Virginia Commonwealth University (VCU) - PowerPoint Presentation

1. Virginia Commonwealth University (VCU)Hazard Mitigation Plan Update Public ForumNovember 10, 2022

2. AgendaWelcomeReview of Executive Summary:Purpose of PlanHistoryLocationVCU ProfilePlanning ProcessHazard IdentificationHazard and Risk MatrixHazard RankingHazard ProfileRisk and Vulnerability AssessmentCapability AssessmentHigh Priority StrategiesMitigation GoalsMitigation PrioritizationMitigation ProjectsFuture Plan Recommendations

3. Purpose of the PlanThis plan represents the continual initiative-taking steps taken by Virginia Commonwealth University (VCU) to lessen the impact of disasters by avoiding future losses and disruptions. The VCU Hazard Mitigation Plan (HMP) identifies the natural, human-caused, and technological threats and hazards that may affect VCU. It also assesses the vulnerability of campus buildings, property, and personnel to said hazards. Mitigation strategies were developed, and priorities were established to address the vulnerabilities identified in this plan. This plan also includes assessing VCU’s existing capabilities to implement a hazard mitigation plan and concludes with implementation and maintenance procedures.

4. HistoryVCU traces its roots to two institutions that merged in 1968 to create VCU: the Medical College of Virginia established in 1838 as the medical department of Hampden-Sydney College, and Richmond Professional Institute, founded in 1917. Today, VCU enrolls more than 29,000 students in more than two hundred degree and certificate programs and encompasses one of the largest academic health centers in the nation. The VCU Medical Center was named the No.1 hospital in the Richmond region by U.S. New & World Report.As one of only seventy-one institutions designated by the Carnegie Foundation as “Community Engaged” with “Highest-Research Activity,” VCU received $335 million in externally funded sponsored awards in fiscal year 2020. VCU is taking its place among the nation’s premier urban, public research universities.

5. LocationVCU is in the City of Richmond, which currently serves as the capital of Virginia, and is approximately two hours southwest of Washington, D.C., Interstates 95, 64, and 195 lead to the University. Richmond is Virginia’s richly historic, diverse, and inclusive capital city located in the Richmond Region, state, and East Coast. Located at the crossroads of multi-modal transportation networks, including major highways, rail, water, and air transport, Richmond is one of the fastest growing cities in the Commonwealth. Home to major colleges and universities, a Federal Reserve Bank, The Virginia Biotech Park, and several Fortune 1000 Companies, the city attracts young professionals and seasoned executives alike, who are drawn to the historical and natural beauty, convenience, as well as the low cost of living and doing business that Richmond offers.North of VCU’s Monroe Park Campus, the Carver neighborhood was settled by Eastern European immigrants in the 1840s and became a thriving African American community by the turn of the 20th century. Listed on the National Register of Historic Places, this neighborhood has a diverse population. Carver’s neighborhood association joined VCU in establishing the Carver-VCU Partnership to address long-term community development.

6. VCU ProfileVCU is in the City of Richmond, which currently serves as the capital of Virginia, and is approximately two hours southwest of Washington, D.C., Interstates 95, 64, and 195 lead to the University. Richmond is Virginia’s richly historic, diverse, and inclusive capital city located in the Richmond Region, state, and East Coast. Located at the crossroads of multi-modal transportation networks, including major highways, rail, water, and air transport, Richmond is one of the fastest growing cities in the Commonwealth. Home to major colleges and universities, a Federal Reserve Bank, The Virginia Biotech Park, and several Fortune 1000 Companies, the city attracts young professionals and seasoned executives alike, who are drawn to the historical and natural beauty, convenience, as well as the low cost of living and doing business that Richmond offers.North of VCU’s Monroe Park Campus, the Carver neighborhood was settled by Eastern European immigrants in the 1840s and became a thriving African American community by the turn of the 20th century. Listed on the National Register of Historic Places, this neighborhood has a diverse population. Carver’s neighborhood association joined VCU in establishing the Carver-VCU Partnership to address long-term community development.According to the 2020 Census, Richmond had a metropolitan population of 226,610. The racial makeup of Richmond VA is 45.5% White, 46.9% Black or African American, 6.9% Hispanic of Latino, 2.1% Asian, 0.4% American Indian and Alaska Native, and 3.4% from two or more races. The median household income in 2019 dollars was $47,250.

