Global Catastrophic Risk Management

Most emergency-management law is about incidents the government already knows how to categorize: hurricanes, wildfires, floods, terrorist attacks, industrial accidents. 6 U.S.C. §§ 821-825, added by the Global Catastrophic Risk Management Act of 2022, is different. It tells DHS and FEMA to assess global catastrophic and existential risks across a broader set of threats, including severe pandemics, nuclear war, asteroid impacts, supervolcanoes, sudden severe climate shifts, and risks arising from emerging technologies. In other words, Congress created a statute for the hardest class of low-frequency, civilization-scale or system-scale emergencies. For the WMD-specific detection infrastructure, see Countering Weapons of Mass Destruction Office. For how FEMA's surge capacity would be activated in a catastrophic event, see that page.

Current Law (2026)

What Makes This Statute Different

It is an assessment statute more than an operational-response statute. Congress is requiring the federal government to think systematically about civilization-scale threats, including threats that do not fit neatly into traditional disaster silos.

It is explicitly cross-disciplinary. The law pulls in national security, science policy, emergency management, law enforcement, energy, and other expertise rather than treating catastrophic risk as the domain of a single agency.

It includes existential-risk language. That is unusual in the U.S. Code and signals Congress's willingness to treat extreme long-term threats as a legitimate policy category.

Major Components

Definitions and scope

6 U.S.C. § 821 supplies definitions. This part matters because it frames the entire program around global catastrophic risk and related extreme-threat concepts rather than normal incident-response categories.

Governmentwide assessment

6 U.S.C. § 822 directs the Secretary and the FEMA Administrator to coordinate an assessment of global catastrophic risk with a wide list of federal partners. This is the coordination core of the statute.

Detailed report requirement

6 U.S.C. § 823 requires a detailed report that includes estimates of cumulative risk over the next 30 years, threat-by-threat analysis, technical and plain-language explanations, assessment limits, and proposals for improving future federal risk assessment. The statute specifically calls out consultation on pandemics, nuclear war, asteroid and comet impacts, supervolcanoes, abrupt climate threats, and intentional or accidental harms from emerging technologies.

Catastrophic incident annex

6 U.S.C. § 824 requires an enhanced catastrophic incident annex, linking the risk-assessment exercise back to emergency planning and response architecture. This section matters because it prevents the program from becoming purely theoretical.

Rule of construction

6 U.S.C. § 825 clarifies how the part should be read and helps avoid unintended narrowing of other emergency-management authorities.

Risk Categories the Statute Specifically Covers

The 2022 Act explicitly requires the DHS/FEMA assessment to address the following threat categories:

• Severe pandemics: Natural or engineered biological agents capable of causing mass casualties; COVID-19 exposed significant federal gaps in pandemic preparedness planning at the national scale
• Nuclear war: Including limited nuclear exchange scenarios and electromagnetic pulse (EMP) effects, which DHS has treated as a distinct infrastructure resilience problem
• Asteroid and comet impacts: Near-Earth object threat assessment; NASA's Planetary Defense Coordination Office coordinates with FEMA on impact response planning for objects above certain size thresholds
• Supervolcano eruptions: The Yellowstone caldera and Long Valley caldera are the primary domestic scenarios; a major eruption could affect agriculture across the continental U.S. through ash deposition and atmospheric effects
• Abrupt climate shifts: Scenarios like rapid Antarctic ice sheet destabilization or Atlantic Meridional Overturning Circulation (AMOC) collapse — low-probability but high-consequence changes distinct from gradual climate trends
• Emerging technology risks: Including AI systems with unpredictable failure modes, engineered pathogens, and advanced autonomous weapons — the most novel and contested category in the assessment framework

How It Works

The Act departs from FEMA's traditional mandate in a fundamental way: instead of focusing on response and recovery for disasters that have already happened or are imminent, it extends the agency's obligation backward in time to require systematic assessment of risks that haven't yet materialized at catastrophic scale. Congress drew explicitly on the COVID-19 pandemic as the motivating lesson — a well-understood risk category (severe pandemic) had been chronically under-resourced because no specific pandemic had recently caused mass casualties, demonstrating that waiting for a recent precedent before preparing is exactly the wrong heuristic for low-probability, high-consequence events. The statute pairs scientific assessment with operational obligation: DHS must consult experts and develop risk rankings, but those findings must feed into emergency-planning structures — specifically, the catastrophic incident annex required under § 824 — so that the risk analysis translates into actual changes in response architecture rather than just an advisory report. The 30-year cumulative probability framing is the statute's most technically unusual feature: most emergency-management law focuses on the current planning horizon, but GCRMA requires estimating the probability that a global catastrophic risk event occurs within the next three decades — a methodology closer to actuarial modeling or strategic risk analysis than to traditional incident planning, and one that requires DHS to engage seriously with probabilistic risk literature that has historically lived in academic and insurance contexts rather than emergency-management doctrine.

