MASTER SCENARIO EVENTS LIST (MSEL)



MASTER SCENARIO EVENTS LIST (MSEL) | |

|Bridges Out 2008 Inter-Agency COOP Exercise |

| | | | | | |

|Inject Key | |Approximate Timeline | | |

| | | | | | |

|  |Agency Specific Injects | |Registration/Breakfast |7:30 | |

|  |General Injects | |Opening Remarks |8:30 | |

| | | |Exercise Ground Rules |8:40 | |

| | | |Background Exercise Play |8:50 | |

| | | |Major Event #1 Exercise Play |9:00 | |

| | | |Major Event #2 Exercise Play |9:05 | |

| | | |Major Event #3 Exercise Play |9:15 | |

| | | |Major Event #4 Exercise Play |9:30 | |

| | | |Major Event #5 Exercise Play |10:00 | |

| | | |Major Event #6 Exercise Play |10:15 | |

| | | |Major Event #7 Exercise Play |10:45 | |

| | | |Major Event #8 Exercise Play |11:15 | |

| | | |LUNCH |11:30 | |

| | | |Major Event #9 Exercise Play |12:30 | |

| | | |Major Event #10 Exercise Play |12:45 | |

| | | |Major Event #11 Exercise Play |13:00 | |

| | | |Major Event #12 Exercise Play |13:45 | |

| | | |Major Event #13 Exercise Play |14:00 | |

| | | |Major Event #14 Exercise Play |14:30 | |

| | | |Major Event #15 Exercise Play |14:40 | |

| | | |Major Event #16 Exercise Play |15:00 | |

| | | |BREAK/Hotwash Preparation |15:15 | |

| | | |Player Hotwash |15:30 | |

| | | |Closing Remarks |16:25 | |

| | | |ENDEX |16:30 | |

|Background | | | | | |

|Actual Time: |8:50 | | | | |

|Simulated Time: |Prior to May 21, 2008 | | | |

|Wendy Chime: Good evening, I’m Wendy Chime and welcome to channel 57 Action News. |

| |

|Today, a joint message was issued by the Federal Bureau of Investigation and the Department of Homeland Security to all Critical Infrastructure owners and government Departments and |

|Agencies that warns of terrorist "chatter." This chatter contained talk about targeting attacks on cities with bridges and rail traffic. |

| |

|Locally, the FBI-Pittsburgh Division issued more a more specific warning to all government facilities, business owners, and residents of the Western PA region of possible attacks using |

|dirty bombs involving several modes of transportation (maritime, air, vehicle, and rail). |

| |

|As a result of these warnings, DHS raised the Threat Level to High, or Orange for the Western Pennsylvania Region. This increase means that all Departments and Agencies should: |

|- increase surveillance of critical locations; |

|- coordinate emergency plans as appropriate with nearby jurisdictions; |

|- assess whether the precise characteristics of the threat require the further refinement of preplanned Protective Measures; and |

|- implement, as appropriate, contingency and emergency response plans. |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

|Inject # |Time |Message |Points of Discussion |Function Tested |

|B.1G |  |An employee calls the Security Office and is worried about the threats. |• How will you deal with staff concerns? |• Human Capital |

| | |He/she wants to know what that means to him/her as an employee of the Agency.|• How will you notify staff of the ongoing situation? |• Communications |

| | | |• How do you relay what staff can expect from the Agency? | |

|B.2G |  |Agency Director requests meeting with all Division Directors to discuss |• What information to you relay to staff? |• Communications |

| | |developing Agency-wide notifications. |• What protective measures are being taken? | |

| | | |• Who are you communicating with internally and externally? | |

|B.3G |  |Leadership wants to ensure that contingency procedures are ready to be |• Will you continue to work out of your normal operating facility? |• Continuity Facilities |

| | |executed & wants to discuss "what-if" scenarios. |• If not, is your Continuity facility ready to be occupied? | |

| | | |• Will you restrict access to either facility to essential personnel? | |

| | | |• What information is needed for this discussion? | |

| | | |• Should other agencies or counterparts be contacted? | |

|B.4G |  |A local reporter calls to ask how your agency is reacting to the news of the |• Who takes the call? |• Media Relations |

| | |impending threat. |• What information do you provide? | |

|Major Event #1 | | | | |

|Actual Time: |9:00 | | | | |

|Simulated Time: |May 21, 2008; 9:00 AM | | | |

|Andrew Husky: Good Morning, this is Andrew Husky with breaking news from Channel 57. |

| |

|It is 9:00 AM on Wednesday, May 21, 2008, and an explosion has just occurred on the south side of the Liberty Bridge. A portion of the bridge has apparently collapsed on a commercial |

|train that was traveling underneath the bridge. Initial reports indicate that the train’s engine had passed the bridge at the time of collapse; however some of the cargo cars have been |

|affected. |

| |

|Upon collapse, smoke and fumes could be seen billowing from the wreckage. The train carries chemicals that could be potentially harmful if inhaled; however no word as of yet regarding |

|the contents or the toxicity of the cargo. |

| |

|Weather reports indicate that winds are currently blowing in a north to northwest direction and smoke and fumes are moving toward the downtown area. The explosion has caused closures and|

|major traffic delays near the tunnel and bridges on Interstates 579, 376, and 279. |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

|Inject # |Time |Message |Points of Discussion |Function Tested |

|1.1G |  |An employee calls Human Resources to report that another employee is not in |• How will you account for the employee? |• Human Capital |

| | |the office and is currently unaccounted for. |• What do you tell other employees about your accountability process? |• Accountability |

| | | | |• Communications |

|1.2G |  |Employees are attempting to leave the building and enter into potentially |• What is the policy for releasing people at this time? |• OEP |

| | |hazardous area. |• Is it safe for this employee to leave? |• Security |

| | | |• Who has authority to release employees? | |

| | | |• If released, how will future accountability be handled? | |

|1.3G |  |Employees sitting near windows are concerned about the potentially harmful |• How do you address this employee's concerns? |• SIP |

| | |smoke/fumes that they see. |• How do you reassure staff that they are not in danger? | |

| | | |• What actions do you take? | |

| | | |• Who do you notify? | |

|1.4G |  |(some time later) Pittsburgh Hospital calls notifying the Agency that an |• How do you verify that the person is an employee? |• Human Capital |

| | |individual wearing the Agency's badge is injured/deceased (note: this |• What do you do to notify family members? |• Orders of Succession |

| | |employee could be critical to COOP). |• What is the succession plan to this person? | |

|1.5G |  |Family member of an employee calls the Agency because they cannot reach their|• What information can you relay to this person? |• Human Capital |

| | |relative (or wants the relative to return home immediately). | |• Family Support Plan |

|1.6G |  |An employee stuck in traffic calls the Agency and wants to know if they |• What is the protocol for facility access? |• OEP |

| | |should continue with their commute, or turn around and head home. |• Could these employees unknowingly bring in hazardous material on their clothing? |• Security |

| | | |• Should these employees return to their homes? |• Communications |

| | | |• If so, how do you notify them? | |

|1.7G |  |A Senior decision maker in the Agency calls to report that he/she is stuck in|• How will you continue operations without this employee? |• Delegation of Authority |

| | |traffic and is experiencing poor cell phone reception and cannot be counted |• What are the orders of succession to backfill the position? |• Orders of Succession |

| | |on for consultation. |• How will authority be delegated? | |

|1.8G |  |(toward the end of SIP phase) Employees are getting restless and want to know|• What is the plan for releasing employees and visitors? |• OEP |

| | |when they can leave | |• SIP |

| | | | |• Communications |

|1.9G |  |(for multi-tenant buildings) Employees notice staff from another Agency are |• What is the plan for releasing employees and visitors? |• OEP |

| | |leaving the building and want to know why they cannot leave. | |• SIP |

|1.10G |  |(for agencies not yet affected) Headquarters calls to obtain a status update|• What actions are being taken? |• OEP |

| | |regarding the current situation and what the agency is doing in response to | |• Communications |