7. Planning ProcessVCU has followed the mitigation and planning process on the Building a Disaster-Resilient University guide published by the Federal Emergency Management Agency (FEMA) in 2003, and includes the following:Convening a Steering Committee (SC) and Hazard Mitigation Planning Committee (HMPC) that include representatives from various administrative, academic, health care departments and representatives from the Virginia Department of Emergency Management (VDEM). The committee collaborated with a consultant throughout the process to develop the mitigation plan.Create a profile and capability assessment to determine existing capabilities.Gather and analyze information on past and potential future impacts of threats and hazards on the campus community.Create strategies and goals to address the risks and vulnerabilities identified in the planning process.

8. Hazard Identification The HMSC identified the following hazards to use as a base line to identify and rank which hazards would have the most impact on the community:Active ShooterDomestic TerrorismCyber TerrorismTechnology-SoftwareFloodingTornadosFireHazmatTropical StormHurricaneInternational TerrorismWindstormsCivil DisturbanceBomb ThreatEarthquakeElectrical FailureTechnology-HardwareHostile IntruderWinter StormsThunderstormsBarricaded SuspectPublic Health Emergency  

9. Hazard Identification Cont.The HMPC ranked and prioritized the relevant threats and hazards based on previous and anticipated events and their impacts on the VCU campus. The HMPC also developed indices, and vulnerability assessments designed for faculty, staff, students, visitors, structures, and buildings representing the VCU community. The hazard indices represent the extent of disruptions that would affect the campus community, and the vulnerability assessments estimate the potential impacts from a specific hazard or threat. The hazard index and vulnerability assessments are combined to create a mitigation priorities index for each identified threat or hazard. The mitigation priorities index guided the development of mitigation strategies for the campus community.

10. Hazards and Risks MatrixBased upon the hazards and risks identified in the VCU 2010 Hazard Mitigation Plan and the VCU 2021 Crisis and Emergency Management Plan (CEMP), the HMPC identified the hazards and risks it felt could have the most significant impact on the university.The VCU Hazards and Risks Identification Survey and the Hazards and Risks Validation Survey submitted by the HMPC evaluated and scored each hazard and risk on the Severity of Impact (SOI), Probability of Event (POE), and Long-Term Impacts (LTI) an event would have on facilities and campus operations. High priority hazards scored between 19-25, medium priority hazards scored between 14-19, low priority hazards scored between 8-13, and non-rated hazards scored a seven or below.

11. Hazards and Risks Matrix Cont.Probability of EventSeverity of ImpactUnlikelySomewhat LikelyLikelyMost LikelyHighly LikelyCatastrophic510152025Critical48121620Minimal3691215Negligible24 6810Insignificant12345Severity of ImpactNot SevereMinimal SeveritySomewhat SevereModerate SeverityMost Severe

12. Hazard RankingThe hazard identification, analysis, and vulnerability assessment, completed as part of the Plan Update, identified nine (9) human-caused events, four (4) natural, and one (1) technological hazard that have the greatest potential to adversely affect the entire VCU community and have long-term impacts on the ability to provide core academic, administration, research, medical, and health care operations.

13. Hazard RankingRankingPriorityScoreThreat or HazardType of Hazard1High25Active ShooterHuman-Caused2High20Domestic TerrorismHuman-Caused3High20Cyber TerrorismHuman-Caused4High20Technology Hardware/SoftwareTechnological5High20Hurricane/Tornado/Tropical StormsNatural6Medium15Winter StormsNatural7Medium15Flash FloodingNatural8Medium12Structure Fire/HazmatHuman-Caused9Medium10Civil Disturbance/UnrestHuman-Caused10Medium10Public Health EmergenciesHuman-Caused11Low8Barricaded Individual (Suspect/Subject)Human-Caused12Low8Hostile IntruderHuman-Caused13Low5Bomb ThreatHuman-Caused14Low5Thunderstorms/WindstormsNatural

14. Hazard ProfileA Hazard Profile is a description of the physical characteristics of a specific hazard and determination of its various descriptors including magnitude, duration, frequency, probability, and extent. The following hazards are profiled by their ranking and priority based on the score assigned from the survey.

