STATE OF GEORGIA THREAT LEVEL DEFINITIONS AND ACTIONS L O W • Ensure that existing security measures and communications equipment are in place and functioning. • Make sure that contact lists, phone numbers, contingency and business continuity plans are current. • Distribute Security awareness bulletins, prepared by GOHS or designee, throughout State agencies. • Report the presence of unknown personnel, unidentified vehicles, vehicles operating out of the ordinary, abandoned parcels or packages, and other suspicious activities. • Assure that all facilities are regularly assessed for vulnerabilities. • Develop procedures for shutting down and evacuating the facility. • Survey surrounding areas to determine activities that might increase potential risks to the facility. G U A R D E D • Maintain close coordination with GOHS, GEMA, and law enforcement to share information. • Require all employees and visitors to display proper ID while on State property. • Review facility operation plans, security plans and procedures including bomb threat, chemical, biological or radiological, evacuation procedures. • Designate employees to make regular sweeps of the facility, looking for suspicious items or activities. • Require each visitor to check in and verify his or her identification. • Be familiar with vendors who service the facility and investigate changes in vendor personnel. • Inspect emergency supplies to ensure equipment is in good working order. E L E V A T E D • Review all appropriate plans with personnel. Review notification/recall lists. • Ensure that vital personnel are informed and on-call. • Prepare specialized units for activation. • Escort all unknown visitors in the facility. • Heighten the mail examination process. • Reduce the number of access points for vehicles and personnel to minimum levels. • Coordinate emergency plans as appropriate with nearby jurisdictions. • Inspect the interior/ exterior of buildings for suspicious items at the beginning and end of each workday and at intervals. • Check all deliveries to facility and loading docks. • Ensure security of vehicles at the facility by locking all vehicles. • Inform GEMA and GOHS Public Information Officer of events as they occur. • Coordinate the release of information with GOHS PIO. H I G H • All employees should remain in close contact with their supervisor for pertinent instructions regarding work activities and scheduling. • Make preparations for changes in tours of duty (extended hours, cancellation of Off days and/or leave). • Put all employees on high alert for suspicious persons, items, or activity and instruct them to report any such findings immediately. • Inspect all mail and packages coming into a facility, but do not open suspicious packages (review the USPS "Suspicious Mail Alert" and the "Bombs by Mail" publications with all personnel involved in receiving mail and packages). • Establish Command Center(s). Prepare to execute contingency procedures. • Implement Emergency Operations Plans and form contingency plans in all agencies, as conditions require. • Keep all personnel responsible for implementing antiterrorist plans on call. • Restrict access to all non- public areas of State facilities to properly identified employees and escorted guests. • Curtail certain functions or close State Facilities at discretion of the Governor or his designee. • Close and lock gates and barriers except those needed for immediate ingress and egress. Inspect perimeter fences regularly. • Consult with local authorities about control of public roads and accesses that make the building more vulnerable. • Move cars and objects (e.g., crates, trash containers) at least 25 meters from buildings (consider centralized parking). • Take additional precautions at public events and consider alternative venues or cancellation. S E V E R E • Release non- essential employees from duty at the discretion of the Governor or designee. • Set all employees on the highest alert for suspicious persons, items or activities. • Increase or redirect personnel to address critical emergency needs. • Assign emergency response personnel and pre-position and mobilize specially trained teams or resources. • Implement emergency and continuity plans as appropriate. • Restrict access and implement positive identification of all personnel; minimize administrative journeys and visits. • Search all suitcases, briefcases, packages, etc. brought into the facility. • Search all vehicles and their contents before allowing entrance to facility. • Cancel or delay all non-vital facility work conducted by contractors, or continuously monitor their work. • Reduce restricted area access points to an operational minimum. • Coordinate the possible closing of public roads and facilities with local authorities. • Coordinate sharing of special information with Governor’s Office/State PIO. State of Georgia General Response to Georgia Office of Homeland Security (GOHS) Threat Conditions In some instances, emergency conditions may be declared based on information gathered by State or Federal intelligence agencies, law enforcement activities or Homeland Security. Conditions involving potential terrorist threats require increased vigilance on the part of State employees, supervisors, and law enforcement/security personnel. In order to ensure a systematic, measured response to emergencies or potential emergency conditions for the protection of State of Georgia citizens, employees and State property, a system of "Threat Conditions" has been established to define levels of risk and appropriate levels of response. Each State department/ agency head can evaluate agency operations and at their discretion establish procedures and responsibilities applicable to each threat level in order to provide for the safety of its employees and the public at large. Purpose: To establish general