Identity Crisis: Defining the Problem and Framing a Solution for Terrorism Incident Response Presented by Mark Landahl Supervisor – Homeland Security Section Frederick County Sheriff’s Office (MD) Adjunct Professor – Homeland Security University of Maryland University College

Identity is defined as…. 1.the collective aspect of the set of characteristics by which a thing is definitively recognizable or known. 2. the set of behavioral or personal characteristics by which an individual is recognizable as a member of a group.

Defining the Problem: Identity Management for Terrorism Incident Response Case Studies 1)TWA Flight 800 (nexus to terrorism initially suspected) 2)World Trade Center )Murrah Federal Building Bombing 4)Pentagon 9/11 5)World Trade center 9/11

TWA Flight 800 Long Island, NY July 1996 July 1996

World Trade Center New York, NY

Murrah Federal Building Bombing Oklahoma City, OK April 1995

Pentagon Arlington, VA September 2001 September 2001

World Trade Center New York City, NY September 2001 September 2001

1.Force Protection 1.Force Protection – Safety from secondary attack by infiltration 2. Command and Control 2. Command and Control – know what you have to apply to the problem 3. Accountability & Safety 3. Accountability & Safety – Know who is on scene and where they are assigned 4. Crime Scene Mgmt. 4. Crime Scene Mgmt. – entry control & documentation Identity Management Issues for Terrorism Incident Response

Case Studies: Elements of the Problem/ Framework for a Solution 1) Identity Authentication 2) Rapid In-processing 3) Interoperability 4) Data Storage/ Promulgation Capability

What do we do about it? Options: 1) Leave it alone – low risk / too expensive to fix 2) Typed Incident Response Resource (currently no defined resource for Identity Management) 3) Nationwide Standardized First Responder Identity Credential

Option 2: Dedicated Typed Response Resource National Mutual Aid Resource Management Initiative (FEMA 120) Resource was included in the Maryland 70. Proposed additions to the FEMA 120 by the State of Maryland. Identity Management Team (IDMT)

Identity Management Team CONOPS

Option 3: Nationwide First Responder Identity Credential “Doveryai no Proveryai” Russian Proverb Requires change in identity schema and establishment of a trust model Trust consists of a two prong test 1) Process - provides assurances that an individual has been vetted through a common identity proofing process (ex. background investigation) more stringent = more trust 2) Product - (token) counterfeit resistant and ability to be authenticated = trust

Federal Government Identity Initiative HSPD-12 - Policy for a Common Identification Standard for Federal Government Employees and Contractors FIPS Defines standards in process and product for Federal identity, using interoperable smart card technology. Authenticates Identity through a three tiered system Something you have (PIV Card) Something you know (PIN) Something you are (Biometric)

National Capital Region: First Responder Authentication Card (FRAC) DoD / DHS / DOI Other Federal/State/Local Credential Issuers DoD CAC ID Cards*CRLs Validation Authority Authorization Handhelds Compressed, Signed Validation Lists Valid (produced and synchronized every 24 hours at minimum) NCR Governments Other Issuer Privileged Lists Trusted: … *CRLs – certificate revocation lists

1.Define and Type Response Resource for Identity Management 1.Define and Type Response Resource for Identity Management ( USSS) 2.Develop model communities and e-government best practices for FIPS-201 technologies 3.Study feasibility and develop a National Rollout Model 4. Add Identity management as a capability specific priority to the National Preparedness Goal Recommendations

Contact Information: Corporal Mark Landahl Frederick County Sheriff’s Office Frederick, MD