Establish department-wide threat and warning dissemination process and emergency communications capability.

Transcription

1 The following pages contain a compilation of the actions taken by surveyed agencies at each of the alert levels of the in the Homeland Security Advisory System. This document has been prepared by Vince Pearce in the Office of Operations at the Federal Highway Administration, at the request of the AASHTO Transportation Security Task Force. The request for inputs was made to members of the AASHTO Task Force, and is not intended to represent a comprehensive survey of al of the nation s state and local transportation agencies. The following items should assist users in understanding and applying the material: The listing is a compilation from a subset of practicing agencies, not a recommended practice or formal guidance. The list provides a view of what peer agencies are doing, but the actions taken by each agency reflect its own needs, capabilities, and priorities. Exact duplicate items within any level were eliminated, but items only resembling one another were left in. Items performed at multiple levels were listed at the first (least severe) level at which they were first enacted, but were not repeated in the listing at subsequently higher levels where they were also performed. Thus, the items at each level should be considered as additive to those already taken at less severe levels. No further analysis or review of the content was performed. Although inputs were received that reflected multiple modes of transport, they have been made mode-neutral where posible. Individuals seeking input specific to the operation of public transit facilities should consult with the Federal Transit Administration through their regional office or the FTA headquarters Office of Safety and Security. The agencies whose inputs are included are: Georgia DOT Illinois DOT Missouri DOT Virginia DOT Maryland State Highway Administration Delaware DOT Minnesota DOT Federal Transit Administration Federal Highway Administration The inputs from each agency have been integrated with those of the other agencies, and all identification of any action to its source agency has been removed. Questions regarding access to the input documents should be directed to the originating agencies, as USDOT has agreed that none of the source documents that it received will be distributed further. It is recommended that agencies apply appropriate controls limiting distribution of this document. It does not contain any classified material. The AASHTO Task Force appreciates the willingness of its members to share this information for the benefit of agencies creating or improving their own action plans. 1

2 Low Condition (Green) a) Refining and exercising as appropriate preplanned Protective Measures; b) Ensuring personnel receive proper training on the Homeland Security Advisory System and specific preplanned department or agency Protective Measures; and c) Institutionalizing a process to assure that all facilities and regulated sectors are regularly assessed for vulnerabilities to terrorist attacks, and all reasonable measures are taken to mitigate these vulnerabilities. Ensure existing security measures are in place and functioning such as fencing, locks, camera surveillance, intruder alarms, and lighting. Identify those additional security measures and resources that can enhance the security at the higher Threat Condition levels, e.g., increased surveillance. Establish department-wide threat and warning dissemination process and emergency communications capability. Develop terrorist and security awareness and provide information and educate employees on security standards and procedures. Advise all department personnel to report the presence of unknown personnel, unidentified vehicles, vehicles operated out of the ordinary, abandoned parcels or packages, and other suspicious activities. Develop procedures for shutting down and evacuation of facilities. Ensure contingency emergency operations plans are current and include a response to terrorist threats. Develop and implement hardware, software, and communications security for computer based operational systems. Review, update and test incident response plans. Ensure personnel receive training on incident response procedures. Assess critical locations for vulnerabilities and taking measures to reduce them Update priority notification and personnel emergency contact lists Develop plans and exercises to deal with terrorism activities. Encourage agency personnel to take a terrorism awareness class. Secure all buildings, rooms, and storage areas not in regular use. 2

3 Ensure all personnel have agency-issued identification on them that includes picture identification prior to entering an agency facility or operating state equipment. Secure all state vehicles and equipment when not in use within a fenced area and ensure all vehicles are locked with keys removed from the ignition when not in use. At bridge-tunnel facilities, continue to stop all hazardous material vehicles and check for compliance with Rules and Regulations Governing the Transportation of Hazardous Materials through Bridge-Tunnels Facilities. Review all plans and protocols involved in moving to a higher threat level. Keep upper management and Red Team alerted to any terrorist related issues. Examine all mail for suspicious letters or packages. Check all deliveries for suspicious items. Plan response strategies, complete formal system security and emergency operations plans. Organize response organization roles and duties, including internal, external, and outside agencies. Train transit employees on response plans and priorities, including individual roles. Gather, collect and analyze intelligence information to substantiate and establish threat conditions. Purchase/invest in security infrastructure for those items needed in Blue and above. Test levels of preparedness through drills. Conduct routine operations, however employees should be aware of suspicious activity when in the area of agency assets. 3

