48
Regional Office 3480 Buskirk Avenue, Suite 205 Pleasant Hill, CA 94523 925.746.5108 Fax: 925-746-2401 www.hospitalcouncil.net Meeting Summary Joint Meeting of Alameda, Contra Costa and Solano County Hospital Safety Officers/ Emergency Managers Wednesday, March 16, 2016 Attendees: MaryAnn Codeglia, San Ramon Regional Donata Nilsen, Alameda County Public Health Medical Center Danielle Ormsby-Toombs, Kaiser Walnut Creek Ken Henkelman, St. Rose Hospital Cathy Phillips, Sutter Delta Medical Center Jill Honeyman, Contra Costa Reg Med Ctr. Elisa Washington, Hospital Council Steve Huck, Contra Costa EMS Guests: Paula L. Scalingi, Ph.D., Executive Director, Bay Area Center for Regional Disaster Resilience Gerald Kiernan, Deputy Executive Director, Bay Area Center for Regional Disaster Resilience Maria Duazo, Hazardous Materials Specialist II, HazMat Team Leader, Contra Costa Health Services, Hazardous Materials Programs Presentation: Healthcare Cyber Security & Resilience Elisa introduced Paula Scalingi from the Bay Area Center for Regional Disaster Resilience, a nationally-known expert on infrastructure interdependencies. Paula provided details on her expertise with cyber resilience gained from senior management positions in federal government and research. Paula detailed known threats to healthcare IT systems and urged hospitals to thoroughly assess their system’s resilience to data breaches. Given the hot market for healthcare information and the extensive range of IT-related vulnerabilities, IT security should be a top priority in every hospital. Paula provided recent examples of healthcare cyber security breaches including the extremely high costs resulting from attacks. In closing, she provided some best practices and timely advice about how to obtain quality security technical assistance. Paula also offered to provide 1:1 guidance to anyone interested in learning more about increasing their hospital’s cyber resilience. Her contact information, biography, and presentation are attached. Presentation: Contra Costa Hazardous Materials Program Per Marcelle Indelicato’s recommendation, Maria Duazo, the HazMat Team Leader for Contra Costa Health Services, joined the meeting to provide information on the services provided by her response team. She encouraged hospitals to take greater advantage of HazMat responders for internal incidents. In addition, she recommended 911 callers immediately advise the dispatcher of a hazardous materials situation to ensure the response team is notified quickly. Apparently, the protocol places the hazardous materials question at the end of the list and so

Meeting Summary Joint Meeting of Alameda, Contra Costa … · Maria provided a comprehensive overview of the HazMat incident response, staffing and training for the team, ... Adobe

  • Upload
    voxuyen

  • View
    213

  • Download
    0

Embed Size (px)

Citation preview

Regional Office 3480 Buskirk Avenue, Suite 205 Pleasant Hill, CA 94523 925.746.5108 Fax: 925-746-2401 www.hospitalcouncil.net

Meeting Summary

Joint Meeting of Alameda, Contra Costa and Solano County Hospital Safety Officers/ Emergency Managers

Wednesday, March 16, 2016

Attendees: MaryAnn Codeglia, San Ramon Regional Donata Nilsen, Alameda County Public Health Medical Center Danielle Ormsby-Toombs, Kaiser Walnut Creek Ken Henkelman, St. Rose Hospital Cathy Phillips, Sutter Delta Medical Center Jill Honeyman, Contra Costa Reg Med Ctr. Elisa Washington, Hospital Council Steve Huck, Contra Costa EMS

Guests:

Paula L. Scalingi, Ph.D., Executive Director, Bay Area Center for Regional Disaster Resilience Gerald Kiernan, Deputy Executive Director, Bay Area Center for Regional Disaster Resilience Maria Duazo, Hazardous Materials Specialist II, HazMat Team Leader, Contra Costa Health

