Department of Homeland Security

1. The purpose of the practice exams is not to give hints on the actual exam, but to help students learn how to apply legal principles in a factual situation.2. This practice exam may not address all the EPOs you are responsible for, or all the materials you must know to master an EPO. The student is responsible for knowing and mastering the EPOs.3. These questions may be harder or easier than the exam.4. Students will find reviewing the answers - even the incorrect ones - will help them master the principles.

PLAN to LIVE Are You Ready? The In-Depth Guide for Citizen Preparednes: for Every Home and Business Largest format available anywhere - giant 8.5" x 11" - LARGE, CLEAR PRINT - easily photocopied, distributed, and read in poor light. The indispensable guide for every American family and organization. Created and trusted by the U. S. Federal Emergency Management Agency. "Batteries last hours, books last decades. Get the print edition " As catastrophic weather events, terrorism, international tensions, and other disasters such as earthquakes and wildfires continue to threaten our way of life, it is vital that all American families, places of business and other organizations not only possess the supplies necessary to sustain them through periods of emergency, but the training and planning required to survive. This guide has been designed to help the citizens of this nation learn how to protect themselves and their families against all types of hazards. It can be used as a reference source or as a step-by-step manual. The focus of the content is on how to develop, practice, and maintain emergency plans that reflect what must be done before, during, and after a disaster to protect people and their property. Also included is information on how to assemble a disaster supplies kit that contains the food, water, and other supplies in sufficient quantity for individuals and their families to survive following a disaster in the event they must rely on their own resources. WHY PREPARE BASIC PREPAREDNESS NATURAL HAZARDS TECHNOLOGICAL HAZARDS TERRORISM RECOVERING FROM DISASTER WATER CONSERVATION DISASTER SUPPLIES FAMILY COMMUNICATIONS PLANNING WHY PREPARE? There are real benefits to being prepared. Being prepared can reduce fear, anxiety, and losses that accompany disasters. Communities, families, and individuals should know what to do in the event of fires or tornados. They should be ready to evacuate their homes and know how to care for their basic medical needs. People also can reduce the impact of disasters and sometimes avoid the danger completely. The need to prepare is real. Disasters disrupt hundreds of thousands of lives every year. Each disaster has lasting effects, both to people and property. If a disaster occurs in your community, local government and disaster-relief organizations will try to help you, but you need to be ready as well. You should know how to respond to severe weather or any disaster that could occur in your area - hurricanes, earthquakes, extreme cold, flooding, or terrorism. You should also be ready to be self-sufficient for at least three days. This may mean providing for your own shelter, first aid, food, water, and sanitation. Using this book makes preparation practical. This book was developed by the Federal Emergency Management Agency (FEMA), which is the agency responsible for responding to national disasters and for helping state and local governments and individuals prepare for emergencies. It contains step-by-step advice on how to prepare for, respond to, and recover from disasters. Used in conjunction with information and instructions from local emergency management offices and the American Red Cross, this book will give you what you need to be prepared. Proudly Published in the U. S. A. by CARLILE MEDIA.

The datasets developed during a project are provided to the community, and the information allows the community to determine whether the higher risk areas require more stringent building codes. Both regulatory and non-regulatory products are presented to the community in a series of Risk MAP meetings. The meetings also include information about Building Science Branch resources, such as the Building Science Toolkit CD, NFIP technical bulletins, disaster recovery advisories, building code assistance, web links, desk references, training resources, and technical publications, all of which can help the community meet FEMA's goal of fostering resilience through hazard-resistant structure design that leads to reducing the loss of life and property in hazard events.

