CORE CAPABILITY DEVELOPMENT SHEETS

The National Preparedness Goal defines the 32 Core Capabilities and can be found at
http://www.fema.gov/national-preparedness-goal.

MISSION AREA

Prevention
Prevent, avoid or stop an imminent, threatened or actual act of terrorism.

1. Planning 5. Interdiction and Disruption

6. Screening, Search,
2. Public Information and Warning
and Detection

3. Operational Coordination 7. Forensics and Attribution

4. Intelligence and
Information Sharing

PrepTalks showcase thought leaders with innovative ideas and approaches to improve many of
the Core Capabilities. Each PrepTalk includes a video, discussion slides, and additional resources.
For a full list of PrepTalks, visit www.fema.gov/preptalks.

To provide feedback on the Core Capability Development Sheets,

please email us at [email protected]. Updated: 11/05/19
 BUILD AND SUSTAIN THE CORE CAPABILITY

PLANNING

MISSION AREA

Description
Conduct a systematic process engaging the whole community as appropriate in the development of executable strategic, operational,
and/or tactical-level approaches to meet defined objectives.

1. Identify critical objectives during the planning process, 2. Develop and execute appropriate courses of action in
provide a complete and integrated picture of the sequence coordination with local, state, tribal, territorial, Federal,
and scope of the tasks to achieve the objectives, and ensure and private sector entities in order to prevent an imminent
the objectives are implementable within the timeframe terrorist attack within the United States.
contemplated within the plan using available resources for
prevention-related plans.

Training
Build or sustain this Core Capability with the example trainings below. Additional trainings for this Core Capability can be found at
www.firstrespondertraining.gov/frt/npccatalog and www.fletc.gov/training-catalog.

COURSE DELIVERY DURATION

AWR-122: Law Enforcement Prevention and Deterrence of Terrorist Acts Mobile/Non-Resident 16 Hours

E0103: Planning: Emergency Operations Mobile/Non-Resident, 16 Hours

Residential

IS0368: Including People with Disabilities and Others with Access and Functional Online/Distance Learning 2 Hours
Needs in Disaster Operations

E0361: Multi-Hazard Emergency Planning for Schools Residential 26 Hours

MGT-418: Readiness: Training Identification Preparedness Planning Mobile/Non-Resident 16 Hours

The National Preparedness Goal defines the 32 Core Capabilities and

can be found at http://www.fema.gov/national-preparedness-goal. Updated: 11/05/19
 BUILD AND SUSTAIN THE CORE CAPABILITY

Capability Targets
Communities use standardized language to set targets that reflect the level of capability they plan to build and sustain. Communities
use the same standardized language to measure how much capability they have. Not all standardized targets may be required for all
communities. The standardized target for this Core Capability is provided below.

Within every (#) (time), update all emergency operations plans that define the roles and responsibilities of (#) partner organizations
involved in incident management across (#) jurisdictions affected, and the sequence and scope of tasks needed to prevent, protect,
mitigate, respond to, and recover from events.

Resource Types
The Resource Typing Library Tool (https://rtlt.preptoolkit.fema.gov) is a searchable database of national resource typing definitions
and position qualifications, which can be sorted by primary capability. Examples for this Core Capability are below.

NAME TYPE CATEGORY

Planning Section Chief Job Title/Position Qualification Incident Management

Geographic Information Systems Field Data Collection Team Resource Typing Definition Geographic Info Systems
and Info Technology