| | |the explosion. | | |

|1.11G |  |Leadership convenes a meeting to discuss the impacts of the situation and the|• What information can you provide to Leadership at this time? |• COOP Plan |

| | |potential next steps to ensure the safety of employees. |• Is this a shelter-in-place situation? | |

| | | |• Should actions be taken to COOP? | |

| | | |• Should any action be taken at all at this point? | |

| | | |• Can employees be forced to stay or go? | |

|Major Event #2 | | | | |

|Actual Time: |9:05 | | | | |

|Simulated Time: |May 21, 2008; 9:05 AM | | | |

|Andrew Husky: This is Andrew Husky again with channel 57 breaking news. |

| |

|A train that was traveling below the Liberty Bridge has derailed. |

| |

|An explosion has triggered the collapse of the south side of the Liberty Bridge, and caused debris to fall on a commercial rail train that travels below the bridge. The train separated |

|in two with its engine and a few cargo cars surviving the collapse, but derailed near the Hot Metal Bridge. Chemicals that were being transported on the train have spilled into the area.|

|The type of chemical spilled is currently unknown. |

| |

| |

| |

| |

| |

| |

| |

| |

|LEO Message (5 minutes later): | | | | |

|All government agencies and business owners near the downtown area and the Hot Metal Bridge are advised to activate Occupant Emergency Plans (OEP), shelter in place (SIP) plans, and |

|initiate employee accountability procedures. More information will be provided when it is known. |

| |

| |

|Inject # |Time |Message |Points of Discussion |Function Tested |

|2.1G |  |An employee calls Human Resources to report that another employee is not in |• How will you account for the employee? |• Human Capital |

| | |the office and is currently unaccounted for. |• What do you tell other employees about your accountability process? |• Accountability |

| | | | |• Communications |

|2.2G |  |Employees are attempting to leave the building and enter into potentially |• What is the policy for releasing people at this time? |• OEP |

| | |hazardous area. |• Is it safe for this employee to leave? |• Security |

| | | |• Who has authority to release employees? | |

| | | |• If released, how will future accountability be handled? | |

|2.3G |  |Employees sitting near windows are concerned about the potentially harmful |• How do you address this employee's concerns? |• SIP |

| | |smoke/fumes that they see. |• How do you reassure staff that they are not in danger? | |

| | | |• What actions do you take? | |

| | | |• Who do you notify? | |

|2.4G |  |(some time later) Pittsburgh Hospital calls notifying the Agency that an |• How do you verify that the person is an employee? |• Human Capital |

| | |individual wearing the Agency's badge is injured/deceased (note: this |• What do you do to notify family members? |• Orders of Succession |

| | |employee could be critical to COOP). |• What is the succession plan to this person? | |

|2.5G |  |Family member of an employee calls the Agency because they cannot reach their|• What information can you relay to this person? |• Human Capital |

| | |relative (or wants the relative to return home immediately). | |• Family Support Plan |

|2.6G |  |An employee stuck in traffic calls the Agency and wants to know if they |• What is the protocol for facility access? |• OEP |

| | |should continue with their commute, or turn around and head home. |• Could these employees unknowingly bring in hazardous material on their clothing? |• Security |

| | | |• Should these employees return to their homes? |• Communications |

| | | |• If so, how do you notify them? | |

|2.7G |  |A Senior decision maker in the Agency calls to report that he/she is stuck in|• How will you continue operations without this employee? |• Delegation of Authority |

| | |traffic and is experiencing poor cell phone reception and cannot be counted |• What are the orders of succession to backfill the position? |• Orders of Succession |

| | |on for consultation. |• How will authority be delegated? | |

|2.8G |  |(toward the end of SIP phase) Employees are getting restless and want to know|• What is the plan for releasing employees and visitors? |• OEP |

| | |when they can leave | |• SIP |

| | | | |• Communications |

|2.9G |  |(for multi-tenant buildings) Employees notice staff from another Agency are |• What is the plan for releasing employees and visitors? |• OEP |

| | |leaving the building and want to know why they cannot leave. | |• SIP |

|2.10G |  |(for agencies not yet affected) Headquarters calls to obtain a status update|• What actions are being taken? |• OEP |

| | |regarding the current situation and what the agency is doing in response to | |• Communications |

| | |the explosion. | | |

|2.11G |  |Leadership convenes a meeting to discuss the impacts of the situation and the|• What information can you provide to Leadership at this time? |• COOP Plan |

| | |potential next steps to ensure the safety of employees. |• Is this a shelter-in-place situation? | |

| | | |• Should actions be taken to COOP? | |

| | | |• Should any action be taken at all at this point? | |

| | | |• Can employees be forced to stay or go? | |

|Major Event #3 | | | | |

|Actual Time: |9:15 | | | | |

|Simulated Time: |May 21, 2008; 9:05 AM | | | |

|Andrew Husky: This is Andrew Husky with another breaking news story. |

| |

|Only fifteen minutes following the explosion of the Liberty Bridge, a second explosion was reported at the Pittsburgh International Airport complex. The explosion occurred near the 911th|

|Air Reserve cargo storage facility. Incidentally, the cargo in the facility caught fire and triggered additional explosions and the release of potentially toxic material. |

| |

|The wind is blowing the smoke and fumes toward the main TSA facility. Inbound vehicular access routes to the airport on Routes 60 and 576 have been closed. |

| |

| |

| |

| |

| |

| |

| |

| |

| |

|LEO Message (5 minutes later): | | | | |

|All government agencies and business owners located on the Airport complex are advised to activate Occupant Emergency Plans (OEP), shelter in place (SIP) plans, and initiate employee |

|accountability procedures. More information will be provided when it is known. |

| |

| |

|Inject # |Time |Message |Points of Discussion |Function Tested |

|3.1G |  |An employee calls Human Resources to report that another employee is not in |• How will you account for the employee? |• Human Capital |

| | |the office and is currently unaccounted for. |• What do you tell other employees about your accountability process? |• Accountability |

| | | | |• Communications |

|3.2G |  |Employees are attempting to leave the building and enter into potentially |• What is the policy for releasing people at this time? |• OEP |

| | |hazardous area. |• Is it safe for this employee to leave? |• Security |

| | | |• Who has authority to release employees? | |

| | | |• If released, how will future accountability be handled? | |

|3.3G |  |Employees sitting near windows are concerned about the potentially harmful |• How do you address this employee's concerns? |• SIP |

| | |smoke/fumes that they see. |• How do you reassure staff that they are not in danger? | |

| | | |• What actions do you take? | |

| | | |• Who do you notify? | |

|3.4G |  |(some time later) Pittsburgh Hospital calls notifying the Agency that an |• How do you verify that the person is an employee? |• Human Capital |

| | |individual wearing the Agency's badge is injured/deceased (note: this |• What do you do to notify family members? |• Orders of Succession |

| | |employee could be critical to COOP). |• What is the succession plan to this person? | |

|3.5G |  |Family member of an employee calls the Agency because they cannot reach their|• What information can you relay to this person? |• Human Capital |

| | |relative (or wants the relative to return home immediately). | |• Family Support Plan |

|3.6G |  |An employee stuck in traffic calls the Agency and wants to know if they |• What is the protocol for facility access? |• OEP |

| | |should continue with their commute, or turn around and head home. |• Could these employees unknowingly bring in hazardous material on their clothing? |• Security |

| | | |• Should these employees return to their homes? |• Communications |

| | | |• If so, how do you notify them? | |

|3.7G |  |A Senior decision maker in the Agency calls to report that he/she is stuck in|• How will you continue operations without this employee? |• Delegation of Authority |

| | |traffic and is experiencing poor cell phone reception and cannot be counted |• What are the orders of succession to backfill the position? |• Orders of Succession |

| | |on for consultation. |• How will authority be delegated? | |

|3.8G |  |(toward the end of SIP phase) Employees are getting restless and want to know|• What is the plan for releasing employees and visitors? |• OEP |

