NENA Smart Brief

National Emergency Number Association Smart Brief

NENA news items, press releases, RFPs / RFIs and other items may be filtered by using the drop down list above. You may also scroll down to read all active items.
  1. Bottom line up front:
    ALL Wi-Fi access points, routers, and devices (computers, phones, etc.) contain a major vulnerability that can allow an attacker to decrypt traffic. Until patches are in place, all Wi-Fi networks should be treated as untrusted, and internal resources should require separate authentication and encryption for access. Other mitigations are also recommended.

    What's going on:
    On Sunday, October 15th social media reports circulated indicating that disclosure of a major Wi-Fi vulnerability was forthcoming. Subsequently, security researchers, government responders, and major Wi-Fi manufacturers provided a coordinated disclosure that confirmed the extent and severity of the flaw.

    Who’s affected:
    Everyone. Everything. No, really. This flaw affects essentially every Wi-Fi-enabled router, access point, phone, computer, IoT device etc., that uses WiFi Protected Access (WPA) for security. This includes both WPA and WPA2, and both the Pre-Shared Key (PSK) and Enterprise modes, regardless of the cipher Suite (TKIP / AES) used.

    What this flaw allows:
    Hackers exploiting this flaw can decrypt all “secure” traffic sent over the air, delay or block the flow of traffic, intercept traffic via a “Man-in-the-Middle” approach, and inject arbitrary, malicious data and code into users’ data flows. These attacks require varying levels of proximity between the attacker, victim, and AP.

    How PSAPs should respond:

    Major manufacturers have been aware of this flaw since mid-July, and are working to issue patches. However, most estimate that patches are at least a few weeks away. For many older devices, patches may never be developed. The following are mitigation’s that PSAPs can implement now, to reduce the likelihood of compromise:

    1. Conduct an in-depth site survey to identify all Wi-Fi Access Points and endpoints. Look for both known and unknown/unexpected devices, and survey both the 2.4 and 5GHz bands, regardless of how your network is supposed to be configured.

    2. For each manufacturer’s product discovered in the site survey, carefully monitor the manufacturer’s website for patch availability. If patches are not forthcoming, begin planning to replace that device.

    3. Apply all manufacturer-recommended patches as soon as possible.

    4. Disable “fast roaming” or 802.11r on all multi-AP networks.

    5. Disable client and repeater functionality in all enterprise APs. Consider replacing any repeaters or “extenders” with wired APs.

    6. Decrease AP transmit power to the absolute minimum required to cover the area where Wi-Fi is needed.

    7. Treat Wi-Fi-based network endpoints (phones, tablets, computers, printers, etc.) as UN-trusted, when they connect via Wi-Fi: Segment Wi-Fi clients onto a non-routable VLAN; require strong authentication over a separately-encrypted connection for access to internal resources such as file, CAD, and RMS servers; and consider requiring endpoints to connect via VPN, even when using internal Wi-Fi networks.

    8. Raise awareness of Wi-Fi Security Issues with all users, and recommend they update the firmware on all home routers, access points, phones, tablets, computers, and IoT devices.

    9. Consider installing security-enhancing browser extensions such as HTTPS Everywhere. This helps to ensure that encryption-enabled sites are accessed securely, reducing reliance on Wi-Fi security.

    10. Restrict especially-sensitive traffic to wired networks, only.

    How to learn more:
    For technical details, check out www.krackattacks.com.

    Questions?
    Contact NENA's Director of Government Affairs & Cybersecurity Issues, Trey Forgety.
  2. Network Security Basics for 9-1-1
    Wednesday, October 25 | 3PM Eastern (live) or On-Demand
    $50 for NENA Members | $85 for Non-members
    Click here to register!

    Today’s PSAPs and 9-1-1 system service providers face many online threats. Networks and endpoints are quickly multiplying in number and complexity, and many local 9-1-1 systems lack even basic security protections. Join us for this security-focused #WebinarWednesday to learn:

    • What threats are out there and how they can impact 9-1-1;
    • The building blocks of network defense for 9-1-1 systems and PSAPs; and
    • Helpful hints to secure your home and family online.

    Presenter: Trey Forgety – NENA

    CEUs: Attend this webinar and receive one-half ENP re-certification point towards the ten-point maximum for NENA courses in the Professional Development CEU/Course Credits section.

    Can't attend on the 25th? Register now and you will receive an email after the live presentation with instructions for accessing the on-demand webinar archive.

    Webinar Access Info: Dial-in and web-access details will be provided to attendees via email the week of the webinar.

  3. Congratulations to the 23 9-1-1 professionals who passed the summer 2017 ENP exam and are now certified Emergency Number Professionals! Well done! For more information on how you too can achieve this prestigious professional designation, visit the ENP webpage
  4. The NENA Emergency Services IP Network Design (ESIND) Information Document is available for a second public review and comment due to substantive edits. Only the those edits highlighted in yellow are open for comment during this 2nd review. This document is intended to provide information that will assist in the development of requirements necessary to design ESInets that meet industry standards related to the NG9-1-1 systems that will depend on them for services. See the full document here.