Partners Validating
Responsibility for capabilities is often shared between many Exercises and real-world events validate capabilities and
partner organizations, including federal, state, local, tribal, are opportunities to identify areas of success or needs for
territorial, international and the private sector. More information improvement. Tools to validate your capabilities include:
is available in the National Prevention Framework at „ Homeland Security Exercise and Evaluation Program:
www.fema.gov/media-library/assets/documents/117762. Fundamental principles that frame a common approach.
„ Joint Terrorism Task Forces—FBI-led multijurisdictional task https://preptoolkit.fema.gov/web/hseep-resources
forces established to conduct terrorism-related investigations „ National Exercise Program: The principal mechanism for
and based in 103 cities nationwide. validating the Core Capabilities. Jurisdictions can receive
„ Neighboring jurisdictions—Such as planning organizations, technical assistance and support from subject matter experts.
Urban Area Security Initiatives (UASI), regional planning www.fema.gov/national-exercise-program
councils, and other community planning and/or coordinating „ Homeland Security Digital Library: A collection of
bodies; can provide information specific to your geographic documents related to homeland security policy, strategy,
location that may help your efforts. and organizational management. www.hsdl.org
„ State and Major Urban Area Fusion Centers—Focal points for
the receipt, analysis, gathering, and sharing of threat-related
information between partners.

Additional Information
„ National Criminal Intelligence Resource Center: www.ncirc.gov
„ National Fusion Center Association: https://nfcausa.org/
„ Comprehensive Preparedness Guide (CPG) 201: www.fema.gov/media-library/assets/documents/165308

For more Core Capability Development Sheets,visit www.fema.gov/fema-technical-assistance-program.

 BUILD AND SUSTAIN THE CORE CAPABILITY

PUBLIC INFORMATION
AND WARNING

MISSION AREA

Description
Deliver coordinated, prompt, reliable, and actionable information to the whole community through the use of clear, consistent, accessible,
and culturally and linguistically appropriate methods to effectively relay information regarding any threat or hazard, as well as the actions
being taken and the assistance being made available, as appropriate.

1. Share prompt and actionable messages, to include National 2. Provide public awareness information to inform the general
Terrorism Advisory System alerts, with the public and other public on how to identify and provide terrorism-related
stakeholders, as appropriate, to aid in the prevention of information to the appropriate law enforcement authorities,
imminent or follow-on terrorist attacks, consistent with the thereby enabling the public to act as a force multiplier in the
timelines specified by existing processes and protocols. prevention of imminent or follow-on acts of terrorism.

Training
Build or sustain this Core Capability with the example trainings below. Additional trainings for this Core Capability can be found at
www.firstrespondertraining.gov/frt/npccatalog and www.fletc.gov/training-catalog.

COURSE DELIVERY DURATION

AWR-122: Law Enforcement Prevention and Deterrence of Terrorist Acts Mobile/Non-Resident 16 Hours

AWR-209: Dealing with the Media: A Short Course for Rural First Responders Mobile/Non-Resident 6 Hours

E0105: Public Information and Warning Mobile/Non-Resident, 16 Hours

Residential

E0388: Advanced Public Information Officer Mobile/Non-Resident, 40 Hours

Residential

G0289: Public Information Officer Awareness Training Indirect 7 Hours

The National Preparedness Goal defines the 32 Core Capabilities and

can be found at http://www.fema.gov/national-preparedness-goal. Updated: 11/05/19
 BUILD AND SUSTAIN THE CORE CAPABILITY

Capability Targets
Communities use standardized language to set targets that reflect the level of capability they plan to build and sustain. Communities use the
same standardized language to measure how much capability they have. The standardized target for this Core Capability is provided below.

Within (#) (time) notice of an incident, deliver reliable and actionable information to (#) people affected, including (#) people
with access and functional needs (affected) and (#) people with limited English proficiency affected.

Resource Types
The Resource Typing Library Tool (https://rtlt.preptoolkit.fema.gov) is a searchable database of national resource typing definitions
and position qualifications, which can be sorted by primary capability. An example for this Core Capability is below.

