“The Role of Today’s CIO”

1. Presented by: Barry C. West February 12, 2004 “The Role of Today’s CIO”

2. March 2003: became Emergency Preparedness and Response (EP&R) Directorate under the Department of Homeland Security A former independent agency created in 1979 Includes the U.S. Fire Administration and Federal Insurance Administration What is FEMA?

3. Reduce the loss of life and property and protect our institutions from all hazards by leading and supporting the nation in a comprehensive, risk-based emergency management program of mitigation, preparedness, response and recovery. FEMA’s Mission:

4. Under Secretary appointed by the President, confirmed by Congress, reporting to DHS Secretary 2,400 permanent employees 7,000 disaster reserve employees 8,000 NDMS reserve employees Who is FEMA?

5. Disaster response and recovery Reducing risk from disasters through mitigation Preparedness training and exercises Consequence management following terrorist incidents Train fire fighters and first responders Oversee the National Flood Insurance Program Manage the National Disaster Medical System What does FEMA do?

6. Provides disaster aid to individuals, communities and states for recovery Promotes risk reduction from future disasters through mitigation efforts May also defray state and local costs of handling the disaster or emergency Creates and staffs federal/state disaster offices and coordinates relief efforts with other federal agencies and voluntary organizations Keeps the public informed through FEMA’s “Recovery Times,” radio and satellite broadcasts, and mass media In a disaster, FEMA:

7. Public assistance Individual assistance Other aid programs Hazard Mitigation Grant Program FEMA disaster aid programs:

8. As part of the Department of Homeland Security, FEMA is leveraging its resources with those of 21 other agencies and departments to ensure a full continuum of response and recovery activities – and to attain a vision of a “nation prepared.” FEMA’s Future:

9. Information TechnologyServices Directorate

10. Develop, maintain, and facilitate implementation of a sound and integrated IT architecture Monitor and evaluate the performance of IT programs Portfolio Management Develop and maintain FEMA IT Strategic Plan Represent FEMA in the DHS CIO Council Promote the use of IT to improve productivity, efficiency, and effectiveness of FEMA programs Role of the CIO

11. FY 2004 Priorities • Enterprise Architecture • Disaster Response and Recovery • Other Mission Applications Support • Cyber Security • IT Management

12. Major Quarterly Milestones: Select an Enterprise Architecture tool Develop Enterprise Architecture Program Complete and integrate an Enterprise Architecture into OMB’s Federal Enterprise Architecture (FEA) and DHS’s Architecture Hire an Enterprise Architect Priority 1:Enterprise Architecture

13. Enterprise Architecture (EA)Support for Planning and Decision Where do I invest my IT budget to best support the goals & objectives of the FEMA & DHS Strategic Plans? How can I share information between programs to affordably improve value to customers? CIO FEMA Division Manager How can I reduce IT spending without adverse mission impact? How can IT support my business process while managing risk? CFO $50-60B federal IT budget Program Manager

14. TO-BE AS-IS Roadmap Business - IT Business - IT Why are we doing EA at FEMA? • Align IT to business processes • Provide roadmap to guide investment decisions • OMB requirement Guide IT investment decisions Document existing business activities/ information & supporting IT Document plans for future beyond budget year

15. A View of GovernanceEA, SDLC, and CPIC Relationship Information Technology Investment Portfolio System (ITIPS) CPIC SDLC System Development Lifecycle Capital Planning & Investment Control EA Repository/ Tool Popkin SA EA

16. Major Quarterly Milestones: Provide disaster IT support to disaster field facilities within 24 hrs Meet customer requirements to web-enable access to applicant data Internal FEMA / Internet Activate Super NPSC Support the establishment of a DHS Geospatial Management Office Support the FEMA program offices- GIS requirements Priority 2:Disaster Response and Recovery

17. EMERGENCY COMMUNICATIONS Telecommunications technologies to support FEMA’s all-hazards mission

18. FEMA uses a variety of communications services and systems to support activity in several interrelated but separate functional areas: Day-to-day information system requirements such as voice, video, data, E-mail, Internet access, and National Emergency Management Information System (NEMIS) Pre-disaster communications capabilities for Federal, State, and local emergency management personnel in mitigation and preparation efforts Telecommunications during and immediately following a disaster to perform preliminary damage assessment and resource requirements analysis Emergency Communications

19. Telecommunications to support consequence management activities such as Disaster Field Office (DFO) setup, restoration coordination, and resource prioritization Emergency command and control functions for special events Emergency Communications

20. FEMA INTEGRATED NETWORK Facilities linked with high-speed terrestrial circuits that provide integrated voice, data, and video network service Routers connect FEMA facilities and provide access to the internet Private Branch Exchange (PBX) systems provide voice capability through FEMA’s Integrated Network, Public Network, and Federal Telephone System (FTS) Disaster Field Offices are quickly added to architecture to provide a robust field operating environment Pre-Crisis Systems