April 2017 Mobile devices on the market today are some of the most complex and capable computing devices ever created. Although many can now match the capabilities of desktops and are being marketed as desktop replacements, they have features and capabilities not available to any desktop. They also sit in the broader mobile ecosystem giving them significantly more exposure. This means they share many of the same security threats as traditional desktop and laptop computers and are also exposed to more threats brought about by their mobility, complexity, and additional sensors. The impact of many of these threats can be magnified by the unique attributes of mobile devices. Why buy a book you can download for free? First you gotta find it and make sure it's the latest version (not always easy). Then you gotta print it using a network printer you share with 100 other people - and its outta paper - and the toner is low (take out the toner cartridge, shake it, then put it back). If it's just 10 pages, no problem, but if it's a 250-page book, you will need to punch 3 holes in all those pages and put it in a 3-ring binder. Takes at least an hour. An engineer that's paid $75 an hour has to do this himself (who has assistant's anymore?). If you are paid more than $10 an hour and use an ink jet printer, buying this book will save you money. It's much more cost-effective to just order the latest version from Amazon.com This book is published by 4th Watch Books and includes copyright material. We publish compact, tightly-bound, full-size books (8 1/2 by 11 inches), with glossy covers. 4th Watch Books is a Service Disabled Veteran-Owned Small Business (SDVOSB), and is not affiliated with the National Institute of Standards and Technology. For more titles published by 4th Watch Books, please visit: cybah.webplus.net A full copy of all the pertinent cybersecurity standards is available on DVD-ROM in the CyberSecurity Standards Library disc which is available at Amazon.com. NIST SP 500-299 NIST Cloud Computing Security Reference Architecture NIST SP 500-291 NIST Cloud Computing Standards Roadmap Version 2 NIST SP 500-293 US Government Cloud Computing Technology Roadmap Volume 1 & 2 NIST SP 500-293 US Government Cloud Computing Technology Roadmap Volume 3 DRAFT NIST SP 1800-8 Securing Wireless Infusion Pumps NISTIR 7497 Security Architecture Design Process for Health Information Exchanges (HIEs) NIST SP 800-66 Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule NIST SP 1800-1 Securing Electronic Health Records on Mobile Devices NIST SP 800-177 Trustworthy Email NIST SP 800-184 Guide for Cybersecurity Event Recovery NIST SP 800-190 Application Container Security Guide NIST SP 800-193 Platform Firmware Resiliency Guidelines NIST SP 1800-1 Securing Electronic Health Records on Mobile Devices NIST SP 1800-2 Identity and Access Management for Electric Utilities NIST SP 1800-5 IT Asset Management: Financial Services NIST SP 1800-6 Domain Name Systems-Based Electronic Mail Security NIST SP 1800-7 Situational Awareness for Electric Utilities NIST SP 500-288 Specification for WS-Biometric Devices (WS-BD) NIST SP 500-304 Data Format for the Interchange of Fingerprint, Facial & Other Biometric Information NIST SP 800-32 Public Key Technology and the Federal PKI Infrastructure NIST SP 800-63-3 Digital Identity Guidelines NIST SP 800-63a Digital Identity Guidelines - Enrollment and Identity Proofing NIST SP 800-63b Digital Identity Guidelines - Authentication and Lifecycle Management NIST SP 800-63c Digital Identity Guidelines NIST SP 800-178 Comparison of Attribute Based Access Control (ABAC) Stan

This Proposed Refugee Admissions for Fiscal Year 2015: Report to the Congress is submitted in compliance with Sections 207(d)(1) and (e) of the Immigration and Nationality Act (INA). The Act requires that before the start of the fiscal year and, to the extent possible, at least two weeks prior to consultations on refugee admissions, members of the Committees on the Judiciary of the Senate and the House of Representatives be provided with the following information: (1) A description of the nature of the refugee situation;(2) A description of the number and allocation of the refugees to be admitted and an analysis of conditions within the countries from which they came;(3) A description of the plans for their movement and resettlement and the estimated cost of their movement and resettlement;(4) An analysis of the anticipated social, economic, and demographic impact of their admission to the United States;(5) A description of the extent to which other countries will admit and assist in the resettlement of such refugees;(6) An analysis of the impact of the participation of the United States in the resettlement of such refugees on the foreign policy interests of the United States; and(7) Such additional information as may be appropriate or requested by such members. This report contains information as required by Section 602(d) of the International Religious Freedom Act of 1998 (Public Law 105-292, October 27, 1998, 112 Stat. 2787) (IRFA) about religious persecution of refugee populations eligible for consideration for admission to the United States. This report meets the reporting requirements of Section 305(b) of the North Korean Human Rights Act of 2004 (Public Law 108-333, October 18, 2004, 118 Stat. 1287) by providing information about specific measures taken to facilitate access to the United States refugee program for individuals who have fled "countries of particular concern" for violations of religious freedoms, identified pursuant to Section 402(b) of the IRFA