Services, Hazardous Materials Programs

Presentation: Healthcare Cyber Security & Resilience

Elisa introduced Paula Scalingi from the Bay Area Center for Regional Disaster Resilience, a nationally-known expert on infrastructure interdependencies. Paula provided details on her expertise with cyber resilience gained from senior management positions in federal government and research. Paula detailed known threats to healthcare IT systems and urged hospitals to thoroughly assess their system’s resilience to data breaches. Given the hot market for healthcare information and the extensive range of IT-related vulnerabilities, IT security should be a top priority in every hospital. Paula provided recent examples of healthcare cyber security breaches including the extremely high costs resulting from attacks. In closing, she provided some best practices and timely advice about how to obtain quality security technical assistance. Paula also offered to provide 1:1 guidance to anyone interested in learning more about increasing their hospital’s cyber resilience. Her contact information, biography, and presentation are attached. Presentation: Contra Costa Hazardous Materials Program Per Marcelle Indelicato’s recommendation, Maria Duazo, the HazMat Team Leader for Contra Costa Health Services, joined the meeting to provide information on the services provided by her response team. She encouraged hospitals to take greater advantage of HazMat responders for internal incidents. In addition, she recommended 911 callers immediately advise the dispatcher of a hazardous materials situation to ensure the response team is notified quickly. Apparently, the protocol places the hazardous materials question at the end of the list and so

Hospital Council East Bay Safety Officer & Emergency Manager Meeting Summary March 16, 2016 Page 2 of 2

waiting to be asked about a HazMat situation may create an unnecessary delay in the teams’ response. Maria provided a comprehensive overview of the HazMat incident response, staffing and training for the team, and available resources (see attached). She highlighted her team’s preparations for potential hazards which may arise from refinery or pipeline incidents. Maria remarked that freeway transport of hazardous materials is the most common threat to our communities. To prepare for such an incident, she requested that hospitals drill for potential lockdown situations. The slide deck for Maria’s presentation is attached and questions may be directed to her via email at [email protected]. Workplace Violence Members were asked to discuss workplace violence and consider participating in a joint-meeting with hospital executives to forward efforts to comply with the latest CAL OSHA regulations. Elisa noted that executives in attendance at the latest Section Meeting expressed interest in collaboratively addressing the issue of workplace violence. Those present affirmed their interest in securing resources for staff education and training and were encouraged that executive members had expressed support for same. Future Meeting Topics

• An update from CHA on workplace violence and CAL OSHA regulations • Pipeline safety and locations • Neonatal, pediatric and perinatal disaster preparedness

Next Meeting Wednesday, May 18, 2016 from 1:00pm to 4:00pm, at John Muir Medical Center, Walnut Creek.

BAY AREA CENTER FOR REGIONAL DISASTER RESILIENCE Dr. Scalingi established the Bay Area Center for Regional Disaster Resilience (BACRDR), a non-profit (Section 501(c) (3), in April 2011 to raise awareness and empower cross-sector/discipline and multi-jurisdiction action to address all-hazards disasters; health, safety, economic, environmental, and societal consequences; and preparedness gaps and improvement measures.

Since then, she has assisted stakeholders across the 12-County Bay Area to collectively move toward regional and community resilience through information sharing and collaboration, education and exercises, and providing expertise to develop and implement cooperative activities. Since its creation, BACRDR has built a Resilient Bay Area Coalition of over a thousand diverse organizations that focus on all-hazards resilience, developing a number of workshops and exercises on disaster recovery, infrastructure interdependencies, and situational awareness, a Stakeholder Forum on Military Support to Civil Authorities with Cal OES and the California National Guard, a Stakeholder Golden Guardian 2013 Exercise Objectives Meeting, a Superstorm Sandy Lessons Learned for the Bay Area event, a Climate Change Roundtable of local, state, and federal agencies, utilities, and other stakeholders on flood impacts to critical infrastructure and an energy and lifelines restoration exercise with Alameda County and PG&E; and a Bay Area Community Health Resilience Forum and follow-on regional Geriatric Resilience Roundtable.

Dr. Scalingi's most recent activities include a Bay Area Community Health Resilience Exercise Project with the California Department of Public Health, Bay Area Integrated Weather Resiliency Roundtable with the National Weather Service; a Regional Cyber Resilience Workshop with U.S. DHS, and a workshop and follow-on roundtable as part of an initiative on interdependent lifelines/critical infrastructure risk, resiliency, and information-sharing.

