February 2010February 2010

Maryland Coordination Maryland Coordination & &

Analysis Center Analysis Center (Overview)(Overview)

22

AgendaAgenda

History History ATACATACJTTFJTTF

MCACMCACWatch Section OverviewWatch Section OverviewIntelligence Analysis Section OverviewIntelligence Analysis Section OverviewNationwide Strategy/ RegionalizationNationwide Strategy/ RegionalizationMaryland’s Emergency Management ConnectionMaryland’s Emergency Management ConnectionContact InformationContact Information

33

MCAC HistoryMCAC History

9/17/2001- U.S. Attorney General 9/17/2001- U.S. Attorney General John Ashcroft directed every John Ashcroft directed every office to start an Anti-terrorism office to start an Anti-terrorism Advisory Council (ATAC).Advisory Council (ATAC).

MD ATAC formed one of the 1MD ATAC formed one of the 1stst Fusion Centers in the U.S. to Fusion Centers in the U.S. to combine information / sharing & combine information / sharing & analysis. Serves as a conduit analysis. Serves as a conduit between Federal/State/Locals.between Federal/State/Locals.

44

FUSION CENTERFUSION CENTER

''What Is a Fusion Center?''What Is a Fusion Center?

A fusion center is an effective and efficient A fusion center is an effective and efficient mechanism to exchange information and mechanism to exchange information and intelligence, intelligence, maximize resources, streamline maximize resources, streamline operations, and improve the ability to fight crime operations, and improve the ability to fight crime and terrorismand terrorism by merging data from a variety of by merging data from a variety of sources. In addition, fusion centers are a conduit sources. In addition, fusion centers are a conduit for implementing portions of the for implementing portions of the National National Criminal Intelligence Sharing PlanCriminal Intelligence Sharing Plan (NCISP).'' (NCISP).''

Excerpt fromExcerpt fromFusion Center Guidelines: Executive Fusion Center Guidelines: Executive SummarySummary (DOJ) (DOJ)

55

MCAC MissionMCAC Mission

To serve as the focal point for federal, To serve as the focal point for federal, state, local, and private sector partners in state, local, and private sector partners in the collection, analysis and dissemination the collection, analysis and dissemination of criminal and homeland security of criminal and homeland security information important to all in Maryland. information important to all in Maryland.

66

MCAC HistoryMCAC History

Information sharing protocols drafted and approved by Information sharing protocols drafted and approved by ATAC Executive Committee – Spring / Summer, 2003.ATAC Executive Committee – Spring / Summer, 2003.Personnel staffing request to federal, state and local Personnel staffing request to federal, state and local agencies – Spring / Summer, 2003.agencies – Spring / Summer, 2003.Initial operations for Watch Section began November 3, Initial operations for Watch Section began November 3, 2003 at 0800;2003 at 0800;

Focused on terrorism activities in Maryland.Focused on terrorism activities in Maryland.

Toll free JTTF and MSP tip lines merged into the Watch Toll free JTTF and MSP tip lines merged into the Watch Section;Section;Strategic analytical training scheduled;Strategic analytical training scheduled;

SAS began operations April 1, 2004.SAS began operations April 1, 2004.

All Crimes ApproachAll Crimes Approach initiated in 2006. initiated in 2006.Integration of the Maryland State Police Homeland Integration of the Maryland State Police Homeland Security and Intelligence Division – November 2008.Security and Intelligence Division – November 2008.