4 Guarded Condition (Blue) a) Checking communications with designated emergency response or command locations; b) Reviewing and updating emergency response procedures; and c) Providing the public with any information that would strengthen its ability to act appropriately. All prior actions plus: Communicate condition to agency employees who have an operational need to know. Reinforce awareness of responsibilities with employees. Review facility security plans and procedures including bomb threat, chemical, biological or radiological threat and evacuation procedures. Test security and emergency communications procedures and protocols. Secure all buildings and storage areas not in regular use. Increase frequency of inspections and patrols within the facilities including the interior of buildings and along the facility perimeter. Increase surveillance in areas considered key command, control or communications centers and areas such as truck docks, parking lots, and bridges, as applicable. Check designated unmanned and remote sites at more frequent intervals for signs of unauthorized entry, suspicious packages, or unusual activities. Inspect perimeter fencing and repair all fence breakdowns. In addition, review all outstanding maintenance and capital project work that could affect the security of facilities. Reduce the number of access points for vehicles and personnel to minimum levels and periodically spot check the contents of vehicles at the access points. Be alert to vehicles parked for an unusual length of time in or near a facility. Inspect all CCTV/Video Camera/VCR equipment and intercom systems where applicable to ensure equipment is operational. Review and ensure adequacy of personnel and ID issuance and control procedures. Inspect emergency supplies to ensure equipment is in good working order. All contractors and visitors must check or sign in and out of designated facilities or areas within the facility that are considered key command, control or communications centers or areas. 4

5 Check communications capabilities with designated emergency response or command locations Review and update emergency response procedures Provide the public with available information Periodically update resource lists and inventories Notify appropriate staff and employees of the change in threat condition Ensure existing security measures are in place and functioning such as fencing, locks, camera surveillance, intruder alarms, and lighting. Identify those additional security measures and resources that can enhance the security at the higher Threat Condition levels, e.g., increased surveillance. Establish local, regional and system-wide threat and warning dissemination process, emergency communications capability, and contact information with law enforcement and security officials, including local FBI Field Offices, first responders, regional and district US DOT representatives. Emergency communications should have redundancy in both hardware and means to contact security officials and law enforcement agencies. Develop terrorist and security awareness and provide information and educate employees on security standards and procedures. Caution employees to not talk with outsiders concerning their facility or related issues. Advise all personnel at each facility to report the presence of unknown personnel, unidentified vehicles, vehicles operated out of the ordinary, abandoned parcels or packages, and other suspicious activities. Develop procedures for shutting down and evacuation of the facility. Facilities located near critical community assets should be especially vigilant of security measures. Incorporate security awareness and information into public education programs and notifications to emergency response organizations. Survey surrounding areas to determine those activities that might increase the security risks that could affect the facility, e.g., airports, government buildings, industrial facilities, pipelines, etc. Ensure contingency and business continuity plans are current and include a response to terrorist threats. Develop and implement hardware, software, and communications security for computer based operational systems. 5

6 Inform all law enforcement and security officials with an operational need to know of the increased threat. Communicate this information to agency employees who have an operational need to know. Reinforce awareness of responsibilities with employees. Establish liaison with each facility to coordinate measures that may be necessary if the Threat Condition increases. Ensure that a response can be mobilized and review facility security plans and procedures including bomb threat, chemical, biological or radiological threat and evacuation procedures. Ensure plans incorporate Explosive Ordnance Disposal and tactical teams as necessary, including accessibility to explosive detection capabilities such as K-9 teams or electronic sniffers. Test security and emergency communications procedures and protocols. Post Security Alert if appropriate. Secure all buildings and storage areas not in regular use. Increase frequency of inspections and patrols within the facility including the interior of buildings and along the facility perimeter. Increase surveillance in areas considered key command, control or communications centers and areas such as truck docks, taxi lanes, parking lots, bridges, tunnels and interlockings, as applicable. Check designated unmanned and remote sites at more frequent intervals for signs of unauthorized entry, suspicious packages, or unusual activities. Inspect perimeter fencing and repair all fence breakdowns. In addition, review all outstanding maintenance and capital project work that could affect the security of facilities. Reduce the number of access points for vehicles and personnel to minimum levels and periodically spot check the contents of vehicles at the access points. Be alert to vehicles parked for an unusual length of time in or near a facility. Review all operations plans, personnel details, and logistics requirements that pertain to implementing higher Threat Condition levels. Inspect all CCTV/Video Camera/VCR equipment and intercom systems where applicable to ensure equipment is operational. Review and ensure adequacy of personnel and ID issuance and control procedures. Require each visitor to check in at a designated facilities or areas within the facility that are considered key command, control or communications centers or areas and verify their identification be especially alert to repeat visitors or outsiders who have no apparent business at the facility and are asking questions about the facility or related issues 6