BACKGROUND Previously, she was Director, Center for Regional Disaster Resilience of the Pacific Northwest Economic Region, a consortium of 10 states & provinces. Dr. Scalingi has organized more than 100 workshops and other training events, including 17 regional exercises. Dr. Scalingi was Director of: U.S. DOE’s Office of Critical Infrastructure Protection, the Decision and Information Sciences Division at Argonne National Laboratory and ANL's Infrastructure Assurance Center. She was technical liaison to the President’s Commission on Critical Infrastructure Protection, overseeing reports on water supply, emergency services, energy, legal/regulatory issues and R&D. She served as Director of Public Information for the U.S. ACDA, on the U.S. Congress House Permanent Select Committee on Intelligence, and as analyst for the CIA. Dr. Scalingi has served on the Board of San Francisco Community Agencies Responding to Disaster and as First Vice Chair of the Infrastructure Security Partnership (TISP), a national engineering association. She led development and was principal author of TISP's 2006 and 2011 Regional Disaster Resilience Guides, twice receiving TISP's Volunteer of the Year Award.

Paula Scalingi ♦ Executive Director, Bay Area Center for Regional Disaster Resilience ♦ President, The Scalingi Group

Empowering Collaborative Action to Build a Resilient Bay Area

925-399-6229 925-683-3101 [email protected] WORK CELL EMAIL

JointMee)ngofAlameda,ContraCosta,andSolanoCounty

HospitalSafetyOfficers/EmergencyManagers

Wednesday,March16,2016atJohnMuirMedicalCenter–Concord

HealthcareCyberSecurity&Resilience

PaulaScalingi,Execu)veDirectorBayAreaCenterforRegionalDisasterResilience

WhatWeWillBeCovering

!  TheburgeoningthreattohealthcareITSystems!  Why?

!  TypicaltypesofaQacksandnotsotypical!  RosterofrecentHealthcareProvider“vic)ms”

!  CostsofHealthITcyberbreaches—money,publictrust/customerconfidence,liabilityandlawsuits

!  Prudentandbestprac)cesforhealthcarecybersecurity&resilience

!  Challengesthatcomplicateandconstrainimprovinghealthcarecybersecurityandresilience

!  Poten)alac)onsthatcanassistinbuildingamorecyberresilienthealthcaresectorintheBayArea

2

First,afewWordsabouttheBayAreaCenterforRegionalDisasterResilience

3

TheBurgeoningThreattoHealthcareITSystems

HealthDataBreachesAccountfor21%ofTotalIncidents...Source:healthitsecurity.com

4

WhyHasHealthcareBeenHitSoHard?

!  Healthcareisa“so\target”andalucra)veone!  SectordoeshavethesafeguardsorstandardsforhealthITsystems(HIPAAcompliancedoesnotequatetoITsecurity)

!  Healthcaredataisunique,containingcomprehensiveinforma)ononanindividual!  AccordingtoarecentHealthcareITSecurityandRiskManagementStudy,electronichealthrecordssellfor$50perchart,andmorethan

asocialsecurityorcreditcardnumber1

!  Consequently,databreacheswillgrow—thereisahotmarketfortheinforma)on

!  1HIMSSAnaly)csandSymantecHealthcareITSecurityandRiskManagementStudyhQp://www.slideshare.net/cheapsslsecurity/infographic-symantec-healthcare-it-security-risk-management-study

5

HealthcareTodayhasanExtensiveRangeofIT-RelatedVulnerabili)es

6

!  HealthData!  Computers!  Mobiledevicesandcloudcompu)ng!  MedicalDevicesandEquipment!  Communica)onssystems!  Infrastructureopera)onalsystems!  Customerpersonnelandfinancial

informa)on!  BusinessProcessSystems(billing,

purchasing,etc.)!  Administra)veSystems(e.g.,pa)ent

tracking,staffing,inventory,etc.)

HealthcareLagsotherSectorsonITSecurity

!  Despiteincreasingconcernandapprecia)onofthemagnitudeofthethreattoHealthcareproviders,healthcareorganiza)onshavealongwaytogoonhealthIT1

!  Mostorganiza)onsthatconductITsecurityriskassessmentsdosoonlyonceayear,andthesemaynotbesufficientlyrigorousorthorough

!  HealthcareITsystemssecurityistypically10percentoftotalbudget—lessthanforotherindustrysectors

1hQp://www.slideshare.net/cheapsslsecurity/infographic-symantec-healthcare-it-security-risk-management-study

7

HealthcareLagsotherSectorsonITSecurity,cont.