    Click here for instructions on how to submit your comments.

    All comments are due by midnight Eastern on October 20, 2017. Contact the NENA Committee Resource Manager with any questions or concerns.

  5. Having adjudicated all comments, the subject document is now considered “stable.” Per NENA IPR, Section 4.5 a “Stable Form Notice” is being issued and is shown below.


    4.5 Declarations during Review
    When any Deliverable is in stable form, but before it undergoes review by the NENA Process Review Committee the Committee Resource Manager shall send a Stable Form Notice to all NENA Development Group participants giving notice of a deadline, at least sixty (60) days from the date of the announcement, by which all Patent Holders with respect to the Deliverable must submit a completed copy of the Licensing Declaration Form in Annex B to the Committee Resource Manager. All Stable Form Notices shall also be posted to the Committee Management Website.

    Once the 60 days have passed, the document will go to the Process Review Committee for approval.

    Stable Form Notice

    Background
    The NENA Intellectual Property Rights (“IPR”) Policy, available at http://www.nena.org/?IPR, requires Participants in NENA Committees to disclose certain Patent IPRs during the process of developing a Deliverable such as a Technical or Operations Standard Document (i.e., any Standard). After receiving this notice, all Patent Holders have 60 days in which to submit a Licensing Declaration Form.

    Notice
    The Deliverable listed below has reached stable form and will be submitted to the NENA Process Review Committee in 60 days. Any and all Participants who hold Patent IPRs which may be implicated by the Normative Requirements of this Deliverable must submit a Licensing Declaration Form to the Committee Resource Manager within that time.

    Deliverable Information
    Title: NENA Virtual PSAP Management Information Document
    Document Number: NENA-INF-025.2-201X, (originally 53-507 May 26, 2009)
    URL: https://dev.nena.org/higherlogic/ws/public/document?document_id=11820&wg_abbrev=psapops-cp-sc-cpdocrvw
    Date of Notice: September 18, 2017
    Submission Deadline: November 18, 2017

    NENA Intellectual Property Rights Policy – Annex C – Stable Form Notice


    Having adjudicated all comments, the subject document is now considered “stable.” Per NENA IPR, Section 4.5 a “Stable Form Notice” is being issued and is shown below.

    4.5 Declarations during Review
    When any Deliverable is in stable form, but before it undergoes review by the NENA Process Review Committee the Committee Resource Manager shall send a Stable Form Notice to all NENA Development Group participants giving notice of a deadline, at least sixty (60) days from the date of the announcement, by which all Patent Holders with respect to the Deliverable must submit a completed copy of the Licensing Declaration Form in Annex B to the Committee Resource Manager. All Stable Form Notices shall also be posted to the Committee Management Website.

    Once the 60 days have passed, the document will go to the Process Review Committee for approval.

    Stable Form Notice

    Background
    The NENA Intellectual Property Rights (“IPR”) Policy, available at http://www.nena.org/?IPR, requires Participants in NENA Committees to disclose certain Patent IPRs during the process of developing a Deliverable such as a Technical or Operations Standard Document (i.e., any Standard). After receiving this notice, all Patent Holders have 60 days in which to submit a Licensing Declaration Form.

    Notice
    The Deliverable listed below has reached stable form and will be submitted to the NENA Process Review Committee in 60 days. Any and all Participants who hold Patent IPRs which may be implicated by the Normative Requirements of this Deliverable must submit a Licensing Declaration Form to the Committee Resource Manager within that time.

    Deliverable Information
    Title: NENA Standard for NG9‑1‑1 Additional Data
    Document Number: NENA‑STA‑012.2‑201X (originally 71-001, 09/17/2009)
    URL: https://dev.nena.org/higherlogic/ws/public/document?document_id=11821&wg_abbrev=csds-addldata
    Date of Notice: September 18, 2017
    Submission Deadline: November 18, 2017

    NENA Intellectual Property Rights Policy – Annex C – Stable Form Notice

  6. Locating Wireless Callers: Understanding & Overcoming the Challenges
    Wednesday, September 27 | 3PM Eastern (live) or On-Demand
    $50 for NENA Members | $85 for Non-members
    Click here to register!

    With nearly 80% of 9-1-1 calls coming from mobile devices, quickly and accurately locating callers has never been more important – or, for many, more challenging. Join us for this hour-long webinar that explores how we got here, where we’re going, and what tools we can employ today to more effectively find those in need of help. We’ll be discussing:

    • The basics of how and why wireless location technology works the way it does;
    • What’s on the horizon for location technology and standards; and
    • What resources and techniques are available to call takers right now to get a better, faster fix on caller location.