NAME TYPE CATEGORY

Public Information Officer Job Title/Position Qualification Incident Management

Partners Validating
Responsibility for capabilities is often shared between many Exercises and real-world events validate capabilities and
partner organizations, including federal, state, local, tribal, are opportunities to identify areas of success or needs for
territorial, international and the private sector. More information improvement. Tools to validate your capabilities include:
is available in the National Prevention Framework at „ Homeland Security Exercise and Evaluation Program:
www.fema.gov/media-library/assets/documents/117762. Fundamental principles that frame a common approach.
„ Agency/office responsible for emergency alerts— https://preptoolkit.fema.gov/web/hseep-resources
Public communication tools are used to disseminate „ National Exercise Program: The principal mechanism for
information about serious emergencies. These include validating the Core Capabilities. Jurisdictions can receive
the Emergency Alert System, Wireless Emergency Alerts, technical assistance and support from subject matter experts.
the Integrated Public Alert & Warning System, and others. www.fema.gov/national-exercise-program
„ National Terrorism Advisory System—Disseminates „ Homeland Security Digital Library: A collection of
information on the risk of terrorist attacks to local, documents related to homeland security policy, strategy,
state, tribal, territorial, and Federal authorities, critical and organizational management. www.hsdl.org
infrastructure owners and operators, and the public.
„ State and Major Urban Area Fusion Centers—Focal points for
the receipt, analysis, gathering, and sharing of threat-related
information between partners.

Additional Information
„ FEMA Integrated Public Alert & Warning System: www.fema.gov/integrated-public-alert-warning-system
„ National Criminal Intelligence Resource Center: www.ncirc.gov
„ National Terrorism Advisory System: www.dhs.gov/national-terrorism-advisory-system
„ Comprehensive Preparedness Guide (CPG) 201: www.fema.gov/media-library/assets/documents/165308

For more Core Capability Development Sheets,visit www.fema.gov/fema-technical-assistance-program.

 BUILD AND SUSTAIN THE CORE CAPABILITY

OPERATIONAL COORDINATION

MISSION AREA

Description
Establish and maintain a unified and coordinated operational structure and process that appropriately integrates all critical stakeholders
and supports the execution of Core Capabilities.

1. Execute operations with functional and integrated communications among appropriate entities to prevent initial or follow-on
terrorist attacks within the United States in accordance with established protocols.

Training
Build or sustain this Core Capability with the example trainings below. Additional trainings for this Core Capability can be found at
www.firstrespondertraining.gov/frt/npccatalog and www.fletc.gov/training-catalog.

COURSE DELIVERY DURATION

AWR-122: Law Enforcement Prevention and Deterrence of Terrorist Acts Mobile/Non-Resident 16 Hours

IS0100.c: Introduction to the Incident Command System, ICS 100 Online/Distance Learning 2 Hours

MGT-360: Incident Command: Capabilities, Planning, and Response Actions Mobile/Non-Resident, 24 Hours
for All Hazards Residential

PER-221: WMD Tactical Operations Mobile/Non-Resident 40 Hours

PER-335: Critical Decision Making for Complex Coordinated Attacks Mobile/Non-Resident 16 Hours

PER-340: Active Threat Integrated Response Course (ATIRC) Mobile/Non-Resident 24 Hours

The National Preparedness Goal defines the 32 Core Capabilities and

can be found at http://www.fema.gov/national-preparedness-goal. Updated: 11/05/19
 BUILD AND SUSTAIN THE CORE CAPABILITY

Capability Targets
Communities use standardized language to set targets that reflect the level of capability they plan to build and sustain. Communities use the
same standardized language to measure how much capability they have. The standardized target for this Core Capability is provided below.

Within (#) (time) of a potential or actual incident, establish and maintain a unified and coordinated operational structure and process
across (#) jurisdictions affected and with (#) partner organizations involved in incident management. Maintain for (#) (time).

Resource Types
The Resource Typing Library Tool (https://rtlt.preptoolkit.fema.gov) is a searchable database of national resource typing definitions
and position qualifications, which can be sorted by primary capability. Examples for this Core Capability are below.

