US Dept of Homeland Security FEMA 8/28/2020

FOR OFFICIAL USE ONLY//CONTROLLED UNCLASSIFIED INFORMATION • Provide physical security and system environmental safeguards for devices supporting system interoperability with IPAWS-OPEN. • Ensure physical and logical access to the respective systems as well as knowledge of the COGID and associated access criteria are only granted to properly vetted and approved entities or individuals. • Where applicable,ensure that only individuals who have successfully completed FEMA-required training can utilize the interoperable systems to issue alerts and warnings intended for distribution to the public. • Where applicable,document and maintain records of successful completion of FEMA-required training and produce such documentation in response to official inquiries and/or requests. 8.0 PROFICIENCY DEMONSTRATION Once enabled,each COG operating under this agreement must demonstrate their ability to compose and send a message through the IPAWS-OPEN system at regular intervals.Such demonstration must be performed on a monthly basis through generation of a message successfully sent through the IPAWS-OPEN Training and Demonstration environment. 9.0 ASSOCIATED SOFTWARE REQUIREMENTS The COG will need to select a software package which will allow the COG to properly populate a Common Alerting Protocol(CAP)message which complies with both the OASIS Common Alerting Protocol Version 1.2 and the OASIS Common Alerting Protocol,v. 1.2 USA Integrated Public Alert and Warning System Profile Version 1.0.With respect to the software and the software vendor selected FEMA expects the selected software to provide the following minimum critical capabilities and services: • Permissions: o The ability to assign and manage user permissions;and o The ability to retrieve and view IPAWS Alerting Permissions • Proficiency: o The provision of vendor support,to include user training,and around the clock technical support; and o The ability to submit both live and test digital certificates,with clear,easily identifiable information that indicates the environment to which the software is pointed(Live or Test) • User Interface: o The provision of an intuitive user interface,to include help menus;and o The ability to notify the user of digital certificate expiration;and o The ability to constrain event types and geocodes to user permissions;and o The ability to send one alert to multiple channels;and o The provision of displays that show required fields based on selected channel;and o The ability to pre-populate fields to the greatest extent possible;and o The ability to support templates;and o The ability to create a polygon or circle,of less than 100 nodes;and o The ability to update or cancel an alert,without having to reenter all of the data;and o The ability to alert the end user if a software license has expired;and o Clear explanations if alert information is case sensitive when entered • Confirmation and Error Checking: o The ability to pre-check an alert message for errors,prior to sending;and o The ability to create free-form 90-character WEA text,while preventing prohibited characters;and 4 V4.2,June 20,2019