7 including the facility s personnel. Be familiar with vendors who service the facility and investigate changes in vendor personnel. Inspect all mail and packages coming into a facility. Do not open suspicious packages. Review the USPS Suspicious Mail Alert and the Bombs by Mail publications with all personnel involved in receiving mail and packages. Network with local law enforcement intelligence units, ie. FBI field offices, and liaison, as appropriate, with other departments. Inspect emergency supplies to ensure equipment is in good working order. Make contact with other agencies to discuss and review threat assessment and mutual anti-terrorism measures. Check that all on-call staff are available and that their home phone numbers, cellular phone numbers and/or pager numbers are all correct and that all communication equipment is in good working order. Wherever possible, use traffic cameras to check for suspicious vehicles or activities around bridges, tunnels and/or high volume interchanges. Periodically each day, inspect the interior and exterior of buildings in regular use for suspicious packages. Check all communication systems with each Traffic Management Center, designated District locations and State Emergency Operations Center. Send status message to agency Emergency Operations Center. Implement procedures and plans throughout the organization. Practice using drills and exercises, including the use of outside responders. Review and reevaluate response procedures based on practice results and fill gaps identified Employees are asked to be cognizant of routine work previously scheduled on or near agency assets. All employees clearly display state issued identification cards. Visitors must have visitors badges. Activate state transportation incident emergency management plan. Redirect surveillance equipment, monitor traffic detectors, and monitor weather and surface conditions. 7

8 Institute Elevated level communications, and inform other agencies, the media, and neighboring jurisdictions that the TMC is now at level 2 status. Limited re-assignment of personnel and equipment. 8

9 Elevated Condition (Yellow) a) Increasing surveillance of critical locations; b) Coordinating emergency plans as appropriate with nearby jurisdictions; c) Assessing whether the precise characteristics of the threat require the further refinement of preplanned Protective Measures; and d) Implementing, as appropriate, contingency and emergency response plans. All prior actions plus: Inspect all mail and packages coming into a facility. Do not open suspicious packages. Review the USPS Suspicious Mail Alert and the Bombs by Mail publications with all personnel involved in receiving mail and packages. Inform personnel of additional threat information as available. Implement procedures to provide periodic updates on security measures being implemented. Review communications procedures and back-up plans with all concerned Review with all department employees the operations plans, personnel safety, security details, and logistics requirements that pertain to implementing increased security levels. Close and lock gates and barriers except those needed for immediate entry and egress. Inspect perimeter fences on a regular basis. Ensure that other security systems are functioning and are available. Step up routine checks of unattended vehicles, scrutiny of packages and vehicles, and monitor critical facilities and key infrastructure (e.g., directed patrol checks by field personnel of rest areas, pumping stations, operational facilities, signal equipment, rights-of-way, parking lots, etc.) are properly secured. Implement additional surveillance at parking areas and bridges. Limit visitor access to key security areas and confirm that the visitor has a need to be and is expected. All unknown visitors should be escorted while in these areas. Survey the surrounding area to determine if activities near the facility could create emergencies. Instruct employees working alone at remote locations or on the Right Of Way to check-in on a periodic basis. Check to ensure all emergency telephone, radio, intercom, and satellite communication devices are in place and they are operational. 9

