STATE OF GEORGIA
THREAT LEVEL DEFINITIONS AND ACTIONS
L O W
• Ensure that existing security measures and communications equipment are in place and functioning.
• Make sure that contact lists, phone numbers, contingency and business continuity plans are current.
• Distribute Security awareness bulletins, prepared by GOHS or designee, throughout State agencies.
• Report the presence of unknown personnel, unidentified vehicles, vehicles operating out of the ordinary, abandoned
parcels or packages, and other suspicious activities.
• Assure that all facilities are regularly assessed for vulnerabilities.
• Develop procedures for shutting down and evacuating the facility.
• Survey surrounding areas to determine activities that might increase potential risks to the facility.
G U A R D E D
• Maintain close coordination with GOHS, GEMA, and law enforcement to share information.
• Require all employees and visitors to display proper ID while on State property.
• Review facility operation plans, security plans and procedures including bomb threat, chemical, biological
or radiological, evacuation procedures.
• Designate employees to make regular sweeps of the facility, looking for suspicious items or activities.
• Require each visitor to check in and verify his or her identification.
• Be familiar with vendors who service the facility and investigate changes in vendor personnel.
• Inspect emergency supplies to ensure equipment is in good working order.
E L E V A T E D
• Review all appropriate plans with personnel. Review notification/recall lists.
• Ensure that vital personnel are informed and on-call.
• Prepare specialized units for activation.
• Escort all unknown visitors in the facility.
• Heighten the mail examination process.
• Reduce the number of access points for vehicles and personnel to minimum levels.
• Coordinate emergency plans as appropriate with nearby jurisdictions.
• Inspect the interior/ exterior of buildings for suspicious items at the beginning and end of each workday and at intervals.
• Check all deliveries to facility and loading docks.
• Ensure security of vehicles at the facility by locking all vehicles.
• Inform GEMA and GOHS Public Information Officer of events as they occur.
• Coordinate the release of information with GOHS PIO.
H I G H
• All employees should remain in close contact with their supervisor for pertinent instructions regarding work activities and scheduling.
• Make preparations for changes in tours of duty (extended hours, cancellation of Off days and/or leave).
• Put all employees on high alert for suspicious persons, items, or activity and instruct them to report any such findings immediately.
• Inspect all mail and packages coming into a facility, but do not open suspicious packages (review the USPS "Suspicious Mail Alert"
and the "Bombs by Mail" publications with all personnel involved in receiving mail and packages).
• Establish Command Center(s). Prepare to execute contingency procedures.
• Implement Emergency Operations Plans and form contingency plans in all agencies, as conditions require.
• Keep all personnel responsible for implementing antiterrorist plans on call.
• Restrict access to all non- public areas of State facilities to properly identified employees and escorted guests.
• Curtail certain functions or close State Facilities at discretion of the Governor or his designee.
• Close and lock gates and barriers except those needed for immediate ingress and egress. Inspect perimeter fences regularly.
• Consult with local authorities about control of public roads and accesses that make the building more vulnerable.
• Move cars and objects (e.g., crates, trash containers) at least 25 meters from buildings (consider centralized parking).
• Take additional precautions at public events and consider alternative venues or cancellation.
S E V E R E
• Release non- essential employees from duty at the discretion of the Governor or designee.
• Set all employees on the highest alert for suspicious persons, items or activities.
• Increase or redirect personnel to address critical emergency needs.
• Assign emergency response personnel and pre-position and mobilize specially trained teams or resources.
• Implement emergency and continuity plans as appropriate.
• Restrict access and implement positive identification of all personnel; minimize administrative journeys and visits.
• Search all suitcases, briefcases, packages, etc. brought into the facility.
• Search all vehicles and their contents before allowing entrance to facility.
• Cancel or delay all non-vital facility work conducted by contractors, or continuously monitor their work.
• Reduce restricted area access points to an operational minimum.
• Coordinate the possible closing of public roads and facilities with local authorities.
• Coordinate sharing of special information with Governor’s Office/State PIO.
State of Georgia
General Response to Georgia Office of Homeland Security (GOHS)
Threat Conditions
In some instances, emergency conditions may be declared based on information
gathered by State or Federal intelligence agencies, law enforcement activities or
Homeland Security. Conditions involving potential terrorist threats require increased
vigilance on the part of State employees, supervisors, and law enforcement/security
personnel.
In order to ensure a systematic, measured response to emergencies or potential
emergency conditions for the protection of State of Georgia citizens, employees and
State property, a system of "Threat Conditions" has been established to define levels of
risk and appropriate levels of response. Each State department/ agency head can
evaluate agency operations and at their discretion establish procedures and
responsibilities applicable to each threat level in order to provide for the safety of its
employees and the public at large.