security procedures and define Threat Condition Levels for the State of Georgia. Policy: The protection of State of Georgia citizens, employees and property is the primary mission of the Georgia Office of Homeland Security. To enhance this mission, Threat Condition definitions and procedures will be used to help determine staffing, deployment and assignment of State and other assets. It will be the responsibility of the Director of Georgia’s Office of Homeland Security to advise the Governor in designating the current Threat Level. Definitions: Threat Condition - Alert level, based upon credible information, regarding the potential of threat against citizens, employees, and property. Threat Condition Levels- Levels of risk posed against State interests on a scale of normal or no known risks to an actual terrorist or large impact criminal event. Threat Condition GREEN: No known threat against State interests exists. Only normal, everyday security precautions are to be in effect. Threat Condition BLUE- A general risk or threat of possible terrorist or large impact criminal activity (riot, civil unrest, major demonstrations, local or national emergency) against State interests exists, though the nature and extent do not warrant actions beyond normal liaison notifications or placing assets or resources on a heightened alert (agencies are operating under normal day-to-day conditions). Threat Condition YELLOW- Intelligence or an articulated threat indicates a potential for a terrorist incident or large-scale criminal act. However, this threat has not yet been assessed as credible. Threat Condition ORANGE- An attack or incident has not taken place on State or Nation, but a threat assessment indicates that the potential threat is credible, and confirms the involvement of a high risk of terrorist attack or large impact criminal action. Threat Condition RED- This is the highest level of threat condition at State. An attack or incident has occurred or is in progress against State and/ or National interests. This requires an immediate process to identify, acquire, and plan the use of State resources to augment state and local authorities in response to limited or major consequences of a terrorist use or employment of Weapons of Mass Destruction (WMD). It is anticipated that actions listed under this threat level will be initiated and sustained for a relatively short period of time, based on guidance from federal and state governments, due to significant personnel and economic considerations. General Security Measures: Each employee must aid in the effort to maintain proper security. To increase the security consciousness of the entire organization, it is important for administrators to share security information with their staffs. The key point is to recognize unusual activity. 1. Familiarize employees with existing security procedures and emergency numbers for appropriate local law enforcement agencies. 2. Familiarize employees with the locations of and activation procedures for emergency and fire alarm systems. 3. Instruct employees that when every small area is secure, the entire facility is secure. All security deficiencies or hazards that are reported will be checked and corrected. 4. All employees are to be alert to strangers loitering or lingering in or around the premises and to suspicious vehicles parked near the building. In such situations, the employee will document a description of any person(s) observed and/or the license plate(s), color and make of the vehicle and any other points that could be significant. Information should be immediately reported to security or supervision. 5. All employees are to be familiar with the facility’s routine operational procedures: deliveries, vendors, frequent visitors, new hires, terminations, and changes in workspace or common areas. 6. Review evacuation procedures included in employee orientation packages periodically. Hold drills periodically. 7. Assign staff members to regularly check specific areas. Close and lock desks and door locks. Note and report inoperable, damaged, or inadequate hardware to the proper supervisor. 8. Appoint, train, and equip a supervisor or mid-management person to function as the building security coordinator. 9. Establish a building-wide alert system to inform all employees in the event of an emergency. 10. Institute a positive identification process and access control system. 11. Establish a mail/ package inspection procedure. 12. Unnecessary information about the facility or fellow employees will not be given out. Report anything questionable to supervisors or security, including: • Threats or harassment • Persons who ask unusual questions or show unnatural interest in the organization or an employee, such as building layout or design, security measures, staffing, or institutional procedures, or anyone tampering with building equipment or fixtures • Any deviation in delivery procedures • Unattended packages 13. Develop and distribute lists to appropriate personnel of names and telephone numbers of management and key personnel to contact in an emergency. Review and update such lists and procedures periodically. 14. Georgia’s Office of Homeland Security (GOHS) will ensure that all steps are taken to successfully mitigate and respond to the incident or attack, and the Georgia Emergency Management Agency (GEMA) will ensure recovery operations are initiated at the earliest opportunity. Procedures and Responsibilities-Elevated Threat Levels: Threat Condition Green Personnel 1. Ensure that personnel receive proper training on the Homeland Security Advisory System and specific pre-planned department or agency protective measures. 2. Develop terrorist and security awareness; provide information and educate employees on security standards and procedures. Caution employees not to talk with outsiders concerning their facility or related issues. 