NAME TYPE CATEGORY

Incident Management Team Resource Typing Definition Incident Management

Incident Commander Job Title/Position Qualification Incident Management

Operations Section Chief Job Title/Position Qualification Incident Management

Partners Validating
Responsibility for capabilities is often shared between many Exercises and real-world events validate capabilities and
partner organizations, including federal, state, local, tribal, are opportunities to identify areas of success or needs for
territorial, international and the private sector. More information improvement. Tools to validate your capabilities include:
is available in the National Prevention Framework at „ Homeland Security Exercise and Evaluation Program:
www.fema.gov/media-library/assets/documents/117762. Fundamental principles that frame a common approach.
„ Joint Terrorism Task Forces—FBI-led multijurisdictional task https://preptoolkit.fema.gov/web/hseep-resources
forces established to conduct terrorism-related investigations „ National Exercise Program: The principal mechanism for
and based in 103 cities nationwide. validating the Core Capabilities. Jurisdictions can receive
„ Nationwide Suspicious Activity Reporting Initiative— technical assistance and support from subject matter experts.
Collaborative effort led by DHS and the FBI, in partnership www.fema.gov/national-exercise-program
with local, state, tribal, territorial, and Federal „ Homeland Security Digital Library: A collection of
law enforcement and homeland security partners. documents related to homeland security policy, strategy,
„ State and Major Urban Area Fusion Centers—Focal points for and organizational management. www.hsdl.org
the receipt, analysis, gathering, and sharing of threat-related
information between partners.

Additional Information
„ National Criminal Intelligence Resource Center: www.ncirc.gov
„ National Fusion Center Association: https://nfcausa.org
„ Comprehensive Preparedness Guide (CPG) 201: www.fema.gov/media-library/assets/documents/165308

For more Core Capability Development Sheets,visit www.fema.gov/fema-technical-assistance-program.

 BUILD AND SUSTAIN THE CORE CAPABILITY

INTELLIGENCE AND
INFORMATION SHARING

MISSION AREA

Description
Provide timely, accurate, and actionable information resulting from the planning, direction, collection, exploitation, processing, analysis,
production, dissemination, evaluation, and feedback of available information concerning physical and cyber threats to the United
States, its people, property, or interests; the development, proliferation, or use of WMDs; or any other matter bearing on U.S. national
or homeland security by local, state, tribal, territorial, Federal, and other stakeholders. Information sharing is the ability to exchange
intelligence, information, data, or knowledge among government or private sector entities, as appropriate.

1. Anticipate and identify emerging and/or imminent threats 3. Ensure local, state, tribal, territorial, Federal, and private
through the intelligence cycle. sector partners possess or have access to a mechanism to
2. Share relevant, timely, and actionable information and analysis submit terrorism-related information and/or suspicious
with local, state, tribal, territorial, Federal, private sector, activity reports to law enforcement.
and international partners and develop and disseminate
appropriate classified/unclassified products.

Training
Build or sustain this Core Capability with the example trainings below. Additional trainings for this Core Capability can be found at
www.firstrespondertraining.gov/frt/npccatalog and www.fletc.gov/training-catalog.

COURSE DELIVERY DURATION

AWR-122: Law Enforcement Prevention and Deterrence of Terrorist Acts Mobile/Non-Resident 16 Hours

AWR-219: Site Protection through Observational Techniques (SPOT) Mobile/Non-Resident 4 Hours

AWR-315: Criminal Intelligence Analysis Essentials Mobile/Non-Resident 20 Hours

MGT-401: Planning and Intervention for Gangs, Hate and Terrorist Groups Mobile/Non-Resident 8 Hours
in Rural Jails and Prisons

The National Preparedness Goal defines the 32 Core Capabilities and

can be found at http://www.fema.gov/national-preparedness-goal. Updated: 11/05/19
 BUILD AND SUSTAIN THE CORE CAPABILITY

Capability Targets
Communities use standardized language to set targets that reflect the level of capability they plan to build and sustain. Communities
use the same standardized language to measure how much capability they have. Not all standardized targets may be required for all
communities. The standardized targets for this Core Capability are provided below.

