Suggested Guidelines on Protective Measures

From the National Infrastructure Protection Center

Homeland Security Information Update

National Threat Warning System-Homeland Security Information Update-HSAS Threat Level Orange (High); joint guidance from the Department of Homeland Security and the FBI.

As recipients were advised, the Homeland Security Advisory System (HSAS) was raised to High (Orange) from Elevated (Yellow) on 2/7/03. This communication provides critical infrastructure owners/operators suggested guidance for developing protective measures based on this heightened threat condition. This communication also provides potential indicators of threats involving weapons of mass destruction.

Part I: General Protective Measures

In addition to continuing all precautions from the lower threat condition (Yellow), the following general protective measures may be utilized. Recipients are advised to take other appropriate steps, in conjunction with local conditions, policies, and procedures. The list that follows is not intended to be exhaustive, but merely illustrative:

• coordinate necessary security efforts with Armed Forces or law enforcement agencies.
• take additional precautions at public events.
• review contingency plans to work at an alternate site or with a dispersed work force.
• review plans to restrict access to facilities.

Part II: Specific Protective Measures for Infrastructure Owners/Operators at High Condition (Orange)

• announce threat condition high (orange) to all employees.
• consider full or partial activation of emergency operations center.
• review policy and plans relating to restricting access to critical facilities and infrastructure.
• conduct periodic inspections of building facilities and HVAC systems for potential indicators/irregularities
• direct people to the Red Cross website for further review of protective measures for families and businesses.
• enhance security at critical facilities.
• institute/increase vehicle, foot and roving security patrols.
• implement random security guard shift changes.
• increase visibility in and around perimeters by increasing lighting and removing or trimming vegetation.
• implement stringent identification procedures to include conducting "hands on" checks of security badges for all personnel, if badges are required.
• remind personnel to properly display badges, if applicable, and enforce visibility.
• rearrange exterior vehicle barriers to alter traffic patterns near facilities.
• arrange for law enforcement vehicles to be parked randomly near entrances and exits.
• approach all illegally parked vehicles in and around facilities, question drivers and direct them to move immediately. If the owner can not be identified, have vehicle towed by law enforcement.
• if possible, institute a vehicle inspection program to include checking under the undercarriage of vehicles, under the hood, and in the trunk. Provide vehicle inspection training to security personnel.
• instruct citizens to report suspicious activities, packages and people, and report all suspicious activity immediately to local law enforcement.
• x-ray packages, if possible, prior to entry, and inspect handbags, and briefcases, if possible.
• encourage personnel to avoid routines, vary times and routes, and pre-plan with family members and supervisors.
• validate vendor lists for all routine deliveries and repair services.
• restrict vehicle parking close to buildings.
• inspect all deliveries and consider accepting shipments only at offsite locations.
• require identification, sign-in, and escorts for visitors.
• instruct people to be especially watchful for suspicious or unattended packages and articles either delivered or received through the mail.
• send a public information officer to the state joint information center.
• install special locking devices on manhole covers in and around critical infrastructure facilities.
• initiate a system to enhance mail and package screening procedures (both announced and unannounced).
• review current contingency plans and if not already in place, develop and implement procedures for receiving and acting on: threat information, alert notification procedures, terrorist incident response procedures, evacuation procedures, shelter in place procedures, bomb threat procedures, hostage and barricade procedures, chemical, biological, radiological and nuclear (CBRN) procedures, consequence and crisis management procedures, accountability procedures and media procedures.

Part III: Potential Indicators of Threats Involving Weapons of Mass Destruction (WMD)

Potential Indicators of WMD Threats or Incidents:

• unusual/suspicious packages or containers, especially those found in unlikely or sensitive locations, such as those found near air intake/HVAC systems or enclosed spaces.
• unusual powders or liquids/droplets/mists/clouds, especially found near air intake/HVAC systems or enclosed spaces.
• signs of tampering or break-in to a facility or maintenance/utility area
• reports of suspicious person(s) or activities, especially those involving sensitive locations within or around a building
• dead animals/birds, fish, or insects
• unexplained/unusual odors. Smells may range from fruity/flowery to sharp/pungent, garlic/horseradish-like, bitter almonds, peach kernels, and new mown grass/hay.
• unusual/unscheduled spraying or discovery of spray devices or bottles

The NIPC encourages individuals to report information concerning suspicious activity to their local FBI Joint Terrorism Task Force (JTTF) office, http://www.fbi.gov/contact/fo/fo.htm, the NIPC, or to other appropriate authorities. Individuals can reach the NIPC WATCH AND WARNING UNIT at (202) 323-3205, tol1 free at 1-888-585-9078, or by email to [email protected]. 

---