View as a webpage / Share

Volume 23 — Issue 30 | July 27, 2023

AskRail gives first responders and ECCs rapid access to railcar hazmat information

The Feb. 3 East Palestine, Ohio, train derailment served as a reminder that first responders across the United States need rapid and easy access to information about hazardous materials on trains passing through their jurisdictions.

As a backup to the train’s consist and conductor, AskRail is a free application for first responders that provides immediate access to accurate, timely data about what type of hazardous materials (hazmat) a railcar is carrying so they can make an informed decision about how to respond to a rail emergency.

The AskRail app was created in 2014 as a collaborative effort between America's Class I freight railroads; Amtrak; the International Association of Fire Chiefs; the Association of American Railroads (AAR), and its subsidiary Railinc, who administers the app and associated services. The application is available for mobile devices, desktop computers, and the web, and technical support is provided by Railinc.

For security reasons, AskRail is not available to the public. Applicants must be vetted and approved for access to AskRail by a Class 1 freight railroad. First responders who could potentially respond to a rail-related incident are eligible.

While the app has been available to first responders since its launch in 2014, railroads have since expanded those eligible for access. AAR is currently working with emergency management agencies to pilot the integration of AskRail into emergency communications centers (ECCs), so that ECCs can push rail-related hazmat information to first responders at an incident scene.

Applying for access to AskRail is a streamlined process. Applicants can download the free app and then complete and submit the registration form within the app. The registration form asks for basic information about the individual’s job role and organization. Applicants select the Class 1 railroad located in their response area, who will become the sponsor. Upon submittal, the app automatically sends this information to the appropriate railroad for approval.

AAR is encouraging railroads to offer the app to known emergency responders along their routes. The railroad industry is encouraging state and local ECCs to integrate AskRail into operations. Finally, emergency services agencies operating in jurisdictions with railroads are encouraged to request access to AskRail.

AAR and the Class 1 freight railroads encourage first responders and emergency planners to share this information widely with fellow responders and their local ECCs who could benefit from this valuable and free service.

AAR provides a fact sheet for first responders on AskRail, with information on the app’s purpose and how to access it. A fact sheet for ECCs is now available as well. Additional information is available at AAR.org/AskRail.

Contact support@AskRail.us with any questions.

(Sources: AAR, AskRail)

Highlights

AskRail gives first responders and ECCs rapid access to railcar hazmat information

ASPR publishes EMS Infectious Disease Playbook, Version 2.0

DHS announces final allocation of $605 million in FY2023 competitive preparedness grants

IPSA hosts virtual Public Safety Summit, Dec. 12-13, 2023

Cyber Threats

The U.S. Fire Administration operates the Emergency Management and Response – Information Sharing and Analysis Center (EMR-ISAC).

For information regarding the EMR-ISAC visit www.usfa.dhs.gov/emr-isac or contact the EMR-ISAC office at: (301) 447-1325 and/or fema-emr-isac@fema.dhs.gov.

ASPR publishes EMS Infectious Disease Playbook, Version 2.0

The Administration for Strategic Preparedness and Response (ASPR) recently released an updated version of its EMS Infectious Disease Playbook. Subject matter experts reviewed the previous version of the playbook, which was released in 2017. The current Version 2.0 now incorporates information on Mpox and COVID-19.

The playbook synthesizes multiple sources of information on the full spectrum of infectious agents that may be encountered by emergency medical services (EMS) agencies into a single, concise reference and planning resource. The recommendations are intended to be incorporated into agency standard operating procedures and reviewed by the EMS medical director.

Safe response by EMS requires an integrated approach, starting with the caller and dispatcher, and continuing with appropriate protocols for the EMS response on-scene, use of environmental controls and personal protective equipment (PPE), and transport to a healthcare facility.

The 100-page playbook begins with a section on best practices for call taking and dispatch that facilitate screening for infectious diseases and for performing an initial assessment of the patient in the field. This section includes a screening algorithm for dispatch and an on-scene assessment algorithm for EMS responders.

The next section covers standard practices to protect against contact with blood, body fluids, non-intact skin (including rashes), and mucous membranes for all patient encounters.

The following sections cover specific considerations for contact, droplet, and airborne exposures presented by various infectious diseases. These sections cover examples of the diseases; the goals of the precautions; dispatch actions; arriving EMS actions and considerations; PPE selection, donning and doffing; transport considerations; and ambulance decontamination practices.