How It Affects You

If you work in biosecurity, pandemic preparedness, or public health: COVID-19 directly motivated this statute. The law's explicit inclusion of "severe pandemics" as a covered catastrophic risk — paired with the operational linkage to FEMA's catastrophic incident annex — creates a legal basis for sustained federal pandemic preparedness investment that doesn't require an ongoing outbreak to justify. Monitor DHS and FEMA's implementation of this statute as an indicator of how seriously the current administration takes pre-event pandemic preparedness; budget allocations to FEMA's National Preparedness division and the HHS Office of the Assistant Secretary for Preparedness and Response (ASPR) are the operational reflection of the risk assessment mandate.

If you work in AI safety, biosafety at dual-use research, or technology governance: The statute's inclusion of "risks arising from emerging technologies" as a covered catastrophic risk category is a significant congressional statement. It doesn't impose specific regulations on AI or synthetic biology, but it directs the federal government's homeland security apparatus to assess these risks alongside asteroid strikes and nuclear war — placing them in a category where the potential for civilizational disruption is taken seriously. DHS's assessment reports are where federal analytical capacity on these topics accumulates.

If you manage long-term infrastructure, financial, or supply-chain risk: Global catastrophic risk isn't abstract for people who plan at 20-50 year horizons. Pension funds, insurance companies, and infrastructure asset managers are increasingly engaging with tail-risk scenarios involving pandemic-scale supply disruptions, nuclear exchange effects on global supply chains, and extreme climate transitions. The DHS assessment framework — when it produces substantive public reports — gives these planners an authoritative federal view of which scenarios the government considers most plausible and most severe.

If you're a state emergency management director: The catastrophic incident annex requirement means DHS is legally required to connect its global catastrophic risk assessment to the operational planning architecture that state emergency managers work within. When FEMA updates its National Response Framework or Catastrophic Incident Supplement to reflect GCRMA findings, those updates affect how federal support is pre-positioned and what resource assumptions states can rely on in worst-case scenarios.

State Variations

This is primarily a federal coordination statute, so its legal commands do not vary by state. But its operational effects will differ significantly by geography:

• States with nuclear facilities, large ports, or major biomedical research clusters face specific catastrophic-risk profiles that may be reflected in the DHS assessment
• Coastal states are more directly exposed to the abrupt climate shift scenarios (AMOC collapse, rapid sea-level acceleration) than inland states
• State and local planners vary dramatically in their capacity to absorb and operationalize federal catastrophic risk findings — well-resourced state emergency management agencies (California OES, Florida DEM, New York OEM) are better positioned to translate federal assessments into state planning

Recent Developments

The initial DHS/FEMA report required within one year of enactment (2022) was not publicly released in comprehensive form by April 2026 — the classified or restricted portions of the assessment, which necessarily include the most sensitive national security risk scenarios, limit what has entered the public record. Public reporting indicates that DHS produced internal documents addressing the statutory requirements, but the extent of public-facing output has been limited.

The Trump administration's approach to catastrophic risk framing shifted emphasis toward more traditional threat categories (terrorism, illegal immigration, drug trafficking) and away from some of the newer risk categories the statute addresses, particularly emerging technology risks and abrupt climate threats. This created uncertainty about whether the 10-year assessment cycle would be conducted with the same scope as the statute envisioned.

The emergence of advanced AI systems in 2023-2025 significantly increased interest in the "emerging technologies" risk category. Organizations including the Existential Risk Observatory, the Nuclear Threat Initiative, and academic groups at Cambridge, Oxford, and MIT pushed for DHS to treat AI risk more seriously in its catastrophic risk framework. Congress held hearings in 2024 specifically examining whether the GCRMA's emerging-technology provisions were being implemented adequately in light of rapid AI advancement.