7 Techniques to Improve Emergency Preparedness Through Situational Awareness Global crises leads to the evolution of technology; each iteration to any organization’s response plan is the sum of painful lessons on the significance of situational awareness.

A crises will always lead to disruption. Unavailable essential supplies, contractions in spending for important projects, disruptions to supply chains, and reduced availability of critical employees will create a rough sea for all boats. As Stuart Carlow, chief research officer at ABI Research has stated, there will be wrecks that every enterprise should be prepared for. However, greater situational awareness can ensure preparedness, reduce the effort spent on analyzing on-going emergencies, distribute correct information, and prioritize the most essential resource for any enterprise: our people.

Understanding data that’s publicly available reduces the effort often associated with a strategic understanding of situational threats, and the course of action necessary to mitigate and/or respond to them. Organizing analytics across the genres of health, thermal, natural disasters, weather emergencies and public sentiment provide an opportunity to source, analyze and leverage data in the hopes that past mistakes are averted, and prior successes can be duplicated. https://www.ibi.com/federal-government-data-analytics-solutions/ SECTION I HEALTH SURVEILLANCE

HEALTHCARE PREPAREDNESS To derive situational awareness, it is important to conduct surveillance to determine the

1. Health surveillance is defined as: “the ongoing, extent, scope, and potential scope of the health effects on the affected populations. systematic collection, analysis, and interpretation Surveillance is the systematic collection, analysis, and interpretation of death, injury, and of health-related data essential to planning, illness data, which enables public health to identify, prepare, and respond to adverse health implementation, and evaluation of public health effects in the community. Health surveillance allows us to identify risk factors, track disease practice.” – Field Epidemiology trends, determine action items, and target interventions. It allows us to assess the human 2. Modern data analysis allows us to assess the health impacts of pandemics and other health emergencies to enhance planning, improve human health impacts in real-time, evaluate response, and mitigate impacts. potential problems, and get proactive with planning and prevention. CDC: Centers for Disease Control's National Notifiable Diseases Surveillance System 3. While each situation is different, there are (NNDSS) monitors, surveils, collects, and provides analysis of infectious diseases such as similarities among them and we can apply Zika, food-borne outbreaks such as E. coli, and noninfectious conditions such as lead knowledge learned from each response to the poisoning. About 3,000 public health departments gather and use data on these diseases to next medical emergency. protect their local communities.

WHO: The World Health Organization (WHO) maintains and regularly updates a network of electronically-interconnected WHO member countries (192), disease experts, institutions, agencies, and laboratories.

WONDER: WONDER, developed as an integrated information and communication system for public health. Its purposes are to promote information-driven decision making by placing timely, useful facts in the hands of public health practitioners and researchers, and to provide the general public with access to specific and detailed information from CDC.

2 https://www.ibi.com/federal-government-data-analytics-solutions/ Section 2 TERRORISM, VIOLENCE & ACTIVISM

REDEFINING VIOLENCE Situational Awareness requires several coded criteria to cover a broad range of definitions

1. Understand and target Open Source Intelligence of terrorism (homegrown or non-state actor), extremism, fundamentalism, spree-violence, (OSI) associated with targeted violence or the or specific attacks against critical infrastructure such as places of worship, education, threat of violence directed at our nationʼs critical power grids, water treatment facilitates, etc. through a combination of inclusiveness and infrastructure, civilian targets, corporate entities, filtering. Situational awareness data for terrorism and extremism might Include: public gatherings, or government agencies. DHS Critical Infrastructure List: The Department of Homeland Security (DHS) defines critical 2. Aggregate risks from emerging events through integrated and normalized OSI data. infrastructures as assets that provide “the essential services that underpin American society...” (cit). Specifically, this includes 16 sectors: chemical, commercial facilities, 3. Detect anomalies, and provide early warnings communications, critical manufacturing, dams, defense industrial base, emergency through enhanced analytics, machine learning, and data sharing techniques. services, energy, financial services, food and agriculture, government facilities, healthcare and public health, information technology, transportation, waste and wastewater, and nuclear reactors, utilities and waste.