During steady state, and in conjunction with the fusion center and/or Joint Terrorism Task Force (JTTF), every (#) (time), review
ability to effectively execute the intelligence cycle, including the planning, direction, collection, exploitation, processing, analysis,
production, dissemination, evaluation, and feedback of available information, and identify the (#) personnel assigned to support
execution of the intelligence cycle.
Then, within (#) (time) of the identification or notification of a credible threat, identify/analyze local context of the threat for the
respective area of responsibility, and facilitate the sharing of threat information with (#) priority intelligence stakeholder agencies/
entities in accordance with the intelligence cycle, and all dissemination protocols.

Resource Types
The Resource Typing Library Tool (https://rtlt.preptoolkit.fema.gov) is a searchable database of national resource typing definitions
and position qualifications, which can be sorted by primary capability. Examples for this Core Capability are below.

NAME TYPE CATEGORY

Fusion Liaison Officer Job Title/Position Qualification Law Enforcement Operations

Partners Validating
Responsibility for capabilities is often shared between many Exercises and real-world events validate capabilities and
partner organizations, including federal, state, local, tribal, are opportunities to identify areas of success or needs for
territorial, international and the private sector. More information improvement. Tools to validate your capabilities include:
is available in the National Prevention Framework at
„ Homeland Security Exercise and Evaluation Program:
www.fema.gov/media-library/assets/documents/117762.
Fundamental principles that frame a common approach.
„ Joint Counterterrorism Assessment Team—First responders https://preptoolkit.fema.gov/web/hseep-resources
from multiple partner organizations working with Federal
„ National Exercise Program: The principal mechanism for
intelligence analysts to research, produce, and disseminate
validating the Core Capabilities. Jurisdictions can receive
counterterrorism intelligence.
technical assistance and support from subject matter experts.
„ State and Major Urban Area Fusion Centers—Focal points for www.fema.gov/national-exercise-program
the receipt, analysis, gathering, and sharing of threat-related
„ Homeland Security Digital Library: A collection of
information between partners.
documents related to homeland security policy, strategy,
„ FBI Field Office and/or Joint Terrorism Task Force— and organizational management. www.hsdl.org
Highly trained, locally based investigators, analysts, linguists,
SWAT experts, and other specialists from dozens of U.S. law
enforcement and intelligence agencies.

Additional Information
„ Federal Law Enforcement Training Centers: www.fletc.gov „ National Criminal Intelligence Resource Center: www.ncirc.gov
„ Joint Counterterrorism Assessment Team Intelligence Guide „ Comprehensive Preparedness Guide (CPG) 201:
for First Responders: https://www.hsdl.org/?view&did=787942 www.fema.gov/media-library/assets/documents/165308

For more Core Capability Development Sheets,visit www.fema.gov/fema-technical-assistance-program.

 BUILD AND SUSTAIN THE CORE CAPABILITY

INTERDICTION AND DISRUPTION

MISSION AREA

Description
Delay, divert, intercept, halt, apprehend, or secure threats and/or hazards.

1. Maximize our ability to interdict specific conveyances, 3. Prevent terrorism financial/material support from reaching
cargo, and persons associated with an imminent terrorist its target, consistent with established protocols.
threat or act in the land, air, and maritime domains to 4. Prevent terrorist acquisition of and the transfer of CBRNE
prevent entry into the United States or to prevent an materials, precursors, and related technology, consistent with
incident from occurring in the Nation. established protocols.
2. Conduct operations to render safe and dispose of CBRNE 5. Conduct tactical counterterrorism operations in multiple
hazards in multiple locations and in all environments, locations and in all environments.
consistent with established protocols.

Training
Build or sustain this Core Capability with the example trainings below. Additional trainings for this Core Capability can be found at
www.firstrespondertraining.gov/frt/npccatalog and www.fletc.gov/training-catalog.

