AdviceforsecuritymanagersofcrowdedplacesfollowingachangeofthreatleveltoCRITICAL

1. Introduction

TheaimofthisadviceistoprovideadvicetosecuritymanagersofcrowdedplacesfollowingachangeofthethreatleveltoCRITICAL.Thereareanumberofoperationalandtacticaloptionsyoumaywishtoconsider.Terrorismthreatlevelsaredesignedtogiveabroadindicationofthelikelihoodofaterroristattack.Theyarebasedontheassessmentofarangeoffactorsincludingcurrentintelligence,recenteventsandwhatisknownaboutterroristintentionsandcapabilities.InformationaboutthenationalthreatlevelisavailableontheMI5–SecurityServicewebsite.

2. ThreatLevelDefinitions

Therearefivelevelsofthreatwhicharedefinedbelow:

CRITICAL Anattackisexpectedimminently

SEVERE Anattackishighlylikely

SUBSTANTIAL Anattackisastrongpossibility

MODERATE Anattackispossiblebutnotlikely

LOW Anattackisunlikely

Thereisnospecificintelligence,theassessmentisgenericanddoesnotidentifyanysectorordetailoflocationsortimings.Asaconsequenceofthechangeinthreatlevelitisrecommendedthatthoseresponsibleforsecurityreviewtheirplansandoperations.Youmaywishtoconsidersomeoftheoptionslistedbelow.

3. ResponseLevels

TheUKGovernmentResponseLevelsprovideageneralindicationoftheprotectivesecuritymeasuresthatshouldbeappliedatanyparticulartime.Theyareinformedbythethreatlevel,butalsotakeintoaccountspecificassessmentsofvulnerabilityandrisk.Duringanyincidentleadershipiskey,makeadynamicriskassessmentandtakeresponsibility.Decisiveindividualswillsavelives.TherearethreelevelsofresponseEXCEPTIONAL,HEIGHTENEDandNORMAL.Responselevelsequatetothreatlevelsandtendtorelatetosites,whereasthreatlevelsusuallyrelatetobroadareasofactivity.Thereareavarietyofsitespecificsecuritymeasuresthatcanbeappliedwithineachresponselevel,althoughthesamemeasureswillnotbefoundateverylocation.Thesecuritymeasuresdeployedatdifferentresponselevelsshouldnotbemadepublic,toavoidinformingterroristsaboutwhatweknowandwhatwearedoingaboutit.

Tosupportyourplanningthethreatlevelandresponselevelsarecombinedinthetablebelow.

Threatlevelanddefinition Responselevel Description

CriticalAnattackisexpectedimminently

Exceptional Maximumprotectivesecurity.Criticalmeasurestomeetspecificthreatsandtominimisevulnerabilityandrisk

SevereAnattackishighlylikely

Heightened AdditionalandsustainableSubstantialandSevereprotectivesecuritymeasuresreflectingthebroadnatureofthethreatcombinedwithspecificbusinessandgeographicalvulnerabilitiesandjudgementsonacceptablerisk

SubstantialAnattackisastrongpossibility

ModerateAnattackispossiblebutnotlikely

Normal

Routineprotectivesecurity.LowandModeratemeasuresappropriatetothebusinessconcerned

LowAnattackisunlikely

4.AdditionalInformation

Therearesomesimple,practicalactionsyoucantakeimmediatelytohelpimprovethesecurityofyourvenue:

RiskAssessment

• Carryoutariskassessmentthatisspecifictoyourvenue

BuildingResponseLevel

• Regularlyreviewtheresponselevelforyoursiteorvenueatsecuritymeetings• Clearlydisplaysignageinformingstaffofthebuildingresponselevel.Thisshouldnotbe

displayedinpublicareas

Securityofficerspostureandactivity

• Proactiveengagementandstaffbriefings.Oneofthemostdisruptivemeasurestocounterterroristsandwidercriminalityisasecurityforcethatappearstobevigilantandproactivelyengageswiththepublic.Terroristsandcriminalsdonotwanttobespokentobyanymemberofstaffandwillactivelyavoidengagement–thisshouldbepolitebutprofessional.Iftheyarespokentoitislikelytomakethemfeelveryuncomfortableandexposed.Staffbriefingswillenableyoursecurityofficerstounderstandtheimportanceofproactiveengagementandtheyshouldbeencouragedtodothiswherepracticalandreasonabletodoso.Forexample,ifsecurityofficerspatroltoareasinacar(suchasacarpark),encouragethemtogetoutofthecarandengagewithpeople,assimpleassayinggoodmorning.

