1. U. S. Department of Homeland Security

2. 2 DHS MISSION We will lead the unified national effort to secure America. We will prevent and deter terrorist attacks and protect against and respond to threats and hazards to the nation. We will ensure safe and secure borders, welcome lawful immigrants and visitors, and promote the free-flow of commerce.

3. Department of Homeland Security Organization Chart (proposed end state) SECRETARY DEPUTY SECRETARY U/S MGMT CHIEF OF STAFF EXECUTIVE SECRETARY MILITARY LIAISON CHIEF FINANCIAL OFFICER U/S POLICY U/S PREPAREDNESS GENERAL COUNSEL U/S S & T A/S PUBLIC AFFAIRS INSPECTOR GENERAL A/S CONGRESSIONAL & INTERGOVERNMENTAL AFFAIRS DIRECTOR OF OPERATIONS COORDINATION DIRECTOR CIVIL RIGHTS / CIVIL LIBERTIES DIRECTOR OF COUNTER NARCOTICS CHIEF PRIVACY OFFICER OMBUDSMAN CIS A/S OFFICE OF I & A COMMISSIONER ICE DIRECTOR FEMA DIRECTOR CIS COMMISSIONER CBP DIRECTOR TSA DIRECTOR USSS COMMANDANT USCG LABOR RELATIONS BOARD SCREENING COORDINATION OFFICE DOMESTIC NUCLEAR DETECTION OFFICE FEDERAL LAW ENFORCEMENT TRAINING CENTER

4. 4 U/S – Under Secretary A/S – Assistant Secretary Secretary U/S Management U/S Information Analysis & Infrastructure Protection (IAIP) U/S FEMA U/S Border & Transportation Security (BTS) U/S Science & Technology Homeland Security Operations Center (HSOC) Information & Analysis (Intel) Infrastructure Protection (IP) Director Operations Directorate A/S Office of Intelligence & Analysis U/S Management U/S FEMA U/S Science & Technology U/S Policy U/S Preparedness Infrastructure & Protection Secretary Pre November 2005 Post November 2005

5. 5 ExecSec/Staff Action Officer Chief of Staff DHS Operations Directorate Director Deputy Director Admin. Assistant Future Ops Current OpsIMD FOIA/Records/Privacy HSOCTechnologyGCADMIN Admin. Assistant Operations Special Assistant Operations Production Staff Security Executive Assistant USP3 Special Assistant

6. 6 Homeland Security Operations Center (HSOC)

7. 7 HSOC Responsibilities DAILY RESPONSIBILITIES Collect operational and terrorist related information from all available sources (Federal, State, Local & Private Sector) from across the US and pass the information on to appropriate Intel & LE agencies, DHS Leadership and to the White House Maintain and share, daily, Domestic Situational Awareness Act as the “Indication and Warning” Element of DHS INCIDENT MANAGEMENT RESPONSIBILITIES Act as the primary National level hub in Domestic Incident Management events for operational communications and info sharing Act as primary conduit to the White House and the Secretary for Domestic Situational Awareness during a catastrophic event within the US

8. 8 Homeland Security Operations Center HSOC National Fusion Center Office of Intelligence & Analysis Infrastructure Protection Information Protecting America and It’s Critical Infrastructure Collect & Fuse All Source Information/Raw Data

9. 9 HSOC Daily Responsibilities On a daily basis, attempt to identify terrorist threats to the United States:  Who or what is approaching the borders, attempting to cross the borders, or residing within the borders, that could bring harm to the US  Collect and fuse information from internal and external intelligence and law enforcement agencies  Conduct initial screen and verification of incoming data prior to passing suspicious activities on to DHS Intelligence analysts and other Federal, State, Local and Private agencies

10. 10 Daily Information Gathering & Refinement Cycle  2400-0500 – Review Daily Situation Reports from DHS Sub- Components (USCG/USSS/ICE/CBP/TSA/FPS) and other external Intelligence and LE agencies, as well as the Private Sector  0100 – Coordination SVTC with all the Agencies to review the morning briefing items  0300 – DHS Production Meeting to review the morning briefing items  0600 – Secretary’s Morning Brief (SMB): Complete and Distribute final daily briefing product to the Secretary  0730 – HS Operations Morning Brief (HSOMB): Share the National picture on Sensitive, But Unclassified (SBU), Information w/F/S/L intelligence and LE Agencies and the Private Sector

11. 11  0900 – (1 st Secure Video Teleconference): Daily information sharing with White House and Inter-agencies  0945 – HSOC: Internal sharing of overnight information and assignment of work priorities to Watch desk officers/agencies  1500 – 2 nd SVTC: White House and a larger group of Federal agencies on updates to information  2000 – Begin closing out current day items and prepare for the next day’s cycle Daily Information Gathering & Refinement Cycle (Cont)

12. 12 HSOC Incident Management Mission The NRP has designated the HSOC as the National-level hub for information sharing management during domestic incidents Information sharing and operational coordination is conducted through Emergency Operations Centers, Homeland Security Advisors and other involved government agencies at the Fed, State, Local, Tribal, and Regional levels, and the Private Sector The HSOC provides primary Situational Awareness and requests for information to the Secretary, to the IIMG (when stood up) and to the White House