15. Hazard Profile: Active ShooterActive shooter is an individual actively engaged in killing or attempting to kill people in a confined and populated area; in most cases, active shooters use firearms(s) and there is no pattern or method to their selection of victims (DHS, 2008).

16. Hazard Profile: Domestic TerrorismThe United States Code (USC) Title 18 § 2331 defines “Domestic Terrorism” as activities that— (a) involve acts dangerous to human life that is a violation of the criminal laws of the United States or any State; (c) appear to be intended— (i) to intimidate or coerce a civilian population; (ii) to influence the policy of a government by intimidation or coercion; or (iii) to affect the conduct of a government by mass destruction, assassination, or kidnapping; and (d) occur primarily within the territorial jurisdiction of the United States.

17. Hazard Profile: Cyber TerrorismCyber terrorism is defined as the unlawful attacks and threats of attack against computers, networks, and the information stored therein when done to intimidate or coerce a government or its people in furtherance of political or social objectives. The United States Code (USC) Title 18 § 1501 (2018) defines the term "cybersecurity threat" means an action, not protected by the First Amendment to the Constitution of the United States, on or through an information system that may result in an unauthorized effort to adversely impact the security, availability, confidentiality, or integrity of an information system or information that is stored on, processed by, or transiting an information system. The Computer Fraud and Abuse Act (CFAA), 18 U.S.C. 1030.1 protects computers in which there is a federal interest—federal computers, bank computers, and computers used in or affecting interstate and foreign commerce. It shields them from trespassing, threats, damage, espionage, and from being corruptly used as instruments of fraud. It is not a comprehensive provision; instead, it fills cracks and gaps in the protection afforded by other state and federal criminal laws.

18. Hazard Profile: Technology Hardware/ SoftwareSoftware threats are malicious pieces of computer code and applications that can damage computers and steal personal or financial information. For this reason, these dangerous programs are called malware (short for "malicious software.”)Hardware threats are easy to detect in comparison with software threats. Hardware threats cause more damage to the network than software threats. A software threat can only harm the data, while a hardware threat can harm both device and data.

19. Hazard Profile: Hurricane/ Tropical StormsVirginia has been affected by ten major hurricanes events over the past one hundred years. According to the Virginia Hurricane Climatology, on average, a tropical storm, or its remnants, can impact the Old Dominion yearly, with hurricanes expected once every 2.3 years. High winds associated with hurricanes and tropical storms have caused widespread damage to buildings and structures, large piles of debris, and lengthy power outages across the campus. However, only Hurricane Hermine in 2016 and Matthew in 2016 impacted coastal Virginia, and VCU was not affected by either storm.

20. Risk and Vulnerability AssessmentVCU has identified three types of Critical Facilities, and assets whose loss would have an economic impact on campus operations or be difficult to replace. Factors that were used in determining their importance included:1. Critical Archival (CA): Facilities categorized as Critical Archival, mean the facilities support the economic functions and the disruption or loss of function would impact the financial position of VCU. The replacement cost and content value represent the cost to address the total loss of VCU facilities. These include:House irreplaceable artifacts, records, equipment, or research (museums)Special or unique cultural or historical valueRepresent some special or unique natural resource value, including public recreation areas, parks, forests, important natural habitats

21. Risk and Vulnerability Assessment Cont.2. Critical Vulnerable (CV): Facilities categorized as Critical Vulnerable, mean the facilities support the economic functions, and the disruption or loss of function would impact the financial position of VCU. The replacement cost and content value represent the cost to address the total loss of VCU facilities. These include:Schools (all age groups)Facilities that house special populations, such as nursing facilities, prisons, etc.Major employers and/or financial institutions/centerHigh density residential or commercial centers that, if damaged, may result in high death tolls and injury

