strategy — by Arnold Bogis on September 26, 2011

…well, you probably know the rest.

This colorful turn of phrase was uttered within my earshot at a Boston bar following the Patriot’s loss to the Buffalo Bills.  Until this game the Bills had not beat the Pats for 15 straight games, a streak that began in 2003.  The Bills are not a bad team this year, in fact they had the same undefeated record as New England entering the game.  Instead, it was the expectation that the result this past Sunday would be the same as so many games before that added to the befuddlement of viewers across the region (in addition to Tom Brady throwing the same number of interceptions in one game–four–that he had thrown all last season). The same colorful, and upset, individual remarked that his “nephew had never known the Bills to beat the Patriots.”

What it says about my life that this episode inspired thoughts about homeland security I will consider in greater depth another time. Regardless, this animated man unintentionally uttered insightful homeland security ideas.

“My nephew has never known…” As a greater time elapses between events, the expectation that those events are possible generally decreases and the urgency to prepare dissipates.  Perhaps because the original attack on the World Trade Center did not achieve a catastrophic result, the nation was strategically unprepared for 9/11.  The same group not only carried out an attack in the U.S. mainland again (after several against various U.S. targets overseas), but they struck the same target. By strategically, I am not referring to the question of whether our intelligence services were properly aware of the threat or if our leaders were aggressive enough in their chosen courses of action.  Instead, as a nation we were seemingly shocked by the attacks as if the threat had never manifested before that terrible day.  Would the reaction to the attacks have been different if they occurred in 1994 or 1995 instead?

The “sun shining”: Sometimes your star player has a bad day and throws four interceptions.  Sometimes as a fan, you underestimate your opponent because they weren’t so hot the year before but you haven’t bothered to analyze whether they improved over the off season.  Sometimes, a plot will develop in a place intelligence services are not looking and by a group that has not appeared on anyone’s radar screen.  Sometimes a less-then-catastrophic storm will cause the failure of levees generally believed to have been built to stricter guidelines. Sometimes a system designed to prevent blow-outs fails.

My point: the unexpected will occur and we can’t count on preventing, deterring, or mitigating all the worst case scenarios.  Somehow in a time of fiscal and political constraint, room for catastrophic planning should be carved out of a system that rests on preparing for the expected. Following the next “unexpected” catastrophe, there will not be a chance for quick redemption on the following Sunday.

September 16, 2011

Resilience: The promise and the platitude

Filed under: Preparedness and Response,Strategy — by Philip J. Palin on September 16, 2011

Sunday evening at the Kennedy Center, President Obama said,

These past 10 years underscores the bonds between all Americans.  We have not succumbed to suspicion, nor have we succumbed to mistrust.  After 9/11, to his great credit, President Bush made clear what we reaffirm today:  The United States will never wage war against Islam or any other religion.  Immigrants come here from all parts of the globe.  And in the biggest cities and the smallest towns, in schools and workplaces, you still see people of every conceivable race and religion and ethnicity -– all of them pledging allegiance to the flag, all of them reaching for the same American dream –- e pluribus unum, out of many, we are one.

These past 10 years tell a story of our resilience. The Pentagon is repaired, and filled with patriots working in common purpose.  Shanksville is the scene of friendships forged between residents of that town, and families who lost loved ones there.  New York — New York remains the most vibrant of capitals of arts and industry and fashion and commerce.  Where the World Trade Center once stood, the sun glistens off a new tower that reaches towards the sky.

Our people still work in skyscrapers.  Our stadiums are still filled with fans, and our parks full of children playing ball.  Our airports hum with travel, and our buses and subways take millions where they need to go.  And families sit down to Sunday dinner, and students prepare for school.  This land pulses with the optimism of those who set out for distant shores, and the courage of those who died for human freedom.

Saturday in his weekly radio address, speaking of the continuing threat of terrorism, the President said, “no matter what comes our way, as a resilient nation, we will carry on.”

–+–

We may be a resilient people, but after huge wildfires in Texas,  killer tornadoes in Joplin and Tuscaloosa, extraordinary flooding caused by Hurricane Irene and much more, the Disaster Relief Fund is just about depleted.  The worst of hurricane season is probably still ahead.  California’s wildfire season is just ramping up.  I wonder when the San Andreas, New Madrid, or another past-due fault will shift.

While we may be resilient, so — we are told — is our adversary.  Testifying Tuesday before the Senate Homeland Security Committee, Matt Olsen, the new Director of the National Counter Terrorism Center said,

Al-Qaida, its affiliates and adherents around the world, as well as other terrorist organizations, continue to pose a significant threat to our country. This threat is resilient and adaptive and will persist for the foreseeable future. America‘s campaign against terrorism did not end with the mission at Bin Ladin‘s compound in Abbottabad, Pakistan in May. A decade after the September 11th attacks, we remain at war with al-Qaida and face an evolving threat from its affiliates and adherents.