77

Anti-Terrorism Advisory CouncilAnti-Terrorism Advisory Council(ATAC)(ATAC)

Facilitates intelligence and information sharing among federal, Facilitates intelligence and information sharing among federal, state and local authorities state and local authorities (Intelligence/Information Sharing (Intelligence/Information Sharing component, component, MCACMCAC););

Prevents and disrupts terrorism activity within the state through Prevents and disrupts terrorism activity within the state through aggressive investigation and prosecution aggressive investigation and prosecution (Investigation/Prosecution component; JTTF and USAO)(Investigation/Prosecution component; JTTF and USAO); and; and

Assures that the organizational structure and plans exist to Assures that the organizational structure and plans exist to effectively prepare for, and respond to, any future terrorist effectively prepare for, and respond to, any future terrorist incidents in the state incidents in the state (Emergency Preparedness/Response (Emergency Preparedness/Response component; MEMA, Maryland Military Department).component; MEMA, Maryland Military Department).

Multi-disciplined organization (LE,public health, EMS, Transportation, Fire, Military) that includes local, state, and federal agencies that coordinate activities, develop policy, and implement strategic plans to combat terrorism in the State of Maryland.

88

ATAC Executive CommitteeATAC Executive Committee

USAOUSAO ICEICE MD Police Chiefs MD Police Chiefs

AssociationAssociation MD Fire Chiefs AssociationMD Fire Chiefs Association Maryland State PoliceMaryland State Police FBIFBI MD Sheriff’s AssociationMD Sheriff’s Association MD Health Officer’s MD Health Officer’s

AssociationAssociation MD Metro Fire Chief’s MD Metro Fire Chief’s

AssociationAssociation

MD Military DepartmentMD Military Department Two Major Jurisdiction Police Two Major Jurisdiction Police

Chief’sChief’sBaltimore CountyBaltimore CountyBaltimore CityBaltimore City

MdTAPMdTAP US Coast GuardUS Coast Guard Maryland Homeland Security Maryland Homeland Security

AdvisorAdvisor MD Fireman’s AssociationMD Fireman’s Association

Chief Executive Officers of:

99

ATAC StructureATAC Structure

MARYLAND COORDINATION AND ANALYSIS

CENTER

ATAC Executive Committee

ATAC MEMBERSHIP

IntelligenceAnalysisSection

WatchSection

250+ Member Agencies

Local, State, Federal

Law Enforcement

Fire/Emergency Management

Military & Transportation

Public Health

Private Sector

1010

Leadership DesignLeadership Design

STATE

LOCAL FEDERAL

1111

MCAC LeadershipMCAC Leadership

Matt LawrenceExecutive Director

Maryland State Police

Lt. Tom KohlmannAssistant Director

Watch Section CommanderAnne Arundel County PD

Dave MillerAssistant Director

IAS SupervisorSSA FBI

1212

Joint Terrorism Task ForceJoint Terrorism Task Force(Operational Component)(Operational Component)

A full-time, collaborative federal, state and local law A full-time, collaborative federal, state and local law enforcement entity that investigates terrorism activity enforcement entity that investigates terrorism activity and/or individuals who may be engaged in support and/or individuals who may be engaged in support of terrorists with the goal of preventing and/or of terrorists with the goal of preventing and/or aggressively disrupting any terrorist-related activity aggressively disrupting any terrorist-related activity and, when possible, bringing federal prosecutions.and, when possible, bringing federal prosecutions.

The MCAC works in conjunction with the JTTF. The MCAC works in conjunction with the JTTF.

1313

To To provide analytical supportprovide analytical support for federal, state and for federal, state and local agencies involved in law enforcement, fire, local agencies involved in law enforcement, fire, emergency medical service, emergency response, emergency medical service, emergency response, public health and welfare, public safety and public health and welfare, public safety and homeland security in Maryland. homeland security in Maryland. (Watch Section)(Watch Section)

To To provide intelligence analysisprovide intelligence analysis to better focus the to better focus the investigative activities being conducted by law investigative activities being conducted by law enforcement agencies within the state and to better enforcement agencies within the state and to better enable public health and safety agencies to perform enable public health and safety agencies to perform their important protective functions. their important protective functions. (IAS)(IAS)