COURSE DELIVERY DURATION

AWR-122: Law Enforcement Prevention and Deterrence of Terrorist Acts Mobile/Non-Resident 16 Hours

AWR-219: Site Protection through Observational Techniques (SPOT) Mobile/Non-Resident 4 Hours

AWR-315: Criminal Intelligence Analysis Essentials Mobile/Non-Resident 20 Hours

AWR-355-W: Community-led Action in Response to Violent Extremism Online/Distance Learning 4 Hours

PER-227: Advanced Tactical Operations: WMD Interdiction Mobile/Non-Resident 24 Hours

PER-275: Law Enforcement Active Shooter Emergency Response (LASER) Mobile/Non-Resident 16 Hours

The National Preparedness Goal defines the 32 Core Capabilities and

can be found at http://www.fema.gov/national-preparedness-goal. Updated: 11/05/19
 BUILD AND SUSTAIN THE CORE CAPABILITY

Capability Targets
Communities use standardized language to set targets that reflect the level of capability they plan to build and sustain. Communities
use the same standardized language to measure how much capability they have. Not all standardized targets may be required for all
communities. The standardized target for this Core Capability is provided below.

Within (#) (time) of the identification or notification of a credible threat, conduct outreach to the fusion center and Joint Terrorism
Task Force (JTTF) in the community and identify (#) personnel assigned to support follow up interdiction and disruption activities
that may be undertaken against identified suspects and/or contraband.

Resource Types
The Resource Typing Library Tool (https://rtlt.preptoolkit.fema.gov) is a searchable database of national resource typing definitions
and position qualifications, which can be sorted by primary capability. Examples for this Core Capability are below.

NAME TYPE CATEGORY

Bomb Response Team Resource Typing Definition Law Enforcement Operations

Bomb Response Technician Job Title/Position Qualification Law Enforcement Operations

Partners Validating
Responsibility for capabilities is often shared between many Exercises and real-world events validate capabilities and
partner organizations, including federal, state, local, tribal, are opportunities to identify areas of success or needs for
territorial, international and the private sector. More information improvement. Tools to validate your capabilities include:
is available in the National Prevention Framework at „ Homeland Security Exercise and Evaluation Program:
www.fema.gov/media-library/assets/documents/117762. Fundamental principles that frame a common approach.
„ Joint Terrorism Task Forces—FBI-led multijurisdictional task https://preptoolkit.fema.gov/web/hseep-resources
forces established to conduct terrorism-related investigations „ National Exercise Program: The principal mechanism for
and based in 103 cities nationwide. validating the Core Capabilities. Jurisdictions can receive
„ State and Major Urban Area Fusion Centers—Focal points for technical assistance and support from subject matter experts.
the receipt, analysis, gathering, and sharing of threat-related www.fema.gov/national-exercise-program
information between partners. „ Homeland Security Digital Library: A collection of
„ FBI Field Office and/or Joint Terrorism Task Force—Highly documents related to homeland security policy, strategy,
trained, locally based investigators, analysts, linguists, and organizational management. www.hsdl.org
SWAT experts, and other specialists from dozens of U.S. law
enforcement and intelligence agencies.

Additional Information
„ Joint Counterterrorism Assessment Team Intelligence Guide for First Responders: https://www.hsdl.org/?view&did=787942
„ National Criminal Intelligence Resource Center: www.ncirc.gov
„ Nationwide SAR Initiative: https://nsi.ncirc.gov
„ Comprehensive Preparedness Guide (CPG) 201: www.fema.gov/media-library/assets/documents/165308

For more Core Capability Development Sheets,visit www.fema.gov/fema-technical-assistance-program.

 BUILD AND SUSTAIN THE CORE CAPABILITY

SCREENING, SEARCH,
AND DETECTION

MISSION AREA

Description
Identify, discover, or locate threats and/or hazards through active and passive surveillance and search procedures. This may include the
use of systematic examinations and assessments, biosurveillance, sensor technologies, or physical investigation and intelligence.

1. Maximize the screening of targeted cargo, conveyances, mail, 3. Conduct CBRNE search/detection operations in multiple
baggage, and people associated with an imminent terrorist locations and in all environments, consistent with
threat or act using technical, non-technical, intrusive, or established protocols.
non-intrusive means.
2. Initiate operations immediately to locate persons and
networks associated with an imminent terrorist threat or act.

