Security Incident Management For Transit Supervisors

1. Security Incident Management For Transit Supervisors US Department of Transportation Federal Transit Administration

2. Course Goal • Define your duties in managing a security incident • Identify the four phases of an incident • Describe the elements of IED and CBR incident management • Demonstrate the ability to apply the principles of managing a security incident

3. Course Outline • Review System Security Awareness course • Threat assessment exercise • What are your duties in managing a security incident? • What are the four phases of an incident? • What are the elements of IED and CBR incident management? • Threat response and incident management exercises

4. Security Awareness Course Review • What is the real threat? • Where do you fit in? • What do you look for? • What about Anthrax and other suspicious substances? • What is your top priority?

5. What Is The Real Threat? • There is a wide variety of motivations, backgrounds and types of terrorists • Improvised Explosive Devices (IED) are the most common based upon history • Chemical, Biological and Radiological (CBR) agent dispersal is possible

6. Where Do You Fit In? • Roles and responsibilities • Eyes and ears philosophy • Neighborhood Watch concept • Practice good housekeeping • Routinely perform security sweeps

7. What Do You Look For? • Suspicious people • Suspicious activities • Suspicious packages • Suspicious devices • Suspicious substances

8. What About Anthrax…? • Chemical attacks become visible through immediate symptoms in multiple victims • Biological agents are hard to detect - will not show up through symptoms for hours or days • Radiological agents are also difficult to detect but monitoring can verify their presence if a threat or device is involved

9. What is Your Top Priority? Life Safety # 1 2 # Incident Stabilization 3 # Property Conservation

10. Exercise #1Threat Assessment

11. What are Your Duties in Managing a Security Incident?

12. Objectives • Define the roles and responsibilities of a supervisor • List the six steps in the communication process • Name three kinds of information to be gathered and analyzed • Describe the decision-making process • Explain how to implement a plan • Explain why evaluation is important

13. Roles • Support the goals and mission of the agency • Manage people, not things or activities • Provide a positive role model • Support front-line employees • Instruct, coach and mentor

14. Responsibilities • Know your job • Know your people • Communicate • Keep people informed • Listen to feedback and information • Take action, take responsibility • Assign tasks • Enforce rules and procedures

15. Incident Management Duties • Communication • Information gathering and analysis • Decision-making • Plan implementation • Evaluation

16. The Communications Model TRANSFER THROUGH MEDIUM RECEIVE SEND FORMULATE INTERPRET FEEDBACK/CONFIRM A Six Step Process

17. Information gathering and analysis • Pre-incident information • What you have been told prior to the incident • Empirical or perceptual information • What someone else observes • What you actually observe • Cognitive information • What you have learned in training • What you have learned from experience

18. Decision-making • Problem identification and assessment • Hazard identification • Risk determination • Developing a plan

19. Decision-making • Hazard identification • Credible threat • Improvised explosive or agent dispersal device • Agent release • Explosion

20. Decision-making • Risk determination • Number of potential victims • Asset criticality • Adjoining asset criticality • Extent of exposure area

21. Decision-making • Developing a plan • Based upon the problem identification and assessment, develop a plan using “Strategy and Tactics” • Strategy - The overall goal or desired outcome you are trying to achieve • Tactics - The specific objectives or tasks that will be used to achieve the goal

22. Implementation • Putting the plan or tactics into motion • Instruct subordinates • Communicate • Delegate • Make notifications • Request support/resources • Activate contingency plans

23. Evaluation • Continually monitor the incident and the effectiveness of the tactics • Coordination of operation • Safety and expediency of activity • Availability and responsiveness of resources • Activation of service contingency plans • Modify activity and tactics accordingly

24. Summary • Defined the roles and responsibilities of a supervisor • Listed the six steps in the communication process • Named three kinds of information to be gathered and analyzed • Described the decision-making process • Explained how to implement a plan • Explained why evaluation is important

25. What are the four phases of an incident?

26. Objectives • Identify the four phases of an incident • Determine when each phase begins and ends • Specify the focus of each phase

27. Incident Phases Notification Phase Restoration Phase Incident recognized Response Phase Scene control begins Recovery Phase Last ambulatory victim removed Contamination survey completed Operations Level Actions

28. The Notification Phase • Focuses on information gathering and reporting • Includes requests for help and resources • Begins with recognition that an incident has (or is about to) occur • Ends with the initiation of site control procedures

29. The Response Phase • Focuses saving lives and minimizing injury • Begins with site control procedures • Ends with removal of ambulatory victims from the hazard area

30. The Recovery Phase • Focuses on re-establishing essential services and operations • Begins when the scene is stabilized and the last living victim is transported to a medical facility • Ends with completion of a complete contamination survey

31. The Restoration Phase • Focuses on preparing for a return to revenue service • Begins with completion of the survey • Ends with complete hazard remediation

32. Summary • Identified the four phases of an incident • Determined when each phase begins and ends • Specified the focus of each phase

33. What are the Elements of IED and CBR Incident Management?

34. Objectives • Describe how to respond to a scene • Describe what must be done once at the scene • Explain the emergency response activities at IED and CBR incidents • Describe the requirements and constraints for security incident management

35. Responding To The Scene • Remain calm • Drive defensively • Approach from an uphill and upwind direction • Note people and vehicles leaving the area • Note existing potentially dangerous conditions • Do not block access and egress routes • Be alert to changes in people and the weather • Be aware of secondary devices

36. Scene Management • Know the condition and location of all your subordinates on scene • Maintain contact with dispatch or control center • Monitor and evaluate the effectiveness of your tactics • Identify yourself to emergency responders • Communicate with the Incident Commander • Support emergency response activities

37. Emergency Response Activity IED scene management and mitigation • Evacuation - removal of ALL people and their personal possessions • Scene isolation and security • Establish “Safe” zones • Area search • Device removal/neutralization* *WILL ONLY BE DONE BY HIGHLY TRAINED AND EQUIPPED PROFESSIONALS

38. Emergency Response Activity Chemical release scene management • Identify agent through monitoring • Establish hot, warm and cold zones • Confine, contain and control the release • Isolate, decontaminate, triage, treat and transport victims • Decontaminate the scene • Preserve evidence

39. Emergency Response Activity Biological release scene management • There is NO scene unless a threat and dispersal are identified • NO immediate symptoms • Limited field detection • Record, monitor and treat those who were potentially exposed • Minimize spread of contamination

40. Emergency Response Activity Radiological release scene management • Cannot be detected through senses • Suspected release can be verified through monitoring and detection • Determine exposure and contamination • Contain the radioactive material • Decontaminate victims and the scene

41. CBR Agent Exposure Protection 12 Source 9 3 Distance Clothing Vehicle 6 Time Shelter in Place Shielding

42. Incident Management Requirements • Safety oriented • Decisive • Proactive • Adaptable and flexible • Realistic about personal and agency limitations • Apply what you know from training and experience • Calm • Objective • Quick thinking

43. Incident Management Constraints • Decisions and actions need to be made in a timely manner • Limited resources upon arrival • Minimal information • A demanding and highly stressful environment

44. Summary • Described how to respond to a scene • Described what must be done once at the scene • Explained the emergency response activities at IED and CBR incidents • Described the requirements and constraints for security incident management

45. What Does This Mean To You? Every incident needs to be managed: • If not you - then who? • If no one - then what?

46. Course Summary • Defined your roles and responsibilities as a supervisor • Defined and describe your duties in managing a security incident • Identified the four phases of an incident • Described the elements of IED and CBR incident management • NOW - Demonstrate the ability to apply the principles of managing a security incident

47. Exercise #2 - Responding to a ThreatExercise #3 - Incident Management