| | |when they can leave | |• SIP |

| | | | |• Communications |

|3.9G |  |(for multi-tenant buildings) Employees notice staff from another Agency are |• What is the plan for releasing employees and visitors? |• OEP |

| | |leaving the building and want to know why they cannot leave. | |• SIP |

|3.10G |  |(for agencies not yet affected) Headquarters calls to obtain a status update|• What actions are being taken? |• OEP |

| | |regarding the current situation and what the agency is doing in response to | |• Communications |

| | |the explosion. | | |

|3.11G |  |Leadership convenes a meeting to discuss the impacts of the situation and the|• What information can you provide to Leadership at this time? |• COOP Plan |

| | |potential next steps to ensure the safety of employees. |• Is this a shelter-in-place situation? | |

| | | |• Should actions be taken to COOP? | |

| | | |• Should any action be taken at all at this point? | |

| | | |• Can employees be forced to stay or go? | |

|Major Event #4 | | | | |

|Actual Time: |9:30 | | | | |

|Simulated Time: |May 21, 2008; 9:30 AM | | | |

|Bob Mustard: This is Bob Mustard bringing you the latest in government and politics. |

| |

|Due to the explosions that occurred just 30 minutes ago this morning, and intercepted terrorist chatter, the Department of Homeland Security has increased the Threat Level to Severe, or |

|Red for the Western Pennsylvania Region. |

| |

|Additionally, DHS has raised the National Threat Level to High, or Orange. Secretary Chertoff has stated that federal assets and resources are available to be deployed to help with the |

|immediate response to these attacks. |

| |

| |

| |

| |

| |

| |

| |

|LEO Message (5 minutes later): | | | | |

|DHS has raised the Threat Level to Severe, or Red. With this increase, departments and agencies should consider the following: |

|- Increasing or redirecting personnel to address critical emergency needs; |

|- Assigning emergency response personnel and pre-positioning and mobilizing specially trained teams or resources; |

|- Monitoring, redirecting, or constraining transportation systems; and |

|- Closing public and government facilities. |

| |

| |

| |

| |

| |

|Inject # |Time |Message |Points of Discussion |Function Tested |

|4.1G |  |Leadership wants to know how the increase in threat level to red will affect |• Do you have additional Emergency Response responsibilities? |• OEP |

| | |agency operations. |• What steps do you need to take to ensure the safety and security of your | |

| | | |employees and facility? | |

|4.2G |  |An employee is a volunteer firefighter and wants to leave to help with the |• What is the policy for releasing employees? Is it different for persons who are |• Human Capital |

| | |response. |first responders outside of the agency? | |

|4.3G |  |Local police have set up checkpoints to regulate movement around the city. |• How has this affected your people's ability to move around? |• OEP |

| | | |• Has this affected your decision making about releasing people? |• Communications |

| | | |• How do you communicate this to your employees? | |

|4.4G |  |An employee mentions that he thinks that another agency housed in your |• How do you verify this information? |• OEP |

| | |building is sending all of its people home. |• Are plans coordinated with other agencies or tenants in your building? |• SIP |

|4.5G |  |Employees are demanding to know if the substance outside is harmful. If so, |• How do you keep people who are sheltering in place calm? |• SIP |

| | |they want to know if they are at risk by remaining in the building. |• What reassurance can you give people that they are not in further danger by | |

| | | |sheltering in place? | |

|4.6G |  |Leadership asks how security will be handled at the continuity facility. |• Do you have a plan in place? |• Continuity Facilities |

| | | |• Do you need to notify anyone? | |

|4.7G |  |What steps do you need to take to increase or redirect personnel to address |• What resources do you have to address critical emergency needs? |• Response / COOP |

| | |critical emergency needs in accordance with DHS Threat Condition Severe |• Are personnel available to response to internal emergencies? | |

| | |(Red)? | | |

|4.8G |  |What do you need to do regarding assigning emergency response personnel and |• Does your agency have assets to preposition? |• Response / COOP |

| | |pre-positioning and mobilizing specially trained teams or resources in |• Does your agency have emergency response personnel responsible for responding to | |

| | |accordance with DHS Threat Condition Severe (Red)? |this emergency? | |

| | | |• Is it an appropriate time to start mobilizing assets and resources? | |

|4.9G |  |What measures do you need to implement monitor, redirect, or constrain |• Does your agency have any responsibilities regarding transportation system? |• Response / COOP |

| | |transportation systems in accordance with DHS Threat Condition Severe (Red)? |• Have you implemented procedures to increase monitoring capabilities, and/or | |

| | | |redirect or constrain transportation systems? | |

|4.10G |  |What considerations need to be made regarding closing any public and |• Does your agency have jurisdiction over facilities other than its own facilities |• Response / COOP |

| | |government facilities within your agency's purview in accordance with DHS |(i.e. Parks, Open Public Areas) | |

| | |Threat Condition Severe (Red)? |• Have you implemented a plan to close the facilities and ensure all staff and | |

| | | |visitors remain safe? | |

|Major Event #5 | | | | |

|Actual Time: |10:00 | | | | |

|Simulated Time: |May 21, 2008; 10:00 AM | | | |

|Andrew Husky: Good morning, this is Andrew Husky with Channel 57 Action News. |

| |

|Just one hour after the initial explosion at Liberty Bridge, the City is in a state of emergency. Amidst all the chaos, traffic has been severely impacted. Here with a report on the |

|current traffic situation is Melanie Designer. Melanie? |

| |

|Melanie Designer: Thanks Andrew. Traffic in the greater Pittsburgh area is severely delayed. The explosions have crippled effective evacuation routes out of the city. Coupled with |

|people trying to exit the area, the increased Threat Level has added another layer of complexity to this already stressful environment. |

| |

|The Pennsylvania Department of Transportation, the City of Pittsburgh, and the Pennsylvania State Police have temporarily closed the following bridges to all traffic pending investigation|

|for suspicious materials: |

| |

|Along the Monongahela River, all foot and vehicle traffic from the Rankin Bridge to the Fort Pitt Bridge; and all rail traffic from the Union RR Carrie Furnace Hot Metal Bridge to the |

|Panhandle RR Bridge. |

| |

|Along the Allegheny River, all foot and vehicle traffic from the Ft. Duquesne Bridge to Highland Park Bridge; and all rail traffic on the Fort Wayne Railroad Bridge and the Herr's Island |

|RR Bridge. |

| |

|Along the Ohio River, all foot and vehicle traffic from the West End Bridge to the Sewickley Bridge; and all rail traffic on the OCRR Bridge at Brunot Island. |

| |

|Additionally, the U.S. Coast Guard has closed the Port of Pittsburgh to all vessel traffic. |

| |

|City and State officials are doing their best to keep people out of harms way, but with all these closures, it may be quite a while before the roads open back up. Andrew? |

| |

|Andrew Husky: Thanks Melanie for the update. The bottom line, I guess, is to avoid any road leading towards a bridge or tunnel. Stay tuned for up-to-the-minute breaking news. |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

|LEO Message (5 minutes later): | | | | |

|All rail, foot, and vehicle bridges in the greater Pittsburgh area and the Port of Pittsburgh are temporarily closed. |

| |

|LEO Message #2 (10 minutes after ME #5): | | | |

|ALERT – The U.S. Coast Guard reported to the FBI of a possible compromise of Certain Dangerous Cargo (CDC) barges on all three rivers. Be advised to stay away from these barges. If you |

|see suspicious activity on a barge, please contact the FBI. |

| |

| |

|Inject # |Time |Message |Points of Discussion |Function Tested |

|5.1G |  |Managers are fielding calls from employees asking when and where they should |• What is the agency's operational status? |• OEP |

| | |report to work. The managers are requesting guidance from leadership. |• What information are you prepared to release to employees at this time? |• COOP Plan |

|5.2G |  |A reporter calls asking questions about the explosions, the impact to your |• What information are you willing to divulge to the public at this time? |• Media Relations |

| | |agency and how your agency is reacting. |• Have you made your PAO aware of what to say? | |