A variety of reports tell us there has been no resolution of the “credible” threat to Washington DC and New York announced in the days just before 9/11.   But on Sunday we did evidently kill Abu Hafs al-Shahri, a Saudi Arabian national who was chief of operations for al-Qaeda inside Pakistan.

–+–

According to Wednesday’s Report Regarding the Causes of the April 20, 2010 Macondo Well Blowout, resiliency was not readily found in the design, operations, or response to last years explosion, fire, and oil spill.

The loss of life at the Macondo site on April 20, 2010, and the subsequent pollution of the Gulf of Mexico through the summer of 2010 were the result of poor risk management, last minute changes to plans, failure to observe andrespond to critical indicators, inadequate well control response, and insufficient emergency bridge response training by companies and individuals responsible for drilling at the Macondo well and for the operation of the Deepwater Horizon.

Well… at least the BP stock price has been resilient.  Transocean and Haliburton too.

–+–

Resilience was once a radical reframing of homeland security strategy. Less than five years ago, a colleague passionately critiqued resilience as a dangerous, defeatist concept.  I argued resilience is how we productively work with uncertainty.

Arguments over definition (and implications) can still be heard, but resilience is — already — making the transition from provocation to platitude.    In too many speeches, editorials, memos, and blogs resilience has joined freedom, equality, love, and courage as meaning whatever the author wishes it to mean, especially if the author is advocating rigid, inflexible, and non-resilient notions.

I am reminded of Orwell’s essay on political language, “In the case of a word like democracy, not only is there no agreed definition, but the attempt to make one is resisted from all sides. It is almost universally felt that when we call a country democratic we are praising it: consequently the defenders of every kind of regime claim that it is a democracy, and fear that they might have to stop using that word if it were tied down to any one meaning. Words of this kind are often used in a consciously dishonest way. That is, the person who uses them has his own private definition, but allows his hearer to think he means something quite different.”

When authors of platitudes are allowed to persist, their audience shares responsibility. Meaningful principles devolve into platitudes through unquestioning, self-indulgent, unthinking consumption. Orwell again, “Our thoughts are foolish, but the slovenliness of our language makes it easier for us to have foolish thoughts.”

As an antidote for foolish thinking about resilience, please give careful and critical attention to three recent considerations of resilience.  Each includes its own platitudes or worse, but when thoughtfully consumed each promises greater precision in how we think about and practice resilience.

Community Resilience Task Force Recommendations (2011), Homeland Security Advisory Council, Department of Homeland Security. “The  Task Force identified an urgent need for clear articulation of the relationships and dependencies between resilience and other homeland security  efforts—particularly preparedness and risk reduction.   Clarification of these relationships is crucial both to build shared understanding across diverse stakeholder communities and to motivate action throughout the Nation.”

Building Community Resilience to Disasters (2011) RAND and the US Department of Health and Human Services. “Community resilience entails the ongoing and developing capacity of the community to account for its vulnerabilities and develop capabilities that aid that community in (1) preventing, withstanding, and mitigating the stress of a health incident; (2) recovering in a way that restores the community to a state of self-sufficiency and at least the same level of health and social functioning after a health incident; and (3) using knowledge from a past response to strengthen the community’s ability to withstand the next health incident.”

Key Trends Driving Global Business Resilience and Risk (2011) IBM Global Technology Services. “Business resilience refers to the ability of enterprises to adapt to a continuously changing business environment. Resilient organizations are able to maintain continuous operations and protect their market share in the face of disruptions such as natural or man-made disasters. Business resilience planning is distinguished from enterprise risk management (ERM) in that it is more likely to build capacity to seize opportunities created by unexpected events. Another difference is that while ERM can be implemented as a management capability, an integrated business resilience strategy requires the engagement of everyone in the organization, and often means a change in corporate culture to instill awareness of risk.”

Bureaucratic writing is innately banal.  Authors — including yours truly — try to gin up with length or style an authority not achieved in substance.  Often we are busy trying to paper over unresolved conflicts and complexities.   This results, Orwell explains, in two recurring faults: “First, staleness of imagery; the other is lack of precision. The writer either has a meaning and cannot express it, or he inadvertently says something else, or he is almost indifferent as to whether his words mean anything or not. This mixture of vagueness and sheer incompetence is the most marked characteristic of modern English prose, and especially of any kind of political writing.”

The three documents listed above are not the worst examples of bureaucratic writing, but they share the sins of their species.  To nurture your critical reading with rich imagery and exacting precision, I suggest, You Think That’s Bad, a recent collection of Jim Shepard’s fiction.  Between each of the bureaucratic reports read at least one of the ten short stories.  Many in this collection struggle with issues of resilience.  I especially recommend, The Netherlands Lives with Water.

