InfoGram

April 21, 2005

NOTE: This InfoGram will be distributed weekly to provide members of the Emergency Services Sector with information concerning the protection of their critical infrastructures. For further information, contact the Emergency Management and Response - Information Sharing and Analysis Center (EMR-ISAC) at (301) 447-1325 or by email at emr-isac@fema.dhs.gov.

Domestic Terrorism Threat

Although the nation marked this week the 10th anniversary of the Oklahoma City bombing, the threat of domestic terrorism continues to be overshadowed by the threat from transnational terrorists. This reality is understandable considering what happened on 11 September 2001. Nevertheless, the EMR-ISAC proposes that Emergency Services Sector departments and agencies consider American extremists among the threats to their critical infrastructures. It is easier for home-grown radical fanatics to acquire the skills and materials for separate bombs and vehicle-borne improvised explosive devices (VBIED).

Oklahoma City bomber Timothy McVeigh and the anti-abortion activist Eric Rudolph demonstrated that "lone wolves" can wreak major havoc and cause enormous damage. Additionally, their actions encourage other criminals and inspire copycats that are very difficult to uncover and stop. Because belligerent residents of the United States know it is not complicated to conduct a mass killing, the threat of violence from eco-terrorists, anti-abortion right-wingers, and anti-government revolutionaries continues to threaten the health and safety of citizens and their emergency responders.

The rank and file of the emergency services must also assess what recently happened in Iraq as reported on 19 April by The Washington Post. A fire engine packed with propane tanks encompassed by explosives and driven by two suicide bombers was successfully used as a VBIED. This is another incident where somewhere in the world emergency apparatus, uniforms or equipment was used for terrorist actions. The event should serve as a reminder for all first response personnel to actively guard against the theft or use of emergency vehicles and property for domestic terrorism. It is also necessary to be watchful particularly for uniforms, vehicles, and equipment that have been modified to look genuine or authentic.

Hybrid Vehicle Caution

Automotive safety specialists have begun cautioning about the potential for serious injury to emergency responders from electrical shock at traffic accidents and vehicle fires involving hybrid vehicles. The hybrid vehicles are powered through a combination of gasoline engines and high voltage batteries. The presence of high voltage components creates a possible electrocution hazard (between 300 and 500 volts of electricity) to emergency personnel, especially before they realize the vehicle is a hybrid model.

As vehicle manufacturers continue to introduce new technology, the systems in unlike vehicles operate and function differently. The following are some factors that appear to be standard on all hybrid cars:

• High voltage battery pack storing electricity is located at the rear of the vehicle.
• High voltage cables are orange in color.
• High voltage components are identified and protected by orange plastic shields.

Some manufactures suggest that first responders shut down a hybrid vehicle by putting it in park, turning the motor off, and removing the ignition key. (Some models may not have an ignition key.) When possible have the operator or a trained individual do this if there are any questions or concerns.

Listed below are additional pertinent recommendations acquired by the EMR-ISAC:

• Always assume the vehicle is powered-up despite no engine noises.
• Put vehicle in park, turn ignition off, and remove key to disable the high voltage system.
• Never touch, cut, or open any orange cable or components protected by orange shields.
• Remain a safe distance from vehicle if it is on fire.
• Consider the electrical system unsafe for a full 5 minutes after ignition shut-down.
• Contact local auto dealerships for more information about their hybrid vehicles.

Peer-to-Peer Programs Warning

Peer-to-peer (P2P) file sharing systems provide Internet users with the ability to share files on their computers with up to millions of other people. In doing so, the software makes it possible for people to accidentally share personal files and sensitive data. P2P programs have been found to accommodate easier access to computer systems for theft of critical information. Recent news media reports stated P2P allowed protected government and private sector documents to get into the public domain.

P2P file sharing potentially compromises computer systems. The application of this software creates vulnerabilities that can be exploited by providing a means of introducing malicious code and other illegal material. Therefore, the EMR-ISAC advises that the computer systems and networks of the emergency services not be used for downloading of illegal and/or unauthorized copyrighted content. The operators of the computers and networks of the Emergency Services Sector should be prohibited in writing from utilizing file sharing software.

NIMS-Compliant ICS Training Guidelines

The National Incident Management System (NIMS) Integration Center developed guidelines for Incident Command System (ICS) training providers that will help ensure that the training they offer meets the requirements of NIMS. Since one of the first steps for becoming compliant with NIMS is institutionalizing the use of ICS across the response system, ICS training must be consistent with the concepts, principles, and characteristics of the NIMS ICS training offered by Department of Homeland Security (DHS) training entities along with that of the National Wildfire Coordinating Group.

The NIMS Training Development Guidance outlines the system's ICS concepts and principles, management characteristics, organizations and operations, organizational element titles, and recommendations for a model curriculum. It also provides an evaluation checklist for content that may be used to make sure ICS training meets the "as taught by DHS" standard.

The model NIMS ICS curriculum organizes four levels of training: ICS-100, ICS Introduction; ICS-200, Basic ICS; ICS-300, Intermediate ICS; and ICS-400, Advanced ICS. The training provided by the Emergency Management Institute, National Fire Academy, National Wildfire Coordinating Group, Department of Agriculture, Environmental Protection Agency, and Coast Guard follow this model. Personnel who received ICS training consistent with the DHS standard will not need retraining.

The NIMS-Compliant ISC Training Guidelines can be downloaded from the following link: http://www.fema.gov/pdf/nims/nims_training_development.pdf. For more information send email to NIMS-Integration-Center@dhs.gov or call 202-646-3850.