22. Risk and Vulnerability Assessment Cont.3. Critical Essential (CE): Facilities categorized as Critical Essential, mean the facilities are essential to the health and welfare of the entire population and are critical following hazard events. These include:Police and fire stations Emergency operations centersEvacuation sheltersHospitals and other medical facilities

23. Capability AssessmentThe purpose of conducting the capability assessment is to identify potential hazard mitigation opportunities available to the university and potential obstacles to implementing the hazard mitigation plan. This assessment includes a comprehensive examination of the following capabilities:

24. Capability Assessment: Administrative CapabilityFaculty and Staff:  The key to a successful implementation of this mitigation plan is administrative advocacy and support throughout the university. VCU's Planning Committee is comprised of representatives from across the university, including the University Health System. In addition to these representatives, VCU has a wealth of expertise that could assist in implementing this plan.Plan and Program Capability: VCU has a Crisis and Emergency Management Plan (CEMP) and a Continuity of Operations Plan (COOP) that are part of an overarching regional plan reviewed, updated, and exercised to train appropriate staff. This HMP and the goals identified during the planning process, will support VCU in its successful implementation of mitigation strategies.VCU can collaborate and coordinate hazard mitigation projects through local and state planning efforts such as the Richmond-Crater Regional Planning District Commission, Regional Hazard Mitigation Plan, and the Commonwealth of Virginia’s Hazard Mitigation Plan.

25. Capability Assessment: Fiscal CapabilityThe Office of Budget and Resource Analysis at VCU supports the university's budget planning and management by providing staff leadership and professional support services to all phases of State and internal budget development, review, analysis, implementation, monitoring, and reporting. For fiscal year ending 2020:Total revenue and capital addition: $5.1 billionTotal expenditures: $4.92 billionIncrease net assets: $155 millionFoundation assets: $1.07 billionFoundation liabilities: $206 millionBalance: $865 millionTotal pledges and cash received: 2. $80.370 billion

26. Capability Assessment: Regulatory EnvironmentRichmond implements floodplain management regulations using floodplain districts in its zoning code. The zoning regulations require that development shall not be permitted within any floodplain district except in strict compliance with the applicable sections of the Virginia Uniform Statewide Building Code.  Existing structures and uses within a floodway district are not expanded or enlarged unless the effect of proposed expansion or enlargement on flood heights is fully offset by accompanying improvements.

27. Capability Assessment: Building CodesBuilding codes are enforced by the applicable Authority Having Jurisdiction (AHJ). For buildings on property owned by the Commonwealth of Virginia, the Division of Engineering and Buildings (DEB) through the Department of General Services (DGS). In addition, VCU has some delegated authority to permit "small" projects internally.  For buildings on property owned by private owners (i.e., Real Estate Foundations), the AHJ is a factor in the facility's location in the City of Richmond.

28. Capability Assessment: Community and Stakeholder InvolvementVCU's economic impact will extend with implementing the master-site plan that details capital expansion into undeveloped areas near the campuses. In addition, the ONE VCU Plan has established architectural guidelines for future construction, developed in collaboration with the surrounding community.

29. Capability Assessment: The Code of VirginiaChapter 3.2 (Emergency Services and Disaster Law) of the Code of Virginia outlines the State's emergency management authorities and provides a broad outline of state agencies and local government's power, duties, and responsibilities.The Code outlines the various responsibilities of the Virginia Department of Emergency Management (VDEM), which include providing guidance and assistance to state agencies in developing emergency management and continuity of operations (COOP) plans (§ 44-146.18.B.7). In addition, the department is obligated to consult with the State Council of Higher Education for Virginia in the development and revision of a model institutional crisis and emergency management plan (§ 44-146.18.B.12). Under the Code, the Governor has the authority to expend funds to assist state agencies and local governments in meeting the financial obligations of an incident. However, the Governor exercises this authority under his discretion, and it can only be executed if the Governor has issued a Declaration of Emergency (§ 44-146.28).

