MANAGING TERRORIST INCIDENTS AT CULTURAL …...USA, and emergency services & embassy numbers in the UK. The route selected is with British Airways, to Newcastle, via London Heathrow

1

M A N AG I N G T E R R O R I S T I N C I D E N T S AT C U LT U R A L O R H O S P I TA L I T Y

V E N U E S

Sessions 5206 & 5303

Presenters: Andy Davis MSc., CPP, CSyP, FSyI

Robert Carotenuto CPP, PSP, PCI

2

S E S S I O N O B J E C T I V E S :

• Understanding the importance of proactive risk management planning.

• Sharing critical thought processes with peers.

• Consider the wider implications of sending staff overseas.

• Having an enjoyable session!

M A N A G I N G T E R R O R I S T I N C I D E N T S – T A B L E T O P E X E R C I S E

2

3

B R I E F I N G N O T E 1Today is your first day as the Head of Security for CulturalEntertainment LLC. A dynamic, and cash rich company that has beenoperating for 2 years. They have never had anybody employed in asecurity role previously and all security related work used to be sharedbetween the contracted FM company and the COO; who is an excellentevent designer, but not a security expert!

The CEO who recruited you has told you that you can implementeverything needed to bring all aspects of security risk management upto date; as long as it doesn’t impact growth!

Nothing exists at the present time.

You are further briefed that there is an ongoing and rapid internationalexpansion programme underway; primarily in the UK due to Brexit!

3


4

V I D E O 1

• (Insert video)

4


5

TA S K

1. Group 1: What are your immediate organisational priorities?

2. Group 2: What are your immediate thoughts about the COO’s approach to visiting the UK, what would you propose?

5


6

C O N S I D E R AT I O N S – TA S K 1

• Travel Risk Management Policy

• Organisational threat, risk and vulnerability assessments.

• Creation of organisational Security Risk Management Policy

• Creation of security plan and practices/procedures

• Implementation of policies, plans and procedures through education and awareness.

6


7

C O N S I D E R AT I O N 2 – TA S K 2

• Allow to travel?• Risk assess Durham City and the region.• Third party support in-country.• Open source material review.• Flights• Land transportation.• Accommodation.• Outreach to US government officials (RSO, OSAC)

7


8

B R I E F I N G N O T E 2

Although no contract is in place you identify Trident Manor as a preferred supplier of security and intelligence services as they are based in the area and their owner is known and trusted internationally.

You task them with providing you with an on the ground security and intelligence briefing on known or anticipated adversarial risks; and background data on Durham City.

Transport and other logistics will be arranged by the company administration team; once approved by you.

8


9

TA S K S

3. Group 2: What pre-deployment actions are you considering?

4. Group 1: What in-country actions would you want to see implemented as a condition of travel?

9


10


• Assessing the information from Trident Manor.• Risk assessment and discussions with senior

management.• Communications plan/strategy• Routes and transportation types• Service support (in country)• In country itinerary• Emergency procedures/points of contact• Accommodation• Insurance – (in place – new requirement)• Pre-departure briefing

10


11


• Arrival briefing• Available service support (in country) & contact details.• Transportation arrangements• Itinerary for coming days• Emergency procedures• Points of contact• Area familiarization

11


12

B R I E F I N G N OT E 3You brief the COO, Joe and Claire prior to their departure and you provide then with a laminated contact list of numbers, including insurance, medical emergency and CSO 24/7 number in the USA, and emergency services & embassy numbers in the UK.

The route selected is with British Airways, to Newcastle, via London Heathrow (LGA-LHR-NCL).They will be met by members of Trident Manor who will provide land transportation services toand from the airport, and any travel outside Durham City itself. It is not assessed that there isany need for close protection to be provided. The profile of the COO is not such that wouldwarrant it and he would not want it.

The Marriott ‘County’ Hotel in Durham City centre has been chosen as the base for the party and rooms on the second floor, next to the fire exit have been selected.

The party is met at the airport by Andy who enroute to Durham City provides them with a security briefing and gives them each a business card with his and the office 24/7 contact details on it.