!  Interoperabilityisavulnerability!  ITsystemssecurityisexternallydependentonotherhealthcareproviders,suppliersorservices

!  Requiresanunderstandingofallplayersinthehealthcare“space”inaregionandbeyond,andworkingwiththemcollabora)velytohelpassurecybersecurityandresilience

8

!  Dangerfromdevices

!  Today,adoctorlogsintoasystemfromhishomePCortakesaflashdrivehomethatcouldhavea100,000recordsonit

!  Securityformedicaldevice/equipmentandmobiledevices—manyhealthcareorganiza)onsareonlydevelopingsecurityplansforthese

! Manufacturersarenotmandatedtoincorporatesecurityintomedicalequipment

!  Typically2to5medicaldevicesmaybeconnectedtoalaptopordesktopcomputer—ifacomputerisvulnerable,devicesmaybe

HealthcareLagsotherSectorsonITSecurity,cont.

9

TypicalTypesofAQacks—andnotsoTypical

10

!  SociallyengineeredTrojans–ac)vatedbyaccessingafileinfectedbyviruses! MostusedaQackmethod

!  Unpatchedso\ware! MostcommonunpatchedandexploitedprogramsareJava,AdobeReader,andAdobeFlash

!  PhishingaQacks!  Spamemailsthatlooklegi)mate,butaren’t

!  Network-travelingworms(Conficker,Zeus)! Willtrytoexploitnetworksbyloggingonusingalistofbuilt-in,badpasswords

TypicalTypesofAQacks—andnotsoTypical,cont.

!  AdvancedPersistentThreat!  CantakeoveranetworkinamaQerofhours!  UseTrojansorPhishingaQacksthatemployeesmaybetrickedtorun

!  VerydifficulttocleanupITsystemsa\ertheyhavebeencorrupted—weeksormonths

!  RansomwareAQacks!  Stealingdataanddemandingpaymentforitsreturn

!  PerpetratorsofcyberaQacksonhealthcareorganiza)onscanbeforeignna)onals,criminals,disgruntledemployeesorcustomers,andrecrea)onalhackers

11

RecentHealthcareCyberSecurity“Vic)ms”!  St.JosephHealthSystemdatabreach

!  HealthcaredatamadeavailableovertheInternetresultedinaclass-ac)onlawsuit

!  SeQlementwasfor$7.5millionwith$3millionsetasideforpa)entstoapplyforupto$25,000eachiftheysufferediden)tythe\

!  SJHSalsoinvestedaconsiderableamountofmoneyno)fyingpa)entsofthedatabreach,complyingwithfederalsecurityregula)ons,offeringfreecreditmonitoringforpoten)allyaffectedindividuals,andinvestmentinnewandaddi)onalsecuritymeasures1

1hQp://healthitsecurity.com/news/7.5m-healthcare-data-breach-seQlement-for-st.-joseph-health

12

RecentHealthcareCyberSecurity“Vic)ms”,cont.!  UCLAHealthisfacingaclassac)onlawsuitfollowingthelarge-scalehealthcaredatabreachthatpoten)allyaffectednearly4.5millionpa)ents1

!  Thelawsuitleadplain)ffarguesthatUCLAHealthwasnegligentinitseffortstono)fythepoten)allyaffectedindividualsofthebreachina)melymanner

!  UCLAHealthreportedlydiscoveredthebreachonMay5,2015,andtheaQackisbelievedtohaveoccurredinSeptember2014

!  Addi)onally,theclassmembersallegethatUCLAHealthdidnottakefarenoughmeasurestoprotectitselffromthehealthcaredatabreach

1hQp://healthitsecurity.com/news/7.5m-healthcare-data-breach-seQlement13

RecentHealthcareCyberSecurity“Vic)ms”,cont.

!  HollywoodPresbyterianMedicalCenterHitwithRansomwareAQacks!  Recentlypaidhackers$17,000tostoparansomwareaQackthatlockedthehospital’scomputersandnetwork

!  Ransom,whichwashigherthanusual,waspaidwithanInternetcurrencymakingitdifficulttotracethemoney

!  HospitalshutdownitsITnetworksforoveraweek,rever)ngtopaperpa)entrecordsandregistra)on,anddiver)ngsomeemergencypa)entstootherhospitals1

1 TheEmergencyManagementandResponse–Informa)onSharingandAnalysisCenter(EMR-ISAC)“Infogram”Feb.26,2016

14

RecentHealthcareCyberSecurity“Vic)ms”,cont.