The Global Terrorism Database (GTD): is an open-source database including information on terrorist events around the world. GTD includes systematic data on international as well as domestic terrorist incidents that have occurred during this time period. For each GTD incident, information is available on the date and location of the incident, the weapons used and nature of the target, the number of casualties, and -- when identifiable -- the identity of the perpetrator.

GDELT: Supported by , the GDELT Project monitors the world's real-time broadcast, print, and web news from nearly every corner of every country in over 100 languages and identifies the people, locations, organizations, themes, sources, emotions, counts, quotes, images and events. 3 https://www.ibi.com/federal-government-data-analytics-solutions/ Section 3 THERMAL & ATMOSPHERIC ANOMALY DETECTION

PLAN FOR FUTURE CONTINGENCIES WHILE Satellite instruments are often the first to detect wildfires burning in remote regions or SUPPORTING EMERGENT CONDITIONS atmospheric anomalies such as pollution in large cities, or solar storms which can wreak 1. Wildfires are a growing natural hazard, posing a havoc on cellular and unshielded technology. Integration to the Fire Information for threat to life and property, particularly where Resource Management System (FIRMS) and leveraging the Earth Observation Common native ecosystems meet developed areas. Metadata Repository (EO-CMR) to provide your situational awareness protocols Land, Electromagnetic pulses generated by natural or Atmosphere Near real-time Capability is a game changer in creating situational awareness man-made phenomena in high altitude can have a catastrophic risk on consumer electronics and through with strategic and tactical plans can be established. unshelled electric grids. MODIS: Moderate Resolution Imaging Spectroradiometer (MODIS) instrumentation is on 2. Use enhanced analytics to understand previous board NASA's Earth Observing System (EOS) Terra (EOS AM) and Aqua (EOS PM) satellites. wildfires, including ignition sources, burn severity The orbit of the Terra satellite goes from north to south across the equator in the morning patterns, season of burning, and fire size and to predict naturally occurring electromagnetic and Aqua passes south to north over the equator in the afternoon resulting in global phenomena through open source near earth coverage. satellite feeds. VIIRS: Visible Infrared Imaging Radiometer Suite (VIIRS) Corrected Reflectance Imagery is 3. Integrate the ability to monitor and provide early produced in near real-time (NRT), providing continuity from the MODIS Corrected warnings using social media, sensor webs, and satellite technology. Reflectance imagery which was developed to provide insight to the analytics derived from thermal imaging.

LANCE: NASA's Land, Atmosphere Near real-time Capability for EOS (LANCE) Earth Observing System (EOS) data and imagery enable users to get a snapshot of the Earth in near-real time. This timely data is useful for a range of applications e.g. to detect fires, track smoke, ash and dust plumes; to monitor aerosols, carbon monoxide (CO) and sulfur dioxide (SO2)

4 https://www.ibi.com/federal-government-data-analytics-solutions/ Section 4 NATURAL DISASTER & REAL-TIME METEOROLOGICAL ALERTING

PLAN FOR FUTURE CONTINGENCIES WHILE Technology presently exists to build smart alerts and analytics to customize warnings to a SUPPORTING EMERGENT CONDITIONS user's localized situation whether at home, at work, outdoors, or in their vehicles. The goal 1. Emergency and disaster planning involves a of integrating any Emergency Alert System (EAS) is to primarily allow strategic planning and coordinated, co-operative process of preparing the tactical understanding on the location of assets and employees during major national to match urgent needs with available resources. disasters. More than simple notification this alert schema is essential to collect and relay

2. Planning for predictable naturally occurring instantaneously and automatically all types of hazard warnings and reports locally, events can be accomplished before the incident regionally, and nationally to a variety of stakeholders. occurs. Global Disaster Alert and Coordinating System: GDACS is a cooperation framework between 3. Understand the location of data associated with the United Nations, the European Commission and disaster managers worldwide to improve early warning: seismic variance, thermal events, alerts, information exchange and coordination in the first phase after major sudden-onset flood planes and weather related analytics. disasters. 4. Natural hazards tend to occur repeatedly in the same geographical locations because they are Google Public Alerts: Google Public Alerts is Google’s platform for disseminating emergency related to weather patterns or physical . Common examples of alerts include weather-related warnings such as tropical characteristics of an area. storms, floods, and tornadoes, as well as earthquakes and other public safety event information.