30. High Priority StrategiesDuring high-profile events, identify and implement mitigation measures for at-risk sites and employ additional measures (e.g., screening of individuals, vehicles, restriction of specific areas, and physical barriers to restrict vehicle access on campus or nearby streets).Enhance business continuity plans for critical VCU business, financial, and other vital operations to allow them to resume normal operations as quickly as possible.Implement appropriate centralized access control systems for VCU.Identify unique and valuable contents that include hazardous materials, records, research data, collections, and specimens. Develop and implement safety protocols.Create a chemical/biological materials and animal research inventory. Develop and implement safety protocols.Conduct campus-wide assessment of generator needs and capacities for existing buildings. Determine needed service levels for operations (i.e., fuel, filters, parts).Create a safety orientation and awareness program on natural and human-caused hazards for all incoming students, faculty, and staff.

31. Mitigation GoalsThe Hazard Mitigation Planning Committee established the following goals:Minimize Loss of Life and InjuryMinimize and Prevent Damage to VCU AssetsMinimize Disruption to Campus FunctionsProtect Research ResourcesProtect Economic ResourcesIncrease Education, Training, Outreach, and AwarenessMaintain Public Confidence Coordinate with Surrounding Communities

32. Mitigation prioritizationThe Hazard Mitigation Planning Committee used the STAPLE/E (Social, Technical, Administrative, Political, Legal, Economic, and Environmental) criteria to select and prioritize the most appropriate mitigation and adaptation alternatives. This methodology requires that social, technical, administrative, political, legal, economic, and environmental elements be considered when reviewing potential actions for VCU to undertake. This process was used to help ensure that the most equitable and feasible actions would be undertaken based on university’s capabilities.

33. Mitigation projectsCurrent Mitigation Action: ShotSpotter (HIGH)Proposed ActionInvesting in a 3-Year contract with ShotSpotter application technology to further enhance VCU law enforcement operations.Risk Reduction BenefitWith enhanced monitoring systems, and real-time lifesaving notifications, VCU law enforcement will be better prepared to respond to and protect the student population from future firearm-related crimes.Action Type: PreventionLocation: VCU CampusHazard Addressed: Firearm-related crimesPriority: HighPotential Funding Source(s): VCUPDEstimated Cost: $190,500.00Implementation ScheduleImplementation will take 3 months from Kickoff to going live.Additional CommentsShotSpotter uses a combination of AI and man-monitored incident review system to maximize efficiency and provide real-time life-saving information to law enforcement officers.

34. Mitigation projects Cont.Mitigation Action: Security Monitoring (HIGH)Proposed ActionInventory and audit of all security cameras on the VCU campus. To identify the scope and field of view of each camera. This can be mapped with a GIS mapping solution. To help identify the missing fields of view to add more cameras.Risk Reduction BenefitImprove security coverage of the VCU campus.Action Type: Inventory of existing assets and infrastructure project to add more cameras where neededLocation: MPC and MCVHazard Addressed: Civil Disturbance, Active Shooter, Domestic Terrorism, Technology Hardware/SoftwarePriority: HighPotential Funding Source(s): Hazard Mitigation Grant ProgramEstimated Cost: Awaiting cost analysisImplementation ScheduleIn process, need to have inventory by a consultant to identify areas of need.Additional CommentsNeed to have scope of work and RFP.

35. Mitigation projects Cont.Mitigation Action: Secure Access Service Edge (SASE) and Zero-Trust (HIGH)Proposed ActionImplement an IT security architecture redesign at VCU utilizing the Secure Access Service Edge (SASE) and Zero-Trust architecture.Risk Reduction BenefitThe successful transition will allow VCU to implement a location-agnostic information security architecture that can help to ensure a seamless access experience and a consistent set of advanced security protection for its workforce using university-issued computers regardless of their working location and better secure data residing in both on-premises and cloud-based VCU systems. This will reduce the risk of cyber-attacks that could result in data loss, loss of reputation, or financial loss.Action Type: Network appliance and cloud-based software purchase/implementationLocation: VCU Computer Center and Vendor-managed cloudHazard Addressed: Cyber AttacksPriority: HighPotential Funding Source(s): Hazard Mitigation Grant ProgramEstimated Cost: 246K in FY23, 421K in FY24, 515K in FY25Implementation ScheduleDetails TBD, implementation would occur over approximately 9 months and would start by FY23. Additional CommentsCosts based upon implementation of a particular software package. Cost could vary (and likely be less) if other solutions meet requirements.