!  HackersbreachedAnthem,Inc.’sdatabaseinFeb.of2015

!  Putatriskpersonalinforma)onofanes)mated80millionformerandcurrentcustomers,aswellasemployees

!  Informa)onincludednames,datesofbirth,medicalIDsorSocialSecuritynumbers,streetaddresses,andemailaddresses,andalsoemploymentinforma)on1

1hQp://healthitsecurity.com/news/7.5m-healthcare-data-breach-seQlement

15

RecentHealthcareCyberSecurity“Vic)ms”,cont.!  HospitalsandHealthcareorganiza)onsaffectedbycyberaQacksin2013withcostsofaQacksrangingfrom$2to4million!  UniversityofConnec)cutHealthCenter!  NorthwestGeorgiaHospiceGroup!  FroedtertHealthinMilwaukee,WI

!  SamaritanHospitalineasternNewYork

!  LucilePackardChildren’sHospital! Walgreens

!  LawrenceMelroseMedicalElectronicRecordInc.inMelrose,MA

hQp://hitconsultant.net/2013/03/20/security-breaches-cost-healthcare-organiza)ons-2-4-m-over-2-years-infographic

16

CostsofHealthcareCyberAQacks!  MassivebreachesliketheonesatAnthem,PremeraBlueCross,

andtherestofthetop10healthcaredatabreachesof2015helpedaccountfornearly100millionpa)entfilesbreached

!  2015sawmillionsofpa)entfilescompromised,andatotalof258large-scaledatabreaches

!  Attheendoflastyear,Experianreleasedasurveyshowingthathealthcarecybersecuritywasthetopconcernforhealthcareprofessionalsgoinginto20161

1hQp://healthitsecurity.com/news/large-data-breaches-top-worry-for-health-pros-survey-shows

17

CostsofHealthcareCyberAQacks,cont.!  Databreachesinhealthcarearethemostexpensivetoremediateand

growingmoreso,accordingtoarecentreportondatasecuritybythePonemonIns)tutethatcovered350companiesin11countriesacross16industries1

!  Monetaryloss!  Publictrustandcustomerconfidence

!  FailuretomeetRegulatoryRequirements!  Healthcareen))esandrelatedbusinessesregulatedbytheHealthInsurancePortabilityandPrivacyAct(HIPAA)mustcomplywiththeHIPAASecurityRuletoensuretheconfiden)ality,integrity,andavailabilityofelectronicprotectedhealthinforma)onthattheycreate,receive,maintain,ortransmit

!  LiabilityandLawsuits

1Healthcaredatabreachesarecostliest,JosephConn,May28,2015;www.ModernHealthcare.com18

SomeBestPrac)cesforHealthcareCyberSecurity&Resilience

!  Undertakeacomprehensive,allsystemscybersecurity&resilienceriskassessmenttakingiden)fyingallkeyassetsandfunc)ons,andtakingintoaccountexternalsuppliersandpartners!  Developandimplementanongoingriskmanagementprogramofpriori)zedimprovementstoupgradeplans,procedures,andincorporateimprovedtechniquesandcapabili)es

!  Repeattheriskassessmentatregularintervals,augmen)ngtheriskmanagementprogramwithnewinforma)ononemergingthreats,newiden)fiedgaps,andwithlessonslearnedfromexercisesandinforma)onfromHealthcarecyberaQackincidents

!  Haveawellthought-outandlegallyvalidatedresponseandrecoveryplanthataddressesavarietyofpossiblecybertargets,impacts,andconsequencesforyourorganiza)on,includinghowtohandlepublicinforma7on

!  Hireorcontractforqualitysecuritytechhelpthatcanprovide“BlackHat”penetra)onteststoilluminatesystemvulnerabili)es 19

SomeBestPrac)cesforHealthcareCyberSecurity&Resilience,cont.

!  UsetheHIPAASecurityRuleCrosswalktotheNISTCybersecurityFrameworktohelpcheckforgapsnotaddressed1

!  NISTFrameworkprovidesavoluntary,risk-basedapproachbasedonexis)ngstandards,guidelines,andprac)cestohelporganiza)onsinanyindustrytounderstand,communicate,andmanagecybersecurityrisks

!  Canusetoiden)fyandmaprequirementsbetweentheCybersecurityFrameworkandtheHIPAASecurityRuleandseewheregapsmaybe

1hQp://www.hhs.gov/hipaa/for-professionals/security/nist-security-hipaa-crosswalk/index.html20

SomeBestPrac)cesforHealthcareCyberSecurity&Resilience,cont.