NOAA Weather Alerts: (NWS) API allows developers access to critical forecasts, alerts, and observations, along with other weather data. Additionally, NWS also broadcasts alerts of non-weather emergencies such as national security or public safety threats through the Emergency Alert System.

5 https://www.ibi.com/federal-government-data-analytics-solutions/ Section 5 GLOBAL TRANSPORTATION NETWORK

UNDERSTAND THE RELATION BETWEEN Current emergencies have shown that understanding local, national and global TRANSPORTATION LINKS TO SUPPLY CHAIN transportation chains are essential to gain situational awareness. As enterprises continues NODES to combat new daily challenges during global emergencies, understanding the impact jet 1. Transportation is one of multiple critical airliners to mass transit buses and rail terminals, vehicles and transport facilities become infrastructure components, yet one of the most essential to assessing supply chain, and providing quick relief. vulnerable in a community. ADS-B for Commercial Aircraft: Commercial airlines use Automatic Dependent Surveillance 2. Understand the connection between commercial - Broadcast (ADS-B). ADS-B has transformed all segments of aviation: real-time precision, transportation and supply chain: socio-technical network that identifies, targets, and fulfills demand. shared situational awareness, advanced applications for pilots and controllers alike. ADS-B It is the process of deciding what, when, and how determines its position via satellite navigation and periodically broadcasts it, enabling it to much should move to where. be tracked additionally ADS-B provides traffic, weather, and flight information.

3. Understanding, alerting and predicting AIS Transponders for Commercial Shipping: All commercial vessels leverage AIS commercial transportation emergencies is transponders which transmit spatial coordinates, vessel type, ports of harbor, destination directly related to maintaining resiliency in supply chain links. and so much more. At over 800-million vessel locations each month, this feed allows for one of the most comprehensive views of all commercial vessels in the water. 4. Be able to visualize supply nodes associated with critical infrastructure: entities that manufacture, World Traffic Service: presents historical and near real-time traffic information for different process, store, and/or ship goods and services regions in the world that support collection. The data is updated every 5 minutes with and links associated with transportation grids: the physical and functional connections between capabilities for visualizing traffic speeds relative to free-flow speeds as well as traffic nodes, such as communication, transport, or incidents which can be visualized and identified. transaction connection with modes of commercial transport: commercial aircraft and shipping, highways and rail networks.

6 https://www.ibi.com/federal-government-data-analytics-solutions/ Section 6 GLOBAL TRENDS & SENTIMENT ANALYSIS

UNDERSTANDING EMOTION AND ANALYZING Search trends and social media use have become a regular feature of the disaster response INTEREST landscape. Media platforms and search engines are frequently used by affected people, 1. provides a unique opportunity to emergency and humanitarian responders, and remote audiences to share information, seek assess the level of disaster “interest”. If material information, and provide various forms of informational and emotional support during can be provided when people are most disaster events such as earthquake, hurricanes, and acts of terrorism. Crisis informatics interested in learning, this can have a profound researchers have widely remarked upon the potential for this data to be useful to effect on increasing the publicʼs knowledge about current and future events. emergency and humanitarian responders.

2. Understanding misinformation and being able to Google Trend Analysis: Google Trends is a website by Google that analyzes the popularity of target concepts that need to be clarified are as top search queries in across various regions and languages. The website important as direct administration of a disaster uses graphs to compare the search volume of different queries over time. Essential this response; understanding trend information provides: what is being searched, where is it being searched and the sentiment associated provides the additional insight to enhance emergency management and preparedness. with the search query.