|5.3G |  |Leadership requests an accountability report for all personnel, contractors, |• How do you immediately account for all employees/visitors given that some |• Accountability |

| | |and expected visitors. |employees have not yet arrived to work? | |

| | | |• How do you account for contractors? | |

|5.4G |  |Employees are demanding to know if the fumes from the explosions are toxic. |• How do you keep people who are sheltering in place calm? |• SIP |

| | |If so, they want to know if they are at risk by remaining in the building. |• What reassurance can you give people that they are not in further danger by |• Communications |

| | | |sheltering in place? | |

|5.5G |  |Nearby businesses are evacuating and employees are starting to get restless. |• What is the plan for releasing employees and visitors? |• SIP |

| | | | |• OEP |

|Major Event #6 | | | | |

|Actual Time: |10:15 | | | | |

|Simulated Time: |May 21, 2008; 10:15 AM | | | |

|Andrew Husky: This is Andrew Husky with another breaking news story. |

| |

|It is 10:15 AM and I have just been handed a note stating that the FBI has reported that a barge carrying diesel fuel exploded on the Allegheny River near another barge carrying Ammonium |

|Nitrate. The explosion occurred near the Westin Hotel. Given the combination of fuel and ammonium nitrate, concerns that the explosion could be a Radiological Dispersal Device (RDD) |

|arise. |

| |

|All military installations in the area have reportedly increased force protection levels. Stay tuned for more details as they arise. |

| |

| |

| |

| |

| |

| |

| |

| |

|Inject # |Time |Message |Points of Discussion |Function Tested |

|6.1G |  |The Mayor has declared a state of emergency. |• How does this affect your agency's operations? |• COOP |

| | | |• Do you now have added responsibilities? | |

| | | |• How will your agency perform these added functions under the current situation? | |

|6.2G |  |An employee is concerned that an office mate is not in the office an may be |• How do you notify employees outside of the building of the current situation? |• Communications |

| | |near the barge explosion. | |• Accountability |

|6.3G |  |(if near the barge explosion) Employees are scared an want to evacuate. |• Do you evacuate or SIP? |• SIP |

| | | |• How do you communicate the decision to employees in a timely manner? |• OEP |

|6.4G |  |(some time later) Employees want to know how they can be assured that the air|• Have you shut down the HVAC system? |• SIP |

| | |is safe inside the building. |• How do you reassure employees that the air inside the building is safe? | |

|6.5G |  |How will your agency react to the increase in military force protection |• Does this increase have an impact on your agency? |• COOP |

| | |levels? |• Will you need support from the military or national guard? | |

|Major Event #7 | | | | |

|Actual Time: |10:45 | | | | |

|Simulated Time: |May 21, 2008; 10:45 AM | | | |

|Andrew Husky: This is Andrew Husky with channel 57 action news. Time now is 10:45 AM. Major events, possibly with terrorist ties, have occurred today. With an update to today’s |

|horrific events, we go to Kelly Frazzle in the field. Kelly? |

| |

|Kelly Frazzle: Thanks Andrew. I’m standing here across the Allegheny River from where the barge explosion occurred. The City of Pittsburgh Hazardous Materials Team and the Allegheny |

|County Radiological Officers, in conjunction with the FBI WMD investigators, have detected radioactive contamination near the Westin Hotel. The explosion caused an initial plume of |

|potentially harmful toxicity which made its way through the downtown area but quickly dispersed. However, as you can see, HAZMAT teams continue to survey the area for potential |

|contamination as the risk of inhaling dangerous, invisible particles still exists. Back to you Andrew. |

| |

|Andrew Husky: Thanks Kelly and be careful. |

| |

|DHS & FBI have issued another joint message stating that terrorist threats to the area remain likely and all residents should be on heightened alert. Information from the chatter |

|intercepted by the FBI has been released and vaguely references plans and coordinated efforts to attack the region over an indeterminate amount of time. |

| |

|In response to this information, the General Services Administration issued a statement that they are closing the Federal Building and all municipal buildings within the downtown general |

|area; to include all tenants in GSA owned and leased space. |

| |

|Additionally, the Pittsburgh Emergency Management Agency and Region 13 advise all residents to evacuate the greater Pittsburgh area; except for essential response personnel. |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

|Inject # |Time |Message |Points of Discussion |Function Tested |

|7.1G |  |Employees are asking where to go and what they are expected to do. |• How do you notify staff of the evacuation order? |• OEP |

| | | |• What information do you relay? |• COOP Plan |

| | | |• Do employees report to the facility now, or wait until tomorrow? |• Continuity Facility |

| | | |• Can essential functions be performed from home or suspended until the following | |

| | | |day? | |

| | | |• How long does it take for the continuity facility to become active? | |

| | | |• Should employees be reporting status? | |

|7.2G |  |Employees are hesitant to exit the building and travel through the city. |• What do you tell employees once they are released? |• Communications |

|7.3G |  |Web master is requesting information to place on the website regarding the |• What do you want to say regarding agency operations? |• Communications |

| | |operational status of the Agency. |• Do you put it on the intranet or internet? | |

|7.4G |  |(agencies near the barge explosion) Employees want to know if the air outside|• What do you tell employees? |• Communications |

| | |is safe to breathe. |• Did you contact other agencies to find out what the status of the air quality is?|• SIP |

|7.5G |  |Security at the continuity facility is requesting a list of personnel needing|• Do you have a list of COOP personnel? |• Continuity Facility |

| | |access to the facility. |• Do you have contact information for the continuity facility? | |

|7.6G |  |HR needs a list of employees who can work from home and what type of data |• Do you have a list of employees approved for telework? |• Human Capital |

| | |access they have. |• Is that list easily accessible? |• Communications |

| | | |• Who manages the list? | |

|7.7G |  |An employee is in a major car accident while evacuating and is in serious |• Are you able to contact the family? |• Human Capital |

| | |condition. |• What responsibility does your agency have? |• Family Support Plan |

| | | |• Who is next in line to take over this person's responsibilities? |• Communications |

|7.8G |  |How do you keep track of employees who have emergency response duties? |• Is there a plan for the employees, or supervisors, to check in with the agency on|• Accountability |

| | | |a periodic basis? |• Communications |

| | | |• Do they have the necessary contact information, including at the continuity | |

| | | |facility? | |

|7.9G |  |Public Transportation is overloaded. What services, or options, can you |• Is carpooling and option? |• Human Capital |

| | |offer employees that typically rely on public transportation to get to and |• Can you request volunteers to drive people home? |• Communications |

| | |from work? | | |

|7.10G |  |How do you notify employees of the potential traffic jams and bridge outages?|• Will an email distribution suffice? |• Communications |

| | | |• What resource can you point employees to for up to the minute information? | |

|Major Event #8 | | | | |

|Actual Time: |11:15 | | | | |

|Simulated Time: |May 21, 2008; 11:15 AM | | | |

|Andrew Husky: This is Andrew Husky reporting at 11:15 AM with the latest information on today’s events. Mayor Luke Ravenstahl, in conjunction with Governor Rendell and various |

|government agency heads, has scheduled a press conference today at 11:30 AM to discuss the current operational status of the government and essential services. |

| |

| |

| |

| |

|LEO Message (5 minutes later): | | | | |

|All government agencies in the greater Pittsburgh area should consider activating their COOP plans and report continuity facility contact information to the FEB as soon as possible. |

| |

| |

|Inject # |Time |Message |Points of Discussion |Function Tested |

|8.1G |  |An employee reports that she left her thumb drive on her desk in the building.|• Are the vital records backed up at a continuity facility or available in hard |• Vital Records |

| | |The drive contains all of her vital records as well as a file that has |copy? | |

| | |employee Social Security numbers. |• What actions need to be taken with regards to the sensitive information? | |

| | | |• Does your agency have sensitive information that needs to be secured? | |

|8.2G |  |Senior Leadership convenes to decide the long term operational status of the |• What information can you provide at this time? |• COOP Plan |