• Unpredictablesecuritymeasures.Unpredictabilityresultsinuncertaintyanderosionofconfidenceinthemindofthehostilewhoneedthispredictablesecurityarrangementssothattheycanplanforlikelysuccess.Wherepracticalandreasonablebuildinunpredictabilityforexample,timingsandtypesofassetsandsearchregimesdeployedatyoursite.

• ‘Recruit’stafftobevigilantforandimmediatelyreportsuspiciousactivityanditems.Useexistingstaffcommunicationssuchasshiftbriefings,intranetetc.toinformastowhatsuspiciousactivitymaylooklike,totrusttheirinstinctsandreportimmediatelytothesecuritycontrolroom/police.Inthesecommunicationsconveyhowtheirreportswillbetakenseriouslyandinvestigatedandwherepossibleshowcasewherepreviousstaffreportinghasledtooutcomes,bothwheretherehavebeenbenignandsecurityoutcomes;thishelpspromoteconfidenceinreporting.

Thecountermeasurestobeimplementedateachresponselevelareamatterforindividualpremisesororganisationsandwilldifferaccordingtoarangeofcircumstances.Allprotectivesecuritymeasuresshouldbeidentifiedinadvanceofanychangeinthreatandresponselevelsandshouldbeclearlynotifiedtothosestaffwhoareresponsibleforensuringcompliance.Itisimportanttotrainstaffandtheconductrehearsalexercisesforeachresponselevel.Thetablebelowprovidesanumberofprotectivesecurityoptionsyoumaywishtoconsidertoconsider.Forfurtherinformationvisit:www.nactso.gov.uk,www.cpni.gov.uk,CabinetOffice,Emergencies:preparation,responseandrecovery,EmergencyPlanning.

SecurityChecklistINITIALACTIONS

1. Reviewyoursecurityplans

2. Identifyyourrisks,basedonthecurrentthreat

3. ReviewyourBusinessContinuityPlans

4. Decidewhatyouneedtoprotect,identifyingcriticaloperationsandfunctions

5. Increasestaffvigilance–throughbriefing

6. ReviewEvacuation,InvacuationandLockdownprocedures.Ensureyouhaveplansforvulnerablestaffandvisitors.Haveyoudesignatedmarshalstosupportthisactivity.

7. Identify‘protectedspaces’

8. ReviewyourEmergencyAssemblyPoint

PREPAREDNESS

1. EnsureFirstAidKitsarefullystockedandstaffknowwheretheyarekept

2. EnsureCrisisIncidentKits(grabbags)areavailableanduptodate

COMMUNICATION

1. Briefstaff–ensuretheyunderstandtheirrolesandresponsibilities

2. Engagewithneighbours,partnersandsuppliers

3. Ensureyouareabletoalertstaffandvisitorsofanyimminentorimmediatethreatorincident

4. Providepriornotificationtostaffandvisitorsofenhancedsecuritymeasures,encouragingthemtoarriveinplentyoftimeandencouragethemtobringminimalpossessions

5. Monitornewsandmediachannels

6. Developpre-scriptedmessagingandalertsanddeterminehowthesewillbecommunicatedtostaffandvisitors

PERSONNEL

1. Maintainanuptodatelistofpersonnel(DoHRupdateleaversandjoiners?)

2. Considerextendingstaffshiftswhereappropriate

3. Considercancellingleavewhereappropriate

4. Considercancellingnon-urgentbusinessorvisitorswhereappropriatetoyourvenue

5. Identifyifyouhavesufficientstaffforcriticalrolessuchasyourcontrolroom

6. ReviewrequirementsforPersonalProtectiveEquipment(PPE)forsecuritystaff

TRAINING

1. Ensurestaffunderstandhowtorespondtoaterroristincident.seeETHANE

2. Arestafffirstaidtrained

3. Reviewanddelivertrainingtoyourstaffandconductrehearsalexercises

STAFFVIGILANCE

1. DoALLstaffunderstandhowtorespondeffectivelytoreportsofsuspiciousactivity,behaviouranditemswhenreportedbythepublic.Whotheyshouldreporttointernallyandwhentoreporttopoliceusing999

