1. UNCLASSIFIED 1 Name of Principal Author and all other author(s): Alan Waitkus, John Borden Principal Authors Organization and address: Defense Threat Reduction Agency (DTRA/NTT) Technology Transformation Division (B1500) 8725 John J. Kingman Road Fort Belvoir, VA 22060 Phone: 703-767-4097 Fax: 703-767-9844 Email: awaitkus@cnttr.dtra.mil Original title on 712 A/B: Hurricane Katrina Lessons Learned Revised title: Gulf Storms Lessons Learned Presented in (input and Bold one): (WG 8 & 3, CG___, Special Session ___, Poster, Demo, or Tutorial): This presentation is believed to be: UNCLASSIFIED AND APPROVED FOR PUBLIC RELEASE 74th MORSS CD Cover Slide UNCLASSIFIED DISCLOSURE FORM CD Presentation Please complete this form 712CD as your cover page to your electronic briefing submission to the MORSS CD. Do not fax to the MORS office. 13-15 June 2005, at US Air Force Academy, Colorado Springs, CO 712CD For office use only 41205

2. UNCLASSIFIED Gulf Storms Lessons Learned Working Group 3 & 8 74th MORSS US Air Force Academy Colorado Springs, CO 13-15 June 2006 Al Waitkus John Borden For the Defense Threat Reduction Agency

3. UNCLASSIFIED 3 1.Homeland Security/Defense operations cannot be carried out effectively on military networks to which civilian responders don't have access 2.Only CONOPS (Concept of Operations) that have been exercised and practiced in advance will be applied during a crisis 3.Information systems being used operationally require a CONOPS 4.Data owners will control data dissemination one way or another 5.The stopgap solution was the use of the demonstrated system Findings

4. UNCLASSIFIED 4 The intent of the HLS/D C2 ACTD (Homeland Security/Defense Command Control Advanced Concept Technology Development) is to demonstrate a secure information sharing environment for use by first responders at all echelons to increase efficiency and effectiveness through closer coordination of efforts and timely sharing of critical information. ASOCC (Area Security Operations Command & Control) provides alerting, collaboration, and visualization (collectively, Information Sharing) services that bridge between DOD, federal agencies, state and local government, and industry HLS/D C2 ACTD services are designed to be used primarily by DOD in support of AT/FP (Antiterrorism/Force Protection), CIP (Critical Infrastructure Protection), and DSCA (Defense Support to Civil Authorities) missions Background

5. UNCLASSIFIED 5 ASOCC The eXPanel (used for alerting and basic messages and maintains visibility of current status)

6. UNCLASSIFIED 6 ASOCC The LCW (Lightweight Collaborative Whiteboard) with Visualization (mapping)

7. UNCLASSIFIED 7 The HLS/D C2 ACTD web-based services are hosted on servers located in SPAWAR (Navy Space & Naval Warfare Systems Command) facilities in New Orleans and DISA (Defense Information System Agency) facilities in Slidell, Louisiana Those facilities lost power and communications when hurricane Katrina hit and cut off all ACTD services at a time when they were critically required With the assistance of its support contractors, the ACTD was able to stand up backup servers within 12 hours at various locations around the country, enabling service reconstitution What Happened

8. UNCLASSIFIED 8 Katrina Web-based services New Orleans and Slidell, Louisiana

9. UNCLASSIFIED 9 The NEPLOs (Navy Emergency Preparedness Liaison Officers) used the ACTDs information sharing services 24 x 7 to coordinate response to many requests for assistance by DOD, federal, state, and local responders During the first critical week after the hurricane, the ACTD's services were often the primary, or only communication channel available to the NEPLOs due to severe damage to local infrastructure and overloading of phone services Other users started using the services during the course of the recovery effort including FEMA, CNRF, NORTHCOM, NERO, USCG EPLO, USCG SAR, AF EPLO, Army EPLO, 1st Army, 5th Army According to their AARs (After Action Reports), the NEPLOs were effective in using the HLS ACTDs information sharing capabilities to assist the DCO (Defense Coordinating Officer) and FEMA (Federal Emergency Management Agency) in clarifying and coordinating RFIs (Requests for Information), ARs (Action Requests) and MAs (Mission Assignments) Approximately 50% of the chat in ASOCC during the event was done in private mode, thereby controlling and limiting the dissemination of data What Happened (Continued)

10. UNCLASSIFIED 10 Why It Happened & Workarounds Military networks in the Affected Area of Interest became non-operational as soon as the hurricane hit All power in the Affected Area of Interest failed immediately All phones, both land line and cell, failed immediately NORTHCOM operations remained cut off from non-military users

11. UNCLASSIFIED 11 What Should Be Done DISA should ensure that NCES (Network-Centric Enterprise Services) and JC2 (Joint Command & Control) requirements include the requirement to support non-DoD users from the start JFCOM (Joint Forces Command) must give homeland security mission requirements a high priority for JC2 experimentations ASD(HD) should make it their top priority to work with DHS to build a common information sharing environment. DISA should operationalize the 80% solution NOW for information sharing they have available now from the ACTD program as an interim solution rather than try to provide the perfect solution some years from now. DISA should provide funding for a robust information sharing capability based on the HLS/D C2 ACTD services

12. UNCLASSIFIED 12 NEPLO Comments during Katrina operations [2005-09-01 23:42:57] NEPLO LA: It is an incredible tool. We can do more with one NEPLO sitting here on [ASOCC] chat tied to the world than the entire general staff with cast of thousands that can not get out on email or phone. [2005-09-02 09:13:42] COMM : Question - can any NEPLOS get NIPRNET - PORTALS, DSEL yet? Things are going to get very hairy fast. I would like to ensure all NEPLOs have access to what will be significant flow of information.. [2005-09-02 09:16:05] FEMA REG 6b : Negative at FEMA VI. Is the Navy Virtual Desktop up? I can't get it to run [2005-09-02 09:22:13] CNRF N34 : ---The only internet links we have are from our laptops over lines provided at headquarters...We have had a cable with outlets installed at the Baton Rouge Reserve center...NMCI went down at the start of this action so all Navy computers are useless...NEPLOs are operating on our 'old' laptops or personal laptops.... [2005-09-02 09:24:03] COMM : Morning...you only have access to internet is the bottomline: I need to find alternate ways to get info to all your folks...they are the best group of eyes and ears I have ever seen. [2005-09-02 09:29:40] CNRF N34 : Thanks,...wish others had listen to us before this...we may be able to get on...we had the Log on computer at EOC...Please tell ADM Keating his Navy boys are coming through...

13. UNCLASSIFIED 13 Questions