On December 18, 2015, Congress passed and President Obama signed into law the Cybersecurity Act of 2015. Title I of the Cybersecurity Act, entitled the Cybersecurity Information Sharing Act (CISA or the Act), provides increased authority for cybersecurity information sharing between and among the private sector; state, local, tribal, and territorial governments; and the Federal Government. Section 105(a)(4) of the Act directed the Attorney General and the Secretary of the Department of Homeland Security (DHS) to jointly develop guidance to promote sharing of cyber threat indicators with federal entities pursuant to CISA no later than 60 days after CISA was enacted. That guidance was published on February 16, 2016, as required by statute. Unlike other guidance documents that CISA required the federal government to produce, the guidance for sharing cyber threat indicators with federal entities did not direct the publication of an updated version. However, feedback elicited from non-federal entities after the release of the original guidance on sharing with federal entities counseled in favor of releasing a revised version, as permitted under section 105(a)(4)(B)(iii). Accordingly, this document clarifies and updates the original guidance to further assist non-federal entities who elect to share cyber threat indicators with the Federal Government to do so in accordance with the Act. It also assists non-federal entities to identify defensive measures and explains how to share them with federal entities as provided by CISA. Lastly, it describes the protections non-federal entities receive under CISA for sharing cyber threat indicators and defensive measures in accordance with the Act, including targeted liability protection and other statutory protections.

The Department of Homeland Security (DHS) has a vital mission: to secure the nation from the many threats it faces. The DHS vision is to ensure a homeland that is safe, secure, and resilient against terrorism and other hazards. These overarching goals are the basis for the IT mission and IT vision set forth in this document; the strategies and actions of the DHS CIO community are rooted in and aligned with the founding principles and highest priorities of Homeland Security. The DHS IT Strategic Plan 2015-2018 reflects our rapidly-changing IT environment and evolving mission and business needs, as well as IT's role in every aspect of security and resilience. It outlines DHS' IT priorities and provides strategic direction for the use of IT resources, in order to improve the efficiency of our programs, enhance our mission effectiveness, and ultimately, provide for the security of the American people. As part of its strategic planning process, DHS cross-Component leadership developed five high-level goals, each with no more than four achievable objectives. In addition, each goal and its objectives were given an outcome; that is, the intended end state once the goal and objectives are complete. The IT Strategic Plan collectively supports the strategies outlined in the Department's Strategic Plan for fiscal years 2012-2016 and the mission, goals, and objectives outlined in the 2014 Quadrennial Homeland Security Review (QHSR). It is an update to the DHS Information Technology Strategic Plan for fiscal years 2011-2015. The execution of the strategies in this plan is to be carried out under the leadership of the DHS CIO Council.

ICE-CETS is owned and managed by the Child Exploitation Section within the ICE Office of Investigations, Cyber Crimes Center. The ICE-CETS database contains investigative information related to Internet-facilitated child sexual exploitation crimes, to include but not limited to the possession, distribution and manufacturing of child exploitation images and videos (i.e., child pornography) and child sex tourism. The primary purpose of the system is to consolidate tips related to these crimes into a single database; to track, link, and disambiguate the tips; and to prioritize and refer them to ICE agents for investigation. ICE-CETS is not a case management system for these investigations, but is a repository and tool that facilitates the efficient use of investigative resources by ensuring related tips are identified and assigned for proper follow up. ICE-CETS stores tips related to Internet-facilitated child sexual exploitation crimes, such as a website containing child sexual exploitation material. These tips usually consist of Internet-related data that is somehow connected to the crime, which law enforcement may be able use to identify persons involved in the criminal activity and/or to connect related crimes. An example would be a list of Internet Protocol (IP) addresses from a server that contained images of child exploitation. Currently ICE receives thousands of tips from international and domestic law enforcement sources and non-governmental organizations (NGOs). Examples of such sources include ICE domestic and foreign field offices, the public (through the DHS public tip line), local law enforcement agencies, foreign law enforcement agencies, INTERPOL, and NGOs involved in preventing and detecting child sexual exploitation.

