Threat Levels advice - assets.publishing.service.gov.uk · protective security measures reflecting...
Transcript of Threat Levels advice - assets.publishing.service.gov.uk · protective security measures reflecting...
AdviceforsecuritymanagersofcrowdedplacesfollowingachangeofthreatleveltoCRITICAL
1. Introduction
TheaimofthisadviceistoprovideadvicetosecuritymanagersofcrowdedplacesfollowingachangeofthethreatleveltoCRITICAL.Thereareanumberofoperationalandtacticaloptionsyoumaywishtoconsider.Terrorismthreatlevelsaredesignedtogiveabroadindicationofthelikelihoodofaterroristattack.Theyarebasedontheassessmentofarangeoffactorsincludingcurrentintelligence,recenteventsandwhatisknownaboutterroristintentionsandcapabilities.InformationaboutthenationalthreatlevelisavailableontheMI5–SecurityServicewebsite.
2. ThreatLevelDefinitions
Therearefivelevelsofthreatwhicharedefinedbelow:
CRITICAL Anattackisexpectedimminently
SEVERE Anattackishighlylikely
SUBSTANTIAL Anattackisastrongpossibility
MODERATE Anattackispossiblebutnotlikely
LOW Anattackisunlikely
Thereisnospecificintelligence,theassessmentisgenericanddoesnotidentifyanysectorordetailoflocationsortimings.Asaconsequenceofthechangeinthreatlevelitisrecommendedthatthoseresponsibleforsecurityreviewtheirplansandoperations.Youmaywishtoconsidersomeoftheoptionslistedbelow.
3. ResponseLevels
TheUKGovernmentResponseLevelsprovideageneralindicationoftheprotectivesecuritymeasuresthatshouldbeappliedatanyparticulartime.Theyareinformedbythethreatlevel,butalsotakeintoaccountspecificassessmentsofvulnerabilityandrisk.Duringanyincidentleadershipiskey,makeadynamicriskassessmentandtakeresponsibility.Decisiveindividualswillsavelives.TherearethreelevelsofresponseEXCEPTIONAL,HEIGHTENEDandNORMAL.Responselevelsequatetothreatlevelsandtendtorelatetosites,whereasthreatlevelsusuallyrelatetobroadareasofactivity.Thereareavarietyofsitespecificsecuritymeasuresthatcanbeappliedwithineachresponselevel,althoughthesamemeasureswillnotbefoundateverylocation.Thesecuritymeasuresdeployedatdifferentresponselevelsshouldnotbemadepublic,toavoidinformingterroristsaboutwhatweknowandwhatwearedoingaboutit.
Tosupportyourplanningthethreatlevelandresponselevelsarecombinedinthetablebelow.
Threatlevelanddefinition Responselevel Description
CriticalAnattackisexpectedimminently
Exceptional Maximumprotectivesecurity.Criticalmeasurestomeetspecificthreatsandtominimisevulnerabilityandrisk
SevereAnattackishighlylikely
Heightened AdditionalandsustainableSubstantialandSevereprotectivesecuritymeasuresreflectingthebroadnatureofthethreatcombinedwithspecificbusinessandgeographicalvulnerabilitiesandjudgementsonacceptablerisk
SubstantialAnattackisastrongpossibility
ModerateAnattackispossiblebutnotlikely
Normal
Routineprotectivesecurity.LowandModeratemeasuresappropriatetothebusinessconcerned
LowAnattackisunlikely
4.AdditionalInformation
Therearesomesimple,practicalactionsyoucantakeimmediatelytohelpimprovethesecurityofyourvenue:
RiskAssessment
• Carryoutariskassessmentthatisspecifictoyourvenue
BuildingResponseLevel
• Regularlyreviewtheresponselevelforyoursiteorvenueatsecuritymeetings• Clearlydisplaysignageinformingstaffofthebuildingresponselevel.Thisshouldnotbe
displayedinpublicareas
Securityofficerspostureandactivity
• Proactiveengagementandstaffbriefings.Oneofthemostdisruptivemeasurestocounterterroristsandwidercriminalityisasecurityforcethatappearstobevigilantandproactivelyengageswiththepublic.Terroristsandcriminalsdonotwanttobespokentobyanymemberofstaffandwillactivelyavoidengagement–thisshouldbepolitebutprofessional.Iftheyarespokentoitislikelytomakethemfeelveryuncomfortableandexposed.Staffbriefingswillenableyoursecurityofficerstounderstandtheimportanceofproactiveengagementandtheyshouldbeencouragedtodothiswherepracticalandreasonabletodoso.Forexample,ifsecurityofficerspatroltoareasinacar(suchasacarpark),encouragethemtogetoutofthecarandengagewithpeople,assimpleassayinggoodmorning.
