View as a webpage / Share

Volume 23 — Issue 1 | January 5, 2023

January is Fire Fighter Cancer Awareness Month

At last September’s IAFF Fallen Fire Fighter Memorial, almost 75% of the names added to the memorial wall were members who had died from occupational cancer, according to the International Association of Fire Fighters (IAFF). Cancer is a leading cause of death among firefighters, and research suggests firefighters are at higher risk of certain types of cancers when compared to the general population.

The following are some significant advances in research and legislation that were made in the past year in the fight against firefighter occupational cancers and resources you can use to promote firefighter cancer awareness this month.

The International Agency for Research on Cancer (IARC) published a study that found “occupational exposure as a firefighter causes cancer.” This study was significant because it found sufficient evidence for a causal link between several firefighting-related exposures and specific types of cancers, including mesothelioma and bladder cancer. More limited evidence associated colon, prostate, and testicular cancers as well as melanoma and non-Hodgkin lymphoma with firefighting exposures.

The National Institute for Occupational Safety and Health (NIOSH) conducted a pilot test of its National Firefighter Registry (NFR) web portal with a fire department in Ohio. The NFR is a voluntary registry open to all U.S. firefighters that will study the relationship between firefighting and cancer over time, even if cancer diagnoses occur in the future. The NFR has been in development for several years and is anticipated to launch in 2023.

NIOSH and Underwriters Laboratories’ Fire Safety Research Institute (FSRI) announced the publication of a research article on exposure control options to reduce cancer risk in the fire service in August. To supplement the research, FSRI collaborators developed a free online course, Comprehensive Cancer Risk Reduction Strategies for the Fire Service as an interactive review of the Hierarchy of Controls framework. The course also advocates for firefighter participation in NIOSH’s forthcoming National Firefighter Registry.

The IAFF and the Metropolitan Fire Chiefs Association released a joint statement on the adverse health risks associated with firefighter turnout gear. Recent studies have shown all three layers of the protective clothing in turnout gear contain per- and poly-fluoroalkyl substances (PFAS), which are persistent chemicals linked to cancer.

On Dec. 20, the Protecting Firefighters from Adverse Substances Act, or the PFAS Act, was signed into law. The new law directs the Federal Emergency Management Agency to develop guidance for firefighters and other emergency response personnel on best practices to protect them from exposure to PFAS in their personal protective equipment and in PFAS-containing firefighting foams.

On Dec. 23, the Federal Firefighters Fairness Act was signed into law as part of the 2023 National Defense Authorization Act. The legislation entitles federal and military firefighters who become disabled by serious diseases, including certain cancers, to the presumption that the illness was contracted on the job. This “cancer presumption” relieves federal firefighters from the burden of proof of identifying specific exposures that may have caused their illness and gives them access to workers compensation and disability benefits on par with those already available to state, county, and municipal firefighters.

To promote firefighter cancer awareness this month, see the Safety Stand Down materials compiled by the IAFF and the Fire Fighter Cancer Support Network (FCSN), organized around weekly themes related to the scope of the problem, research, prevention, and how to lead culture change and care for cancer survivors.

(Sources: IARC, NIOSH, IAFF, FSRI, Congress.gov, Carbajal.House.gov, FCSN)

Highlights

January is Fire Fighter Cancer Awareness Month

DOJ releases report, “Mass Shootings in American Cities: Mayors' Experiences and Lessons Learned”

FEMA releases 2022 National Preparedness Report

State of 911 webinar series: PSAP/railroad interaction and Intelligent Transportation Systems

Cyber Threats

The U.S. Fire Administration operates the Emergency Management and Response – Information Sharing and Analysis Center (EMR-ISAC).

For information regarding the EMR-ISAC visit www.usfa.dhs.gov/emr-isac or contact the EMR-ISAC office at: (301) 447-1325 and/or fema-emr-isac@fema.dhs.gov.

DOJ releases report, “Mass Shootings in American Cities: Mayors' Experiences and Lessons Learned”

The Department of Justice (DOJ), Office of Community Oriented Policing Services (COPS Office) recently released a report, Mass Shootings in American Cities: Mayors' Experiences and Lessons Learned.

This 20-page report provides guidance for future planning and response to mass shooting incidents. The guidance is based on recommendations offered during a January 2020 Winter Meeting of the U.S. Conference of Mayors. During this meeting, nine mayors gave personal accounts of their experiences during and after the following mass shootings in their cities:

1. July 16, 2015 - Chattanooga, Tennessee. A shooting in military facilities in which five personnel were killed and a U.S. Marine and a police officer were wounded.
2. June 12, 2016 - Orlando, Florida. The Pulse nightclub shooting in which 49 people were killed and 53 were wounded.
3. Feb 14, 2018 - Parkland, Florida. A high school shooting in which 17 people, 14 of them students, were killed and 17 were wounded.
4. June 28, 2018 - Annapolis, Maryland. A shooting in a newspaper office in which five people were killed and two were injured.
5. Oct 27, 2018 - Pittsburgh, Pennsylvania. A synagogue shooting in which 11 people were killed and six were wounded.
6. July 28, 2019 - San Jose, California. A festival shooting in neighboring Gilroy in which three people were killed and 17 were wounded.
7. Aug 3, 2019 - El Paso, Texas. A Walmart shooting in which 23 people were killed and 24 were wounded.
8. Aug 4, 2019 - Dayton, Ohio. A shooting outside a bar in which nine people were killed and 17 were wounded.
9. Dec 10, 2019 - Jersey City, New Jersey. A shooting at a kosher market and in a cemetery in which four people, including a police detective, were killed and three were wounded.