Mission

1414

PERSONNELPERSONNEL

MCAC

Maryland StatePolice

Baltimore City Sheriff

Maryland Transit

Administration Police

Maryland Department

OfCorrections

Baltimore County Police

Department

Howard County Police

Department

Maryland National

Guard

FederalBureau of

Investigation

DHS Intelligence & Analysis

Anne Arundel

County PD

Montgomery County

PD

Baltimore CountySheriff

US Army

MEMA

Immigration and

Customs Enforcement

Maryland Transportation

Authority Police

Harford County Sheriff

Maryland DNR

PoliceATF

MCAC Contractors

US CoastGuard

Baltimore City

PoliceDepartment

Prince George’s

County PD

Baltimore County

FireDepartment

P&PAnnapolis

CityPD

1414

MDOT(Pending)

1515

Watch Section Core FunctionsWatch Section Core Functions

Receive and process suspicious activity TIPS.Receive and process suspicious activity TIPS.

Receive and process requests for information /service Receive and process requests for information /service (RFI/S).(RFI/S).

Monitor all available intelligence resources Monitor all available intelligence resources –– monitoring monitoring for significant, noteworthy or high profile events/activities for significant, noteworthy or high profile events/activities to determine any and all impact to the State of Maryland.to determine any and all impact to the State of Maryland.

Disseminate and communicate intelligence information.Disseminate and communicate intelligence information.

1616

Watch Personnel DutiesWatch Personnel Duties

Watch Section Shift SupervisorWatch Section Shift Supervisor –– a sworn law a sworn law enforcement investigator designated by the Watch enforcement investigator designated by the Watch Section commander. Preferably, a corporal or Section commander. Preferably, a corporal or sergeant with significant supervisory experience and sergeant with significant supervisory experience and training. training. Search AnalystSearch Analyst –– any sworn law enforcement any sworn law enforcement officer or civilian or military analyst assigned to the officer or civilian or military analyst assigned to the MCAC Watch Section who has completed the MCAC Watch Section who has completed the required training program.required training program.  Intelligence AnalystIntelligence Analyst –– any sworn law enforcement any sworn law enforcement officer or civilian or military analyst assigned to the officer or civilian or military analyst assigned to the MCAC Watch or Intelligence Analysis Section who MCAC Watch or Intelligence Analysis Section who has completed the required training program. has completed the required training program.

1717

DatabasesDatabases

Available Information to all Maryland Law EnforcementAvailable Information to all Maryland Law Enforcement - - The Watch The Watch Section has access to a wide variety of criminal information. This data is Section has access to a wide variety of criminal information. This data is continuously expanding and is available to all law enforcement personnel. continuously expanding and is available to all law enforcement personnel.

Primary Watch Section Databases:Primary Watch Section Databases:Guardian – FBI terrorism tracking databaseGuardian – FBI terrorism tracking databaseAutomated Case System (ACS)Automated Case System (ACS)

Maryland Motor Vehicle AdministrationMaryland Motor Vehicle AdministrationMaryland Public Safety Dashboard Maryland Public Safety Dashboard https://167.102.133.244/saw.dll?Dashboardhttps://167.102.133.244/saw.dll?Dashboard

1818

Information SharingInformation Sharing

Maryland Joint Terrorism Task ForceMaryland Joint Terrorism Task Force(JTTF) (JTTF)

Maryland Emergency Management AgencyMaryland Emergency Management AgencyTerrorist Screening Center (TSC) Terrorist Screening Center (TSC) FBI Counter Terrorism WatchFBI Counter Terrorism WatchNational Counter-Terrorism Center (NCTC)National Counter-Terrorism Center (NCTC)National Operations Center (NOC)National Operations Center (NOC)FBI Strategic Information Operations FBI Strategic Information Operations

Center (SIOC)Center (SIOC)Defense Intelligence Agency (DIA)Defense Intelligence Agency (DIA)NY/NY HIDTA Regional Intelligence Center NY/NY HIDTA Regional Intelligence Center

