Emergency Management
Content
EMERGENCY MANAGEMENT
1
Emergency Management Module 3
September 2, 2012
EMERGENCY MANAGEMENT
2
The given essay will take into consideration the incidents management in the informational systems. Incident is any event which is not a part of the normal operation of the service. The purpose of the process is to restore it as soon as possible. The metrics of the process includes the duration of the incidents in accordance with the SLA and the number of the reported incidents. The National Incident Management System (NIMS) involves the gathering and analysis of the events from different sources in real time. The construction of such a system is done with the advice of the international standards for the incident management, current practices and experience gained to manage the incidents in the USA. This experience shows that the effective incident response requires a precise regulation of the activities and roles involved in the process. The approach used by the National Incident Management System (NIMS) is based on the fact that the rules of actions are linked to the content writing about the incident, the structure and possible content of which are determined in accordance with the general classification of the incidents. “The National Incident Management System (NIMS) provides an integrated framework that defines the roles and responsibilities of federal, state and local first responders during emergency events. NIMS was developed so responders from different jurisdictions and disciplines can work together better to respond to natural disasters and other emergencies. NIMS also provides the framework for the National Response Framework (NRF)” (Emergency Management: 2011). The contents of the recording about the incident set the logic of interaction between the employees and departments of functional groups to be presented in the form of relevant
EMERGENCY MANAGEMENT
3
regulations. This approach makes the processes of incident response clear and consistent; it improves the control and simplifies the changes to the regulations. Incident Management provides a reduction/exclusion of the negative impact of violations, which is especially relevant in the financial and credit organizations and telecommunications companies. The process of incident management is linked to many other processes, such as risk management, monitoring/audit, change management, access control, and continuous control. In other words, the incident management process is a kind of “motor” of the life cycle of any system. The main types of incidents are: • functionality or non-functionality of the main modules of the informational systems; • the absence of the access to the services, applications or information systems in general; • erroneous information processing in information systems and applications; • poorly working applications that affect the efficiency of operations; • failures of hardware; • the lack of access to the open Internet resources; • incorrect operation of information systems; • network overload. The process of activities’ delivery includes the following steps: calls registration; incidents registration; incidents categorization; incidents priority; incidents isolation; incidents escalation;
EMERGENCY MANAGEMENT incident tracking; customers notification; incidents salvation.
4
Management of the information security incidents includes the following steps: • detection and registration of incidents - is based on the testimony of monitoring the availability of IT services, applications users, and is in the registration and processing of incidents; • classification and prioritization of incidents – an identification of the causes of the incident, appropriate actions for its resolution, and the definition of critical incident for the company; • escalation of incidents – an assistance in the timely resolution of the incident; • incident processing- the incident and restoration of IT services; • monitoring of incidents - the control of the quality of processing and incidents resolution for the identification of the discrepancies and recommendations for the incident management. The National Incident Management System is closely connected and interacts with the Emergency Operations Center. The Emergency Operations Center is aimed at the purposeful activity of government and incident management, special forces aimed at the prevention of emergencies, the reduction of the possible losses and damages, which is based on the specific preventive measures of scientific, engineering and technological types of natural and man-made hazards and threats. Much of this is done in the engineering, radiation, chemical, medical, life sciences, and fire protection of population and territories from emergency situations at all levels of emergency management. The practical measures in case of the incidents management in the informational systems require large financial and material costs addressed
EMERGENCY MANAGEMENT
5
by federal or regional programs on the prevention of emergency situations and incident management. They are implemented in the preparation of the economic facilities and life support systems for the use in the extreme conditions. The interaction of the National Incident Management System and the Emergency Operations Center includes the range of activities undertaken in advance and aimed at the greatest possible reduction of the risk of emergency situations, as well as the preservation of human health, reducing the size of damages to the environment and material losses. The prevention of emergency situations both in terms of prevention (risk reduction), and reduction of the losses and damages caused by them is carried out in the following areas: monitoring and forecasting of the emergency situations, the rational distribution of the productive forces throughout the country. The realization of the given measures is conducted by means of planning and fulfillment of the corresponding events.