• Unpredictablesecuritymeasures.Unpredictabilityresultsinuncertaintyanderosionofconfidenceinthemindofthehostilewhoneedthispredictablesecurityarrangementssothattheycanplanforlikelysuccess.Wherepracticalandreasonablebuildinunpredictabilityforexample,timingsandtypesofassetsandsearchregimesdeployedatyoursite.
• ‘Recruit’stafftobevigilantforandimmediatelyreportsuspiciousactivityanditems.Useexistingstaffcommunicationssuchasshiftbriefings,intranetetc.toinformastowhatsuspiciousactivitymaylooklike,totrusttheirinstinctsandreportimmediatelytothesecuritycontrolroom/police.Inthesecommunicationsconveyhowtheirreportswillbetakenseriouslyandinvestigatedandwherepossibleshowcasewherepreviousstaffreportinghasledtooutcomes,bothwheretherehavebeenbenignandsecurityoutcomes;thishelpspromoteconfidenceinreporting.
Thecountermeasurestobeimplementedateachresponselevelareamatterforindividualpremisesororganisationsandwilldifferaccordingtoarangeofcircumstances.Allprotectivesecuritymeasuresshouldbeidentifiedinadvanceofanychangeinthreatandresponselevelsandshouldbeclearlynotifiedtothosestaffwhoareresponsibleforensuringcompliance.Itisimportanttotrainstaffandtheconductrehearsalexercisesforeachresponselevel.Thetablebelowprovidesanumberofprotectivesecurityoptionsyoumaywishtoconsidertoconsider.Forfurtherinformationvisit:www.nactso.gov.uk,www.cpni.gov.uk,CabinetOffice,Emergencies:preparation,responseandrecovery,EmergencyPlanning.
SecurityChecklistINITIALACTIONS
1. Reviewyoursecurityplans
2. Identifyyourrisks,basedonthecurrentthreat
3. ReviewyourBusinessContinuityPlans
4. Decidewhatyouneedtoprotect,identifyingcriticaloperationsandfunctions
5. Increasestaffvigilance–throughbriefing
6. ReviewEvacuation,InvacuationandLockdownprocedures.Ensureyouhaveplansforvulnerablestaffandvisitors.Haveyoudesignatedmarshalstosupportthisactivity.
7. Identify‘protectedspaces’
8. ReviewyourEmergencyAssemblyPoint
PREPAREDNESS
1. EnsureFirstAidKitsarefullystockedandstaffknowwheretheyarekept
2. EnsureCrisisIncidentKits(grabbags)areavailableanduptodate
COMMUNICATION
1. Briefstaff–ensuretheyunderstandtheirrolesandresponsibilities
2. Engagewithneighbours,partnersandsuppliers
3. Ensureyouareabletoalertstaffandvisitorsofanyimminentorimmediatethreatorincident
4. Providepriornotificationtostaffandvisitorsofenhancedsecuritymeasures,encouragingthemtoarriveinplentyoftimeandencouragethemtobringminimalpossessions
5. Monitornewsandmediachannels
6. Developpre-scriptedmessagingandalertsanddeterminehowthesewillbecommunicatedtostaffandvisitors
PERSONNEL
1. Maintainanuptodatelistofpersonnel(DoHRupdateleaversandjoiners?)
2. Considerextendingstaffshiftswhereappropriate
3. Considercancellingleavewhereappropriate
4. Considercancellingnon-urgentbusinessorvisitorswhereappropriatetoyourvenue
5. Identifyifyouhavesufficientstaffforcriticalrolessuchasyourcontrolroom
6. ReviewrequirementsforPersonalProtectiveEquipment(PPE)forsecuritystaff
TRAINING
1. Ensurestaffunderstandhowtorespondtoaterroristincident.seeETHANE
2. Arestafffirstaidtrained
3. Reviewanddelivertrainingtoyourstaffandconductrehearsalexercises
STAFFVIGILANCE
1. DoALLstaffunderstandhowtorespondeffectivelytoreportsofsuspiciousactivity,behaviouranditemswhenreportedbythepublic.Whotheyshouldreporttointernallyandwhentoreporttopoliceusing999
2. Disruptinghostilereconnaissance:Ensurestaffunderstandhowtoidentifysuspiciousbehaviour(Doyouhaveachallengeculture?–seeCPNIwebsite)