| | |agency. |• What recommendations can you make? |• Essential Functions |

|8.3G |  |FEMA Operations Center requests operational status of the agency. |• Did you notify FEMA Ops Center of the decision to move operations to the |• Communications |

| | | |continuity facility? |• Continuity Facility |

| | | |• Do key partner agencies have your contact information at the continuity site? | |

|8.4G |  |Leadership requests documentation that all non-COOP associates were notified |• Have you made notifications? |• Communications |

| | |within 1 hour of the decision to activate the COOP plan. |• How can you ensure that everyone received the notification? |• Notification |

| | | |• How do you reach persons who have not received the notification? | |

|8.5G |  |At what point do you notify your headquarters, other field offices, and/or |• Do you have a list of offices you need to notify? |• Communications |

| | |your customers of your decision to shut down operations at your primary office|• What key customers do you need to contact? |• Notification |

| | |site? |• What do you tell customers? |• COOP Plan |

|8.6G |  |The media requests to know if anyone is feeling sick or has been exposed to |• How do you determine if anyone has been exposed? |• Media Relations |

| | |potentially harmful materials. |• Are you willing and able to divulge this information at this point? | |

| | | |• What message do you want to put out to the media? | |

|8.7G |  |HQ call: How is your office handling the press? Has your office adapted a |• Questions in message. |• Media Relations |

| | |press policy for the situation? How is your office interfacing with the FEMA | | |

| | |and Principle Federal Official's press offices? Washington wants to know if | | |

| | |your office has been talking to anyone in the press. D.C. doesn't want any | | |

| | |VIPs to be surprised. | | |

|8.8G |  |Have all of your employees visited your COOP site and are credentialed for |• Have you conducted exercises with all appropriate staff? |• TT&E |

| | |access? |• Will staff be familiar with the site? |• Continuity Facility |

| | | |• How do you ensure that employees without proper credentials are able to access | |

| | | |the continuity facility? | |

|Major Event #9 | | | | |

|Actual Time: |12:30 | | | | |

|Simulated Time: |May 22, 2008; 8:00 AM | | | |

|Andrew Husky: Good morning Pittsburgh. I’m Andrew Husky reporting to you today, Thursday, May 22, 2008, at 8:00 AM. |

| |

|Yesterday, a series of explosions rocked our city, resulting in city-wide panic and the temporary closure of all bridges. All bridges are now open for use, with the exception of the |

|destroyed Liberty Bridge. Authorities have cleared them of any suspicious materials. Government operations are expected to continue today from secondary locations in the region. |

| |

|Due to the continued threat to the city and surrounding area, the Threat Level remains at Severe, or Red, while the National Threat Level remains at High, or Orange. |

| |

|We now go to our reporter in the field, Kelly Frazzle. Kelly? |

| |

|Kelly Frazzle: Thanks Andrew. I am here outside of the Pittsburgh International Airport where explosions occurred yesterday morning. The initial explosion occurred near the 911th Air |

|Reserve cargo storage facility. We were told that this facility could have potentially held hazardous materials that become airborne upon explosion. We have contacted the 911th Air |

|Reserve and TSA, but have not received information regarding the contents of the facility. |

| |

|Furthermore, the large barge explosion that occurred yesterday morning on the Allegheny River, near the Westin hotel released hazardous material. We know that the explosion occurred |

|while a diesel fuel barge was located near an Ammonium Nitrate barge. As previously reported, this combination is a typical accelerant used in a radiological dispersal device, or RDD. |

|HAZMAT teams have been diligently working to ensure any contamination is contained. With winds swirling around the city, there is a potential for a large radius of contamination. |

|Authorities have not returned our calls to provide clarity on this potentially dangerous situation. Andrew? |

| |

|Andrew Husky: Thank you Kelly. Some frightening things to be aware of. Be safe out there. |

| |

|Please stay tuned to Channel 57 Action News for all your breaking news. |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

|Inject # |Time |Message |Points of Discussion |Function Tested |

|9.1G |  |Some employees are wondering if they are essential and where they should |• How do you respond? Who responds? |• Human Capital |

| | |report to work to ensure they continue to be paid. |• What are the policies for paying non-essential personnel during an emergency? |• COOP Plan |

| | | |How do you relay this information? | |

|9.2G |  |Headquarters asks if you need assistance; such as surge staff or resources. |• Assess your assets to expose any needs for additional support / resources. |• COOP Plan |

|9.3G |  |Contractors want to know if they can continue work or if the contract will be |• What is the policy regarding contractors working during a COOP situation? |• Contracts |

| | |cancelled. | |• COOP Plan |

|9.4G |  |Most of your emergency employees have reported to the continuity facility. |• Who succeeds this person? |• Orders of Succession |

| | |However, your Human Capital officer has not shown up and nobody is able to |• How is the succession made known to leadership and subordinates? |• Delegation of Authority |

| | |make contact with him/her. |• How is authority delegated to another employee? How is it communicated to all | |

| | | |employees? | |

|9.5G |  |The Public Affairs Officer is unable to make it to the continuity facility |• How will employees communicate and work with those who are teleworking or not at|• Orders of Succession |

| | |because his/her vehicle is inoperable, but will be available from home. |the continuity facility? |• Delegation of Authority |

| | | |• Is it necessary to assign someone to act in their place? | |

| | | |• If so, who succeeds this person? | |

| | | |• How is the succession made known to leadership and subordinates? | |

|9.6G |  |HQ requests a staff accountability report. |• Have you been conducting accountability regularly? |• Accountability |

| | | |• How accurate is your information? | |

| | | |• How can you obtain better accountability? | |

|9.7G |  |Some employees are complaining about the parking situation at the continuity |• Is there enough parking on the facility? |• Continuity Facility |

| | |facility. |• Do you have an agreement in place regarding parking? | |

| | | |• Is the information regarding parking communicated to employees reporting to the | |

| | | |facility? | |

|9.8G |  |Some employees are concerned about security at the continuity facility, given |• Are there sufficient security measures in place? |• Continuity Facility |

| | |the events that have occurred. | | |

|9.9G |  |Employees without their own means of transportation are unsure how to relocate|• Does your COOP plan consider persons without their own means of transportation? |• Continuity Facility |

| | |to the ERS and are requesting guidance from their immediate supervisors |• What options are available to these employees? | |

|9.10G |  |An employee left his badge at the primary site and is being denied access to |• How do you ensure the employee is allowed into the facility? |• Continuity Facility |

| | |the ERS. |• Can you issue a temporary or replacement badge? | |

|9.11G |  |Leadership has asked if all Phase I personnel have shown up at the continuity |• Are you requiring employees to sign in? |• Accountability |

| | |facility. |• Are you keeping track of all persons expected to be working? | |

|Major Event #10 | | | | |

|Actual Time: |12:45 | | | | |

|Simulated Time: |May 22, 2008; 8:45 AM | | | |

|Andrew Husky: This is Andrew Husky with Action News 57 with breaking news. |

| |

|Due to the potential contamination of the city and the credible intelligence information gathered by the FBI, City, State, and Federal authorities have determined that all Government |

|facilities, schools, and businesses will be closed; including GSA leased space within Pittsburgh, until further notice. |

| |

| |

| |

| |

| |

| |

|LEO Message (5 minutes later): | | | | |

|Due to the potential hazardous materials contamination in the city and the continued threats to the city, all government primary facilities, schools, and businesses are closed until |

|further notice. |

| |

| |

|Inject # |Time |Message |Points of Discussion |Function Tested |

|10.1G |  |The FEB is holding a teleconference this afternoon to assess government |• Who participates? |• COOP Plan |

| | |status and needs during this event. |• How to prepare? | |

| | | |• What resources do you need, and what can you provide? | |

|10.2G |  |Employees are reporting difficulty logging into the remote network. |• How will this impact your operations? |• Essential Functions |

| | | |• Can functions be performed without access to the remote network? |• Vital Records |

| | | |• Can employees at home perform work without access to vital records/network links?|• IT |

