for official use only guilford county lepc on site security scenario tabletop exercise (ttx) january...

FOR OFFICIAL USE ONLY

Guilford County LEPC

On Site Security Scenario

Tabletop Exercise (TTX)

January 12th, 2012

FOR OFFICIAL USE ONLY2

Agenda

• [09:00]: Registration• [09:10]: Welcome, Introductions, and Exercise Overview• [09:20]: Module 1: Identification and Reporting• [10:00]: Module 2: Response• [10:45]: Module 3: Recovery• [11:30]: Review and Next Steps


Welcome and Introductions

• Name• Company• Daily Role


Administrative

• Phones, pagers, radios• Restrooms• Breaks• Evaluation forms• Additional resources


Purpose

• Provide participants the opportunity to evaluate current response concepts, plans, and capabilities for responding to a localized security event.

• The focus is on key coordination, critical decisions, and integration of external assets.


Scope

• Focus on the role of your company in response to a possible security situation.

• Processes and decision making are more important than details.

• Emphasis is on coordination, integration of capabilities, problem identification, and problem resolution.


Objectives

• Objectives for this exercise are to:– Share policies and procedures with alternate

emergency coordination staff– Pressure test assumptions about local

emergency responder roles and responsibilities– Discuss internal procedures for this and similar

events– Share procedures with the greater responder

community


Confidentiality and Information Sharing• As this is a security based scenario you may

hear about plans from other companies.• Any operational information about other

companies learned here should NOT be shared with others without prior consent!

• If you have information that you do not want shared, be sure discuss only as you deem necessary.


Participants

• Players– Respond to situations based on current plans and

procedures• Observers

– Support players during group discussions; are primarily passive observers

• Facilitators– Provide situational updates and moderate discussions

• Evaluators– Observe and record discussions and decisions


Exercise Structure

• Three modules:– Module 1: Identification and Reporting– Module 2: Response– Module 3: Recovery

• Each comprised of:– Situation updates– Small group discussions of response issues– Facilitated caucus with presentations from each

group


Functional Groups

• Agencies represented in the exercise are:– Industry – Public Safety– Environmental Health– Emergency management– Others


Exercise Guidelines

• This is an open, low-stress, no-fault environment.• Consider different approaches, and suggest

improvements.• Base responses on the current plans and existing

abilities and assets.• Interact with other participants to answer questions.• Do not fight the scenario, learn from the discussion


Assumptions and Artificialities

• The scenario is plausible, and events occur as they are presented.

• There are no hidden agendas or trick questions.• All players receive information at the same time.• Local players should assume that while they are

concentrating on the local response, Federal and State responders are initiating their plans, procedures, and protocols.


Module 1: Identification and Reporting


Current EventsDecember 23rd, 2012 at 9:00am

• It is the week before Christmas and your facility is operating at normal capacity.

• Many administrative staff members have taken time off Christmas vacation.

• Part time employees are being used to fill some full time employees who have also taken off for the week.


Current EventsDecember 23rd, 2012 at 9:00am

• Typical December weather is in place for the week

• High of 35 with a low of 18 forecast for the day• Humidity is at 22%• Winds are variable• 20% chance of wintry mix


Current EventsDecember 23rd, 2012 at 11:45 am

• Most employees are on their lunch break with a few employees left at their normal positions

• A person, John Doe, enters the front gate and makes it through security saying he is meeting his wife for lunch.

• The guard monitoring the cameras notices Doe carrying a black duffle bag but ignores it thinking it might be a Christmas present.

• Doe moves into a position that is out of view of the cameras.


Current EventsDecember 23rd, 2012 at 12:35 pm

• Employees return from lunch to their work locations.• Doe confronts the employees asking where his wife is. • The cameras show Doe’s wife walking toward Doe

yelling something when Doe then pulls out two semi-automatic handguns and fires them at her.

• He then yells “No Witnesses” and fires at surrounding employees.

• Doe then runs off somewhere in the plant.


Caucus Period

• Questions to discuss:– What are your internal procedures based on this

scenario?– Who is notified at your facility?– Do you evacuate areas of the facility or shelter in

place?– How is this information shared with employees?– Who else do you contact?– How do you respond to this event?


Facilitated Discussion

• Questions to discuss:– What are your internal procedures based on this

scenario?– Who is notified at your facility?– Do you evacuate areas of the facility or shelter in

place?– How is this information shared with employees?– Who else do you contact?


Situation Update December 23rd, 2012 at 12:45 pm

• Your internal procedures are enacted• Law enforcement operations are commencing.• Law enforcement is attempting to determine

whether the employees remaining on site are the perpetrator or not.

• Some of your employees have taken shelter in bathrooms and some have left the facility by foot.


Situation Update December 23rd, 2012 at 1:15 pm

• The perpetrator killed himself when confronted by police in the facility parking lot .

• EMS reports three dead (including the perpetrator) and five injured.

• Law enforcement believes he acted alone and has declared the entire area a crime scene.

• Your facility will not be able to re-open for at least 12 hours.


Media December 23rd, 2012 at 1:30 pm

• News agencies, hearing the reports on their scanners, have begun to arrive at your location.

• News 14 finds some of your employees across the street and tries to talk with your employees about what is going on…


Caucus Period

• Do your employees have training on active shooter scenarios?

• Do your notification procedures change now that there are injuries and fatalities?

• What are your procedures for getting employees off site and back to their homes with no vehicles?

• What are your employees trained to do when approached by the media?

• What else would your staff be doing now?



• What is the level of training your employees have on active shooter scenarios?

• Do your notification procedures change at this point?• What are some methods to assist your employees in

getting home without their vehicles?• What are your employees trained to do when

approached by the Media?• What else would your staff be doing now?


Module 3: Recovery


Situation Update December 24th, 2012 at 8:00 am

• Law enforcement states that your facility must remain closed for another 24 hours.

• Today is supposed to be payday for your employees.• Many employees have called their supervisors at home

asking about counseling and pay.• Your plant’s corporate officials have arrived at the plant

staging area.


Caucus Period

• What actions will you take now that your plant will be closed over Christmas day?

• How will you manage payroll?• What are your procedures and resources for

employee counseling?• Will any plant level support will be given to the

families of the victims?• How do you coordinate the ongoing media

process when senior leadership are unavailable?



• What actions will you take now that your plant will be closed over Christmas day?

• How will you manage payroll?• What are your procedures and resources for

employee counseling?• Will any plant level support will be given to the

families of the victims?• How do you coordinate the ongoing media

process?


Next Steps

• After Action Report (AAR)


Closing Comments

for official use only guilford county lepc on site security scenario tabletop exercise (ttx) january...

Documents