    Presenter: Chris Carver, ENP – NENA

    CEUs: Attend this webinar and receive one-half ENP re-certification point towards the ten-point maximum for NENA courses in the Professional Development CEU/Course Credits section.

    Can't attend on the 27th? Register now and you will receive an email after the live presentation with instructions for accessing the on-demand webinar archive.

    Webinar Access Info: Dial-in and web-access details will be provided to attendees via email the week of the webinar.

  7. Please join NENA in taking a moment today to remember the public safety heroes and the thousands of others who lost their lives during the tragic events of September 11, 2001. To honor their memories, let us all hold dearly our freedoms and celebrate the service NENA members and all other first responders provide each day.
  8. Constructive Criticism
    Wednesday, August 30 | 3PM Eastern (live) or On-Demand
    $50 for NENA Members | $85 for Non-members
    Click here to register!

    One of the hardest things for many supervisors and managers is dealing with underperforming or difficult employees. How can you turn your problem children into team players or even star performers? Join us for this hour-long webinar that covers:

    • Employee engagement;
    • Performance feedback;
    • Communicating agency objectives; and
    • Tips and best practices for effective interpersonal communications.

    Presenter: John Ferraro, ENP – Northwest Central 9-1-1 System

    CEUs: Attend this webinar and receive one-half ENP re-certification point towards the ten-point maximum for NENA courses in the Professional Development CEU/Course Credits section.

    Can't attend on the 30th? Register now and you will receive an email after the live presentation with instructions for accessing the on-demand webinar archive.

    Webinar Access Info: Dial-in and web-access details will be provided to attendees via email the week of the webinar.

  9. Calling All Presenters! From now through October 27, NENA is accepting breakout session proposals for the NENA 2018 Conference & Expo, taking place in Nashville, TN from June 16-21, 2018.

    Presenting a session at NENA 2018 is an excellent opportunity to share your knowledge and experience with an enthusiastic audience of 9-1-1 professionals who are eager to gain and share information. To meet the expectations and needs of our attendees, your session must be engaging, informative, and applicable to a diverse audience with a wide range of professional and personal backgrounds.

    To ensure your submission receives due consideration, please ensure that:

    • Your proposal is issue-focused, not product-focused;
    • Your 65-word presentation description contains a precise objective;
    • You identify three clear audience takeaways;
    • You fully complete all areas of the submission form and provide accurate contact information, including phone number(s), e-mail address(es), and mailing address(es); and
    • You use proper grammar, capitalization, and punctuation.

    Your proposal will be evaluated by how well the session will deliver practical skills, knowledge, and resources that meet one of the following audience needs:

    • Empower attendees to overcome issues they are dealing with today;
    • Prepare attendees for near-term issues for which they should be planning; or
    • Challenge attendees to think about advances in technology and public safety that may one day impact 9-1-1, and what that means for them right now.

    Your proposal should address one of the following areas of interest:

    • Analytics & Big Data
    • Cybersecurity
    • Dispatcher Essentials
    • Emergency Services Around the World
    • Enhancing Accessibility
    • Funding, Governance, & Legislative Issues
    • The Future of 9-1-1
    • GIS & Other Databases
    • Leadership & Effective Supervision
    • Management Essentials
    • NG9-1-1 Early Adopter
    • The NG9-1-1 PSAP
    • NG9-1-1: Planning & Implementation
    • NG9-1-1: Systems & Technology
    • Personal & Professional Development
    • Preparedness & Resiliency
    • PSAP Design & Consolidation
    • Public Education & Outreach
    • Standards & Best Practices
    • Stress, Health, & Wellness
    • Text-to-9-1-1

    Click here to submit your great idea today! All proposals are due by Friday, October 27.

    Session submitters will receive acceptance or rejection notifications by mid-December. Submitters selected to present will receive multiple communications from NENA and will be invited to at least one session facilitation webinar.

    If you do not receive an acceptance or rejection email by December 15, then please contact NENA PSAP Operations Director Christopher Carver.

  10. The NENA Data Structures Committee seeks volunteers for the development of a white paper that explores Representational State Transfer (REST) and JavaScript Object Notation (JSON). The white paper will be delivered to the NENA Development Steering Council and NENA staff to aid in their decision to adopt JSON as the format for NG9-1-1 data elements (instead of XML), and REST for NG9-1-1 web services (instead of SOAP). 

    The white paper will list advantages and disadvantages of the proposed changes, any issues with NIEM conformance, and recommendations regarding whether or not to adopt JSON and REST. If adoption of JSON and REST is recommended, the white paper will recommend a migration plan.

    The workgroup will particularly benefit from those with knowledge of, and experience working with, XML, JSON, REST, SOAP, and NIEM-conformant data schemas. Weekly calls will be held on Mondays from 12PM – 1PM Eastern.

    Click here to join the workgroup.