| | | |• Do employees know who to contact in the event of an IT problem? | |

| | | |• How can this issue be resolved when operating from the COOP site? | |

|10.3G |  |Leadership wants to know how Primary Mission Essential Functions will be |• Do you have a prioritization plan in place for bringing functions back online? |• Essential Functions |

| | |brought online and in what order. |• Do employees know what the priorities are? | |

| | | |• How do you communicate this to employees? | |

|10.4G |  |A partner Agency requests information requiring access to vital records. |• Do you have access to your vital records? |• Vital Records |

| | | |• Do your employees have to tools necessary to read/write to vital records | |

| | | |programs/files? | |

|10.5G |  |Additional supplies and equipment are needed at the continuity facility. |• Is the person authorized to make purchases available to do so? |• Continuity Facility |

| | | |• Does the person have an adequate spending limit? | |

| | | |• Does the person have a backup with sufficient purchasing power, in case the | |

| | | |primary is not available? | |

|10.6G |  |Contact 3 external agencies. |• Do you have the contact information of other agencies? |• Communications |

| | | |• Do you have other agency continuity facility contact information? | |

|Major Event #11 | | | | |

|Actual Time: |13:00 | | | | |

|Simulated Time: |May 22, 2008; 9:00 AM | | | |

|Andrew Husky: This is Andrew Husky reporting to you at 9:00 AM. |

| |

|This just in. We have received word from local telephone and wireless companies that phone and wireless lines are temporarily overloaded. It seems that due to the chaotic state of the |

|city and frantic need for information, many people are contacting family, friends, and coworkers at large volume than they systems can handle. This increased activity on the public |

|wireless and land lines has caused circuits to be overloaded in downtown Pittsburgh. It is unknown at this time when operations will be returned to normal. |

| |

| |

| |

| |

| |

| |

| |

|Inject # |Time |Message |Points of Discussion |Function Tested |

|11.1G |  |(Mandatory general inject). Your CIO has reported that due to a power |  |• IT |

| | |surge, your server has crashed. Backup services are being implemented, but | |• Essential functions |

| | |email and internet services are slow. | |• Vital Records |

|11.2G |  |Some employees are feeling claustrophobic and wonder if there is additional |• Is the space at the continuity facility adequate to hold all personnel needed to |• Continuity Facility |

| | |office space for the agency to utilize. |continue essential operations? | |

|11.3G |  |Employees are not sure how to continue to work given the current |• What alternate communications measures are in place? |• Essential Functions |

| | |communication outage. |• How can these be utilized and what functions have priority of use? |• Communications |

| | | |• Do employees have/know how to use GETS, WPS, sat phones, BB pin-to-pin, etc? | |

|11.4G |  |Due to the crashed server, employees are asking how they will access vital |• Are vital records adequately backed up? |• Vital Records |

| | |records. |• Do employees have access to the backup records from the continuity facility? | |

|11.5G |  |The media is requesting an in person interview at your continuity facility. |• Who will be interviewed? |• Media Relations |

| | | |• Does this person know what to say? | |

|11.6G |  |A critical contract must me awarded prior to close of business in 2 days. |• Are you able to award the contract in time? |• Contracts |

| | | |• Will the appropriate contracts personnel be located the continuity facility? |• Vital Records |

|11.7G |  |HR receives a call that an employee has refused to report to the designated |• How do you handle the situation? |• Human Capital |

| | |worksite. |• Does this affect their pay? | |

| | | |• Does the person have someone identified to succeed him/her? | |

|11.8G |  |How will employees be compensated for any additional hours beyond their |• What is the policy for payment during emergency operations? |• Human Capital |

| | |regular work schedule? How will these employees be compensated for evening |• Did you reference OPM guidance? | |

| | |and weekend hours worked? | | |

|11.9G |  |Due to 24 hour continuous operations at the Emergency Relocation Site (ERS);|• Have you made arrangement in advance? |• Continuity Facility |

| | |food and other accommodations need to be provided. |• Is it the agency's responsibility or the employee's? | |

|11.10G |  |Can you perform all PMEFs and MEFs from your continuity facility? Do you |• Are you able to bring all essential functions back online? |• Essential Functions |

| | |need to devolve any operations to another site? Have you been in contact |• Would it be better to transfer some operations to another location? |• Devolution |

| | |with the devolution site? |• Have you contacted your devolution site? | |

|11.11G |  |What national response responsibilities does your agency have? Are you able|• Do you have the resources to respond locally, and throughout the state? |• Devolution |

| | |to perform them or do you have to transfer those responsibilities to another|• Are you required to send employees to the RRCC, if stood up? | |

| | |site? |• Are you required to send employees to the JFO, if stood up? | |

| | | |• Does your devolution plan provide guidance for devolving specific operations to | |

| | | |other agency locations? | |

|11.12G |  |How will the phone and internet outage affect operations? |• Can you still perform essential functions? |• Essential Functions |

| | | |• Can you "wait" out the outage, or do you need to quickly find alternate means of |• Communications |

| | | |communication? | |

| | | |• Can you utilize PIN-to-PIN on BlackBerries? Do you have PINs for all ERG staff | |

| | | |with BlackBerries? | |

|11.13G |  |You do not have communication with your responders in the city. How will |• What additional communication means do you have in place? |• Communications |

| | |you keep in touch with them? | | |

|11.14G |  |How does the phone and internet outage affect your teleworkers? Are they |• Can you still function effectively without the teleworkers? |• Communications |

| | |critical to operations? | |• IT |

|11.15G |  |Employees speculate that the outages are due to another terrorist attack. |• Due to outages, communication means may be limited. What information do you tell|• Human Capital |

| | |How can you confirm or counter this rumor? |employees at the continuity facility regarding the outages? | |

|Major Event #12 | | | | |

|Actual Time: |13:45 | | | | |

|Simulated Time: |May 22, 2008; 9:45 AM | | | |

|Andrew Husky: This is Andrew Husky with Action News, Channel 57. The time is 9:45 AM. |

| |

|The FBI recently held a press conference to provide updates on the events that occurred yesterday. The FBI stated that all explosions have been confirmed to be terrorist attacks on the |

|transportation infrastructure of Western Pennsylvania. They are continuing to monitor chatter, investigate leads, and work with state and local partners to ensure the safety and security |

|of the greater Pittsburgh area. |

| |

|Additionally, they provided the following updates regarding the locations at the heart of the attacks: |

| |

|• Explosions at the Liberty Bridge and the Airport were not "dirty" bombs attacks. Contamination tests were conducted in these areas and the results were negative for hazardous |

|substances. The materials affected in the 911th Air Reserve cargo storage facility did not release hazardous materials into the vicinity. |

| |

|• The chemical spill that resulted from the derailed train has been contained and will undergo cleanup efforts. The buildings in the vicinity of the south side of the Hot Metal Bridge |

|will be closed for 2-3 weeks. |

| |

|• Officials detected Cesium-137 in the vicinity of the barge explosion. Terrorists apparently attempted to explode the Ammonium Nitrate on the barge with diesel fuel to replicate the type|

|of accelerant needed for a Radiological Dispersal Device, or RDD. As a result, the area surrounding the Westin Hotel has been contaminated, but is not believed to be as severe as channel |

|57 initially reported. The area being investigated for hazardous materials includes: (1) East of the Allegheny River: Washington Crossing Bridge (40th St) to 5th Ave to I-279 / I-376 and |

|(2) West of the Allegheny River: Washington Crossing Bridge to Marshall Ave to N Franklin St. The extent of the contamination is not yet known as more conclusive tests are necessary. |

| |

|Stay tuned to Channel 57 for your latest news updates. |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

|Inject # |Time |Message |Points of Discussion |Function Tested |

|12.1G |  |A meeting has been scheduled to brief HQ on the current operational status of |• What will information can you provide? |• COOP Plan |

| | |the agency. |• How do you collect this information? | |

| | | |• Do you have a roster of designated essential personnel and their functions? | |