3. SuspiciousItems:Ensurestaffunderstandhowtorespondtosuspiciousitems.DostaffknowtheHOTprinciples?
4. Ensureallstaffandvisitorswearpasses
5. Whereentryisrestricted,checkthevisitorsidentificationpriortoallowingaccesstothesite
PHYSICALSECURITY
1. Enhanceyoursecuritypresencewhereappropriate,considerstaffpatrollinginhighvisibilityclothing
2. EnsureCCTVisworkingeffectivelyandmonitored
3. Reviewyouraccesscontrols.Whereappropriatecloseunnecessaryentrancestopreventunauthorisedaccess
4. Ensureinfrastructure,suchassignage,lighting,floorlevelsigns,stairsetc.areclearlymarkedandlabelled.
5. Preparefloorplans
6. Establishifyourcontrolroomiscapableofbeingoperationallyeffectiveagainstdifferentattacktypesandcanbesecuredandprotected
7. CheckcriticalsystemsandequipmentsuchasPAsystems
8. Ensurecontrolroomshavealternativemeansofcommunicationsuchasmobilephoneswithsparebatteries,chargersetc.
9. Considertheprotectionrequirementsforanyqueuesofpeoplecreatedbyadditionalsearchmeasures(CCTV,positionofthequeueetc.)
SEARCHANDSCREENING
1. Businessasusualsearchandscreening(lookingforprohibiteditems)should,whendonewell,provideaverygoodcapabilitytodetectlargerthreatitemsconcealedabouttheperson
2. Youwillhaveafiniteamountofsecurityandscreeningresources,focusonaddressingyourhighestprioritythreats
3. Beclearaboutwhatthesearchprocessisaimingtodetect,whoyouneedtoscreenandwhereyouwillconducttheprocess
4. Definelistsofprohibiteditems.Communicatethisbothtocustomersandpersonnelconductingthesearch
5. Priornotification(atpointofsaleormedia)oftheseextrasecuritymeasuresandencouragingpeopletoarriveearly,willsmoothpeaksandallowsafeandeffectivesearching
6. Provideeffectivepublicaddressmessagingtopeopleastheyapproach,askingpeopletoprepareforadditionalsearchandscreening.Thisshouldreduceunacceptabledelay
7. Considerinitialsearchandscreeningontheapproachoroutsidethevenue,forexampleavisualcheckinsidejacketsandbags
8. Conductsearchandscreeningmeasuresefficiently,effectivelyandpolitely.Aimtomaximisescreeningthroughput(tominimisequeuesthatmaybetargeted)
9. Bagsandotheritemsshouldbesearchedtotheextentrequiredtoprovideconfidencethatnoitemsofconcernarepresent.Manualbagsearchesshouldbe,proportionate,systematic,consistentandsafeforthepersonconductingthesearch.Alwayslookwhereyouaresearching
10. Manualpersonsearchesshouldbeconsideredtotheextentrequiredtoprovideconfidencethatnolargerthreatitemsarepresent.Engagethecustomerandobtaintheirpermission.Considerwhethersearchshouldbeaconditionofentryifitisnotalready.Searchsystematicallyfromheadtotoe.Payparticularattentiontobulkyandbaggyclothing.Continuethesearchtotheend,evenifsomethingisfound.Donotbeintimidatedordistracted.Usehandsinafirmslidingmotion.Screenersshouldalwaysbethesamesexasthecustomer.Whereappropriateaskthecustomertoremovepocketitems.Considertheprivacyneedsoftheindividual
11. Ensureyoursiteorvenueissearchedonaregularbasisbutnotatpredictabletimesorinapredictableway
12. Ensureyoumaintainyoursearchregimeforthelifecycleoftheeventincludingpriortothecommencement,duringandpostevent
13. Determinewhetheryouallowvehiclesintoyourvenueandifyouintendtosearchvehiclesenteringyourvenue
14. Trainsearchstafftosearchsafelyandeffectively
15. Ensureallstaffareawareoftheresponsewhentheylocatethreatitems
16. Thereanumberofothertacticaloptionsavailableforsearchandscreening,specialistadviceshouldbesoughtfromtheCPNIwebsiteoryourlocalCounterTerrorismSecurityAdvisor.