Purpose:
To establish general security procedures and define Threat Condition Levels for the State
of Georgia.
Policy:
The protection of State of Georgia citizens, employees and property is the primary
mission of the Georgia Office of Homeland Security. To enhance this mission, Threat
Condition definitions and procedures will be used to help determine staffing, deployment
and assignment of State and other assets. It will be the responsibility of the Director of
Georgia’s Office of Homeland Security to advise the Governor in designating the current
Threat Level.
Definitions:
Threat Condition- Alert level, based upon credible information, regarding the potential
of threat against citizens, employees, and property.
Threat Condition Levels- Levels of risk posed against State interests on a scale of
normal or no known risks to an actual terrorist or large impact criminal event.
Threat Condition GREEN: No known threat against State interests exists. Only normal,
everyday security precautions are to be in effect.
Threat Condition BLUE- A general risk or threat of possible terrorist or large impact
criminal activity (riot, civil unrest, major demonstrations, local or national emergency)
against State interests exists, though the nature and extent do not warrant actions
beyond normal liaison notifications or placing assets or resources on a heightened alert
(agencies are operating under normal day-to-day conditions).
Threat Condition YELLOW- Intelligence or an articulated threat indicates a potential
for a terrorist incident or large-scale criminal act. However, this threat has not yet been
assessed as credible.
Threat Condition ORANGE- An attack or incident has not taken place on State or
Nation, but a threat assessment indicates that the potential threat is credible, and
confirms the involvement of a high risk of terrorist attack or large impact criminal action.
Threat Condition RED- This is the highest level of threat condition at State. An attack
or incident has occurred or is in progress against State and/ or National interests. This
requires an immediate process to identify, acquire, and plan the use of State resources
to augment state and local authorities in response to limited or major consequences of a
terrorist use or employment of Weapons of Mass Destruction (WMD).
It is anticipated that actions listed under this threat level will be initiated and sustained
for a relatively short period of time, based on guidance from federal and state
governments, due to significant personnel and economic considerations.
General Security Measures:
Each employee must aid in the effort to maintain proper security. To increase the
security consciousness of the entire organization, it is important for administrators to
share security information with their staffs. The key point is to recognize unusual
activity.
1. Familiarize employees with existing security procedures and emergency numbers for
appropriate local law enforcement agencies.
2. Familiarize employees with the locations of and activation procedures for emergency
and fire alarm systems.
3. Instruct employees that when every small area is secure, the entire facility is secure.
All security deficiencies or hazards that are reported will be checked and corrected.
4. All employees are to be alert to strangers loitering or lingering in or around the
premises and to suspicious vehicles parked near the building. In such situations, the
employee will document a description of any person(s) observed and/or the license
plate(s), color and make of the vehicle and any other points that could be significant.
Information should be immediately reported to security or supervision.
5. All employees are to be familiar with the facility’s routine operational procedures:
deliveries, vendors, frequent visitors, new hires, terminations, and changes in
workspace or common areas.
6. Review evacuation procedures included in employee orientation packages
periodically. Hold drills periodically.
7. Assign staff members to regularly check specific areas. Close and lock desks and
door locks. Note and report inoperable, damaged, or inadequate hardware to the
proper supervisor.
8. Appoint, train, and equip a supervisor or mid-management person to function as the
building security coordinator.
9. Establish a building-wide alert system to inform all employees in the event of an
emergency.
10. Institute a positive identification process and access control system.
11. Establish a mail/ package inspection procedure.
12. Unnecessary information about the facility or fellow employees will not be given out.
Report anything questionable to supervisors or security, including:
• Threats or harassment
• Persons who ask unusual questions or show unnatural interest in the
organization or an employee, such as building layout or design, security measures,
staffing, or institutional procedures, or anyone tampering with building equipment
or fixtures
• Any deviation in delivery procedures
• Unattended packages
13. Develop and distribute lists to appropriate personnel of names and telephone
numbers of management and key personnel to contact in an emergency. Review
and update such lists and procedures periodically.
14. Georgia’s Office of Homeland Security (GOHS) will ensure that all steps are taken to
successfully mitigate and respond to the incident or attack, and the Georgia
Emergency Management Agency (GEMA) will ensure recovery operations are
initiated at the earliest opportunity.
Procedures and Responsibilities-Elevated Threat Levels:
Threat Condition Green
Personnel
1. Ensure that personnel receive proper training on the Homeland Security Advisory
System and specific pre-planned department or agency protective measures.
2. Develop terrorist and security awareness; provide information and educate
employees on security standards and procedures. Caution employees not to talk
with outsiders concerning their facility or related issues.
3. Establish contact information for state and local public safety, and public health
officials.
4. Distribute security awareness bulletins prepared by GOHS or designee, and
upon discretion of the Director of GOHS, distribute throughout the State
agencies.