!  Cybersecurityandresilienceexercises!  Internalforstaffthatfocusonapar)cularfunc)onalarea

!  Internalbringingstafftogetherfromacrossmedical,administra)ve,opera)onalandbusinessfunc)ons

!  Externalwithsuppliers!  Externalwithhealthcoali)onpartnersandkeystakeholders

21

SomeBestPrac)cesforHealthcareCyberSecurity&Resilience,cont.

!  Reevaluatebackupsystemsandbackuprecordsonaregularscheduleandstorethebackupoffline

!  Bepreparedtogomanualifhealthdataorothersystemsareunavailable

!  TrainpersonnelaboutthedifferentwaysHealthcareITsystemscouldbebreachedorcompromisedandwhat,andwhatnot,todo

!  Con)nuallyeducateseniormanagementonthreats,incidents,andprudentprac)cesandnecessaryimprovementinvestments

!  Createofacultureofhealthcaredatasecurity&resiliencewithinyourorganiza)onandregionallysector-wide!  CollaboratewithHealthcareCoali)oncolleaguesandpartnerstodevelopinnova)vesolu)onswherenewcybersecurityandresiliencecapabili)esareneeded

22

ChallengesthatCurrentlyComplicateandConstrainImprovingHealthcareCyberSecurityandResilience

!  Lackofinforma)on-sharingandcoordina)on!  Alotofgoodac)vi)esaregoingon,butfunc)onal,organiza)onal,andjurisdic)onal“silos”impedethepeoplewhoneedtoknowfromknowingabouttheseac)vi)es

!  Businesscompe))onamongourITTechinnovators

!  Fragmentedinforma)ononemergingcyberthreats,incidents,usefulcapabili)es!  Busyprac))onersneedtheknowledgebutfaceaplethoraofinforma)onsourcesthatarelargelyinadequatetogivethemwhattheyneedforpreparedness,con)nuity,andresilience

!  Federalagencyguidanceandexper)secanbetoohigh-levelortootechnical,orlackrelevancyatthelocallevel

23

Opportunity—U.S.DHSNa)onalInfrastructureProtec)onProgramSecurityandResilienceChallenge

!  Uniquefastfusecompe))on—notagrantbutprojectdollarsforinnova)veregionalresiliencemul)-stakeholderproject

!  Fundingforregionalcoali)onstodeveloptoolsandtechnologiestoaddresspriorityhazardsthatcanbeu)lizedinregionsthroughoutthena)on

GotAnyInnova)veIdeasforHealthITSecurityandResilience?

24

SomeIdeasfromLastYear’sRegionalCyberResilienceWorkshop

!  HeldinMay2015,hostedbyBACRDRwithU.S.DepartmentofHomelandSecuritycyberexperts,theNorthernCaliforniaRegionalIntelligenceCenter(NCRIC)andtheBayAreaUASI

!  AmongtheWorkshoprecommenda)onswere:!  Inclusionofcyberresilienceinall-hazardspreparednessriskassessmentanddisasterresponseandrecoveryplanning

!  Tabletopexercisesanddrills(bothsectorandissue-specific)!  Crea)onofaBayAreaCyberResilienceAlliancetofacilitateinforma)onsharingandcoordina)ononcybersecurityandresilience

!  LiQlehasbeendonethispastyeartomoveforwardontheserecommendedac)ons!  AthoughtistostartwithanEastBayorBayAreaHealthCyberSecurity&Resilience“Collabora)ve”oratleastaworkgroup

25

ForFurtherInforma)on

PaulaScalingi,Ph.D.Execu)veDirector,BayAreaCenterforRegionalDisasterResiliencePresident,TheScalingiGroup,LLC,andAdjunctAssociateProfessor,GeorgetownUniversity

phone: 925-399-6229cell: 925-683-3101fax: [email protected]

26 26

Hazardous Materials Programs 4585 Pacheco Boulevard Suite 100 Martinez, CA 94553 925-335-3200 (business line) 925-335-3232 (incident line) www.cchealth.org

Countywide HazMat Response Team

Housed in the Health Department We are a resource to you Not first responders

– We need to be requested by another agency, we don’t know of an incident until a first responder requests us.