| | | |• Who will be in charge of providing situational updates? | |

|12.2G |  |The media is requesting an interview with the Agency given the new information|• What information are you willing to provide? |• Media Relations |

| | |from the FBI. |• Is the PAO up to speed on all operations? | |

|12.3G |  |Several employees are currently on TDY status. The closure of the Pittsburgh |• What is the agency policy during a situation like this? |• Vital Records |

| | |International Airport has prevented the employees from being able to return |• Is the manager available to approve the extension? | |

| | |home on their scheduled flights. The employees on TDY status need immediate | | |

| | |travel card limitation increases. | | |

|12.4G |  |Some employees report to the primary facility for daily work. |• Do you have security at the primary facility to prevent people from entering? |• Security |

| | | |• What do you tell employees that show up at the primary facility? |• OEP |

|12.5G |  |HR in Washington requests roster of all employees and status: Working, on |• Are you keeping track of all employees? |• Human Capital |

| | |Admin leave, travel, etc. |• How do you ensure people working from home are captured? |• Accountability |

|Major Event #13 | | | | |

|Actual Time: |14:00 | | | | |

|Simulated Time: |May 22, 2008; 10:00 AM | | | |

|Andrew Husky: This just in. All wireless and telephone circuits have been restored and bandwidth issues are now resolved and available for normal use. |

| |

| |

| |

|Inject # |Time |Message |Points of Discussion |Function Tested |

|13.1G |  |(mandatory general inject) The CIO reports that the primary server is up |  |• IT |

| | |and running. All email and internet services are restored to their normal | |• Essential functions |

| | |operating status. | |• Vital Records |

|13.2G |  |Employees are asking if being "non-essential" means that they will not get |• How do you respond? |• Human Capital |

| | |paid or have to work. |• Who responds? | |

| | | |• Has this been previously discussed with the employees or their union? | |

|13.3G |  |With communications back online, an employee needs to get in touch with |• Do you have contact information for other agency continuity facilities? |• Communications |

| | |another agency at their continuity facility, but does not know how |• If not, how do you obtain the information? | |

|13.4G |  |The media is requesting information on staff accountability. |• Do you know the status of all employees? |• Media Relations |

| | | |• What are you willing to say at this time? | |

| | | |• Is the PAO involved in all meetings? | |

|13.5G |  |The fax machine at the continuity facility is inoperable and won't be |• Can you function without the fax? |• Communications |

| | |repaired for 24 hours |• What alternate methods do you have in place? | |

|13.6G |  |Leadership wants to know if you can go secure from the continuity location. |• Do you have secure capabilities? |• Communications |

| | |Please advise as to what other equipment you have at the facility. Is this |• Are staff with the appropriate clearances readily available at the continuity | |

| | |equipment functional? Was the equipment tested upon arrival? |facility? | |

|13.7G |  |A senior member of the ERG becomes sick and can no longer work. |• What can the agency do at the continuity facility to provide medical services to |• Human Capital |

| | | |this person? |• Orders of Succession |

| | | |• Who takes over the duties of this person? |• Delegations of Authority |

| | | |• How is the succession communicated to all ERG staff? | |

|13.8G |  |The media requests information regarding deceased and sick personnel. |• Who will respond? |• Media Relations |

| | | |• What information do you reveal at this time? | |

| | | |• Has next of kin been notified for any deceased employees before involving the | |

| | | |media? | |

|13.9G |  |USPS wants to know how to handle mail for the agency. |• Do you have a plan to reroute mail to the continuity facility? |• Continuity Facility |

| | | |• Are mail screening measures in place at the continuity facility? | |

|13.10G |  |What measures are in place to run 24/7 operations? |• Do you have Phase II staff identified? |• Continuity Facility |

| | | |• Are these employees available, able, and willing to work from the continuity |• COOP Plan |

| | | |facility? | |

| | | |• Do you have shift change guidance in place? | |

|Major Event #14 | | | | |

|Actual Time: |14:30 | | | | |

|Simulated Time: |May 28, 2008; 5:00 PM | | | |

|Wendy Chime: Good evening, this is Wendy Chime with your Channel 57 Action News. |

| |

|It is 5:00 PM on Wednesday, May 28, 2008. One week after the devastating attacks on the city, FBI and government officials report that a credible threat to the region remains likely. |

|They report that chatter still persists regarding targets in the Western PA region; specifically targeting government facilities and transportation infrastructure. In response to this |

|information, city, state, and federal officials urge that all operations are to continue from secondary locations. |

| |

|We now go to Kelly Frazzle in the field. Kelly? |

| |

|Kelly Frazzle: Thanks Wendy. The third and final explosion last Wednesday occurred on barges on the Allegheny River. This attack has been confirmed to be an RDD attack. The explosion |

|is thought to have affected a 1 mile radius area from the point of origin. This area includes all buildings and infrastructure East of the Allegheny River: 25th St to Kirkpatrick St to |

|I-279 / I-376 and West of the Allegheny River: Allegheny Ave to North Ave to Vinal St. All buildings and infrastructure in this affected zone must be swept for contamination. If it is |

|radiological materials are discovered, the location must be decontaminated prior to use. Federal and Local officials have quarantined the area and are restricting access to all |

|unauthorized personnel while the decontamination effort is ongoing. |

| |

|Wendy, back to you. |

| |

|Wendy Chime: Thank you Kelly. Due to the continued threat, the Department of Homeland Security Threat Level remains at Severe, or Red, for the Western Pennsylvania Region. The National|

|Threat Level remains at High, or Orange. |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

|LEO Message (5 minutes later): | | | | |

|The DHS Threat Level remains at Severe, or Red, for the Western PA region. Intelligence reports suggest the potential for continued attacks to government and transportation facilities. |

|It is recommended that organizations and agencies continue operations from their continuity facilities. |

| |

|The following area of the city has been quarantined due to radiological contamination and must be decontaminated before use. Only authorized HAZMAT personnel will be permitted in this |

|area. East of the Allegheny River: 25th St to Kirkpatrick St to I-279 / I-376 and West of the Allegheny River: Allegheny Ave to North Ave to Vinal St. |

| |

| |

| |

| |

| |

| |

|Inject # |Time |Message |Points of Discussion |Function Tested |

|14.1G |  |An employee injured in the bridge explosion is asking for workers |• How do you handle the request? |• Human Capital |

| | |compensation because he was traveling to work. |• What is the company policy? | |

| | | |• Do you have all the necessary resources at the continuity facility to handle the | |

| | | |request? | |

|14.2G |  |Leadership wants to keep employees informed of the operational status of the |• How will you provide information to all employees? |• Communications |

| | |agency. |• Can you update the website or activate a 1-800 call in number? |• Notification |

|14.3G |  |The IT staff has been working for several days with little sleep and are |• What support can you provide to them to make the work environment a little |• Human Capital |

| | |showing signs of stress and fatigue. |better? |• COOP Plan staffing |

|14.4G |  |The local news network has run a report stating that your agency has been |• How do you respond? |• Media Relations |

| | |inaccessible and non-responsive to the public, and that the public has not |• How do you handle dealing with inaccurate information being disseminated through | |

| | |been receiving services. |the media? | |

| | | |• Does the PAO have the means to quickly address this situation? | |

| | | |• How do you manage expectations of the public during an event? | |

| | | |• What do you share or not share with the public? | |

| | | |• Can the media help you in this situation? | |

|14.5G |  |How are you communicating with customers, other federal agencies, employees, |• Are you keeping all key partners up to date on the operational status of the |• Communications |

| | |local agencies, and partners? |agency? | |

| | | |• Are you communicating with other agencies to ensure continuity of government? | |

| | | |• Are measure being taken to ensure non-essential employees are kept aware of the | |

| | | |status of the agency? | |

|14.6G |  |Office supplies and additional equipment are needed for the ERS. |• Who will collect and place the orders? |• Continuity Facility |

| | | |• Does someone at the continuity facility have adequate purchase power? | |