5. Advise all personnel to report the presence of unknown personnel, unidentified
vehicles, vehicles operated out of the ordinary, abandoned parcels or packages,
and other suspicious activities.
Facilities/Equipment
1. Develop a process assuring that all facilities are regularly assessed for
vulnerabilities to terrorist attacks and all reasonable measures are taken to
mitigate those vulnerabilities.
2. Ensure existing security measures are in place and functioning, such as fencing,
locks, camera surveillance, intruder alarms, and lighting.
3. Develop and implement hardware, software, and communications security for
computer-based operational systems.
4. Ensure contingency and business continuity plans are current and include a
response to terrorist threats.
5. Require all contractors and visitors to check in and out of designated facilities or
areas that are considered key command, control, or communications centers.
6. Develop procedures for shutting down and evacuating the facility. Vigilant
security measures will be observed for facilities located near critical community
assets.
7. Survey surrounding areas to determine activities that may increase security risks
for the facility, e.g., airports, government buildings, industrial facilities, pipelines,
etc.
Threat Condition BLUE- Includes procedures in Threat GREEN plus:
Personnel
1. Management will maintain a close local liaison with operational and intelligence
units of State law enforcement.
2. Monitory information will be shared with GEMA and the GOHS.
3. Alert all State Agency Communications personnel of heightened alert status.
4. Require all employees and visitors to display proper ID while on State property.
5. Review facility security plans and procedures including bomb threat, chemical,
biological or radiological threat, and evacuation procedures.
6. Review personnel details, logistics requirements, and all operations plans
including emergency operations plans and business continuity plans that pertain
to implementing a change in Threat levels.
7. Remind all personnel, at regular intervals, to be suspicious and inquisitive about
strangers, particularly those carrying suitcases or other containers.
8. Be especially alert to repeat visitors or outsiders with no apparent business at the
facility that are seeking information about the facility or related issues including
personnel.
Facilities/Equipment
1. Designate employees to make regular sweeps of the facilities for suspicious
items or activities.
2. Watch for unidentified vehicles in or near the facilities. Watch for unusual
activity, abandoned parcels, or suitcases.
3. Increase checks of vent and fan rooms, emergency exits, and electrical and
control room doors.
4. Inspect perimeter fencing routinely and repair all fence breakdowns. Review all
outstanding maintenance and capital project work that might affect security of
facilities.
5. Require each visitor to check in at designated facilities or areas that are
considered key command control or communications centers, and verify their
identification.
6. Be familiar with vendors and investigate changes in vendor personnel.
7. Inspect emergency supplies, and ensure emergency equipment is in good
working order.
8. Inspect all CCTV/Video Camera/VCR equipment and intercom systems to
ensure equipment is operational.
Threat Condition YELLOW-Includes procedures in Threat BLUE plus:
Personnel
1. Review with all facility employees the operation plans, personnel safety, security
details, and logistics requirements that pertain to implementing increased security
levels. Review notification/recall lists. Reinforce awareness of responsibilities with
employees.
2. Inform all agency employees with an operational need to know of the specifics of
the increased threat.
3. Make staff aware of the general situation in order to prevent unnecessary alarm
and stop rumors.
4. Ensure that personnel with access to building plans and area evacuation plans be
available at all times. Personnel will be capable of sealing off an area immediately.
5. Keep key personnel on call that are involved in implementing contingency plans.
6. Prepare specialized units for activation.
7. Limit visitor access to key security areas and confirm that the visitor has a need to
be there and is expected. All unknown visitors will be escorted.
8. Interface with vendors and contractors to heighten awareness and report
suspicious activity.
9. Coordinate emergency plans as appropriate with nearby jurisdictions.
10. Confirm availability of security resources that may assist 24/7 coverage.
11. Examine mail (above the regular examination process) for letter or parcel bombs.
12. GEMA State Operations Center (SOC) may be opened at the discretion of the
GEMA Director. Operational Departments may be asked to provide a liaison to the
SOC.
Facilities/Equipment
1. Reduce the number of access points for vehicles and personnel to minimum
levels. Be alert to vehicles parked for an unusual length of time in or near a
facility.
2. Periodically spot check vehicles and persons entering facilities.
3. Secure and regularly inspect all interior and exterior buildings and storage areas
at frequent intervals.
4. Check designated unmanned and remote sites at more frequent intervals for
signs of unauthorized entry, suspicious packages, or unusual activities.
5. Interface with vendors and contractors to heighten awareness and report
suspicious activity.
6. Check to ensure all emergency telephone, radio, intercom, television, and
satellite communication devices are in place and they are operational.
7. Ensure all personal, company, and contractor vehicles at the facilities are
secured by locking the vehicles.
