IBFCSM CEDP - Certified Emergency and Disaster Professional

The publication titledActive Shooter Planning and Response: Healthcare & Public Sectorwas developed by theInternational Association of EMS Chiefs (IAEMSC). This document was created to fill a specific gap in the emergency management literature regarding the unique challenges of responding to an active shooter event within a healthcare environment, such as a hospital or outpatient clinic. Unlike a standard office building, hospitals contain non-ambulatory patients, high-value medical equipment, and hazardous materials (oxygen, chemicals), all of which complicate both the tactical response and the evacuation process.

The IAEMSC publication emphasizes the "Whole Community" approach but focuses on the integration ofLaw Enforcement, Fire, and EMS(the "Rescue Task Force" concept). It provides specific guidance on the "Warm Zone" operations, where EMS personnel—protected by law enforcement—enter a scene to provide life-saving interventions like hemorrhage control (using tourniquets and hemostatic dressings) while a threat is mitigated but not yet fully neutralized.

For aCertified Emergency and Disaster Professional (CEDP), this publication is a vital resource for training healthcare staff in the"Run, Hide, Fight"protocol while also addressing the clinical reality of "Shelter-in-Place" for ICU or surgical patients who cannot be moved. It advocates for the use of theIncident Command System (ICS)to coordinate the complex triage and surge capacity requirements that follow a mass casualty event. By providing a standardized framework developed by EMS leaders, the publication ensures that healthcare facilities are prepared to manage the immediate trauma of an attack while maintaining their core mission of patient care.

WhileFEMAcoordinates with all public sector responders, it maintains its most integrated and formal operational relationship withFirefighters. This unique relationship is institutionalized through theUnited States Fire Administration (USFA), which is a core division of FEMA. The USFA’s mission is to provide national leadership, coordination, and support for the nation’s fire and emergency medical services (EMS). Furthermore, theNational Fire Academy (NFA)is located on the same campus as FEMA’s Emergency Management Institute (EMI) in Emmitsburg, Maryland, creating a shared educational and doctrinal environment.

Under theNational Response Framework (NRF), this relationship is further solidified byEmergency Support Function #4 (Firefighting). FEMA works directly with local, state, and tribal fire departments to coordinate federal firefighting support for structural and wildland fires. The USFA also manages theNational Fire Incident Reporting System (NFIRS), which is the primary database used by FEMA to analyze fire trends and allocate federal grant funding, such as theAssistance to Firefighters Grants (AFG).

For aCertified Emergency and Disaster Professional (CEDP), understanding this hierarchy is critical for resource acquisition. Firefighters are often the primary workforce for FEMA’sUrban Search and Rescue (US&R)task forces. While Law Enforcement (Option A) relates to the DOJ/FBI and Public Health (Option C) relates to the HHS/CDC, the Fire Service is "baked into" the FEMA structure. This formal alignment ensures that fire departments—which respond to over 30 million calls annually in the U.S.—are the primary tactical arm for local disaster stabilization, directly supported by FEMA’s training, data, and financial resources.

TheNational Weather Service (NWS), a component of NOAA, defines a "Severe Thunderstorm" based on specific physical criteria.19To warrant aSevere Thunderstorm Warning, a storm must be producing, or be capable of producing,winds of 58 miles per hour (50 knots) or higherand/orhail that is at least 1 inch (quarter-sized) in diameter.20These thresholds were established because they represent the point at which thunderstorms begin to pose a significant threat to life and property, specifically causing structural damage and injury from flying debris or large hail.

In 2021, the NWS updated its warning system to include "Damage Threat" tags to better convey the severity of the storm:21

Base (Standard):1-inch hail and/or 58 mph winds.22

Considerable:1.75-inch (golf ball) hail and/or 70 mph winds.23

Destructive:2.75-inch (baseball) hail and/or 80 mph winds (this tag triggers a Wireless Emergency Alert or WEA).24

For theCEDPprofessional, understanding these specific criteria is essential forIncident Recognition. A 58 mph wind is strong enough to down trees and power lines, which can lead to secondary emergencies such as road closures and power outages. 1-inch hail is large enough to damage roofs and shatter vehicle windshields. When an NWS warning is issued, it is a trigger for the emergency manager to activate theMass Notification System, ensure that "Shelter-in-Place" protocols are ready for outdoor workers, and prepare theLogistics Sectionfor potential post-storm damage assessments. By using standardized criteria, the NWS ensures that the public and disaster professionals are not desensitized by warnings for "routine" thunderstorms, but instead take immediate protective actions for storms that meet these scientifically defined thresholds for "severity."

Under theNational Incident Management System (NIMS)and theIncident Command System (ICS), theIncident Action Plan (IAP)is the document that formally records the incident-specific objectives for a given operational period.1NIMS defines an objective as a statement of what is to be accomplished during an incident. These objectives must beSMART: Specific, Measurable, Actionable, Realistic, and Time-bound. The IAP ensures that all responding personnel, regardless of their parent agency, are working toward a unified set of goals.2

The IAP is typically developed during the "Planning P" cycle. The Incident Commander (or Unified Command) sets the overallStrategic Objectives, which are then translated intoTactical ObjectivesandWork Assignmentswithin the IAP. While anEmergency Operations Plan (EOP)(Option A) provides the general framework and policies for a community's response, it is a static document. The IAP is a dynamic document that is updated fo34r every operational period (e.g., every 12 or 24 hours), reflecting the changing "ground truth" of the disaster.