Training
Build or sustain this Core Capability with the example trainings below. Additional trainings for this Core Capability can be found at
www.firstrespondertraining.gov/frt/npccatalog and www.fletc.gov/training-catalog.

COURSE DELIVERY DURATION

AWR-122: Law Enforcement Prevention and Deterrence of Terrorist Acts Mobile/Non-Resident 16 Hours

AWR-219: Site Protection through Observational Techniques (SPOT) Mobile/Non-Resident 4 Hours

AWR-304-W: Shopping Center Security Terrorism Awareness Online/Distance Learning 5 Hours

Training Program, Web-Based

PER-200: Field Force Operations Mobile/Non-Resident, 24 Hours

Residential

PER-318: Preventive Radiological Nuclear Detection Team Operations Mobile/Non-Resident 32 Hours

The National Preparedness Goal defines the 32 Core Capabilities and

can be found at http://www.fema.gov/national-preparedness-goal. Updated: 11/05/19
 BUILD AND SUSTAIN THE CORE CAPABILITY

Capability Targets
Communities use standardized language to set targets that reflect the level of capability they plan to build and sustain. Communities
use the same standardized language to measure how much capability they have. Not all standardized targets may be required for all
communities. The standardized target for this Core Capability is provided below.

Within (#) (time) of notice of a credible threat, conduct screening, search, and detection operations for (#) people requiring
screening, including (#) people with access and functional needs (requiring screening).

Resource Types
The Resource Typing Library Tool (https://rtlt.preptoolkit.fema.gov) is a searchable database of national resource typing definitions
and position qualifications, which can be sorted by primary capability. Examples for this Core Capability are below.

NAME TYPE CATEGORY

Preventive Radiological Nuclear Detection Team Resource Typing Definition Prevention

Preventive Radiological Nuclear Detection Screener Job Title/Position Qualification Prevention

Partners Validating
Responsibility for capabilities is often shared between many Exercises and real-world events validate capabilities and
partner organizations, including federal, state, local, tribal, are opportunities to identify areas of success or needs for
territorial, international and the private sector. More information improvement. Tools to validate your capabilities include:
is available in the National Prevention Framework at „ Homeland Security Exercise and Evaluation Program:
www.fema.gov/media-library/assets/documents/117762. Fundamental principles that frame a common approach.
„ Information Sharing and Analysis Centers—Gather and https://preptoolkit.fema.gov/web/hseep-resources
facilitate the sharing of data and analysis between partners. „ National Exercise Program: The principal mechanism for
„ Sector Coordinating Councils—Private sector councils validating the Core Capabilities. Jurisdictions can receive
consisting of owners and operators that interact on a technical assistance and support from subject matter experts.
wide range of sector-specific strategies, policies, activities, www.fema.gov/national-exercise-program
and issues. „ Homeland Security Digital Library: A collection of
„ U.S. Customs and Border Patrol—Working with the trade documents related to homeland security policy, strategy,
community, programs like the Container Security Initiative and organizational management. www.hsdl.org
and the Customs-Trade Partnership Against Terrorism help to
increase security and safeguard the world’s trade industry.

Additional Information
„ Countering Weapons of Mass Destruction Office: https://www.dhs.gov/countering-weapons-mass-destruction-office
„ National Criminal Intelligence Resource Center: www.ncirc.gov
„ U.S. Customs and Border Patrol: www.cbp.gov/border-security/ports-entry
„ Comprehensive Preparedness Guide (CPG) 201: www.fema.gov/media-library/assets/documents/165308

For more Core Capability Development Sheets,visit www.fema.gov/fema-technical-assistance-program.

 BUILD AND SUSTAIN THE CORE CAPABILITY

FORENSICS AND ATTRIBUTION

MISSION AREA

Description
Conduct forensic analysis and attribute terrorist acts (including the means and methods of terrorism) to their source, to include forensic
analysis as well as attribution for an attack and for the preparation for an attack, in an effort to prevent initial or follow-on acts and/or
swiftly develop counteroptions.