SECURITYPERSONNEL
Dependingupontheirresponsibilitiesaneffectivesecurityguardmustbeabletodemonstratetheycanrespondeffectivelytoanumberofscenariosincluding:
1. Doyousecuritystaffunderstandhowtorespondeffectivelytoreportsofsuspiciousactivity,behaviouranditemswhenreportedbythepublic.Whotheyshouldreporttointernallyandwhentoreporttopoliceusing999,101orcalltheAnti-TerroristHotline0800789321
2. Initialactionsataterroristincident,seeETHANE
3. Ensureyoumaintainyoursearchandpatrolregimeforthelifecycleoftheeventincludingpriortothecommencement,duringandpostevent.Considerapatrolsweepofthepublicareasbefore,duringandafteraneventlookingforsuspiciousitemsandbehaviours.Patrol
areasmightincludeareasclosetothesite,pickupzonesandtransporthubs.Ensurethosestaffcancommunicateeffectivelywithacontrolroom.
4. Thedifferentterroristthreatlevels,buildingresponselevels,anddifferentactivitiesrequiredshouldtherebeanincreaseinthreat
5. Hostilereconnaissance,howtopatroleffectivelytodisruptactivity,identifyandrespondtosuspiciousbehaviour
6. Suspectitems,the‘fourCs’protocolsandtheHOTprinciples
7. Chemical,biologicalandradiologicalincidents,howtorecogniseandrespondusingSTEPS123
8. AfirearmsandweaponsattacksandtheRun,Hide,Tellprinciples
9. Evacuation,invacuationandlockdownproceduredemonstratingknowledgeoftheemergencyassemblypoints
10. Howtosearchasiteeffectively
11. Thebasicprinciplesofgoodhousekeepingandhowitreducestheopportunitiesforanattack
12. Howtorespondappropriatelytoabombthreat
13. Usingemergencyequipmentsuchasdefibrillatorsetc.
14. Useofincidentlogsandcheckliststhatfacilitateaneffectiveresponsetoincidentssuchasterroristincidents,bombthreatsetc.
GOODHOUSEKEEPING
1. Whereyourriskassessmentdeterminesitisnecessary,examineopportunitiestoreducingreasonsforcrowdstodwellsuchasreducingorremovingorrelocatingactivitiesthatareattractive,suchasstreetentertainers,mobilefoodoutletsetc.Considerincreasingpatrolsintheseareas.Considercarefullywheretheseactivitiestakeplace.
2. Haveyoureviewedtheuseandlocationofallwastereceptaclesinandaroundyourvenueorevent,takingintoconsiderationtheirsize,proximitytoglazingandbuildingsupportstructures?Considerrepositioningtoareasthatarenotcrowded
3. Arethebinsemptiedregularly?
4. Areexternalareas,entrances,exits,stairs,receptionareasandtoiletskeptclean,tidyandwelllit?Wherepossiblereduceareaswhereitemscanbeconcealed
5. Doyoukeepfurnituretoaminimumtoprovidelittleopportunitytohidedevices,includingunderchairsandsofas?
6. Doyouuseseals/lockstosecuremaintenancehatches,compactersandindustrialwastebinswhennotrequiredforimmediateuse?
7. Considerarrangingvehicledeliveriesfortimeswherethefewestnumberofpeopleareonsite.Consideradoptingtimewindowswherenodeliverieswillbeaccepted.
8. Doyouscreenallyourmailandcanyouisolateyourmailprocessingarea?
9. Haveyoutestedandexercisedforaterroristincidentinthelast12months?Dostaffunderstandtheirrolesandresponsibilities?
10. Arerelevantstaffanddeputiestrainedandcompetentinmanagingbombthreats?
11. Doyouregularlycheckthecontentoffirstaidkits,crisismanagementpacksandfirefightingequipment?
12. HaveyoucheckedyourCCTVtoensureitisworkingeffectivelyandhassufficientcoverageinsideandoutside?
13. Haveyoutakenintoaccountthelocationofstreetvendors(e.g.flowersellers,newsstandsandrefreshmentstalls)soasnottoimpactuponevacuationroutes,assemblypoints,exitsorentrances?
14. Arecycleracksandlockerspositionedawayfromcrowdedareas?IsCCTVmonitoringnecessary?