(RIC)(RIC)NYPD Counter Terrorism Division (CTD)NYPD Counter Terrorism Division (CTD)Upper New York Regional Intelligence Upper New York Regional Intelligence

Center (UNYRIC)Center (UNYRIC)Anti-Defamation League (ADL)Anti-Defamation League (ADL)Public Safety Division of Corrections (DOC)Public Safety Division of Corrections (DOC)

Washington/Baltimore High Intensity Drug Washington/Baltimore High Intensity Drug Trafficking Area (HIDTA)Trafficking Area (HIDTA)

Middle Atlantic Great Lakes Organized Crime Middle Atlantic Great Lakes Organized Crime Law Enforcement Network (MAGLOCLEN)Law Enforcement Network (MAGLOCLEN)

International Criminal Police Organization International Criminal Police Organization (INTERPOL) - Department of Justice(INTERPOL) - Department of Justice

El Paso Intelligence Center (EPIC) - DEA, El Paso Intelligence Center (EPIC) - DEA, ICEICE

International Association of Law Enforcement International Association of Law Enforcement Intelligence Analysts (IALEIA)Intelligence Analysts (IALEIA)

Combined Law Enforcement Intelligence Combined Law Enforcement Intelligence Group (CLEIG)Group (CLEIG)

Mid-Atlantic Regional Gang Investigators Mid-Atlantic Regional Gang Investigators Network (MARGIN)Network (MARGIN)

Various Private Sector WorkgroupsVarious Private Sector Workgroups

The Watch Section routinely networks and shares information with various other federal, State and local law enforcement agences.

1919

ProductsProducts

Suspect Work-up InformationSuspect Work-up Information – Any suspect information resulting from a – Any suspect information resulting from a request for information (inquiry) is faxed or hand delivered to the requestor. request for information (inquiry) is faxed or hand delivered to the requestor. Once delivered, the suspect descriptive information is entered into the Once delivered, the suspect descriptive information is entered into the appropriate file for completion and retention per 28 CFR 23.appropriate file for completion and retention per 28 CFR 23.

TIP ReportsTIP Reports -- Suspicious activity TIP reports (non-terrorist related) are faxed to Suspicious activity TIP reports (non-terrorist related) are faxed to the appropriate law enforcement jurisdiction for investigative follow-up. All the appropriate law enforcement jurisdiction for investigative follow-up. All suspect descriptive information is entered into the appropriate file for suspect descriptive information is entered into the appropriate file for retention per 28 CFR 23. retention per 28 CFR 23. 

Intelligence Bulletins - Intelligence Bulletins - Intelligence/Law Enforcement related information Intelligence/Law Enforcement related information disseminated to all ATAC members, law enforcement or homeland security disseminated to all ATAC members, law enforcement or homeland security personnel by fax, teletype or email. May also be posted to HSIN S/L, personnel by fax, teletype or email. May also be posted to HSIN S/L, JRIES, LEO or RISS (BOLOs, Officer Safety, Wanted and Missing Persons, JRIES, LEO or RISS (BOLOs, Officer Safety, Wanted and Missing Persons, Heightened Awareness, Alerts, etc.). The bulletins are compiled upon Heightened Awareness, Alerts, etc.). The bulletins are compiled upon request and disseminated with approval of the Watch Section Commander. request and disseminated with approval of the Watch Section Commander. 

Intelligence information within Guardian - Intelligence information within Guardian - All terrorist TIPS are uploaded into All terrorist TIPS are uploaded into the FBI Automated Case System (ACS), National Counter-Terrorism Center the FBI Automated Case System (ACS), National Counter-Terrorism Center (NCTC) and the Terrorist Screening Center (TSC).(NCTC) and the Terrorist Screening Center (TSC).

