Subject: Continued Vigilance is Encouraged in Wake of Recent Attacks
Brief: In the wake of the Paris attacks by ISIS and subsequent arrests of their members and supporters, law enforcement, security personnel, and U.S. citizens are reminded to remain vigilant and aware of suspicious activities during the Thanksgiving and Holiday Season time period. Awareness is essential in and around Critical Infrastructure and Key Resources; and at upcoming public, and private events including parades and larger gatherings.
The June 26, Joint Intelligence Bulletin issued by DHS and its partners offered the following examples of Past Behaviors Associated with Pre-Operational Surveillance and Testing of Security.
(U//FOUO) Some observed activities that may be suspicious include constitutionally protected activity, such as lawful weapons procurement and training. These activities should not be reported absent articulable facts and circumstances that support the source agency’s suspicion that the observed behavior is not innocent, but rather reasonably indicative of criminal activity associated with terrorism, including pre-operational activity. Observable behaviors that may constitute indicators of attack planning include the following:
» (U//FOUO) New or increased interest in critical infrastructure locations and landmarks with no reasonable explanation, including obtaining aerial views of these locations;
» (U//FOUO) Suspicious observation of or unusual questions to building maintenance or security personnel about security procedures;
» (U//FOUO) Engaging in overtly suspicious actions to provoke and observe responses by security or law enforcement officers;
» (U//FOUO) Suspicious interest in entry points, peak days and hours of operation, security personnel, surveillance assets (including cameras), and access controls such as alarms, barriers, doors, gates, or locks;
» (U//FOUO) Suspicious observation of security reaction drills or procedures; multiple false alarms or fictitious emergency calls to same locations or similar venues;
» (U//FOUO) Loitering, parking, or standing in the same area over multiple days with no reasonable explanation;
» (U//FOUO) Attempts to disguise appearance from visit to visit (change in hair color, style of dress);
» (U//FOUO) Garments not appropriate for weather/seasons;
» (U//FOUO) Discreet use of still cameras and video recorders or note taking or use of sketching materials that would raise suspicion in a reasonable person;
» (U//FOUO) Attempted or unauthorized access to rooftops or other potentially sensitive areas; and
» (U//FOUO) Suspicious observations of or questions about facility air conditioning, heating, and ventilation systems.
The JIB also offered the following “Suggested Protective Measures” – Physical Security (U//FOUO) Terrorists have demonstrated continued interest in attacking significant infrastructure, economic, and symbolic targets. We encourage state and local law enforcement, as well as security personnel, to conduct a risk assessment and consider the following protective measures:
» (U//FOUO) Report suspicious activity to proper authorities, to include missing or stolen weapons;
» (U//FOUO) Install secure locks and protection on all external and internal doors and windows with quick-release capability from within for emergency and fire escape;
» (U//FOUO) Train security personnel to watch for suspicious or unattended vehicles on or near facilities; watch for repeated visitors or outsiders who have no apparent business in non-public areas; watch for abandoned parcels, suitcases, backpacks, and packages and any unusual activities;
» (U//FOUO) Consider establishing safe areas within the facility for assembly and refuge during crises;
» (U//FOUO) Consider installing closed-circuit television systems, intruder detection systems, and lighting to cover key areas;
» (U//FOUO) Ensure that emergency communications equipment is present and operable. Practice emergency communications plans and systems;
» (U//FOUO) Install vehicle barriers and designate vehicle marshaling locations to ensure adequate standoff distances from vehicle-borne improvised explosive device;
» (U//FOUO) Establish personnel screening checkpoints for access control into the facility or event;
» (U//FOUO) Conduct explosive detection canine team searches of vehicles requiring entrance into a secure zone;
» (U//FOUO) Ensure personnel receive training on improvised explosive device (IED) and threat awareness, emergency communication, response actions, and reporting of suspicious activity;
» (U//FOUO) Remove objects (e.g., trash containers, crates, etc.) which could conceal IEDs in accordance with stand-off distance guidelines;
» (U//FOUO) Conduct additional sweeps of the facility or event area using roving patrols and explosive detection canine teams; and
» (U//FOUO) Be vigilant of secondary devices, specifically at anticipated evacuation routes.
To report suspicious activity, law enforcement, Fire-EMS, private security personnel, and emergency managers should follow established protocols; all other personnel should call 911 or contact local law enforcement. Suspicious activity reports (SARs) will be forwarded to the appropriate fusion center and FBI Joint Terrorism Task Force for further action. For more information on the Nationwide SAR Initiative, visit http://nsi.ncirc.gov/resources.aspx.
Stay Safe,