The mayors’ personal accounts and recommendations were recorded and are now available for viewing online. These presentations were followed by a briefing from officials directly involved in the City of Orlando’s response to the Pulse nightclub shooting in 2016, which also contributed to the guidance included in this report.

The report outlines the preparation that should take place in anticipation of an incident occurring, the critical importance of communication during the response to an incident, and the wide range of tasks that must be anticipated in the incident’s wake.

Access the report in the COPS Office Resource Center. The original meeting materials and video recordings are available at the U.S. Conference of Mayors website and YouTube channel.

(Sources: DOJ, U.S. Conference of Mayors, Gun Violence Archive)

FEMA releases 2022 National Preparedness Report

FEMA’s National Preparedness Report summarizes the state of national preparedness, discussing the risks the nation faces and how those risks drive whole-community emergency management capability requirements.

In this year’s report, most communities identified cyberattacks, pandemics, and flooding as the threat and hazard types of most concern. The report underscores the continued threat of climate change, which has significantly shifted weather patterns and created capability gaps in disaster preparedness.

The report analyzes Threat and Hazard Identification and Risk Assessment (THIRA) and Stakeholder Preparedness Review (SPR) data reported by communities across the nation in 2021 and compares this data against the National Capability Targets. Some highlighted findings from this year’s analysis include:

• 92% of communities identified at least one natural hazard associated with climate change as being most stressful to emergency management capabilities in their assessments.
• The nation overall has the lowest capability in the Body Recovery/Storage and Medical Care target areas. This indicates the nation may not be adequately prepared to provide sufficient Body Recovery/Storage and Medical Care in the face of a catastrophic disaster.
• Factors such as poverty, lack of access to transportation, and over-capacity housing occupancy continue to weaken the ability of individuals and communities to prevent injury, death and financial loss in a disaster.

The report identifies management opportunities that can assist communities in managing risks and addressing capability gaps.

The National Preparedness Report was established in Presidential Policy Directive/PPD-8, signed on March 30, 2011, which required the Secretary of Homeland Security to submit to the President the first national preparedness report based on the National Preparedness Goal.

Emergency managers and whole community partners across the nation can look to this year’s report to help support decisions about program priorities, resource allocations, and community actions.

See FEMA’s press release to learn more. Access the report on FEMA.gov.

(Source: FEMA)

State of 911 webinar series: PSAP/railroad interaction and Intelligent Transportation Systems

The National Highway Traffic Safety Administration’s (NHTSA’s) National 911 Program will host a webinar in its State of 911 series on Tuesday, Jan. 10, 2023, at 12 p.m. EST entitled PSAP/railroad interaction and Intelligent Transportation Systems.

Responding to incidents that are on or near railroad tracks or threaten railroad infrastructure requires some special considerations for Public Safety Answering Points / Emergency Communications Centers (PSAPs/ECCs). To determine the location of the incident, railroads typically use a milepost, cross street or crossing identification system rather than a street address or intersection.

For the first part of this webinar, speakers from the Federal Railroad Administration (FRA) will review FRA information and resources for 911 telecommunicators, dispatchers, and first responders, including the Emergency Notification System, railroad crossing data, GIS data, and more.

The second part of the webinar will discuss Intelligent Transportation Systems (ITS) and 911 with a real-world example. To enhance the delivery of public safety services during emergency situations and improve traffic congestion management, the McConnell Public Safety and Transportation Operations Center (MPSTOC) brings together multiple agencies from Fairfax County and the Commonwealth of Virginia. Speakers from the Virginia Department of Transportation and the MPSTOC will describe the operating concepts of the MPSTOC and how the agencies all work together, as well as how 911 benefits from collocation with, and access to, Intelligent Transportation Systems and ITS data sharing.

The State of 911 webinar series is designed to provide useful information for the 911 stakeholder community about federal and state participation in the planning, design, and implementation of Next Generation 911, or NG911 systems. It includes real experiences from leaders utilizing these processes throughout the country.

The recording and slide deck from every webinar in the series is available online. Sign up for email alerts to be notified when upcoming webinars are announced.

Learn more and register for this webinar at 911.gov.