2020

DisseminationDissemination

Email & Facsimile DistributionsEmail & Facsimile Distributions

HSIN/LEO/RISSHSIN/LEO/RISS

Text PagingText Paging

Telephone (landline)Telephone (landline)

Cell Phone and Nextel (talk around)Cell Phone and Nextel (talk around)

Secure Telephone Unit/Fax (STU)Secure Telephone Unit/Fax (STU)

2121

Intelligence Analysis SectionIntelligence Analysis Section

Synchronize/harmonize intelligence products – Synchronize/harmonize intelligence products – reduce duplicate and contradictory reporting;reduce duplicate and contradictory reporting;

Identify patterns and trends specific to MarylandIdentify patterns and trends specific to Maryland;;

Staffed by ATAC members:Staffed by ATAC members: MSP, DHS I&A, HCSO, BCSO, BPD, BCPD, MSP, DHS I&A, HCSO, BCSO, BPD, BCPD,

MD Military Dept, U.S. Coast Guard, FBI, ATF, MD Military Dept, U.S. Coast Guard, FBI, ATF, University of Maryland (Contractors).University of Maryland (Contractors).

2222

Intelligence Analysis SectionIntelligence Analysis Section

Both Operational & Strategic IntelligenceBoth Operational & Strategic Intelligence Operational – Case Support, Daily products, Officer Operational – Case Support, Daily products, Officer

Safety, etc..Safety, etc.. Strategic – Long Range / Event AssessmentsStrategic – Long Range / Event Assessments**Tactical – RFI Section of the WATCH **Tactical – RFI Section of the WATCH (Immediate (Immediate

Field Support)Field Support)

Connecting the DotsConnecting the Dots – link connections – link connections Assess nature and extent of activities and Assess nature and extent of activities and organizationsorganizationsPreventative (Anticipatory)Preventative (Anticipatory)Knowledge Base Knowledge Base Account Structure (Gangs, CIKR, etc…)Account Structure (Gangs, CIKR, etc…)

2323

IAS ResourcesIAS Resources

National Intel

Databases

Commercial Databases

PublicDatabases

RegionalDatabases

Federal L.E.

Databases

IAS

2424

IAS ProductsIAS Products

Threat / Special Event AssessmentsThreat / Special Event AssessmentsBulletins & AlertsBulletins & AlertsLost/Stolen Equipment BOLOLost/Stolen Equipment BOLOROLL CALL (Officer Safety) ProductsROLL CALL (Officer Safety) ProductsIntelligence SummariesIntelligence Summaries

Set against IAS prioritiesFederal and State/Local collaboration

Customer DrivenTailored to the needs of the requestor

2525

Information FlowInformation Flow

General Public

Private Sector

Law Enforcement

Public Health

National Guard

Intelligence Community

WATCH Section

JTTF / State / Local (Terrorism)or

Local LEO (Others)

IAS Section

(Immediate)

(Non-Immediate)

2626

Critical Success FactorsCritical Success Factors

Participation of all ATAC agency members, not just LEParticipation of all ATAC agency members, not just LEExecutive Leadership SupportExecutive Leadership Support FundingFunding Personnel – multiple skill setsPersonnel – multiple skill sets

Sworn, Civilian, Supervisors Sworn, Civilian, Supervisors Access to InformationAccess to Information

Extensive Training Program Extensive Training Program Connectivity to other Connectivity to other 70+70+ Fusion Centers, Federal Fusion Centers, Federal Agencies, National Operations Center (NOC), Terrorist Agencies, National Operations Center (NOC), Terrorist Screening Center (TSC) and the National Counter-Screening Center (TSC) and the National Counter-Terrorism Center (NCTC)Terrorism Center (NCTC)Participation from other Federal agencies (DHS, ATF, Participation from other Federal agencies (DHS, ATF, DEA, ICE, FBI, etc.)DEA, ICE, FBI, etc.)