3. Establish contact information for state and local public safety, and public health officials. 4. Distribute security awareness bulletins prepared by GOHS or designee, and upon discretion of the Director of GOHS, distribute throughout the State agencies. 5. Advise all personnel to report the presence of unknown personnel, unidentified vehicles, vehicles operated out of the ordinary, abandoned parcels or packages, and other suspicious activities. Facilities/Equipment 1. Develop a process assuring that all facilities are regularly assessed for vulnerabilities to terrorist attacks and all reasonable measures are taken to mitigate those vulnerabilities. 2. Ensure existing security measures are in place and functioning, such as fencing, locks, camera surveillance, intruder alarms, and lighting. 3. Develop and implement hardware, software, and communications security for computer-based operational systems. 4. Ensure contingency and business continuity plans are current and include a response to terrorist threats. 5. Require all contractors and visitors to check in and out of designated facilities or areas that are considered key command, control, or communications centers. 6. Develop procedures for shutting down and evacuating the facility. Vigilant security measures will be observed for facilities located near critical community assets. 7. Survey surrounding areas to determine activities that may increase security risks for the facility, e.g., airports, government buildings, industrial facilities, pipelines, etc. Threat Condition BLUE- Includes procedures in Threat GREEN plus: Personnel 1. Management will maintain a close local liaison with operational and intelligence units of State law enforcement. 2. Monitory information will be shared with GEMA and the GOHS. 3. Alert all State Agency Communications personnel of heightened alert status. 4. Require all employees and visitors to display proper ID while on State property. 5. Review facility security plans and procedures including bomb threat, chemical, biological or radiological threat, and evacuation procedures. 6. Review personnel details, logistics requirements, and all operations plans including emergency operations plans and business continuity plans that pertain to implementing a change in Threat levels. 7. Remind all personnel, at regular intervals, to be suspicious and inquisitive about strangers, particularly those carrying suitcases or other containers. 8. Be especially alert to repeat visitors or outsiders with no apparent business at the facility that are seeking information about the facility or related issues including personnel. Facilities/Equipment 1. Designate employees to make regular sweeps of the facilities for suspicious items or activities. 2. Watch for unidentified vehicles in or near the facilities. Watch for unusual activity, abandoned parcels, or suitcases. 3. Increase checks of vent and fan rooms, emergency exits, and electrical and control room doors. 4. Inspect perimeter fencing routinely and repair all fence breakdowns. Review all outstanding maintenance and capital project work that might affect security of facilities. 5. Require each visitor to check in at designated facilities or areas that are considered key command control or communications centers, and verify their identification. 6. Be familiar with vendors and investigate changes in vendor personnel. 7. Inspect emergency supplies, and ensure emergency equipment is in good working order. 8. Inspect all CCTV/Video Camera/VCR equipment and intercom systems to ensure equipment is operational. Threat Condition YELLOW-Includes procedures in Threat BLUE plus: Personnel 1. Review with all facility employees the operation plans, personnel safety, security details, and logistics requirements that pertain to implementing increased security levels. Review notification/recall lists. Reinforce awareness of responsibilities with employees. 2. Inform all agency employees with an operational need to know of the specifics of the increased threat. 3. Make staff aware of the general situation in order to prevent unnecessary alarm and stop rumors. 4. Ensure that personnel with access to building plans and area evacuation plans be available at all times. Personnel will be capable of sealing off an area immediately. 5. Keep key personnel on call that are involved in implementing contingency plans. 6. Prepare specialized units for activation. 7. Limit visitor access to key security areas and confirm that the visitor has a need to be there and is expected. All unknown visitors will be escorted. 8. Interface with vendors and contractors to heighten awareness and report suspicious activity. 9. Coordinate emergency plans as appropriate with nearby jurisdictions. 10. Confirm availability of security resources that may assist 24/7 coverage. 11. Examine mail (above the regular examination process) for letter or parcel bombs. 12. GEMA State Operations Center (SOC) may be opened at the discretion of the GEMA Director. Operational Departments may be asked to provide a liaison to the SOC. Facilities/Equipment 1. Reduce the number of access points for vehicles and personnel to minimum levels. Be alert to vehicles parked for an unusual length of time in or near a facility. 2. Periodically spot check vehicles and persons entering facilities. 3. Secure and regularly inspect all interior and exterior buildings and storage areas at frequent intervals. 4. Check designated unmanned and remote sites at more frequent intervals for signs of unauthorized entry, suspicious packages, or unusual activities. 5. Interface with vendors and contractors to heighten awareness and report suspicious activity. 6. Check to ensure all emergency telephone, radio, intercom, television, and satellite communication devices are in place and they are operational. 