Parts of the DHS/FEMA Federal Operations Centers

The Department of Homeland Security and FEMA run federal operations centers in a tiered structure, with a permanently staffed national hub at the top, always-on watch floors underneath it, surge coordination centers that activate for specific incidents, ten regional centers, temporary offices set up near a disaster site, deployable mobile units, and a separate coordination point for cyber and infrastructure threats. Each has a distinct job, and they scale up and back down together as an incident develops and passes.

The Centers That Never Close

Two centers watch continuously. The DHS National Operations Center (NOC) is the principal operations center for the entire department, designated by federal law and staffed 24 hours a day, every day of the year.¹ Its job is to give the federal government, state and local agencies, tribal governments, the private sector, and international partners a shared picture of what is happening during any natural disaster, terrorist act, or other emergency.²

Staff drawn from across the Homeland Security Enterprise monitor emerging threats, synthesize incoming information, and push it to DHS leadership, the White House, and interagency partners.³ The NOC also maintains information-sharing agreements with other federal watch floors, so it works as a clearinghouse tying FEMA’s centers, CISA, and other agencies together.

Inside FEMA, the National Watch Center (NWC) plays the parallel role. It runs 24/7, scanning for potential and developing hazards nationwide.⁴ During quiet periods, the NWC is the center holding the watch, and when something develops, it is the first to alert senior FEMA and DHS leadership that a coordinated response may be needed. It feeds pre-incident information to the NOC and publishes recurring situational reports.⁵

National Response Coordination Center

The National Response Coordination Center (NRCC) is FEMA’s primary operations center at agency headquarters in Washington, D.C. It doesn’t run continuously. It activates on a sliding scale when a disaster is imminent or already underway, and it demobilizes when national-level resource decisions are no longer needed, handing monitoring back to the NWC.⁴ When it is up, personnel from FEMA, other federal agencies, and nongovernmental organizations coordinate the deployment of resources nationwide.

FEMA runs three activation levels:

Level 3 is a monitoring posture. Only the Situational Awareness section activates. It covers incidents that need moderate federal help and where existing federal and regional resources can handle requests.⁶
Level 2 is partial activation. Situational Awareness plus selected additional elements come online, some Emergency Support Function agencies activate, and initial response resources deploy.⁶
Level 1 is full activation. Every section of the NRCC staffs up, all ten Regional Response Coordination Centers activate, and every primary Emergency Support Function agency comes online. It is reserved for catastrophic incidents where response assets at every level of government are overwhelmed.⁶

Regional Response Coordination Centers

FEMA divides the country into ten regions, and each has a permanent Regional Response Coordination Center (RRCC). An RRCC activates when an incident hits its part of the country. It is staffed by Emergency Support Function representatives and operates under the FEMA Regional Administrator.

The ten regions and their headquarters cities:

Region 1 (Boston area): Connecticut, Maine, Massachusetts, New Hampshire, Rhode Island, Vermont
Region 2 (New York): New Jersey, New York, Puerto Rico, U.S. Virgin Islands
Region 3 (Philadelphia): Delaware, District of Columbia, Maryland, Pennsylvania, Virginia, West Virginia
Region 4 (Atlanta): Alabama, Florida, Georgia, Kentucky, Mississippi, North Carolina, South Carolina, Tennessee
Region 5 (Chicago): Illinois, Indiana, Michigan, Minnesota, Ohio, Wisconsin
Region 6 (Denton, TX): Arkansas, Louisiana, New Mexico, Oklahoma, Texas
Region 7 (Kansas City): Iowa, Kansas, Missouri, Nebraska
Region 8 (Denver): Colorado, Montana, North Dakota, South Dakota, Utah, Wyoming
Region 9 (San Francisco): Arizona, California, Hawaii, Nevada, Guam, American Samoa, Northern Mariana Islands, Marshall Islands, Federated States of Micronesia
Region 10 (Bothell, WA area): Alaska, Idaho, Oregon, Washington⁷

RRCCs are the intermediate link between the national NRCC and conditions on the ground. They track the situation in their region, identify what affected states need, and help mobilize resources. They also issue activation mission assignments to Emergency Support Function agencies within their region. Once a Joint Field Office is set up and able to take over coordination, the RRCC typically transfers its support role and returns to monitoring.⁸ Unusually complex or prolonged incidents can keep it active longer.

Joint Field Offices

Joint Field Offices (JFOs) are temporary facilities stood up near a disaster site so federal, state, local, tribal, and private-sector officials can coordinate face to face. A JFO exists only for the duration of a specific incident.