2727

NationalNational

White House – White House – National Strategy for National Strategy for Information Sharing Information Sharing (2007).(2007). Appendix 1 Appendix 1

(Establishing a (Establishing a National Integrated National Integrated Network of State & Network of State & Major Urban Area Major Urban Area FUSION CENTERS)FUSION CENTERS)

2828

NationalNational

2929

Maryland Maryland RegionalizationRegionalization

To develop centers across the State of Maryland that To develop centers across the State of Maryland that use MCAC as their hub.use MCAC as their hub.

Southern Maryland Information Center (SMIC)Southern Maryland Information Center (SMIC)Hughesville, MarylandHughesville, Marylandwww.smictf.comwww.smictf.com

Eastern Shore Information Center (ESIC)Eastern Shore Information Center (ESIC) Salisbury, MarylandSalisbury, Maryland

Western Maryland Information Center (WMIC)Western Maryland Information Center (WMIC)Frederick and Washington CountiesFrederick and Washington Counties

Combine regional matters to identify patterns, trends Combine regional matters to identify patterns, trends and issues across Maryland.and issues across Maryland.

3030

AnneArundel

Howard

Baltimore

St. Mary's

Charles

Allegany Carroll HarfordCecil

Wicomico

Dorchester

GarrettFrederick

Montgomery

Calvert

Somerset

Kent

Washington

PrinceGeorge’s

Caroline

Talbot

QueenAnne’s

Worcester

MCAC

WMIC

ESICSMIC

REGIONALIZATIONREGIONALIZATION

3030

3131

Maryland’sMaryland’sEmergency ManagementEmergency Management

ConnectionConnection

"Fatti maschii, parole femine" Interpretation

“Strong deeds, Gentle words"

3232

MJOCMCACJTTF

LE

CT WATCH

REGIONALLE

CENTERS

NCTC

TSA OC

MNGFEMA

MAA

PH

DGS

SYSCOM

FIRE/EMS

CHART

DHMH

MTA

MSP DNR

MTAPUSCG

MIL

PRIVATE

DHS

INCIDENT DEPENDENT

PR

IMA

RY

PR

IMA

RY

Maryland’sMaryland’sEmergency ManagementEmergency Management

(Event Driven Information Flow)

Consequence ManagementCrime Focus

3333

Comments / SuccessesComments / Successes

““Prior to 9/11, that information was not available to Prior to 9/11, that information was not available to local law enforcement.” - Former local law enforcement.” - Former MTAP Chief Gary MTAP Chief Gary McLhinney, commenting on the role MCAC played in McLhinney, commenting on the role MCAC played in the identification and detention of Ismail Elbarassethe identification and detention of Ismail Elbarasse

““The MCAC gets our time-sensitive information at a The MCAC gets our time-sensitive information at a moment’s notice – and has become a central hub for moment’s notice – and has become a central hub for us to share information with Maryland.” – us to share information with Maryland.” – George George Purvis, National Counter-Terrorism CenterPurvis, National Counter-Terrorism Center

““MCAC is a model to be emulated.” – MCAC is a model to be emulated.” – VA State VA State PolicePolice

3434

Comments / SuccessesComments / Successes

"As we work together to serve and protect our 'One Maryland' from the threats of crime and terrorism, it is vital that we have a coordinated and cohesive law enforcement and emergency management  partnership at the local, state, and federal levels.  The Maryland Coordination and Analysis Center has proven to be an effective enabler that provides a unified resource for citizens to share their concerns and for police officers and emergency managers to obtain the most accurate and up-to-date information available.  This Center is an essential resource for the dedicated men and women who daily answer the call to duty and make possible the most important service government provides – public safety." 

Governor Martin O'Malley

3535

MCAC Contact InformationMCAC Contact Information

Phone: 1-800-492-8477Phone: 1-800-492-8477

Fax: 443-436-8825Fax: 443-436-8825

E-Mail: MDWATCH@leo.gov E-Mail: MDWATCH@leo.gov

“The only thing necessary for the triumph of evil, is for good men to do nothing.” (Edmond Burke)