SAFENET


SAFENET

Wildland Fire Safety & Health Reporting Network

SAFENET Event Information
Create Agency Response

SAFENET ID:
20200310-0001        [Corrective Actions]
Event Start Date:
03/10/2020 0800
Event Stop Date:
 
Incident Name:
Security Update to NAS Server
Fire Number:
 
State:
Oregon
Jurisdiction:
USFS
Local Unit:
Central Ooregon Interagency Dispatch Center
Incident Type:
Wildland, Prescribed/Fuels Treatment, Training
Incident Activity:
Line, Support
Stage of Incident:
Initial Attack
Position Title:
Aasistant Center Manager 
Task:
Overseeing Initial attack response, Aircraft response and Logistical support 
Management Level:
3
Resources Involved:
All COFMS and ODF Fire resources, All Field going peersonel 
Contributing Factors
Contributing Factors:
Communications, Equipment, Human Factors
Human Factors:
Decision Making, Risk Assessment, Situational Awareness  
Other Factors:
Policy to conduct blanket updates of Dispatch computer equipment without taking into consideration specific needs 
Narrative
Describe in detail what happened including the concern or potential issue, the environment (weather, terrain, fire behavior, etc), and the resulting health issue.
At 0800 COIDC personel attempted to log into the Computer aided dispatch program WildCad. All login attempts failed. Upon trouble shooting it was discovered that the WildCad.exe file was missing fron the NAS server. After talking to other dispatch centers it was determined that a security update to the NAS servers had identified the WildCad.exe file as a threat and it was removed.
With out the CAD COIDC response to emergency incidents is severly slowed and poses an increased threat to the firefighters,community, forests and rangelands. Situational awareness for Fire managers and Forest/District mangers is severly limited with out the CAD operational which slows discision making and crital response actions.
This issue happens multiple times throughout the year and we have requested CIO make provisions to excluded dispatch centers from blanket upgrades as most of our equipment has special configurations to allow for radio, telephone and NAS access.
Immediate Action Taken
Reporting Individual : please describe actions you took to correct or mitigate the unsafe/unhealthful event.
My only access is to read files. NAS servers are controlled by CIO and as a NAS administrator I am unable to add or remove files from the server.


Agency Response

20200310-0001-CA001

Return to Top