10 Direct that all personal, company, and contractor vehicles at the facility are secured by locking the vehicles. Coordinate emergency plans with local jurisdictions, adjacent districts and adjoining states Assess the context of the current threat information, and implementing, as appropriate, contingency and emergency response plans Notify appropriate staff and employees of change in threat condition Increase the frequency of warnings required by Low Condition (Green) and Guarded Condition (Blue) and inform personnel of additional threat information as available. Implement procedures to provide periodic updates on security measures being implemented. Ensure that an agency or facility response can be mobilized appropriate for the increased security level. Review communications procedures and back-up plans with all concerned. Review with all facility employees the operations plans, personnel safety, security details, and logistics requirements that pertain to implementing increased security levels. Review notification/recall lists. Confirm availability of security resources that can assist with 24/7 coverage as applicable. Move automobiles and other non-stationary items from station and terminal perimeters and other sensitive buildings or areas. Identify areas where explosive devices could be hidden. Close and lock gates and barriers except those needed for immediate entry and egress. Inspect perimeter fences on a regular basis. Ensure that other security systems are functioning and are available. Step up routine checks of unattended vehicles, scrutiny of packages and vehicles, and monitor critical facilities and key infrastructure (e.g., directed patrol checks of power substations, signal equipment, yards and shops, rights-of-way, parking lots, etc.) are properly secured. Increase security manpower for additional surveillance, to act as a deterrent, and prevent unauthorized access to secure areas, deploy specialty/technical resources, and enact local tactical plans, if applicable. The areas recommended for additional patrols should include parking areas, loading docks, secure areas, bridges, tunnels and interlockings. 10

11 Arrange for and deploy plainclothes law enforcement or security officials for surveillance in critical locations as appropriate. Limit visitor access to key security areas and confirm that the visitor has a need to be and is expected. All unknown visitors should be escorted while in these areas. Advise local police agencies that the facility is at Elevated Condition (Yellow) and advise the measures being employed. Resurvey the surrounding area to determine if activities near the facility could create emergencies and other incidents that could affect the facility, e.g., airports, government buildings, industrial facilities, railroads, other pipelines, etc. Instruct employees working alone at remote locations or on the ROW to check-in on a periodic basis. Check to ensure all emergency telephone, radio, intercom, and satellite communication devices are in place and they are operational. Direct that all personal, company, and contractor vehicles at the facility are secured by locking the vehicles. Interface with vendors and contractors to heighten awareness and report suspicious activity. Post signs or make routine public announcements that emphasize the need for all passengers to closely control baggage and packages to avoid transporting items without their knowledge. Assign canines to visible patrols in stations where applicable. Alert bus and helicopter units, if applicable. Increase special foot patrols, bicycle patrol, and bus and train boardings as appropriate. Utilize canine patrols if available. Develop and implement a schedule for increasing the frequency of inspections including specific areas and items such as: telephone booths, garbage containers, and all public areas. Regularly inspect all buildings, rooms, and storage areas not in regular use. If visitors are allowed into facilities, ensure that escorts are available to take them to and from their destinations. Discuss with appropriate federal/state/local agencies implementation of the Restricted Zones around facilities that span navigable waters. 11

12 Consider restricting visitor parking in close proximity to any buildings. Send status message to agency EOC. Activate readiness plans, communicate and coordinate with other agencies. Agency and staff placed on alert, on standby for activation, and security staff on call. Alter appearance (e.g., vests) and patrol strategies to disrupt terrorist planning. Collect, analyze, and communicate (i.e., share) intelligence on threats. Increase access control to selective facilities. Employees are specifically directed to perform a visual inspection on a regular basis at potentially threatened sites. Review evacuation plans. All employees clearly display state issued identification cards. Visitors must have visitor s badge with location they wil be visiting. Adjust traffic signal timing. Place the Motorist Assistance Patrol on heightened alert. Implement Higher Elevated level communications, and inform other agencies, media, and neighboring jurisdictions that the TMC is at level 3 status. Support agencies not previously involved should also be put on alert. Re-assignment of personnel and equipment. 12