7. Ensure all personal, company, and contractor vehicles at the facilities are secured by locking the vehicles. Media 1. Monitor national and local events and keep GEMA and GOHS Public Information Officer (PIO) informed of events as they occur. 2. Coordinate the release of information with GOHS PIO. Threat Condition ORANGE- Includes procedures in Threat YELLOW plus: Personnel 1. Instruct all employees to remain in close contact with their supervisor for pertinent instructions regarding work activities and scheduling. 2. Make preparations for possible extended tours of duty, cancellation of off days and or/leave. 3. Prepare to release non-essential employees from duty at the discretion of the Governor or his designee. 4. Curtail or suspend certain services at the discretion of the Governor or his designee. 5. Put all employees on high alert for suspicious persons, items, or activities and instruct them to immediately report any findings to law enforcement or supervision. 6. Inspect all mail and packages coming into the facility. Do not open suspicious packages. Review the US Postal Service’s "Suspicious Mail Alert" and the "Bombs by Mail" publications with all appropriate personnel. 7. Review procedures and make necessary preparations to establish Command Center(s) where applicable. Dispatch Mobile Command Centers in an actual emergency, and initiate an incident command system or similar incident management structure for organizing emergency responses. Prepare to execute contingency procedures, such as moving to an alternate site or dispersing the workforce. 8. Implement Emergency Operations and contingency plans in all agencies, as conditions require. 9. Keep all personnel responsible for implementing contingency plans on call. 10. Restrict access of all non-public areas of State facilities to properly identified employees and escorted guests. 11. Limit access of designated facilities to personnel with a legitimate and verifiable need to enter. Implement positive identification of all personnel with no exceptions. 12. Physically inspect visitors and inspect their suitcases, parcels, and other containers. Facilities/Equipment 1. Curtail certain functions or close State Facilities at the discretion of the Governor or his designee. 2. Close and lock gates and barriers except those needed for immediate ingress and egress. Reduce facility access points to the absolute minimum necessary for continued operation. Restrict threatened facility access to essential personnel only. Inspect perimeter fences on a regular basis. 3. Strictly enforce control of entry. Inspect all vehicles entering key areas/facilities including the vehicle's cargo areas, undercarriage, glove boxes, and other areas where dangerous items might be concealed. 4. Erect barriers and obstacles to control direction of traffic flow and protect key areas from an attack by a parked or moving vehicle. Implement centralized parking and shuttle bus service where feasible. 5. Identify the owner of all vehicles parked at key command, control, or communications areas or other critical areas/facilities and have all unidentified vehicles removed. 6. Move cars and objects (e.g., crates, trash containers) at least 25 meters from buildings—particularly highly populated, mission- related, or high profile buildings. Identify areas where explosive devices could be hidden. 7. Consult with local authorities about control of public roads and accesses that might make the building more vulnerable to terrorist attack if they remain open. Take additional precautions at public events and consider alternative venues or cancellation. 8. Check all security systems routinely to ensure they are functioning properly. Install additional, temporary lighting if necessary. 9. Disable all baggage lockers where applicable. 10. Implement frequent inspection of key areas or facilities including the exterior and roof of all buildings and parking areas. Increase patrolling and ensure all vulnerable critical points are fully illuminated and secure. Threat Condition RED- Includes procedures in Threat ORANGE plus- Personnel 1. Release non-essential employees from duty at the discretion of the Governor or designee. 2. Put all employees on the highest alert for suspicious persons, items or activities and instruct them to immediately report findings to law enforcement/ supervision. 3. Instruct all employees to remain in close contact with their supervision for pertinent instructions regarding work activities and scheduling. 4. Increase or redirect personnel to address critical emergency needs. 5. Assign emergency response personnel, and pre-position and mobilize specially trained teams or resources. 6. Implement emergency and continuity plans as appropriate. 7. Restrict access and implement positive identification of all personnel. 8. Minimize all administrative journeys and visits. 9. Search all suitcases, briefcases, packages, etc., brought into the facility. 10. Recognize that an incident of this type will affect the duty performance of employees and prepare to handle signs of fear, anxiety, and apprehension with compassion and discretion. Utilize professionals to assist as needed. Management must ensure that business continuity measures are being adequately employed. Facilities/Equipment 1. Curtail services and close facilities at the discretion of the Governor. 2. Reduce restricted area access points to an operational minimum. 3. Search all vehicles and their contents before allowing entrance to facilities. 4. Check building exteriors and parking areas frequently. 5. Cancel or delay all non-vital facility work conducted by contractors, or monitor their work continuously with facility personnel. 6. Coordinate the possible closing of public roads and facilities with local authorities. Media 1. Coordinate the release of information with Governor’s Office/ State PIO. |