13. 13 HSOC Composition  Central Intelligence Agency  Defense Intelligence Agency  National Security Agency  National Geospatial Intelligence Agency  Federal Bureau of Investigation  Department of Interior (US Park Police)  Drug Enforcement Administration  Alcohol, Tobacco, and Firearms  Department of Energy  Department of State  Department of Defense  Department of Transportation  Department of Labor  U.S. Postal Inspection Service  U. S. Coast Guard  Customs and Border Protection  Immigration Customs Enforcement  Citizenship and Immigration Service  Transportation Security Administration  Federal Air Marshal Service  Federal Protective Service  U. S. Secret Service  U. S. Computer Emergency Readiness Team  U.S. Nuclear Regulatory Commission (as required)  U.S. Department of the Treasury (as required)  District of Columbia Metro PD  U. S. Capitol Police  Virginia State PD  Maryland State PD  New York PD  New Jersey State PD  Los Angeles PD  Las Vegas PD  Boston PD  Chicago PD INCIDENT MANAGEMENT  Federal Emergency Management Agency  Department of Veterans Affairs  Department of Health and Human Services  National Oceanic Atmospheric Administration  Environmental Protection Agency OVERARCHING  Office of Intelligence and Analysis  Infrastructure Protection: National Infrastructure Coordinating Center & Risk Management Division  State and Local Coordination Liaison  Science and Technology Directorate  Public Affairs  Geo-Spatial Mapping Office  Domestic Nuclear Detection Office  National Biosurveillance Support Group

14. 14 IIMG

15. 15 Interagency Incident Management Group (IIMG)  Senior subject matter experts from all government agencies who report to DHS HQ during an event to provide strategic level recommendations/courses of action  The HSOC is responsible for recalling the IIMG, providing its situational awareness and contributing admin and logistical support  The IIMG establishes itself adjacent to and within the HSOC under the Operations Directorate

16. 16 HSOC/IMD Support to IIMG  The Incident Management Division (IMD) takes hand-off from HSOC and focuses on single, specific events while serving as the Executive Staff for the IIMG  The HSOC provides the IIMG with Situational Awareness (SA) primarily through its desk officers who, in most cases, represent the agencies sitting on the IIMG  The HSOC receives IIMG Requests For Information (RFI’s) & fulfills those requests through the resident desks HSOCHSOC IMD / IIMG Private Sector SA RFIs

17. 17 Monitoring Special Events Events come in Five Categories: National Special Security Events (NSSEs) (Democratic or Republican National Conventions, Inauguration, etc) Examples: Level 1: NY City New Years Eve Level 2: World Series Level 3: Kentucky Derby Level 4: Local Events

18. 18 Homeland Security Information Network The Homeland Security Information Network is: The primary conduit to reach agencies and operations centers at the Federal, State, Local, & Private Sector levels HSIN determines user access by placing agencies into communities of interest (Law Enforcement, Emergency Operations, Intel, etc) Most of HSIN is a restricted, protected (128-192 bit encryption), unclassified system riding the Internet HSIN provides a collaborative environment for real time sharing of info to include charts, reports, and graphics HSIN is currently capable of passing Secret level information to State EOC’s and selected Police Departments and soon to all COIs

19. 19 HSIN Rollout  Operational in all 50 states, District of Columbia, the 5 U.S. Territories and 53 major urban areas  Operational in 3 foreign countries (United Kingdom, Canada, and Australia)  Estimated 50,000 members of various communities of interest and growing  40,000 P3 (Public Private Partnership)  6,000 Federal government employees  2,500 law enforcement personnel  2,000 state and local participants  HSIN-Secret is operational in 50 state EOCs and 18 additional state and local law enforcement facilities

20. 20 Homeland Security Information Network (HSIN) Emergency Management Secret Level LEO RISSNet CISANet INTELLIGENCE (IA’s Internal Network) JRIES LE Analysis Law Enforcement Critical Sectors Public Private Partnership CWIN (Critical infrastructure Warning & Information Network) Counter Terrorism International Federal Operation Centers

21. 21 Common Operating Picture (COP)

22. 22  Facilitate real-time collaboration and sharing on a secure system. Additionally, it will:  Share national level situational awareness (SA) with Law Enforcement and Intelligence agencies at all levels  Identify and access current and future threats to the U.S.  Map and overlay possible threats against key infrastructure  Allow graphic geospatial mapping for easy visualization & analysis  Currently, work through the use of IMAP licenses  Eventually be at 3 levels – Unclass, LE Sensitive & Secret Common Operating Picture (COP)

23. 23 The 24x7x365 HSOC point of entry is Senior Watch Officer (SWO) 202-282-8101 Email: HSOC.SWO@DHS.GOV HSOC Point of Contact

25. BACK UP

26. 26 Pre November 2005 Secretary Integration Staff U/S Management U/S FEMA U/S Information Analysis & Infrastructure Protection (IAIP) U/S Science & Technology U/S Border & Transportation Security (BTS) Director Homeland Security Operations Center (HSOC) A/S Information & Analysis (Intel) A/S Infrastructure Protection (IP) U/S – Under Secretary A/S – Assistant Secretary

27. 27 Post November 2005 Secretary Director Operations Directorate U/S ManagementA/S FEMA U/S Science & Technology U/S Preparedness Infrastructure & Protection A/S Office of Intelligence & Analysis U/S Policy U/S – Under Secretary A/S – Assistant Secretary

28. 28 Tremendous national information sharing capability by coupling HSIN and COP The COP is: Map of the U.S. + Embedded Critical Infrastructure + Suspicious Activity/Threat Overlay + Friendly Forces Overlay The COP will provide a timely, fused, and accurate display of information, from All Source Reporting The COP will be shared w/ Federal, State, Local, and Private Sector partners The COP is “managed” information drawn from a common database that is fed by track data, link intelligence, and amplifying data from numerous agencies and information sources The COP will provide access to critical information in a geographic format that significantly enhances sound decision making The DHS COP is being developed and coordinated with Interagency involvement Common Operating Picture (COP)