The time is 2130 hrs., and all go to their respective hotel rooms, confirming that they will not be leaving that night due to the long journey and being tired.

Andy agrees to meet them at 3 pm the following day to take them for a meeting with council officials and members of the event organisation.

12


13

V I D E O 2

(Insert Video)

13


14

V I D E O 3

(Insert video & audio)

14


15

TA S K S

5. Group 1: If communications are reconnected advice would you give?

6. Group 2: What actions should be instigated by the CSO?

15


16

C O N S I D E R AT I O N – TA S K 5

• Stay calm & breathe.• Lock and barricade the door.• Put phone onto silent.• Ensure phone is charged.• Keep away from the windows/close curtains.• Get any water and food from the fridge.• Move to bathroom.• Keep line of communication open.• Do not open the door until you can confirm it is the police.• Let them know that communications will probably crash.• Provide them with reassurance.

16


17

C O N S I D E R AT I O N – TA S K 6

• If possible provide personal safety and security advice to all team members.

• Activation of Crisis Management Plan• Move to crisis management centre.• Attempt to gain communications with all UK team members.• Inform US Embassy in London. • Monitor open source material/media.• Communication protocols• Communication strategy – press lines.• Record all communications and decisions.• Liaise with Marriott security team if a known point of contact.• Receive live updates from Trident Manor• Have Trident Manor ready to recover, and take to a place of safety

the whole team if hotel is insecure.• Start considering repatriation procedure.

17


18

B R I E F I N G N O T E 4

After 2 hours Andy from Trident Manor telephones you via satphone to say that the police have cordoned the whole of the area surrounding the hotel and access routes into the city centre.

Unofficial police sources are saying that three terrorists are dead; one self exploded and two were shot, one inside the Marriott hotel. A number of fatalities and injuries have been reported; primarily caused by stab wounds.

There was a fire in the Marriott hotel but the extent of it is unknown, it appears to be under control and isolated it is unknown whether there were any injuries caused by the fire, or its effects.

Normal mobile communications are still down and it is unknown when they will resume.

18


19

19


After a further 30 minutes Andy calls to say the team have been seen to be taken from the hotel by armed police, captured by a BBC film crew.

One of the marketing team had lots of blood on her clothes and was visibly upset, but being supported by the other two. The police will not allow anybody to break the cordon.

20

TA S K

6. Group 2: As the CSO what actions do you advise the Senior Management Team to consider now?

7. Group 1: What immediate and long term welfare considerations should the organisation ensure are provided?

20


21


• Repatriation at the earliest and safest opportunity.• Inform insurers for possible UK services.• Inform US Embassy in London of Medical & welfare• Flights• Arrange alternative accommodation in the UK until repatriation. • CEO briefing of family members/next of kin (if details available) • Identify a FLO (Family Liaison Officer).• Agree press lines and controlled communication strategy. • Start to plan for reception and arrival back in country.• Discuss arrangements with US Embassy in London.• Trident Manor to act as UK point of contact during any follow up.

21


22


• Physical and mental trauma needs to be considered.• Counselling services for staff, and families.• Give space; and support.• Don’t rush them back to work.• Understand that different people will be affected in different

ways by the impacts of stress and trauma.• Flexible working arrangements.• Honest and mature discussions about how they feel about

returning to work/timelines.• Consider the welfare of those involved in providing a

response and as members of the crisis management team.• Shared learning and caring.

22


23

23


24

C O N C L U S I O N

• Security and emergency plans should exist, and be tested. • When sending staff overseas always ensure you have a travel risk

management policy in place, & it is understood.• A communications strategy is critical for both internal and

external parties.• Regular training should be provided to CMT and the plan should

be constantly reviewed and updated.• Critical review & lessons learn should form a part of every post

incident analysis.

• Every organisation has the ability to reduce the risks that they face; OR, increase the risks by lack of proactive risk management!

24


25

25


Documents

MANAGING TERRORIST INCIDENTS AT CULTURAL …...USA, and emergency services & embassy numbers in the UK. The route selected is with British Airways, to Newcastle, via London Heathrow