Media
1. Monitor national and local events and keep GEMA and GOHS Public Information
Officer (PIO) informed of events as they occur.
2. Coordinate the release of information with GOHS PIO.
Threat Condition ORANGE- Includes procedures in Threat YELLOW plus:
Personnel
1. Instruct all employees to remain in close contact with their supervisor for
pertinent instructions regarding work activities and scheduling.
2. Make preparations for possible extended tours of duty, cancellation of off days
and or/leave.
3. Prepare to release non-essential employees from duty at the discretion of the
Governor or his designee.
4. Curtail or suspend certain services at the discretion of the Governor or his
designee.
5. Put all employees on high alert for suspicious persons, items, or activities and
instruct them to immediately report any findings to law enforcement or
supervision.
6. Inspect all mail and packages coming into the facility. Do not open suspicious
packages. Review the US Postal Service’s "Suspicious Mail Alert" and the
"Bombs by Mail" publications with all appropriate personnel.
7. Review procedures and make necessary preparations to establish Command
Center(s) where applicable. Dispatch Mobile Command Centers in an actual
emergency, and initiate an incident command system or similar incident
management structure for organizing emergency responses. Prepare to execute
contingency procedures, such as moving to an alternate site or dispersing the
workforce.
8. Implement Emergency Operations and contingency plans in all agencies, as
conditions require.
9. Keep all personnel responsible for implementing contingency plans on call.
10. Restrict access of all non-public areas of State facilities to properly identified
employees and escorted guests.
11. Limit access of designated facilities to personnel with a legitimate and verifiable
need to enter. Implement positive identification of all personnel with no
exceptions.
12. Physically inspect visitors and inspect their suitcases, parcels, and other
containers.
Facilities/Equipment
1. Curtail certain functions or close State Facilities at the discretion of the Governor
or his designee.
2. Close and lock gates and barriers except those needed for immediate ingress
and egress. Reduce facility access points to the absolute minimum necessary for
continued operation. Restrict threatened facility access to essential personnel
only. Inspect perimeter fences on a regular basis.
3. Strictly enforce control of entry. Inspect all vehicles entering key areas/facilities
including the vehicle's cargo areas, undercarriage, glove boxes, and other areas
where dangerous items might be concealed.
4. Erect barriers and obstacles to control direction of traffic flow and protect key
areas from an attack by a parked or moving vehicle. Implement centralized
parking and shuttle bus service where feasible.
5. Identify the owner of all vehicles parked at key command, control, or
communications areas or other critical areas/facilities and have all unidentified
vehicles removed.
6. Move cars and objects (e.g., crates, trash containers) at least 25 meters from
buildings—particularly highly populated, mission- related, or high profile
buildings. Identify areas where explosive devices could be hidden.
7. Consult with local authorities about control of public roads and accesses that
might make the building more vulnerable to terrorist attack if they remain open.
Take additional precautions at public events and consider alternative venues or
cancellation.
8. Check all security systems routinely to ensure they are functioning properly.
Install additional, temporary lighting if necessary.
9. Disable all baggage lockers where applicable.
10. Implement frequent inspection of key areas or facilities including the exterior and
roof of all buildings and parking areas. Increase patrolling and ensure all
vulnerable critical points are fully illuminated and secure.
Threat Condition RED- Includes procedures in Threat ORANGE plus-
Personnel
1. Release non-essential employees from duty at the discretion of the Governor or
designee.
2. Put all employees on the highest alert for suspicious persons, items or activities
and instruct them to immediately report findings to law enforcement/ supervision.
3. Instruct all employees to remain in close contact with their supervision for
pertinent instructions regarding work activities and scheduling.
4. Increase or redirect personnel to address critical emergency needs.
5. Assign emergency response personnel, and pre-position and mobilize specially
trained teams or resources.
6. Implement emergency and continuity plans as appropriate.
7. Restrict access and implement positive identification of all personnel.
8. Minimize all administrative journeys and visits.
9. Search all suitcases, briefcases, packages, etc., brought into the facility.
10. Recognize that an incident of this type will affect the duty performance of
employees and prepare to handle signs of fear, anxiety, and apprehension with
compassion and discretion. Utilize professionals to assist as needed.
Management must ensure that business continuity measures are being
adequately employed.
Facilities/Equipment
1. Curtail services and close facilities at the discretion of the Governor.
2. Reduce restricted area access points to an operational minimum.
3. Search all vehicles and their contents before allowing entrance to facilities.
4. Check building exteriors and parking areas frequently.
5. Cancel or delay all non-vital facility work conducted by contractors, or monitor
their work continuously with facility personnel.
6. Coordinate the possible closing of public roads and facilities with local
authorities.
Media
1. Coordinate the release of information with Governor’s Office/ State PIO.
|