3. The data produced through crowdsourcing as Social Media Platforms: The modern explosion of social media platforms allow users to ubiquitous, rapid and accessible, with the generate and share content themselves – have drastically changed the type and number of potential to contribute to situational awareness. open sources that can now be exploited to maintain situational awareness. 4. Extracting sentiments during a disaster helps emergency responders develop stronger : The emergence of Twitter specifically has huge consequences for our ability to situational awareness of the disaster zone itself. quickly detect events that have occurred, and find out information about them from open sources. People use Twitter to microblog no more than a few sentences, a few individual 5. Integrating sentiment and trend analysis enhancing situational awareness alerts and images or links at a time. Twitter’s 200 million active users together post 400 million of reports to provide contextualization to emergent these microblogs – tweets – daily. events in near real-time.

7 https://www.ibi.com/federal-government-data-analytics-solutions/ Section 7 OPTIONAL: TRACKING A GENRE SPECIFIC THREAT

THREAT TRACKING TO THREAT HUNTING Contextualizing open source intelligence through the filter of an enterprises' specific use 1. Understanding your enterprises mission and the case provides ready made analytics, reporting and alerting without a large level of effort location of employees, offices, assets and other required in traditional use case specific tracking collateral is essential in developing a customized tracking model for enterprise specific threats. Leveraging OSI (Open Source Intelligence): to track enterprise specific threats is key 2. Cyber threats no longer are relegated to stand to identifying future potential attacks and the status of current alone cyber solutions; they need to be emergency response. Correlating information from internal systems: abnormal contextualized to potential enterprise kinetic range identification, identify patterns and pre-established threat vectors allow for easy attack surfaces and integrated with OSI (Open configuration of alerting and reporting can enhance alerting and evaluative Source Intelligence). process. Once a threat is identified the area of interest can be expanded to include 3. Leveraging smart city data, IoT, 5G devices and service infrastructure, such as power (Edges, Arcs, Paths, Tracks, Routes, and more). edge computing allow for real-time responses to emerging threats. AI Enhanced Processes: Analyzing and evaluating large volumes of data is an essential component of AI and ML enhanced process. Enterprises should embrace big data methodology to protect and remediate against emergency scenarios.

Simulation Testing: Organizing and responding to threat analysis should be part of a regularly scheduled disaster recovery and Continuity of Operations Plan (COOP) / Concept of Operations Plan (CONPLAN) resiliency testing, with specific outcomes and measurable results. To this effect, your application could even function as a simulator to provide realistic threat responses based on past events.

8 https://www.ibi.com/federal-government-data-analytics-solutions/ Deepinder Uppal has played an important role in academics and policy research as a professor, senior administrator, and director for numerous centers in the field of academics and nonprofit research. Deepinder is a Army veteran and has served honorably in numerous Public Sector areas of conflict. Currently Deepinder is the Vice President for ibi, a TIBCO company Innovation and Technology in the Public Sector at ibi. As ibi's chief innovator for the public sector, Deepinder helps define a customer’s technical vision by communicating complex Federal Office processes, and assisting with the successful creation, Arlington, VA integration and deployment of next generation data architecture 2300 Clarendon Blvd # 1200, and AI charged analytics. VA 22201 Dave Kelly CPT (Ret.) spent 26 years in the Michigan State Police where he led statewide intelligence, Cyber Command & Technology. Dave Kelly is a veteran of the United States Marine Corps and currently serves as the Corporate Headquarters Vice President for Public Sector Solutions & Strategy at ibi. In New York, NY this role Dave is enabling our federal, state, local government and public education partners achieve their analytics, data 2 Pennsylvania Plaza, integration, quality, management, and visualization goals. Dave NY 10121 provides our partners with thought leadership on use-case driven solutions to public sector technology problems and strategic vision for what is possible when leveraging the ibi stack of technology.

https://www.ibi.com/federal-government-data-analytics-solutions/