2. Disruptinghostilereconnaissance:Ensurestaffunderstandhowtoidentifysuspiciousbehaviour(Doyouhaveachallengeculture?–seeCPNIwebsite)

3. SuspiciousItems:Ensurestaffunderstandhowtorespondtosuspiciousitems.DostaffknowtheHOTprinciples?

4. Ensureallstaffandvisitorswearpasses

5. Whereentryisrestricted,checkthevisitorsidentificationpriortoallowingaccesstothesite

PHYSICALSECURITY

1. Enhanceyoursecuritypresencewhereappropriate,considerstaffpatrollinginhighvisibilityclothing

2. EnsureCCTVisworkingeffectivelyandmonitored

3. Reviewyouraccesscontrols.Whereappropriatecloseunnecessaryentrancestopreventunauthorisedaccess

4. Ensureinfrastructure,suchassignage,lighting,floorlevelsigns,stairsetc.areclearlymarkedandlabelled.

5. Preparefloorplans

6. Establishifyourcontrolroomiscapableofbeingoperationallyeffectiveagainstdifferentattacktypesandcanbesecuredandprotected

7. CheckcriticalsystemsandequipmentsuchasPAsystems

8. Ensurecontrolroomshavealternativemeansofcommunicationsuchasmobilephoneswithsparebatteries,chargersetc.

9. Considertheprotectionrequirementsforanyqueuesofpeoplecreatedbyadditionalsearchmeasures(CCTV,positionofthequeueetc.)

SEARCHANDSCREENING

1. Businessasusualsearchandscreening(lookingforprohibiteditems)should,whendonewell,provideaverygoodcapabilitytodetectlargerthreatitemsconcealedabouttheperson

2. Youwillhaveafiniteamountofsecurityandscreeningresources,focusonaddressingyourhighestprioritythreats

3. Beclearaboutwhatthesearchprocessisaimingtodetect,whoyouneedtoscreenandwhereyouwillconducttheprocess

4. Definelistsofprohibiteditems.Communicatethisbothtocustomersandpersonnelconductingthesearch

5. Priornotification(atpointofsaleormedia)oftheseextrasecuritymeasuresandencouragingpeopletoarriveearly,willsmoothpeaksandallowsafeandeffectivesearching

6. Provideeffectivepublicaddressmessagingtopeopleastheyapproach,askingpeopletoprepareforadditionalsearchandscreening.Thisshouldreduceunacceptabledelay

7. Considerinitialsearchandscreeningontheapproachoroutsidethevenue,forexampleavisualcheckinsidejacketsandbags

8. Conductsearchandscreeningmeasuresefficiently,effectivelyandpolitely.Aimtomaximisescreeningthroughput(tominimisequeuesthatmaybetargeted)

9. Bagsandotheritemsshouldbesearchedtotheextentrequiredtoprovideconfidencethatnoitemsofconcernarepresent.Manualbagsearchesshouldbe,proportionate,systematic,consistentandsafeforthepersonconductingthesearch.Alwayslookwhereyouaresearching

10. Manualpersonsearchesshouldbeconsideredtotheextentrequiredtoprovideconfidencethatnolargerthreatitemsarepresent.Engagethecustomerandobtaintheirpermission.Considerwhethersearchshouldbeaconditionofentryifitisnotalready.Searchsystematicallyfromheadtotoe.Payparticularattentiontobulkyandbaggyclothing.Continuethesearchtotheend,evenifsomethingisfound.Donotbeintimidatedordistracted.Usehandsinafirmslidingmotion.Screenersshouldalwaysbethesamesexasthecustomer.Whereappropriateaskthecustomertoremovepocketitems.Considertheprivacyneedsoftheindividual

11. Ensureyoursiteorvenueissearchedonaregularbasisbutnotatpredictabletimesorinapredictableway

12. Ensureyoumaintainyoursearchregimeforthelifecycleoftheeventincludingpriortothecommencement,duringandpostevent

13. Determinewhetheryouallowvehiclesintoyourvenueandifyouintendtosearchvehiclesenteringyourvenue

14. Trainsearchstafftosearchsafelyandeffectively

15. Ensureallstaffareawareoftheresponsewhentheylocatethreatitems

16. Thereanumberofothertacticaloptionsavailableforsearchandscreening,specialistadviceshouldbesoughtfromtheCPNIwebsiteoryourlocalCounterTerrorismSecurityAdvisor.