September 2, 2011

First Draft: National Preparedness Goal

Filed under: Preparedness and Response,Strategy — by Philip J. Palin on September 2, 2011

Midnight tonight is the deadline for your comments on the current draft of the National Preparedness Goal.  The downloaded document provides instructions on how to make your comments.

At the end of March Presidential Policy Decision 8 included the following:

I hereby direct the development of a national preparedness goal that identifies the core capabilities necessary for preparedness and a national preparedness system to guide activities that will enable the Nation to achieve the goal… The national preparedness goal shall be informed by the risk of specific threats and vulnerabilities – taking into account regional variations – and include concrete, measurable, and prioritized objectives to mitigate that risk. The national preparedness goal shall define the core capabilities necessary to prepare for the specific types of incidents that pose the greatest risk to the security of the Nation, and shall emphasize actions aimed at achieving an integrated, layered, and all-of-Nation preparedness approach that optimizes the use of available resources. The national preparedness goal shall reflect the policy direction outlined in the National Security Strategy (May 2010), applicable Presidential Policy Directives, Homeland Security Presidential Directives, National Security Presidential Directives, and national strategies, as well as guidance from the Interagency Policy Committee process. The goal shall be reviewed regularly to evaluate consistency with these policies, evolving conditions, and the National Incident Management System.

The draft document offers a succinct statement of the goal:

Our National Preparedness Goal is a secure and resilient Nation that has created the capacity for the organized commitment of the whole community, in the shortest possible time and under all conditions, to successfully prevent, protect, mitigate, respond, or recover from the threats that pose the greatest risk to the Nation.

A secure nation is not a new goal.  A resilient nation, while not a new goal, has seldom (ever?) been accorded strategic equivalency with security.  The emphasis on the whole community is also not precisely new, but it is given heightened priority in this statement.  Focusing on the capacity of the organized commitment of the whole community to prevent, protect, mitigate, respond, and recover is a potentially helpful strategic differentiation.  (The “capacity of organized commitment” is, however, something worth unpacking a bit more. I have a sense the attention to speed and condition also has more meaning embedded than is immediately apparent.)

Consistent with the President’s instructions, the draft National Preparedness Goal gives attention to core capabilities.  The definition offered by the draft is:

A “capability” is the ability to provide the means to accomplish one or more tasks under specific conditions and to specific performance standards. A capability may be achieved with any combination of properly planned, organized, equipped, trained, and exercised personnel that  achieves the intended outcome. “Core capabilities” are those that are central to the Nation’s  ability to achieve our National Preparedness Goal. Their availability is essential and  indispensable for the execution of the mission, and therefore, they are subject to continuous  monitoring and management at all levels.

The draft offers forty-two core capabilities, as outlined in this graphic (a larger version will open if you click on the graphic):

The draft document provides considerable detail on each of the core capabilities.  There is a particular effort to identify meaningful performance measures for each capability.

Three critiques intended to be constructive:

1. Despite the draft regularly invoking an all-hazards perspective, do the prevent and protect focus areas strike you as tilting heavily to counter-terrorism? They do to me.  When I look at the individual core capabilities “prevent” might be better entitled “preempt”.   Looks like these core capabilities are mostly practiced when bad guys/gals have a clear intention to cause harm.  There’s not much (any?) attention to forestalling bad intentions.

2. Taken together the proposed preparedness architecture seems mostly a matter of preparing-to-respond.  The protect collection strikes me as focused on potential terrorist threats and a kind of strategic agility similar to the Great Wall of China or the Maginot Line.   Mitigate  provides a few proactive, positive steps to increase actual strength and resilience.  We might be able to conceive a couple of recover’s core capabilities as offering constructive opportunities.   But the overall approach seems, at least to me, quite defensive in stance.  I want to be prepared to engage opportunities, as well as deal with problems.

3.  The draft National Preparedness Goal gives considerable attention to security.  In this the NPG is consistent with previous priorities.  The new draft goal gives equal priority to resilience. I regret that I do not see how the core capabilities and performance measures as currently articulated substantially advance resilience.  This new goal seeks to more fully involve the whole community.  I do not see how the core capabilities and performance measures as currently articulated would substantially enhance the commitment of the whole community to the preparedness mission.

First drafts are usually more expansive — and unwieldy — than subsequent drafts. Producing a reasonable first draft in a timely fashion is helpful to public consideration and comment. In final draft effective goal-setting will probably involve a tightened focus, clarification, and crystallization.  It will be interesting to see what is sent to the President on September 25.

Next Page »