(Source: National 911 Program)

Cyber Incident Assistance

MS-ISAC
SOC@cisecurity.org
1-866-787-4722

IdentityTheft.gov

IC3

Cybercrime Support Network

General Information

StopRansomware.gov

CISA's Known Exploited Vulnerabilities Catalog

FTC scam list

CISA alerts

Law Enforcement Cyber Center

TLP Information

NIST finalizes cybersecurity guidance for ground segment of space operations

The National Institute of Standards and Technology (NIST) has published the final version of its guidance on applying the Cybersecurity Framework to the ground segment of space operations, specifically satellite command and control.

NIST’s widely used Cybersecurity Framework consists of standards, guidelines and practices for protecting critical infrastructure. This voluntary framework is designed to help organizations manage their cybersecurity risks.

The NIST Interagency Report (IR) 8401 aims to apply the Cybersecurity Framework to satellite command and control, creating a profile for the space sector’s ground segment in an effort to help stakeholders manage risk. The goal of the profile is to complement existing security measures in an organization.

NIST’s guidance comes in response to the U.S. government viewing space as an increasingly important element of critical infrastructure.

(Source: Security Week)

HC3 Analyst Note – Clop Ransomware

Clop operates under the Ransomware-as-service (RaaS) model, and it was first observed in 2019. Clop was a highly used ransomware in the market and typically targeted organizations with a revenue of $5 million U.S. Dollars (USD) or higher. Since its appearance, HC3 is aware of attacks on the Health and Public Health (HPH) sector. The HPH sector has been recognized as being a highly targeted industry for the Clop ransomware.

Read the full Analyst Note from the Department of Health and Human Services (HHS) Health Sector Cybersecurity Coordination Council (HC3).

(Source: HHS HC3)

2022 in review: FedRAMP reform enacted, SAMOSA Act progresses

The latest iteration of the Federal Risk and Authorization Management Program (FedRAMP) bill became law in late December as part of the NDAA after an uphill battle for almost six years. FedRAMP is a crucial cybersecurity certification that cloud service providers must obtain prior to working with U.S. government data. The new legislation will significantly reform the FedRAMP cybersecurity authorization program for cloud vendors by allowing FedRAMP-authorized tools to be used in any federal agency without additional oversight or verification.

Congress introduced bipartisan legislation earlier this year that would mandate the consolidation of federal agency software licenses and force agencies to take a more transparent approach to software purchasing. The Strengthening Agency Management and Oversight of Software Assets Act (SAMOSA) would require government departments to purchase unlimited software contracts and require greater software interoperability from services they procure from Big Tech companies.

(Source: FedScoop)

Ransomware gang apologizes, gives SickKids hospital free decryptor

The LockBit ransomware gang has released a free decryptor for the Hospital for Sick Children (SickKids), saying one of its members violated rules by attacking the healthcare organization. SickKids is a teaching and research hospital in Toronto that focuses on providing healthcare to sick children.

On December 18th, the hospital suffered a ransomware attack that impacted internal and corporate systems, hospital phone lines, and the website. While the attack only encrypted a few systems, SickKids stated that the incident caused delays in receiving lab and imaging results and resulted in longer patient wait times. On December 29th, SickKids announced that it had restored 50% of its priority systems, including those causing diagnostic or treatment delays.

However, this does not explain why LockBit did not provide a decryptor sooner, with patient care being impacted and SickKids working to restore operations since the 18th. Furthermore, LockBit has a history of encrypting hospitals and not providing decryptors, as was seen in its attack against the Center Hospitalier Sud Francilien (CHSF) in France, where a $10 million ransom was demanded, and patient data eventually leaked.

This is not the first time a ransomware gang has provided a free decryptor to a healthcare organization. In May 2021, the Conti Ransomware operation provided a free decryptor to Ireland’s national health service, the HSE, after facing increased pressure from international law enforcement.

(Source: Bleeping Computer)

The InfoGram is distributed weekly to provide members of the Emergency Services Sector with information concerning the protection of their critical infrastructures.

Fair Use Notice:
This InfoGram may contain copyrighted material that was not specifically authorized by the copyright owner. The EMR-ISAC believes this constitutes “fair use” of copyrighted material as provided for in section 107 of the U.S. Copyright Law. If you wish to use copyrighted material contained within this document for your own purposes that go beyond “fair use,” you must obtain permission from the copyright owner.

Linking Policy and Disclaimer of Endorsement:
The appearance of external hyperlinks does not constitute endorsement of the linked websites, or the information, products or services contained therein. We provide these links and pointers solely for your information and convenience. When you select a link to an outside website, remember that you are subject to the privacy and security policies of the owners/sponsors of the outside website. To view information and resources on the policies that govern FEMA web content visit FEMA Website Information.

Section 504 Notice:
Section 504 of the Rehabilitation Act requires that FEMA grantees provide access to information for people with disabilities. If you need assistance accessing information or have any concerns about access, please contact FEMAWebTeam@fema.dhs.gov.