1. Prioritize physical evidence collection and analysis to assist 3. Prioritize biometric collection and analysis to assist in
in preventing initial or follow-on terrorist acts. preventing initial or follow-on terrorist acts.
2. Prioritize chemical, biological, radiological, nuclear, and 4. Prioritize digital media, network exploitation, and cyber
explosive (CBRNE) material (bulk and trace) collection and technical analysis to assist in preventing initial or follow-on
analysis to assist in preventing initial or follow-on terrorist acts. terrorist acts.

Training
Build or sustain this Core Capability with the example trainings below. Additional trainings for this Core Capability can be found at
www.firstrespondertraining.gov/frt/npccatalog and www.fletc.gov/training-catalog.

COURSE DELIVERY DURATION

PER-201: Evidence Collection in a Hazardous Materials Environment Mobile/Non-Resident, 32 Hours

Residential

PER-220: Emergency Response to Domestic Biological Incidents Mobile/Non-Resident 16 Hours

PER-222: Public Safety WMD Response—Sampling Techniques and Guidelines Mobile/Non-Resident 24 Hours

PER-228: Advanced Forensic Investigations for Hazardous Environments Mobile/Non-Resident 32 Hours

The National Preparedness Goal defines the 32 Core Capabilities and

can be found at http://www.fema.gov/national-preparedness-goal. Updated: 11/05/19
 BUILD AND SUSTAIN THE CORE CAPABILITY

Capability Targets
Communities use standardized language to set targets that reflect the level of capability they plan to build and sustain. Communities
use the same standardized language to measure how much capability they have. Not all standardized targets may be required for all
communities. The standardized target for this Core Capability is provided below.

Within (#) (time) of a suspected terrorist attack, conduct outreach to the fusion center and Joint Terrorism Task Force (JTTF) in the
community and identify (#) personnel assigned to support follow up information sharing, intelligence analysis, and/or investigative
actions associated with the collection, examination, and analysis of evidence, as well as the identification of perpetrators.

Resource Types
The Resource Typing Library Tool (https://rtlt.preptoolkit.fema.gov) is a searchable database of national resource typing definitions
and position qualifications, which can be sorted by primary capability. An example for this Core Capability is below.

NAME TYPE CATEGORY

Forensic Group Supervisor Job Title/Position Qualification Emergency Management

Partners Validating
Responsibility for capabilities is often shared between many Exercises and real-world events validate capabilities and
partner organizations, including federal, state, local, tribal, are opportunities to identify areas of success or needs for
territorial, international and the private sector. More information improvement. Tools to validate your capabilities include:
is available in the National Prevention Framework at „ Homeland Security Exercise and Evaluation Program:
www.fema.gov/media-library/assets/documents/117762. Fundamental principles that frame a common approach.
„ Laboratory Services—Includes testing for biological/medical https://preptoolkit.fema.gov/web/hseep-resources
samples, environmental samples, DNA samples, CBRNE „ National Exercise Program: The principal mechanism for
samples, and others. validating the Core Capabilities. Jurisdictions can receive
„ State and Major Urban Area Fusion Centers—Focal points for technical assistance and support from subject matter experts.
the receipt, analysis, gathering, and sharing of threat-related www.fema.gov/national-exercise-program
information between partners. „ Homeland Security Digital Library: A collection of
„ U.S. science and technology institutions—Colleges and documents related to homeland security policy, strategy,
university programs, other research institutions, modeling/ and organizational management. www.hsdl.org
historical information, and subject matter experts.

Additional Information
„ Federal Bureau of Investigation Laboratory Services: https://www.fbi.gov/services/laboratory
„ National Institute of Standards and Technology—Forensic Science: www.nist.gov/topics/forensic-science
„ Comprehensive Preparedness Guide (CPG) 201: www.fema.gov/media-library/assets/documents/165308

For more Core Capability Development Sheets,visit www.fema.gov/fema-technical-assistance-program.