13 High Condition (Orange) a) Coordinating necessary security efforts with Federal, State, and local law enforcement agencies or any National Guard or other appropriate armed forces organizations; b) Taking additional precautions at public events and possibly considering alternative venues or even cancellation; c) Preparing to execute contingency procedures, such as moving to an alternate site or dispersing their workforce; and d) Restricting threatened facility access to essential personnel only. All prior actions plus: Activate emergency response plans as appropriate. This includes any evacuation routes and quarantines required by IEMA. Reduce facility access points to the absolute minimum necessary for continued operation. Increase security patrol activity to the maximum level sustainable. Increase perimeter patrols and inspections of facilities. Erect barriers to control direction of traffic flow and protect the terminal, station or other key area/facility from an attack by a parked or moving vehicle - company vehicles may be used for this purpose. Schedule more frequent visits to remote sites and other locations that are potentially impacted. Increase the frequency of call-ins from remote locations. Employees should not work alone in remote areas. Check all security systems such as lighting and intruder alarms to ensure they are functioning. Install additional, temporary lighting if necessary to adequately light all suspect areas or decrease lighting to detract from the area. Identify the owner of all vehicles parked at key command, control or communications areas or other critical areas/facilities and have all vehicles removed which are not identified. Implement frequent inspection of key areas or facilities including the exterior and roof of all buildings and parking areas. Increase patrolling at night and ensure all vulnerable critical points are fully illuminated and secure. Check all emergency communications systems to verify they are working properly. 13

14 Review incident response plans Determine location and availability of material inventories Determine status of equipment and fuel Determine availability of emergency supplies Determine availability of emergency response personnel Check radio communication capabilities within the district and with adjoining districts Coordinate necessary security efforts with armed forces or law enforcement agencies Prepare to work at an alternate site or with a dispersed workforce Restrict access to facilities, based on intelligence information Notify appropriate staff and employees of change in threat condition Activate emergency response plans. Reduce facility access points to the absolute minimum necessary for continued operation. Increase security patrol activity to the maximum level sustainable. Increase perimeter patrols and inspections of facility. Advise local police agencies that the facility is at a High Condition (Orange) and advise the measures being employed. Consult with local authorities about control of public roads and accesses that might make the facility more vulnerable to terrorist attack if they were to remain open. Erect barriers to control direction of traffic flow and protect the terminal, station or other key area/facility from an attack by a parked or moving vehicle company vehicles may be used for this purpose. Implement centralized parking and shuttle bus service where feasible. Schedule more frequent visits to remote valve sites and other locations that are potentially impacted. Increase the frequency of call-ins from remote locations. Employees should not work alone in remote areas. Cancel or delay all non-vital facility work conducted by contractors, or continuously monitor their work with company personnel as applicable. 14

15 Check all security systems such as lighting and intruder alarms to ensure they are functioning. Install additional, temporary lighting if necessary to adequately light all suspect areas or decrease lighting to detract from the area. Identify the owner of all vehicles parked at key command, control or communications areas or other critical areas/facilities and have all vehicles removed which are not identified. Inspect al vehicles entering key areas/facilities including the vehicle s cargo areas, undercarriage, glove boxes, and other areas where dangerous items could be concealed. Limit access to designated facilities to those personnel who have a legitimate and verifiable need to enter the facility. Implement positive identification of all personnel no exceptions. Evacuate all non-essential personnel. Implement frequent inspection of key areas or facilities including the exterior and roof of all buildings and parking areas. Increase patrolling at night and ensure all vulnerable critical points are fully illuminated and secure. If threat is region specific, alert connecting region(s) of potential need for additional manpower and/or equipment; commanding officers of connecting region(s) Review procedures and make necessary preparations to establish Command Center(s) where applicable; make necessary preparations to dispatch Mobile Command Centers and/or Air Wings in the event of an actual emergency; prepare to initiate an incident command system or similar incident management structure for organizing the response to emergencies. Disable all baggage lockers where applicable. Restrict access to boarding areas to ticketed passengers only. Restrict visitor access to all buildings. Limit access points into the buildings to an absolute minimum. Implement the Restricted Zone around bridges and bridge-tunnels that span navigable waters. Increase state police patrols in and around the bridge-tunnel facilities. Request National Guard assistance in protecting designated facilities. Discuss with appropriate federal/state/local agencies measures to stop all traffic, if necessary. 15