In theCEDPcurriculum, the IAP is seen as the primary tool forManagement by Objectives. The IAP includes not just the objectives, but also the organization chart (ICS 203), the medical plan (ICS 206), and the safety message (ICS 208). By formally documenting these objectives in the IAP, the command structure ensuresAccountabilityandUnity of Effort. Every responder who checks into an incident receives an IAP (or a briefing based on it), ensuring they understand exactly what is expected of them and how their tasks contribute to the overall stabilization of the incident and the safety of the public.

As established byHomeland Security Presidential Directive 7 (HSPD-7)and theNational Response Framework (NRF), theEnvironmental Protection Agency (EPA)is the designated Sector-Specific Agency (SSA) for theWater and Wastewater Systemssector. This sector is one of the 16 critical infrastructure sectors essential to the nation's security, economy, and public health.10During an emergency, the EPA's responsibility is to coordinate the protection and rapid restoration of these systems.

The EPA performs several critical roles during a disaster response:11

Technical Assistance:Providing expertise on water treatment, contaminant identification, and infrastructure repair.12

Laboratory Support:Utilizing the Environmental Response Laboratory Network (ERLN) to analyze water samples for chemical or biological agents.13

Regulatory Oversight:Ensuring that emergency measures (like boil water advisories) follow the Safe Drinking Water Act (SDWA).

While theUSDA(Option B) provides support for water systems in rural communities (typically under 10,000 residents), the overall sector responsibility for the entire nation lies with the EPA. For aCEDPprofessional, the EPA is the primary federal partner forEmergency Support Function #10 (Oil and Hazardous Materials)and a key supporter forESF #3 (Public Works and Engineering). The EPA manages tools like theWater Health and Economic Analysis Tool (WHEAT)and theWaterISACto help water utilities assess risks and share threat information.14By leading this sector, the EPA ensures that one of the most vital "Community Lifelines"—potable water—is restored as quickly as possible, preventing secondary public health crises following a primary disaster.

The greatest challenge when developing anEmergency Operations Plan (EOP)that utilizes theIncident Command System (ICS)isDetermining the necessary functions. ICS is a "Functional Management System," meaning it organizes the response based onwhat needs to be done(functions) rather thanwho is doing it(agencies). Traditionally, emergency plans were built around agency-specific tasks (e.g., "The Police Department will do X"). Transitioning to an ICS-based plan requires planners to break down the response into the five core functional areas: Command, Operations, Planning, Logistics, and Finance/Administration.

Determining functions is difficult because it requires a "modular" mindset. Planners must identify which specific functional units (e.g., a "Decontamination Unit" or a "Volunteer Coordination Group") are required for different types of incidents. If a plan fails to identify a necessary function, that task often goes unassigned, leading to a gap in the response. Option A (Identifying hazards) is a standard part of theTHIRAprocess and is relatively straightforward with modern mapping tools. Option B (Coordinating with agencies) is an ongoing administrative task, but it is thefunctional alignmentthat ensures those agencies can actually work together under a unified structure.

According toNIMSdoctrine, "Management by Objectives" is achieved only when the functional structure matches the incident's needs. For theCEDPprofessional, this means the EOP must be flexible enough to allow the Incident Commander to activate only the "modules" needed. Planners often struggle to define the "triggers" for activating specific functions. For example, when does "Logistics" need a separate "Food Unit" versus a "Medical Unit"? Solving the "functional puzzle" during the planning phase is what ensures that the organizational chart can expand and contract seamlessly during the chaos of a real disaster, providing the scalability that is the hallmark of the ICS system.

Planners must consider risk-related issues duringEmergency Operations Plan (EOP)development toevaluate the need to implement proper control techniques to reduce losses. This reflects the transition from "Risk Assessment" to "Risk Management." While identifying hazards (Option A) and prioritizing mitigation (Option C) are part of the broader cycle, the EOP is specifically designed to control theimpactof those risks during the response phase.

Risk consideration in an EOP allows planners to decide which "Control Techniques" are necessary for specific vulnerabilities. These techniques includeRisk Avoidance(e.g., not placing a command center in a flood zone),Risk Reduction(e.g., installing fire suppression systems), andRisk Transfer(e.g., insurance). In the context of the EOP, "Loss" is defined not just in financial terms, but in terms of life safety, infrastructure downtime, and environmental damage. If a planner identifies that a chemical release is a high-risk issue, the EOP must then include specific controls such as specialized PPE, decontamination protocols, and evacuation triggers.