|14.7G |  |Unable to print at the ERS. |• How do you correct the problem in a timely manner? |• Communications |

| | | | |• IT |

|Major Event #15 | | | | |

|Actual Time: |14:40 | | | | |

|Simulated Time: |May 30, 2008; 5:00 PM | | | |

|Wendy Chime: Good evening, this is Wendy Chime with Channel 57 Action News. Today is Friday, May 30, 2008. |

| |

|A little over one week after the attack, threats to the region still persist. The FBI has stated that terrorist chatter regarding the Western Pennsylvania Region has decreased and the |

|decontamination of the city is ongoing. No new terrorist incidents have been reported, residents and business owners are starting to trickle back into the uncontaminated areas, and |

|things appear to be getting back to normal. However a threat still exists and all residents should be on heightened alert. All agencies and organizations are urged to continue operating|

|from their continuity facilities. |

| |

| |

| |

| |

| |

| |

| |

| |

|LEO Message (5 minutes later): | | | | |

|Due to the recent report by the FBI, all organizations and agencies are encouraged to continue operations from their continuity locations until further notice. |

| |

| |

|Inject # |Time |Message |Points of Discussion |Function Tested |

|15.1G |  |Employees working at the continuity site are complaining about the commute |• What is the policy for reimbursement / hotels? |• Human Capital |

| | |and the increased cost associated with it. They want to know if they can |• What arrangements can you make to accommodate employees? |• COOP Plan |

| | |work from home, receive a reimbursement for the additional travel, or be |• Does you COOP plan have a list of hotels in the area? | |

| | |provided with a hotel room close to the continuity facility. | | |

|15.2G |  |Employees at home and not working are emailing their supervisors asking if |• How can you utilize non-essential personnel? |• COOP Plan |

| | |they can help out by working from home so they don't use all their leave. |• What is the phased approach for bringing employees back to work? | |

|15.3G |  |Headquarters requests a briefing regarding the creation of a reconstitution |• Do you have a Reconstitution plan developed? |• Reconstitution |

| | |plan. |• Who is in charge of Reconstitution? | |

|15.4G |  |Two new employees are scheduled to start on Monday, June 2. They are |• Will these employees be allowed to start? |• Human Capital |

| | |wondering what they should do and if they will be paid starting Monday. |• Will they get paid? | |

|15.5G |  |An employee calls, reporting that he can access his email through Outlook, |• How do you correct the problem in a timely manner? |• IT |

| | |but cannot access the shared drives. | | |

|15.6G |  |Regional Office sends notice of a meeting for upper management in D.C. next |• Who do you send? |• Staffing |

| | |Monday; attendance is mandatory |• Can you make flight/hotel reservations? | |

|15.7G |  |Due to the explosion (or mass evacuation or decontamination), a few GSA |• Who will work with GSA? |• Communications |

| | |vehicles owned by your agency have been damaged. Who can meet with GSA |• Do you have the proper documentation regarding these vehicles? |• Staffing |

| | |regarding next steps regarding repairing or replacing these vehicles? | | |

|Major Event #16 | | | | |

|Actual Time: |15:00 | | | | |

|Simulated Time: |June 4, 2008; 5:00 PM | | | | |

|Wendy Chime: Good Evening, this is Wendy Chime with Channel 57 Action News. |

| |

|Today is Wednesday June 4, 2008, marking two weeks since the attacks on our city. Major efforts by city, state, and federal officials have been made to secure the city, continue essential|

|services, and decontaminate affected areas. |

| |

|FBI and government officials have determined that the downtown area and the airport are now safe for use and all operations can return to normal. Decontamination of the affected area has |

|occurred and officials continue to monitor the areas for spikes in contamination levels. The contamination was far less severe than initially expected and was limited to a few facilities |

|in the immediate vicinity of the barge explosion. |

| |

|Additionally, six arrests have been made and another 15 persons are being held for questioning with respect to the attacks. The identity of the individuals is being kept secret until more|

|information is known. |

| |

|Planning materials have been found at the residents of some of the attackers that shed light on the plan to attack Pittsburgh and other major U.S. cities. Due to the quick response by |

|Federal, State, and Local agencies, similar attacks in Philadelphia and Chicago were thwarted. |

| |

|DHS has lowered the Threat Level High, or Orange, for the Western Pennsylvania region. The Federal Threat Level has been lowered to Elevated, or Yellow. |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

| |

|LEO Message (5 minutes later): | | | | |

|All government agencies and business owners in the greater Pittsburgh area can now report back to their primary facilities. |

| |

|Inject # |Time |Message |Points of Discussion |Function Tested |

|16.1G |  |The primary site is now safe to occupy. |• What is your agency's plan for transitioning operations back to the primary |• Reconstitution |

| | | |facility? | |

| | | |• How do you ensure that the site is operational? | |

| | | |• Is there a list of space, telecom, equipment, etc. requirements? | |

| | | |• Who will coordinate and lead the reconstitution effort? | |

|16.2G |  |For future planning purposes, leadership has requested information on the |• Has your agency performed a risk assessment for its primary and continuity |• TT&E |

| | |risks and threats that the building faces. |facilities? | |

| | | |• How would you identify risks? | |

| | | |• Do plans need to be updated based on this event? | |

|16.3G |  |Employees are worried that the primary building may not be safe due to the |• How do you reassure employees that the primary facility is safe? |• Reconstitution |

| | |contamination. |• How messages to you disseminate? | |

|16.4G |  |Leadership wants to know what the plan to reoccupy the primary site is. |• Has a reconstitution team been assembled? |• Reconstitution |

| | | |• Do you have a reconstitution plan in place? | |

| | | |• Has the reconstitution plan been relayed to all staff? | |

| | | |• Have you coordinated with other necessary agencies regarding reconstitution (i.e.| |

| | | |GSA, OSHA)? | |

|16.5G |  |The media is requesting an interview to find out how the government fared |• What success stories will you highlight? |• Media Relations |

| | |during the 2 weeks. |• What can you say about inter-agency cooperation? | |

|16.6G |  |How will you deal with staff that is refusing to come back to work, fearing |• How do you reassure staff that the primary facility is safe? |• Human Capital |

| | |another attack? | | |

|16.7G |  |The finance department requests a listing of emergency supplies purchased |• Have you kept all receipts? |• Vital Records |

| | |thus far, as well as supplies that will be needed in the near future. |• What additional supplies are needed upon reconstitution? | |

|16.8G |  |Who leads the reconstitution effort? |• Have you appointed a Reconstitution Manager? |• Reconstitution |

| | | |• How will reconstitution proceed? Phased approach or all-at-once? | |

|16.9G |  |How will you transition operations from the devolution site? |• Have you contacted the devolution site to transition operations? |• Reconstitution |

| | | |• Are staff aware how to take over operations from the devolution site? | |

|16.10G |  |Have you notified staff that operations can return to normal? |• Does you notification provide instructions for resumption of normal operations? |• Notification |

| | | |• Is there a phased approach? | |

|16.11G |  |Do you need to set up a temporary facility to house some operations? |• Some areas of the primary facility may not be immediately habitable. Have you |• Reconstitution |

| | | |made arrangements for temporary relocation? | |

|16.12G |  |Have you verified that all systems, communications, and other required |  |• Reconstitution |

| | |capabilities are available and operational and that the agency is fully | | |

| | |capable of accomplishing all essential functions/operations at the new or | | |

| | |restored facility? | | |

|16.13G |  |Have you reported the status of the relocation to the FOC, the NOC, the FEMA |• Does your COOP/Reconstitution Plan state which entities to contact upon |• Reconstitution |

| | |NCP Office, and other points of contact as necessary? |reconstitution? | |

|16.14G |  |Do you have reconstitution procedures that provide for the conduct of an |• Have you captured lessons learned, areas of improvement, and best practices to |• Reconstitution |

| | |after-action review of the effectiveness of COOP plans and procedures and |ensure the agency is ready in case of another COOP event? | |

| | |identify areas for improvement from the review? | | |

................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download