36. Mitigation projects Cont.Mitigation Action: Damper Inspection Program (HIGH)Proposed ActionInventory/Annual InspectionsRisk Reduction BenefitEnsure all dampers are in good working order Action Type: Inventory and InspectionsLocation: Campus Wide: MPC/MCVHazard Addressed: FirePriority: HighPotential Funding Source(s): Safety & Risk ManagementEstimated Cost: Pending BidImplementation Schedule5 years for full complianceAdditional CommentsVirginia State Fire Marshal’s Office has cited VCU in the past for not meeting the codes & standards associated with inspection & testing of these assets. Responsibility and budget will need to be determined. Fire Damper Inspections Per NFPA 80 (2016)19.5.1 Testing Frequency.19.5.1.1 Each damper shall be tested and inspected 1 year after acceptance testing.19.5.1.2 The test and inspection frequency shall then be every 4 years, except in buildings containing a hospital, where the frequency shall be every 6 years

37. Mitigation projects Cont.Mitigation Action: Civil Disturbance (MEDIUM)Proposed ActionIncrease the Crowd Management Equipment for the Police Department so that all officers can be issued their own helmets and gas mask. Training for officers to deal with large groups that are peaceful or disorderly. Purchase a vehicle capable of deploying for multiple purposes during a civil disturbance with resources for officers dealing with fires, chemical spray, damaged property, etc.Risk Reduction BenefitPrevention of unnecessary injuries to officers and the public. Faster response to situations deeming a coded response. Action Type: Response and DeploymentLocation: VCU Campuses, RichmondHazard Addressed: Destruction of Property, Disorderly, Assaults, ArsonPriority: MediumPotential Funding Source(s): GrantsEstimated Cost: Pending cost of training Implementation Planning stages.Additional CommentsNone

38. Mitigation projects Cont.Mitigation Action: Active Shooter Training (MEDIUM)Proposed ActionActive Shooter annual training and drills to include sheltering in place and campus evacuations, ShotSpotter, Active Shooter Response Video, and classroom lockdown systems for all classes. Risk Reduction BenefitReduce the number of victims, increase the response to the man-made threat, and decrease unnecessary foot traffic on or near crime site. Action Type: Building and ParkLocation: VCU Campus, Richmond CityHazard Addressed: Weapons, TerroristsPriority: MediumPotential Funding Source(s): Government/ FederalEstimated Cost: $210,000.00Implementation ScheduleInitial planning phaseAdditional CommentsTraining for this type of incident should include external partners that would be involved.

39. Mitigation projects Cont.Mitigation Action: New Steam Plan Facility (LOW)Proposed ActionConstruct a remote steam plant to use in case of the main steam plant outage or to assist with main plant shutdowns/maintenance/repair.Risk Reduction BenefitThe current MCV steam plant uptime is not 100% (99.908%). Having a backup plant could allow us to keep from ever having to stop steam supply.Action Type: New ConstructionLocation: TBD, likely on the MCV campus.Hazard Addressed: Steam/Electrical outagesPriority: LowPotential Funding Source(s): Loan against future steam plant income.Estimated Cost: $40,000,000.00Implementation Schedule1 year of planning and 2 years of construction.Additional CommentsSee also cogeneration.

40. Future Plan recommendationsThe following recommendations are made for the 2027 plan update:Continued participation with the Richmond/Crater Regional Planning Group.VCU GIS participation in HAZUS.Updated maps that enhance the campus narrative on land use for property adjacent to VCU.Document how the 2022 HMP was incorporated into One VCU Master Plan, VCU Strategic Planning, Quest 25, and VCU Health Services Strategic Plan.Review Richmond/Crater 2022 Hazard Mitigation Plan and incorporate mitigation strategies