SECURITYPERSONNEL

Dependingupontheirresponsibilitiesaneffectivesecurityguardmustbeabletodemonstratetheycanrespondeffectivelytoanumberofscenariosincluding:

1. Doyousecuritystaffunderstandhowtorespondeffectivelytoreportsofsuspiciousactivity,behaviouranditemswhenreportedbythepublic.Whotheyshouldreporttointernallyandwhentoreporttopoliceusing999,101orcalltheAnti-TerroristHotline0800789321

2. Initialactionsataterroristincident,seeETHANE

3. Ensureyoumaintainyoursearchandpatrolregimeforthelifecycleoftheeventincludingpriortothecommencement,duringandpostevent.Considerapatrolsweepofthepublicareasbefore,duringandafteraneventlookingforsuspiciousitemsandbehaviours.Patrol

areasmightincludeareasclosetothesite,pickupzonesandtransporthubs.Ensurethosestaffcancommunicateeffectivelywithacontrolroom.

4. Thedifferentterroristthreatlevels,buildingresponselevels,anddifferentactivitiesrequiredshouldtherebeanincreaseinthreat

5. Hostilereconnaissance,howtopatroleffectivelytodisruptactivity,identifyandrespondtosuspiciousbehaviour

6. Suspectitems,the‘fourCs’protocolsandtheHOTprinciples

7. Chemical,biologicalandradiologicalincidents,howtorecogniseandrespondusingSTEPS123

8. AfirearmsandweaponsattacksandtheRun,Hide,Tellprinciples

9. Evacuation,invacuationandlockdownproceduredemonstratingknowledgeoftheemergencyassemblypoints

10. Howtosearchasiteeffectively

11. Thebasicprinciplesofgoodhousekeepingandhowitreducestheopportunitiesforanattack

12. Howtorespondappropriatelytoabombthreat

13. Usingemergencyequipmentsuchasdefibrillatorsetc.

14. Useofincidentlogsandcheckliststhatfacilitateaneffectiveresponsetoincidentssuchasterroristincidents,bombthreatsetc.

GOODHOUSEKEEPING

1. Whereyourriskassessmentdeterminesitisnecessary,examineopportunitiestoreducingreasonsforcrowdstodwellsuchasreducingorremovingorrelocatingactivitiesthatareattractive,suchasstreetentertainers,mobilefoodoutletsetc.Considerincreasingpatrolsintheseareas.Considercarefullywheretheseactivitiestakeplace.

2. Haveyoureviewedtheuseandlocationofallwastereceptaclesinandaroundyourvenueorevent,takingintoconsiderationtheirsize,proximitytoglazingandbuildingsupportstructures?Considerrepositioningtoareasthatarenotcrowded

3. Arethebinsemptiedregularly?

4. Areexternalareas,entrances,exits,stairs,receptionareasandtoiletskeptclean,tidyandwelllit?Wherepossiblereduceareaswhereitemscanbeconcealed

5. Doyoukeepfurnituretoaminimumtoprovidelittleopportunitytohidedevices,includingunderchairsandsofas?

6. Doyouuseseals/lockstosecuremaintenancehatches,compactersandindustrialwastebinswhennotrequiredforimmediateuse?

7. Considerarrangingvehicledeliveriesfortimeswherethefewestnumberofpeopleareonsite.Consideradoptingtimewindowswherenodeliverieswillbeaccepted.

8. Doyouscreenallyourmailandcanyouisolateyourmailprocessingarea?

9. Haveyoutestedandexercisedforaterroristincidentinthelast12months?Dostaffunderstandtheirrolesandresponsibilities?

10. Arerelevantstaffanddeputiestrainedandcompetentinmanagingbombthreats?

11. Doyouregularlycheckthecontentoffirstaidkits,crisismanagementpacksandfirefightingequipment?

12. HaveyoucheckedyourCCTVtoensureitisworkingeffectivelyandhassufficientcoverageinsideandoutside?

13. Haveyoutakenintoaccountthelocationofstreetvendors(e.g.flowersellers,newsstandsandrefreshmentstalls)soasnottoimpactuponevacuationroutes,assemblypoints,exitsorentrances?

14. Arecycleracksandlockerspositionedawayfromcrowdedareas?IsCCTVmonitoringnecessary?