The final two sections cover special precautions for respiratory diseases such as Middle East Respiratory Syndrome (MERS), novel influenza strains, smallpox, Mpox, and COVID-19, as well as high consequence infectious diseases such as ebola virus disease and viral hemorrhagic fever (EVD/VHF).

The document includes and extensive list of references linking to sources for the recommended protocols in the playbook. These include the latest guidance from the Centers for Disease Control and Prevention, Environmental Protection Agency, World Health Organization, Occupational Safety and Health Administration, National Highway Traffic Safety Administration, National Institutes of Health, National Emerging Special Pathogens Training and Education Center, medical research journals, private sector EMS agencies, and others.

The EMS Infectious Disease Playbook, Version 2.0 is available within the EMS Resource Collection of ASPR’s Technical Resources, Assistance Center, and Information Exchange (TRACIE).

(Source: ASPR TRACIE)

DHS announces final allocation of $605 million in FY2023 competitive preparedness grants

On July 21, the Department of Homeland Security (DHS) announced final allocations of $605 million in six Fiscal Year (FY) 2023 competitive preparedness grant programs which help prepare the nation against threats and natural disasters.

The grant programs provide funding to state, local, tribal, and territorial governments, nonprofit agencies, and the private sector to build and sustain capabilities to prevent, protect against, respond to and recover from acts of terrorism and other disasters. 

This year, DHS will prioritize six critical areas: cybersecurity, soft targets and crowded places, intelligence and information sharing, domestic violent extremism, community preparedness and resilience, and election security.

The six competitive grants and their allocations are:

• Homeland Security Grant Program: Operation Stonegarden - $90 million.
• Tribal Homeland Security Grant Program - $15 million.
• Nonprofit Security Grant Program - $305 million. This year, $152.5 million is provided to nonprofits in Urban Area Security Initiative-designated areas, and $152.5 million is provided to nonprofits outside those designated urban areas located in any state or territory.
• Port Security Grant Program - $100 million.
• Transit Security Grant Program - $93 million.
• Intercity Bus Security Grant Program - $2 million.

For more information, see DHS’ news release and visit FEMA.gov/grants.

(Sources: DHS, FEMA)

IPSA hosts virtual Public Safety Summit, Dec. 12-13, 2023

The International Public Safety Association (IPSA) is hosting a Public Safety Summit on Dec. 12-13, 2023.

This low-cost, online-only event will bring together all types and levels of public safety officials - law enforcement, fire, EMS, telecommunications, emergency management and allied emergency responders from around the United States and internationally. Attendees will walk away with several educational resources, tips, and strategies that they can apply in their agency.

IPSA anticipates between 8 and 12 presenters will speak during this 2-day summit, covering a variety of public safety topics. Presenters will be selected in August 2023, and case studies from first responders that had a role in a recent (2022-2023) critical incident will be prioritized.

IPSA encourages 911 personnel, law enforcement, firefighters, EMS, tactical paramedics, emergency management personnel, public safety civilian personnel, healthcare professionals and allied emergency responders to attend this two-day multidiscipline, collaborative event.

Early bird registration is open through Monday, July 31, 2023. Learn more and register on IPSA’s website.

(Source: IPSA)

Cyber Incident Assistance

MS-ISAC
SOC@cisecurity.org
1-866-787-4722

IdentityTheft.gov

IC3

Cybercrime Support Network

General Information

StopRansomware.gov

CISA's Known Exploited Vulnerabilities Catalog

FTC scam list

CISA alerts

Law Enforcement Cyber Center

TLP Information

CISA releases analysis of FY22 Risk and Vulnerability Assessments

CISA has released an analysis and infographic detailing the findings from the 121 Risk and Vulnerability Assessments (RVAs) conducted across multiple critical infrastructure sectors in fiscal year 2022 (FY22).

The analysis details a sample attack path including tactics and steps a cyber threat actor could follow to compromise an organization with weaknesses representative of those CISA observed in FY22 RVAs. The infographic highlights the most successful techniques for each tactic that RVAs documented. Both the analysis and infographic map threat actor behavior to the MITRE ATT&CK® framework.

CISA encourages network defenders to review the analysis and infographic and apply the recommended mitigations to protect against the observed tactics and techniques.