EMERGENCY MANAGEMENT References
6
Baron, G. (2009). “National Incident Management System (NIMS) and Social Media. A PIER Systems Inc. White Paper. Emergency Management. (2011). “The Federal Emergency Management Agency’s National Incident Management System”. Available at:
http://www.epa.gov/oem/content/nrs/nims.htm Emergency Services. (2012). “National Incident Management System”. Newaygo County Government. Available at: http://www.countyofnewaygo.com/ES/NIMS.htm University of California Berkeley. (2009). “Emergency Operations Plan”. Available at: http://oep.berkeley.edu/pdf/OtherDocs/EOP_v51.pdf US Department of Homeland Security. (2008). “National Incident Management System”. Available at: www.fema.gov/nims Water Sector National Incident Management System (NIMS) Implementation Objectives. (2009). EPA. Available at:
http://www.epa.gov/watersecurity/pubs/fs_watersecurity_nimsobjectives.pdf
1
Emergency Management Module 3
September 2, 2012
EMERGENCY MANAGEMENT
2
The given essay will take into consideration the incidents management in the informational systems. Incident is any event which is not a part of the normal operation of the service. The purpose of the process is to restore it as soon as possible. The metrics of the process includes the duration of the incidents in accordance with the SLA and the number of the reported incidents. The National Incident Management System (NIMS) involves the gathering and analysis of the events from different sources in real time. The construction of such a system is done with the advice of the international standards for the incident management, current practices and experience gained to manage the incidents in the USA. This experience shows that the effective incident response requires a precise regulation of the activities and roles involved in the process. The approach used by the National Incident Management System (NIMS) is based on the fact that the rules of actions are linked to the content writing about the incident, the structure and possible content of which are determined in accordance with the general classification of the incidents. “The National Incident Management System (NIMS) provides an integrated framework that defines the roles and responsibilities of federal, state and local first responders during emergency events. NIMS was developed so responders from different jurisdictions and disciplines can work together better to respond to natural disasters and other emergencies. NIMS also provides the framework for the National Response Framework (NRF)” (Emergency Management: 2011). The contents of the recording about the incident set the logic of interaction between the employees and departments of functional groups to be presented in the form of relevant
EMERGENCY MANAGEMENT
3
regulations. This approach makes the processes of incident response clear and consistent; it improves the control and simplifies the changes to the regulations. Incident Management provides a reduction/exclusion of the negative impact of violations, which is especially relevant in the financial and credit organizations and telecommunications companies. The process of incident management is linked to many other processes, such as risk management, monitoring/audit, change management, access control, and continuous control. In other words, the incident management process is a kind of “motor” of the life cycle of any system. The main types of incidents are: • functionality or non-functionality of the main modules of the informational systems; • the absence of the access to the services, applications or information systems in general; • erroneous information processing in information systems and applications; • poorly working applications that affect the efficiency of operations; • failures of hardware; • the lack of access to the open Internet resources; • incorrect operation of information systems; • network overload. The process of activities’ delivery includes the following steps: calls registration; incidents registration; incidents categorization; incidents priority; incidents isolation; incidents escalation;
EMERGENCY MANAGEMENT incident tracking; customers notification; incidents salvation.
4
Management of the information security incidents includes the following steps: • detection and registration of incidents - is based on the testimony of monitoring the availability of IT services, applications users, and is in the registration and processing of incidents; • classification and prioritization of incidents – an identification of the causes of the incident, appropriate actions for its resolution, and the definition of critical incident for the company; • escalation of incidents – an assistance in the timely resolution of the incident; • incident processing- the incident and restoration of IT services; • monitoring of incidents - the control of the quality of processing and incidents resolution for the identification of the discrepancies and recommendations for the incident management. The National Incident Management System is closely connected and interacts with the Emergency Operations Center. The Emergency Operations Center is aimed at the purposeful activity of government and incident management, special forces aimed at the prevention of emergencies, the reduction of the possible losses and damages, which is based on the specific preventive measures of scientific, engineering and technological types of natural and man-made hazards and threats. Much of this is done in the engineering, radiation, chemical, medical, life sciences, and fire protection of population and territories from emergency situations at all levels of emergency management. The practical measures in case of the incidents management in the informational systems require large financial and material costs addressed
EMERGENCY MANAGEMENT
5
by federal or regional programs on the prevention of emergency situations and incident management. They are implemented in the preparation of the economic facilities and life support systems for the use in the extreme conditions. The interaction of the National Incident Management System and the Emergency Operations Center includes the range of activities undertaken in advance and aimed at the greatest possible reduction of the risk of emergency situations, as well as the preservation of human health, reducing the size of damages to the environment and material losses. The prevention of emergency situations both in terms of prevention (risk reduction), and reduction of the losses and damages caused by them is carried out in the following areas: monitoring and forecasting of the emergency situations, the rational distribution of the productive forces throughout the country. The realization of the given measures is conducted by means of planning and fulfillment of the corresponding events.
EMERGENCY MANAGEMENT References
6
Baron, G. (2009). “National Incident Management System (NIMS) and Social Media. A PIER Systems Inc. White Paper. Emergency Management. (2011). “The Federal Emergency Management Agency’s National Incident Management System”. Available at:
http://www.epa.gov/oem/content/nrs/nims.htm Emergency Services. (2012). “National Incident Management System”. Newaygo County Government. Available at: http://www.countyofnewaygo.com/ES/NIMS.htm University of California Berkeley. (2009). “Emergency Operations Plan”. Available at: http://oep.berkeley.edu/pdf/OtherDocs/EOP_v51.pdf US Department of Homeland Security. (2008). “National Incident Management System”. Available at: www.fema.gov/nims Water Sector National Incident Management System (NIMS) Implementation Objectives. (2009). EPA. Available at:
http://www.epa.gov/watersecurity/pubs/fs_watersecurity_nimsobjectives.pdf