21. FEMA’sWideAreaNetwork Pacific Area Office Puerto Rico National Processing Service Center Region X Bothell Region IXOakland Region II New York Albany Region VIII Denver DS3 Caribbean Area Office Region VII Kansas Region III Philadelphia Maryland National Processing Service Center Territorial Logistics Center Region V Chicago Flood Insurance Admin.- Lanham MERS MATTS National Emergency Training Center DS3 DS3 Atlanta Closeout Center Jessup DS3 Thomasville Hyattsville Texas National Processing Service Center FEMA Map Assistance Center Dewberry & Davis Hub 2 Hub 1 Region VI Denton DS3 DS3 Center for Disease Control National Flood Map Distribution Center- Elkridge Headquarters FEMA Operations Center Maynard Federal Support Center- Olney DS3 Virginia National Processing Service Center Flood Insurance Agency- Rockville Boston Baltimore Contractor National Disaster Medical Systems DS3 Disaster Field Offices “DHS Gateway”

22. FEMA NATIONAL WARNING SYSTEM (NAWAS) NAWAS is a civil defense and day-to-day emergency warning response and coordination system 24-hour voice only hotline system that provides capability to warn Federal, State, and local governments of impending disasters NAWAS circuits are controlled by two warning centers; a primary and an alternate Warning points (nodes) are interconnected with leased, non-switched terrestrial voice circuits Approximately 2,200 warning points Pre-Crisis Systems

23. NAWAS ALASKA HAWAII Warning Centers FEMA Regional Centers ANWC THOMASVILLE, GA State Warning Points Main Lines - WC’s /Regions Region to State WP Lines State/Local WP Lines

24. FEMA NATIONAL RADIO SYSTEM (FNARS) Voice and data High Frequency (HF) radio system Links State Emergency Operations Centers and FEMA Sites Interfaces with a wide variety of other Federal and civilian HF radio systems Common radio frequencies used to support emergency situations Consists of more than 120 fixed, mobile, and transportable HF radio stations Supports Emergency Alerting System (EAS) primary entry points Radio Amateur Civil Emergency Services (RACES) provides emergency communications at State and local facilities Currently more than 500,000 Amateur Radio operators in the U.S. Pre-Crisis Systems

25. FNARS

26. KuBAND SATELLITE FEMA maintains two (2) KuBand satellite earth stations for use as entry points for mobile KuBand satellite elements Provides access to FEMA Integrated Network via satellite Provides backup to FEMA terrestrial circuits SkyCell SYSTEM Provides backup voice dial-tone and radio dispatch capability to key facilities Provides satellite-based emergency command and control for special events Pre-Crisis Systems

27. Emergency Response Teams deploy to affected area to coordinate Federal consequence management effort Cellular, Paging, & PCS KuBand Satellite - 6 Mobile Elements MSAT Technology (SkyCell) with Radio Dispatch INMARSAT Land Mobile Radio Low Earth Orbit (ORBCOMM) High Frequency Radio Crisis Systems

28. Disaster Field Office (DFO) is setup as a temporary facility to support field aspects of consequence management (communications, logistics, mass care, food, energy, transportation, energy, etc.). Temporary nodes of FEMA Integrated Voice and Data Network Interface to FEMA Network provided by terrestrial circuits or KuBand satellite Wireless Office Concept Micro-Cellular Phone System Wireless LAN LOS and Laser systems for campus environment Crisis Systems

29. Major Quarterly Milestones: Design, develop, test, implement and enhance enterprise applications and program centric solutions E-Grants Community Information Systems, Map Service Center, NFIP Modernization NDMS, Cadre Management System, Incident Management Rental resources, automated flood mapping NFIRS,SIMLAB, Admission System E-gov initiatives (e.g. Disaster Management, Geospatial One-Stop, e-Grants) Support National Security Applications Priority 3:OtherMission Applications Support

30. Core Financials ITSD Service Platform Supports Functional Plug-In Modules Treasury HHS State and Local New Applications Generic Financial Services Fire Management Grants Mitigation Emergency Coordination Financial Mgmt Support Individual Assistance Hazard Mitigation Program (NEMIS) Grants Program(NEMIS) (NEMIS) (NEMIS) Fire Grants (AFG) - Public Assistance Program (NEMIS) e FEMA/ DHS WEB Interface Servers & Application DMZ Services Integrated NEMIS Database Messaging and Notification Integrated Security and Access Control (NACS, FAMS, Authorization n, Authentication) Imaging -- Data Warehouse — Reports — Audit Records — Historical Repository – Office Automation FEMA/DHS LAN/WAN / Remote Access / VPN’s / email Operations & Maintenance/ Project Mgt / CM / Engineering Standards

31. Modular Construction of Core Mission Systems Common Platform for Mission Systems Functional Plug-n-Play Modules Scalable Reusable Components Interoperable Flexible Standards-based Integrated with Department of Homeland Security Enterprise Applications and Infrastructure Capabilities as well as Federal e-Gov Initiatives Mission Systems Support