A JFO Coordination Group leads the facility. In a Stafford Act disaster, that group typically includes the Federal Coordinating Officer (appointed by the President to manage federal resources), the State Coordinating Officer (the state counterpart who manages state programs), and senior officials from other agencies with significant responsibility for the incident.⁸ The JFO connects to state and tribal emergency operations centers, creating a direct link between federal coordination and local response.⁹

Speed matters. FEMA’s goal is an initial JFO capability within 12 hours for a no-notice event, with the facility fully operational no later than 48 hours after the space is accepted and optimally within 72 hours of the decision to establish one.⁸ Once running, the JFO manages disaster assistance programs, including individual housing assistance and the Public Assistance program that reimburses state and local governments for debris removal and infrastructure repair.⁹ As response priorities wind down, the JFO shifts to recovery and hazard mitigation, then closes when full-time interagency coordination on site is no longer necessary. Long-term recovery programs move to regional or headquarters offices.

Mobile Emergency Response Support

Not every disaster happens near working infrastructure. FEMA’s Mobile Emergency Response Support (MERS) program provides deployable telecommunications, power generation, logistics, and life-support capabilities that can be trucked directly to a disaster zone. MERS detachments set up the communications backbone and office space a JFO or field site needs to function even where local infrastructure has been destroyed.

MERS maintains roughly 275 mobile units staged at strategic locations including Washington State, Colorado, Massachusetts, Texas, and Georgia. Each detachment can simultaneously support a large JFO and multiple field sites within a disaster area. Assets include mobile communications vehicles with satellite connectivity and video conferencing, expandable mobile offices with dozens of workstations, and fuel and water tankers with water purification capability.¹⁰ MERS vehicles are often the first federal equipment on the ground, deploying alongside initial assessment teams to give FEMA leadership real-time visibility before a full JFO is established.

CISA Central

Cyber and physical infrastructure threats have their own coordination point. CISA Central, run by the Cybersecurity and Infrastructure Security Agency (a DHS component), is how critical infrastructure owners and operators engage the federal government on threats to systems like the power grid, water supply, financial networks, and telecommunications.¹¹ It coordinates situational awareness and response for cyber incidents, communications disruptions, and physical threats to infrastructure, and it accepts reports of anomalous cyber activity around the clock.

Working alongside it, the National Infrastructure Coordinating Center (NICC) is the communication bridge between DHS and private-sector infrastructure owners. When an event like a chemical release or cyberattack threatens critical infrastructure, NICC analysts coordinate with the NOC, information-sharing organizations, and the affected companies to assess impact and organize a response.¹²

How the Pieces Move Together During an Incident

These centers do not work in isolation. The NWC and NOC are always running. When something emerges, the NWC alerts FEMA leadership and the NOC pushes the picture across DHS. If conditions warrant it, the NRCC activates at whatever level matches the severity, and the affected region’s RRCC spins up to coordinate with state partners.

Federal assistance flows through Mission Assignments, which are essentially work orders from FEMA directing other federal agencies to provide specific capabilities. When a state overwhelms its own resources and the President issues a disaster declaration, the RRCC and NRCC begin directing those assignments to move life-saving support quickly. MERS detachments may deploy to set up communications and infrastructure. A JFO stands up near the disaster site to bring the players into one room.

As the immediate crisis passes, the structure contracts in reverse. The NRCC demobilizes and hands monitoring back to the NWC. The RRCC transfers functions to the JFO and drops back to monitoring. The JFO closes, and long-term recovery administration shifts to FEMA regional and headquarters offices. The NOC and NWC never stop watching.

1
Office of the Law Revision Counsel. 6 USC 321d – National Operations Center
2
Department of Homeland Security. DHS Common Operating Picture (COP)
3
Department of Homeland Security. Office of Homeland Security Situational Awareness Fact Sheet
4
U.S. Coast Guard. FEMA National Incident Support Manual
5
Federal Emergency Management Agency. FEMA Incident Management and Support Keystone
6
Federal Emergency Management Agency. National Incident Support Manual Change 1
7
Federal Emergency Management Agency. Regions, States and Territories
8
Federal Emergency Management Agency. Joint Field Office Interagency Integrated Standard Operating Procedure
9
Federal Emergency Management Agency. Overview of Stafford Act Support to States
10
Federal Emergency Management Agency. MERS Fact Sheet
11
Cybersecurity & Infrastructure Security Agency. CISA Central
12
Department of Homeland Security. Privacy Impact Assessment for the National Infrastructure Coordinating Center