– Except level 2 or 3 from CWS

Certified Unified Program Agency We implement 6 Hazardous Materials

regulatory programs for the County:

– Hazardous Materials Release Response and Inventory Program

– California Accidental Release Program – Hazardous Waste Generator Program

– Underground Storage Tank Program

– Aboveground Petroleum Storage Tank Program – Clean Water Program

HazMat Area Plan

County HazMat Incident Response Law Enforcement is HazMat IC, except City of Richmond

3 Municipal Hazmat Response Teams – Contra Costa Hazardous Materials Incident Response Team – Richmond Fire Department HazMat Team – San Ramon Valley Fire Protection District HazMat Response Team

FRO Decon Teams - All Fire Departments in the County

Other Resources – Walnut Creek Bomb Squad – MAMFF – Mutual Aid Mobile Field Force – Industry Resources –PMAO, CAER, Industry Resources – Public Works for HHW abandonments

We are the County Health Officer Designee for HazMat Incidents

Operate 24/7

Regular duty is a 40-hr work week • Respond from Martinez, centrally located • Inspections and Complaint response when not on call

3 teams of 6 people • Add more people when needed • Every person is assigned the lead role - rotation

On Call for Weekends & after hours • Carry Pagers/Cell Phones/Radios – 925.677.6700 • Dispatched through Sheriff after hours – 925.335.3232

Staffing the County HazMat Team

– 19 HazMat Specialists • All on the Incident Response Team

– 1 HazMat Technician • Keeps track of vehicle/equipment etc. • Also on Incident Response Team

– 6 Cal. Accidental Release Prg. Engineers • Provide technical info about facilities/processes

– 5 Management & Administrative Support

– 3 On-Call Health Officers

Training – HazMat Response

All have 4-year science related degree

All CSTI State Certified Techs / Specs

Direct access to CSTI Certified HazMat Instructors

Personnel have specialization in - Drug Lab Response - Technical Reference - Rail Cars/Tank Cars - Field Chemical Identification - Radiological - WMD/Terrorism - Asbestos - Lead

WMD Schools

∗ Chemical – Anniston, AL

∗ Radiological – Las Vegas, NV

∗ Explosives/Ordinance – Socorro, NM

∗ Railcar Response – Pueblo, CO

Resources We Bring

Personnel & Equipment – Type 2/Type1

2 Primary Vehicles, Flatbed Truck, Box Truck (supply vehicle)

- Field ID Chemical Equipment

- Reference Sources

- Air Monitoring/Sampling Equip.

-Stinger / Mitigation Equipment

-Personal Protective Equipment

Resources Available to Us Access to State funding

– Clean-up of HazWaste Abandonments – Disposal of Drug Lab Wastes

• Only team with an arrangement with the State for transport and storage

Community Warning System

Plume Modeling

Resources Available to Us

State OES Coastal Region

California National Guard 95th Civil Support Team (C.S.T.) – Hayward

FBI – San Francisco

Federal EPA – San Francisco

USCG Pacific Coast Strike Team - Novato

HazMat Hazards in the County We are the most industrialized CUPA in the

state. (over 17 billion pounds registered with us.)

4 Refineries & several chemical companies.

Major Freeways

Pipelines

2 Main Railroads

Remote Locations – Drug labs – Abandonments – Agricultural chem.

Fixed Facilities

Chevron, Rodeo, Shell, Martinez NuStar DOW ChemTrade Rhodia Others

Transportation - Railroads/Pipelines

Union Pacific BNSF Short Lines Amtrack

Pipelines

General Chemical, City of Richmond

Transportation - Highway

Flammable Liquids Compressed Gases Poisons Corrosives Cryogenics

are common on 680/Hwy4

Molten Sulfur, Highway 4 in Oakley

Suspected Drug Labs

Pittsburg PD

Vehicle Stop

Every Hotel/Motel Apartments/Houses Storage Lockers Barns Etc.

Meth Labs BHO Labs

Spills & Abandonments (intentional & accidental)

Paint discharged into storm drain (FG Code)

14 55-Gallon drums of waste oil, City of Richmond

Historical Hospital Hazmats

Patient’s Back Pack Sticky substance on door knob Ethylene Oxide Alarms/Releases Photo Lab Flooded Patient with high radiation readings from

cancer treatment in ED Old picric Unknown odors

Questions?

Contacts: 24-hr Number 335.3232 rolls to S.O. Dispatch Direct Page 677.6700 Regular Business 335.3200