Order Code RS22393
Updated April 17, 2007
State and Urban Area Homeland Security
Plans and Exercises: Issues for the
110th Congress
Shawn Reese
Analyst in American National Government
Government and Finance Division
Summary
As the 110th Congress begins to address state and urban area homeland security
matters, it might opt to review activities funded with federal homeland security
assistance to ensure readiness for both terrorist attacks and natural disasters. Two
potential activities that Congress might choose to focus on are the certification of state
and urban area homeland security plans and the conduct of exercises to test the plans.
The Department of Homeland Security requires some plans, but does not certify them,
nor does it require regular testing of the plans with exercises. The department, however,
has reviewed federal, state, and urban area emergency operations plans and issued a
report on its findings in June 2006. This CRS report addresses possible policy questions
associated with homeland security plans and exercises. These issues go beyond the
federal allocation of homeland security assistance to how states and urban areas use
federal funding to prepare for terrorist attacks and natural disasters.
This report will be updated when the Department of Homeland Security actions
warrant.
The Department of Homeland Security (DHS) provides assistance programs — such
as the State Homeland Security Grant Program (SHSGP) and the Urban Area Security
Initiative (UASI) — to states and localities to assure readiness for both terrorist attacks
and natural and man-made disasters. Among the eligible activities for which states and
localities may use DHS assistance are (1) state and local planning to respond to terrorist
attacks and catastrophic events, and (2) conducting exercises to test these plans. DHS
does not currently certify state and local plans and does not require regularly scheduled
state and local exercises.
Because of the lack of such requirements, Congress might opt to address possible
policy questions in its continuing oversight of DHS activities and identify possible steps
to strengthen the nation’s homeland security. Some of the policy questions might include
the following:

CRS-2
! Should DHS certify state and urban area emergency operations and
homeland security plans as a condition of assistance?
! Should DHS require specific activities to be part of state and urban area
homeland security plans?
! Should DHS require and administer state and urban area homeland
security exercises?
State and Urban Area Plans
Since DHS’s inception, its requirements for state and local planning have evolved.
Prior to FY2006, DHS required states and urban areas — identified as Urban Area
Security Initiative (UASI) recipients — to provide a homeland security strategy as a
condition of assistance. The strategy consisted of a summary of the states’ and urban
areas’ plans to address such issues as interoperable communications, first responder
protective equipment, and capabilities to respond to the use of weapons of mass
destruction. States and urban areas were required to provide, along with the strategy, an
implementation plan that outlined how federal homeland security assistance funds would
be used to address the issues identified in the strategy document.1
In addition to the homeland security strategy, DHS, in FY2006, required states and
UASI urban areas to develop a Capability Enhancement Plan that outlined how they
intend to achieve the capabilities identified in the National Preparedness Goal. In
conjunction with this effort, states and UASI recipients are required to submit an
Investment Justification that explains the need for federal homeland security assistance
funding and how the funding would be used to address the state’s or urban area’s
Capability Enhancement Plan.2
Additionally, DHS requires states and urban areas to assess their own evacuation
plans to be eligible for FY2007 homeland security funding. Once the assessments have
been conducted, DHS sends a team of former state and local emergency management and
homeland security personnel to visit each state and urban area to review homeland
security plans, including the evacuation plans, and determine individual state and urban
area needs for planning assistance. The state and urban area self-assessment is to include
information on the current capability for mass evacuations, catastrophic event planning,
the status of emergency operations plans, the identification of short-term actions to correct
critical problems, and a description of long-term actions to build capability to address the
identified critical problems. States and urban areas are also required to self-certify these
homeland security plans, including evacuation plans, through a checklist provided by
DHS.3
1 U.S. Department of Homeland Security, Office for Domestic Preparedness, Fiscal Year 2005
Homeland Security Grant Program: Program Guidance and Application Kit
(Washington: Nov.
2004).
2 U.S. Department of Homeland Security, Office for Domestic Preparedness, Fiscal Year 2006
Homeland Security Grant Program: Program Guidance and Application Kit
(Washington: Dec.
2005), p. 52.
3 U.S. Department of Homeland Security, Office for Grants and Training, “Nationwide Plan
Review,” Preparedness Directorate Information Bulletin No. 197, Nov. 23, 2005.

CRS-3
In June 2006, DHS released a report following its review of federal, state, and urban
area emergency operations plans, and the department found numerous shortcomings,
including the following:
! state and urban area emergency operations plans and planning processes
are not fully adequate, feasible, or acceptable to manage catastrophic
events as defined by the National Response Plan;
! states and urban areas are not conducting adequate collaborative
planning;
! state and urban area basic plans do not adequately address continuity of
operations and government;
! states and urban areas need to improve communication systems and
procedures; and
! states and urban areas have significant weaknesses in their evacuation
plans.4
Policy Questions. Two policy questions of possible interest to Congress are
whether DHS should certify state and urban area homeland security plans, and whether
DHS should require the plans to deal with specific homeland security activities. Although
DHS now requires a review of state and local plans and requires states and localities to
provide a Capability Enhancement Plan and an Investment Justification, DHS does not
now certify state and urban area homeland security plans. Some might argue that without
a certification or accreditation of the plans, DHS can not confirm the ability of states or
urban areas to respond to terrorist attacks or natural disasters. Moreover, the lack of a
federal certification process might result in states and urban areas having inadequate
plans, which in turn might result in the federal government having to bear a greater share
of the burden following a terrorist attack or natural disaster. However, certification of
state and urban area homeland security plans may add an additional administrative
burden.
DHS does not identify what homeland security plans a state or urban area should
have. DHS does provide terrorism and natural disaster scenarios that states and urban
areas should be capable of responding to, and also a list of capabilities that are required
in responding to the scenarios.5 Arguably, without further guidance on what plans to
develop, states and urban areas might have an inadequate response to terrorist attacks and
natural disasters. But without further guidance, states and urban areas might have the
opportunity to ensure their plans are flexible to react to catastrophic events that are unique
to specific geographical areas.
Besides self-assessing and self-certifying the plans, as required, states and urban
areas are encouraged to use the Emergency Management Accreditation Program (EMAP)
to assess and accredit their plans voluntarily. EMAP is an independent, non-profit
organization that administers a voluntary assessment and accreditation process for state,
4 U.S. Department of Homeland Security, Office for Grants and Training, “Nationwide Plan
Review Phase 2 Report” (Washington: Jun. 2006), p. ix.
5 U.S. Department of Homeland Security, Office for Grants and Training, National Preparedness
Goal
(Washington: Mar. 2005), available at [http://www.ojp.usdoj.gov/odp/assessments/
hspd8.htm], visited Jan. 11, 2006.