According to theIBFCSM CEDPbody of knowledge, an EOP that is divorced from risk analysis is merely a template. By embedding risk-related issues into the plan, the organization ensures that its response is "proportionate" to the threat. For example, if the risk of a cyber-attack is high, the EOP should include a "Manual Override" control technique for critical life-safety systems. This proactive evaluation ensures that the organization has the necessary "controls"—whether they are physical assets, trained personnel, or legal authorities—ready to be deployed the moment the disaster occurs, thereby fulfilling the fundamental goal of minimizing the impact on the community.

TheNational Incident Management System (NIMS)emphasizes the importance of aCommon Operating Picture (COP)primarily to enhance operational efficiency and resource management.4A COP is a continuously updated overview of an incident that is shared across different agencies and jurisdictions. By maintaining an accurate operating picture, all decision-makers and field personnel are looking at the same data regarding resource locations, incident boundaries, and hazard zones.5This shared situational awareness is the most effective tool tohelp emergency responders and other personnel avoid the duplication of efforts.

When multiple agencies (fire, police, EMS, and public works) respond to a large-scale disaster, there is a high risk of "independent action" or "freelancing," where different teams perform the same task (e.g., searching the same building twice) while other critical needs go unmet.6NIMS communication standards mandate that information flow through a disciplined structure so that the Incident Command can de-conflict activities. While consistency among senior commanders (Option A) and accurate media releases (Option C) are important secondary benefits of a COP, they are not the primary operational driver.

The core objective is "unity of effort." According toFEMA’s NIMS Doctrine, effective information management allows the Incident Commander to maximize the impact of limited resources. For aCEDPprofessional, establishing a COP involves the integration of GIS mapping, status boards, and interoperable radio systems. When every responder knows what has been done and what is currently being addressed, the safety of the personnel increases because the risk of "friendly fire" or logistical bottlenecks is significantly reduced. This systematic approach ensures that the response is lean, fast, and coordinated, directly reflecting the NIMS principle of "Management by Objectives."

While public health and medical preparedness are shared responsibilities, the specificPublic Health Emergency Preparedness (PHEP) Capabilitiesare developed and coordinated by theCenters for Disease Control and Prevention (CDC). The CDC established the "15 Public Health Preparedness Capabilities" as the national standard for state, local, tribal, and territorial (SLTT) health departments to use in their planning and to justify federal grant funding.

The 15 PHEP capabilities include:

Community Preparedness

Community Recovery

Emergency Operations Coordination

Emergency Public Information and Warning

Fatality Management

Information Sharing

Mass Care

Medical Countermeasure Dispensing and Administration

Medical Materiel Management and Distribution

Medical Surge

Non-Pharmaceutical Interventions

Public Health Surveillance and Epidemiological Investigation

Public Health Laboratory Testing

Responder Safety and Health

Volunteer Management

In contrast,ASPR(Option A) coordinates the "Healthcare Preparedness Capabilities," which focus on hospitals and healthcare coalitions. The CDC’s focus is broader, addressing the underlying public health infrastructure, such as laboratory testing (Capability 13) and epidemiological investigation (Capability 12). For aCEDPprofessional, the CDC’s standards are the "baseline" for community health resilience. When a health department is awarded PHEP funding, they are held accountable for demonstrating their ability to perform these specific functions. This ensures that the nation’s public health system is not just reactive to diseases, but is a robust, capability-based shield capable of managing the health impacts of any hazard, from a natural disaster to a biological attack.

The function that specifically assists in therestorationof communication services for key sectors is theTelecommunications Service Priority (TSP)program. Managed by the Cybersecurity and Infrastructure Security Agency (CISA) and regulated by the Federal Communications Commission (FCC), TSP is a federal program that mandates telecommunications service providers prioritize the repair and installation of critical data and voice circuits for enrolled organizations. This "insurance policy" for infrastructure ensures that essential entities—such as hospitals, 911 dispatch centers, and fire departments—have their lines fixed before the general public or non-enrolled commercial entities during a disaster.

WhileGovernment Emergency Telecommunications Service (GETS)(Option B) is a related and vital tool, it serves a different purpose: it provides priority access to the public switched telephone network (PSTN) for voice calls when the network is congested. GETS ensures a call goes through, but it cannot restore a physical line that has been cut or a circuit that has failed; that is the role of TSP.Wide Area Digital Networks (WADN)(Option C) generally refer to the technical architecture or equipment categories used for broad connectivity but do not constitute a priority restoration program.

Under theEmergency Support Function #2 (ESF #2 - Communications)annex of the National Response Framework (NRF), the TSP program is highlighted as a primary mechanism for infrastructure resilience. Organizations enrolled in TSP are assigned a priority level (1 through 5) based on their role in national security and emergency preparedness. In the wake of a catastrophic event, such as a hurricane or a cyber-attack that cripples local infrastructure, telecommunications vendors are legally obligated to restore TSP-coded circuits first, even if doing so breaches other commercial Service Level Agreements (SLAs). For a Certified Emergency and Disaster Professional (CEDP), understanding TSP is essential for ensuring that a community's "nerve center" can regain operational status as quickly as possible during the recovery phase.