32. Training – eLearning and Classroom Project Management Institute (PMI) Certified Contracting Officers Technical Representative (COTR) Certified International Configuration Manager (CICM) Certified International Software Configuration Manager (CISCM) Certified Information System Security Professional (CISSP) Institutionalizing Processes FEMA Implementation of DHS Standard Processes Capital Planning & Investment Control (CPIC) Full System Development Life Cycle (SDLC) This Disciplined & Systematic Approach Carries into the Modular Construction of Core Mission Systems Professional Development & Certification

33. Program Is Executable Mapping and Analysis Center (MAC) Operations Schedule Performance Metrics G Contractor: Michael Baker Jr., Inc. / Indus Corp Y PM: Bill Prusch PO: Andrew Douglas / Ed Corvi Key issues/risks R Y Budget • Retention of FEMA ITSD funding • Transformation to GSC pending stand-up of GMO with budget for FY04 and beyond No or reduced FEMA funding would impact Disaster Response Support Security Plan Complete, Risk Assessment in process. FEMA Consolidated Program Review 1-15-2003

34. Joint Regional Information Exchange System (JRIES) is the secure collaborative system used by the Department of Homeland Security Operations Center (HSOC) to collect and disseminate information between DHS and Federal, State, and local agencies involved in the combating terrorism mission. JRIES is: Focused on information exchange and real time collaboration between Federal, State, and municipal authorities. Includes information analysis tools and capabilities to support distributed collaborative analysis and reporting across Intelligence, Federal, State, and Local Law Enforcement Meets all applicable security requirements and has achieved system accreditation by the Intelligence Community Currently deployed to over 90 federal, state and local entities with many more awaiting connectivity. Joint Regional Information Exchange System (JRIES)

35. The Department of Homeland Security Information Sharing Network (DHS INFO) is a cross-agency, cross-sector partnership that facilitates unclassified real-time information sharing. DHS INFO partners include FEMA and the FBI, members include national, regional, state, local and tribal strategic contacts in both the public and private sector. Includes an electronic repository of 24-7 point of contact information for all members, their agencies/organizations and their assets. An alert and notification system which uses existing communication devices including standard and mobile phones, e-mail to computers and wireless devices, and pagers resulting in an "always-on" environment. A publicly available Information / Intelligence Collection Capability supported by FBI HQ, 56 Field Offices and 84 JTTFs. DHS INFO

36. Integrate people, processes and technology to facilitate up & down stream Information Sharing, Alert & Notification (Unclassified): Cross agency (federal, state, local, tribal); Cross sector (public & private); Cross discipline (law enforcement, first responders, medical and military). Create an electronic conduit for information and intelligence gathering and dissemination. Create - 24/7 Electronic Repository of key contacts for local, regional and national use. Pilot Goals

37. Information / Intelligence Collection Federal Bureau of Investigation Tips Program Department of Homeland Security Operations Center Terrorist ThreatIntegration Center LEO JRIES FBI Tips Unit DHS Tips Monitor NJTTFs DHS INFOWebsites Tips Submitted by General Public or DHS INFO Member Operations – Complaint information can be addressed by FBI/JTTFs/Nationally via LEO. Intelligence – Information flows to DHS, TTIC and FBI Tips unit simultaneously via JRIES Universal Tips Report Number will permit tracking through Operations and Intelligence flow routes.

38. Pilot Impact Seattle Indianapolis Atlanta Dallas DHS INFO Pilot Impact = 35% of total US Population

39. Major Quarterly Milestones: Certification and Accreditation of 33% of FEMA Systems Conduct Host/Network Intrusion Detection of all FEMA systems Firewall- upgrade and evaluate to retain 99.8 % availability 100% vulnerability assessment and penetration testing for all mission critical and financial systems Cyber Security Awareness training with 100% participation Priority 4:Cyber Security

40. Major Quarterly Milestones: Develop and promulgate a system development life-cycle process Digitalize remaining Northridge earthquake records Complete FY2004 IT strategic plan Complete FY2005-FY2007 IT strategic plan Priority 5:IT Management

42. Congressional mandate to archive key agency documents by digitization to optical disks, including related activities. Supports FEMA mission by providing quick and ready access to vital information to protect the rights and interest of FEMA and the citizens served by FEMA. Provides web based information sharing capability that enables users regardless of location to access and retrieve information. Provides vital records backup of critical agency files stored off-site. Converts legacy paper records to electronic images--scan, index, OCR, develop Oracle database of images and indexes, output in PDF (with hidden text) accessible under Section 508 of the ADA guidelines. Provides Internet-based online review, storage, and retrieval system. Document Digitalization Project

43. FEMA’s National Emergency Information Management System (NEMIS) captures data, including mitigation plans from States and local governments, disaster victims for disaster declaration and assistance purposes. Researching solutions to migrate electronic images produced in PDF file format and integrate data captured in NEMIS and other systems in TIFF file format into a FEMA enterprise EDMS/ERKS system that is DoD 5015.2 certified. Document Digitalization Project