CRS-4
U.S. insular area, tribal, and local government emergency management programs. EMAP
conducts the accreditation and assessment with the state and local governments by
providing support such as the following:
! an evaluation of a jurisdiction’s emergency preparedness and response
system with voluntary, but nationally recognized, standards;
! a system for identifying areas in need of improvement and benchmarks
for progress; and
! a methodology for organizing strategic planning and corrective actions
and accountability in prioritizing resources.6
This EMAP voluntary self-assessment and self-accreditation might provide adequate
guidance for emergency response planning. Without a list of required plans, however,
states and localities may not assess and accredit the necessary plans for preparing for and
responding to terrorist incidents and catastrophic events. On the other hand, this
voluntary assessment and accreditation may result in guidance and assistance that is
tailored to each individual state and urban area, and thus avoid the possibility of DHS
developing a national template that does not take into account the specific needs of each
state and urban area.
State and Urban Area Exercises
The DHS National Integration Center provides exercise assistance to the nation and
to individual states and urban areas. The center administers a National Exercise Program
(NEP), based on Homeland Security Presidential Directive 8 (HSPD 8), which directed
DHS to establish a program to identify and integrate national-level exercise activities and
to ensure that they serve the nation as a whole.7 NEP provides exercise support, guidance,
and training for national homeland security staff. The primary national exercise
administered by DHS is Top Officials (TOPOFF), a national performance-based exercise
that includes international partners like Canada and Great Britain. The NEP does not
require states and localities to conduct homeland security exercises regularly, nor does it
identify what types of exercises to conduct.
Additionally, DHS administers the Homeland Security Exercise and Evaluation
Program (HSEEP) to assist states and urban areas in designing, developing, conducting,
and evaluating homeland security exercises. HSEEP is a threat- and performance-based
exercise program that includes varying degrees of complexity and interaction. The
program is intended to assist states and localities in establishing exercise programs and
in designing, developing, executing, and evaluating exercises.8
6 Emergency Management Accreditation Program, “EMAP Basics,” available at
[http://www.emaponline.org/?113], visited Jan. 11, 2006.
7 Office of the President, “National Preparedness,” Homeland Security Presidential Directive 8,
Dec. 17, 2003.
8 U.S. Department of Homeland Security, Office for Domestic Preparedness, “Exercises,”
available at [http://www.ojp.usdoj.gov/odp/exercises.htm], visited Jan. 11, 2006.

CRS-5
In FY2006, DHS required states to become National Incident Management System
(NIMS) compliant. NIMS is a response system that is meant to improve response
operations through the use of the Incident Command System (ICS) and other standard
procedures and preparedness measures. NIMS is designed to promote development of
cross-jurisdictional, statewide, and interstate mechanisms for coordinating incident
management and obtaining assistance during large-scale terrorist incidents and natural
disasters. As part of the required NIMS compliance, states must participate in an all-
hazard exercise based on NIMS that involves responders from multiple emergency
response disciplines and multiple jurisdictions.9
Policy Question. Should states and urban areas be required to conduct exercises
to test and refine their homeland security plans? Other than requiring states to exercise
NIMS to be eligible for federal homeland security assistance, DHS does not require states
and urban areas to exercise any other homeland security plan. Although DHS required
an abbreviated self-assessment and review of homeland security plans — separate from
the voluntary EMAP assessment and accreditation — as a condition to receive FY2006
federal homeland security assistance, there is no requirement to test the plans at any
regular interval. Some observers are concerned that the lack of an exercise requirement
could result in states and urban areas being inadequately prepared to prevent and respond
to terrorist attacks and natural disasters. Although states and urban areas presently
conduct various homeland security exercises, the frequency and caliber of any exercises
they may conduct are not available to CRS.
DHS does authorize states and urban areas to use federal homeland security
assistance to develop and conduct homeland security exercises. Exercises conducted with
this assistance are required to be threat- and performance-based and to evaluate
performance of critical tasks in responding to the exercise scenario. Following an
exercise, states and urban areas are required to submit an After Action Report (AAR) to
the National Integration Center, and the AAR must document the performance of the
exercise and make recommendations for improvement.10

9 U.S. Department of Homeland Security, Office for Domestic Preparedness, Fiscal Year 2006
Homeland Security Grant Program: Program Guidance and Application Kit
, pp. G1-G10.
10 U.S. Department of Homeland Security, Office for Domestic Preparedness, Fiscal Year 2006
Homeland Security Grant Program: Program Guidance and Application Kit
, p. 66.