(Source: CISA)

FCC Consumer Guide: Cell Phone Fraud

Cellular fraud is defined as the unauthorized use, tampering or manipulation of a cellular phone or service. Types of cellular fraud include SIM swapping, cloning and subscriber fraud.

Your mobile phone number may be the key to your most important financial accounts.  Text messages are often used by banks, businesses and payment services to verify your identity when you request updates to your account.

Mobile phone numbers can legally be ported from one provider to another when you switch your mobile phone service. They can also be ported from one mobile phone to another when you upgrade or change devices. 

Scammers have been known to initiate porting requests or steal the victim’s SIM card directly. In either case, the scammer can gain control over the victim's private texts and calls and may then try to reset credentials for the victim's financial data and social media accounts.  If successful, the scammer can drain the victim’s bank accounts and sell or ransom their social media data.

See the full Consumer Guide: Cell Phone Fraud from the Federal Communications Commission (FCC) to learn more about this scam and how to protect yourself.

(Source: FCC)

HC3: Analyst Note - Remote Identity Management

Identity theft is not limited to stolen medical records, social security numbers, and financial data. Threat actors can also target institutions by capitalizing on gaps in user access protocols, hiring processes, and mitigation capabilities to conceal some aspect of their identity and attentions. Identity verification, fraud detection and user authentication are imperative when implementing a robust Identity and Access Management (IAM) program.

Security professionals and institution leaders are becoming increasingly faced with fraud from misrepresentation of identity. According to the Federal Trade Commission (FTC) Consumer Sentinel Network Data Book, there were 5.2 million fraud reports in 2022, with identity theft and imposter scams representing the top two categories, respectively. Cyber criminals will look for avenues to manipulate and obfuscate their true identities for gain. The U.S. Treasury, the State Department, and the Federal Bureau of Investigations have issued alerts warning businesses that North Korean cyber criminals are posing as remote IT workers for hire from the U.S., Eastern Europe, Japan, South Korea, and China. The scammers also sub-contracted with other more legitimate workers to enhance their credibility. This threat emphasizes the need for a strong IAM program to protect data from espionage, intellectual property theft, and spills.

Read the full Analyst Note from the Department of Health and Human Services (HHS) Health Sector Cybersecurity Coordination Center (HC3).

(Source: HHS HC3)

Ransomware prompted emergency declaration for Mississippi county

Mississippi’s George County suffered a significant ransomware attack earlier this month. The attackers encrypted all three of the county’s servers, downing “nearly all of the government’s in-office computers,” Recorded Future News reported. Soon after, the county supervisors declared a local emergency, per Alabama Media Group’s AL.com. That declaration let them bypass traditional bidding processes and contract immediately with IT professionals.

Attackers had gained access to county systems via a phishing email designed to look like a routine system update reminder. When an employee clicked on a link in the email, cyber extortionists were able to gain initial access. The perpetrators then moved laterally among computers until they obtained an administrative account that let them reach the wider network. The extortionists demanded a steep ransom for a jurisdiction of fewer than 25,000 people, leading investigators to think the perpetrators didn’t realize how small George County is.

The county decided not to pay. The county contacted the Federal Bureau of Investigation (FBI) on Monday and the local sheriff’s department and several state agencies have collaborated on incident response.

(Source: GovTech)

The InfoGram is distributed weekly to provide members of the Emergency Services Sector with information concerning the protection of their critical infrastructures.

Fair Use Notice:
This InfoGram may contain copyrighted material that was not specifically authorized by the copyright owner. The EMR-ISAC believes this constitutes “fair use” of copyrighted material as provided for in section 107 of the U.S. Copyright Law. If you wish to use copyrighted material contained within this document for your own purposes that go beyond “fair use,” you must obtain permission from the copyright owner.

Linking Policy and Disclaimer of Endorsement:
The appearance of external hyperlinks does not constitute endorsement of the linked websites, or the information, products or services contained therein. We provide these links and pointers solely for your information and convenience. When you select a link to an outside website, remember that you are subject to the privacy and security policies of the owners/sponsors of the outside website. To view information and resources on the policies that govern FEMA web content visit FEMA Website Information.

Section 504 Notice:
Section 504 of the Rehabilitation Act requires that FEMA grantees provide access to information for people with disabilities. If you need assistance accessing information or have any concerns about access, please contact FEMAWebTeam@fema.dhs.gov.