The legacy Immigration and Naturalization Service (INS) developed IDENT in 1994 as a law enforcement system for collecting and processing biometrics. In 2004, the Department of Homeland Security (DHS) established the U. S. Visitor and Immigrant Status Indicator Technology (US-VISIT) Program as the first large-scale biometric identification program to support immigration and border management. IDENT has evolved over the years into the central DHS-wide system for the storage and processing of biometric data. IDENT stores and processes biometric data-digital fingerprints, photographs, iris scans, and facial images-and links biometrics with biographic information to establish and verify identities. IDENT serves as a biographic and biometric repository for the Department. As a data steward, US-VISIT provides a service to its data providers and data users. US-VISIT identifies each collection by data provider and its authority to use, retain, and share it. IDENT enables sharing with authorized users after the data provider has approved the sharing. The process of retaining data provided to IDENT is referred to as enrollment. Each time an individual's biometrics are enrolled in IDENT, it is an encounter. Adding encounters to an already existing identity is referred to as an assignment. With each encounter, IDENT: Checks a person's biometrics against the IDENT watch list of known or suspected terrorists(KST), criminals, and immigration violators;Checks a person's biometrics against the entire database of fingerprints to help determine if a person is using an alias and/or attempting to use fraudulent identification; andChecks a person's biometrics against those associated with the identification document presented to help ensure that the document belongs to the person presenting it and not someone else

This document was developed by the Information Sharing and Technical Assistance Branch of the United States Visitor and Immigrant Status Indicator Technology (US-VISIT) Program as a primary reference for implementing biometric standards requirements for US-VISIT systems. It provides a baseline for implementing new and improved biometric technologies, capabilities, and services, with the aim of promoting and achieving maximum stakeholder interoperability. The information in this document will support the development of US-VISIT data-sharing agreements with other U. S. Government agencies and foreign government partners. This document -- Identifies biometric-related standards and implementation options to which US-VISIT currently conforms- Provides information on current U. S. and international standards and options that US-VISIT will implement by FY 2011 to support new biometric technologies and services and to enhance interoperability with its Federal partners and other stakeholdersThis version of the document focuses on specification of standards for -- Biometric data format standards for the collection, storage, and exchange of fingerprints and palm prints, two-dimensional face images, and iris images- Biometric transmission profiles required for data sharing with US-VISIT partners and stakeholdersThe document will be updated and expanded as needed to -- Reflect the revision or development of new standards affecting US-VISIT systems operations- Support interoperability schemes and data-sharing agreements as they are developed among US-VISIT, its partners, and stakeholders- Support the planning for and implementation of new technologies adopted by US-VISIT and Department of Homeland Security (DHS) components- Support conformance and performance testing of US-VISIT biometric systems

Homeland security begins with hometown security. As part of its commitment to hometown security, the Department of Homeland Security (DHS) has worked to get tools, information, and resources out of Washington, D. C. and into the hands of our federal, state, local, tribal and territorial partners. Tribal Nations are critical partners in our homeland security efforts, and DHS's Office of Intergovernmental Affairs (IGA) promotes an integrated national approach to homeland security by coordinating and advancing federal interaction with state, local, tribal, and territorial (SLTT) governments. IGA is responsible for opening the homeland security dialogue with executive-level partners at the SLTT levels, along with the national associations that represent them. DHS's Office of Intergovernmental Affairs developed this guide to highlight some of the DHS resources available to Tribal Nations to keep our nations safe and secure. This book summarizes and provides links to training, publications, guidance, alerts, newsletters, programs, and services available to Tribal Nations from across the department. This book is not exhaustive and will be maintained as a living document. The resource guide is organized by component and resource type and serves as a starting point for locating DHS resources for Tribal leaders and their staff. A comprehensive index is available to facilitate locating resources. IGA is committed to working with our Departmental and interagency partners to provide the assistance and support Tribal Nations require.

Information infrastructures across many public and private domains share several common attributes regarding IT deployments and data communications. This is particularly true in the control systems domain. A majority of the systems use robust architectures to enhance business and reduce costs by increasing the integration of external, business, and control system networks. However, multi-network integration strategies often lead to vulnerabilities that greatly reduce the security of an organization, and can expose mission-critical control systems to cyber threats. This document provides guidance and direction for developing 'defense-in-depth' strategies for organizations that use control system networks while maintaining a multi-tier information architecture that requires: -Maintenance of various field devices, telemetry collection, and/or industrial-level process systems-Access to facilities via remote data link or modem-Public facing services for customer or corporate operations-A robust business environment that requires connections among the control system domain, the external Internet, and other peer organizations.