16 Prepare to implement Continuity of Operations Plan. Put Tiger Teams on stand by and check equipment in preparation to relocate assets and personnel. Send status message to agency EOC. Focused response posture, internal and external communications. Activate response plans, sweep vehicles, and increase patrols. Activate Emergency Operations Center and deploy liaisons to outside agencies. Communicate with federal, state, local authorities; Interpol, National Guard, USCG, and US Military as necessary. Restrict access and implement 100% access control to non-public facilities. Increase facilities inspection including remote facilities. Maximum sustainable security operations A state employee must sign in al visitors. The employee wil verify visitor s identification, employer, and reason for visit. If target is an agency asset, the asset is treated as a crime scene. State police are notified and dispatched. Evacuation plans are activated. Notify first respondents of HAZMAT on site. Agency emergency operations center activated. Consider activating the agency emergency operations plan. Contact the Civil Air control to activate aerial monitoring, and monitor bridge openings. Inform other agencies, media, and neighboring jurisdictions that the TMC is at level 4. Consider setting up the Joint Information Center. Complete re-assignment of personnel and equipment. For bridges identified as vulnerable, observe for unusual objects attached to the structure or the presence of unauthorized persons on or around the specific components described below. The following should be done/observed during an Orange Advisory. Trusses and tied arches: The lower chord or tension tie. Arches: The arch base area. Two Column Piers: The columns of bridges supported by two column piers rather than solid shafts. 16

17 Severe Condition (Red) a) Increasing or redirecting personnel to address critical emergency needs; b) Assigning emergency response personnel and pre-positioning and mobilizing specially trained teams or resources; c) Monitoring, redirecting, or constraining transportation systems; and d) Closing public and government facilities. All prior actions plus: Check backup generators, pumps and heating systems. Take action to have these systems useable. Inspect all vehicles entering key areas/facilities where dangerous items could be concealed. Limit access to designated facilities to those personnel who have a legitimate and verifiable need to enter the facility. Implement positive identification of all personnel - no exceptions. Implement emergency and continuity plans as appropriate. Reduce restricted area access points to an operational minimum. Restrict access to major bridges. Inspect critical bridges, including substructures as directed. Augment security forces to ensure absolute control of key command, control or communications centers or areas and other potential target areas. Establish surveillance points and reporting criteria and procedures. Monitor, redirect or constrain highway systems as necessary. Redirect department personnel to address critical emergency needs. Refresh stock of food, water and other supplies to support 24 hour per day response work. Implement provisions of the incident response process Assign incident response personnel and pre-positioning resources to critical locations Monitor, redirect or constrain traffic at critical locations Close or restrict access to facilities that are considered to be at high risk Increase or redirect personnel to address critical emergency needs 17

18 Notify appropriate staff and employees of change in threat condition Implement emergency and continuity plans as appropriate. Reduce restricted area access points to an operational minimum. Augment security forces to ensure absolute control of key command, control or communications centers or areas and other potential target areas. Establish surveillance points and reporting criteria and procedures. Remove unattended, unauthorized vehicles parked within 300 feet of a terminal building or station where passengers load or unload. With law enforcement assistance, identify all vehicles parked at the facility. Detour all traffic away from facility where confirmed threat exists, if appropriate. Evacuate personnel out of facility where confirmed threat exists, if appropriate. Control access to facility with federal/state/local law enforcement assistance. Make frequent checks of the exterior of buildings and of parking areas. Relocate essential personnel and functions to a backup location if the threat is directed at your facility or area. Send status message to agency EOC. Respond to specific threat or event for defined time frame. Personnel management and reassignment. Selectively close facilities. Restrict/redirect transportation assets to reduce vulnerability. Channel passengers and implement maximum screening protocols. Implement plans to assist in evacuations or respond to emergency management requests If target is an agency asset, the asset is treated as a crime scene. State police are notified and dispatched. Evacuation plans are activated. Notify first respondents of HAZMAT on site. Agency assumes support role to law enforcement. Activate agency emergency operations plan. Initiate preparatory actions for possible evacuation of local military facility. 18

19 Inform other agencies, media, and neighboring jurisdictions that the TMC is at level 3. Set up the Joint Information Center. DOT Liaisons report to County EOC and State EOC. Federal agencies assigned to TMC. After rush hours, have cameras monitor critical structures to the extent possible. Inform 24-hour staff/state Patrol of the monitoring protocol if housed in shared facilities. Monitoring should occur on a 24-hour basis. Eliminate parking areas under critical bridges. Remove stalled/abandoned vehicles under bridges immediately. Close parking areas under all bridges if the threat notification is specific to bridges in your area. 19