Foundations of Targeted Violence Prevention eLearning - Foundations of Violence Prevention

Download Transcript

The nationwide coordination of suspicious activity reporting, or SAR is managed through the nationwide suspicious activity reporting initiative also known as the NSI. The NSI is a collaborative partnership among state, local, tribal, territorial, and federal law enforcement and homeland security organizations to share terrorism-related SAR information on a national level. Your state and local law enforcement, and homeland security agencies, including fusion centers, have established SAR collection and reporting processes that allow them to submit terrorism-related SARS known as ISE SARs to the NSI. The NSI provides law enforcement with another tool to connect the dots to combat crime and terrorism. Connecting the dots has been made possible by the establishment of the SAR process. This process provides law enforcement at all levels with a uniform way to gather, document, process, analyze, and share SARS. The NSI has established a standardized approach to sharing and analyzing information with the goals of detecting and preventing criminal activity including information associated with domestic and international terrorism while emphasizing the critical importance of protecting citizens privacy, civil rights, and civil liberties. Even as we improve our information sharing we must remain vigilant as threats are constantly evolving.

Introduction/Why SAR? During this training we hope to: increase your awareness of the nationwide suspicious activity reporting initiative, enhance your understanding of suspicious activity, clarify your role in reporting suspicious activity, what and how to report behavior in events that may signal the planning of a terrorist attack, emphasize the foundational role of protecting privacy, civil rights, and civil liberties as part of reporting suspicious activity, and highlight your role as a critical partner in hometown and homeland security.

Meeting Post-9/11 Community Needs. The terrorist attacks on September 11th, 2001, have changed our world forever. since 9/11, terrorist organizations have continued to plan and execute terrorist attacks in our country, and throughout the world. The public must work together along with government, all of our first responders, the private sector, and public safety officials to prevent terrorist acts before they occur. In today's challenging environment where those that threaten our safety may come from halfway around the world or just around the block, you have an important role in helping to keep your community safe. Several important information sharing lessons have been realized as a result of national tragedies such as the bombing of the Murrah Federal Building in Oklahoma City on April 19th, 1995, and the suicide attacks of the Twin Towers on September 11th, 2001, in New York City- most notably that reports of possible terrorism indicators were not shared or analyzed in a way to help connect the dots and prevent these horrible events from unfolding. Since 9/11 most states and many major metropolitan areas have developed fusion centers to ensure that terrorism and other related criminal information gets analyzed and forwarded to the right place for follow-up investigation. A fusion center is a collaborative effort of two or more agencies that provide resources, expertise, and information to the center with the goal of maximizing their ability to detect, prevent, investigate, and respond to criminal and terrorist activity. In support of fusion centers several vital public safety information-sharing initiatives have developed, including the NSI. A better understanding of suspicious activity by first observers, who are individuals that have the opportunity to witness these behaviors, can play a crucial role in helping to ensure that communities remain safe from these attacks. As a member of the public or private sector you have the opportunity to observe situations that may provide valuable insight for law enforcement agencies investigating cases with a potential terrorism connection. No matter what your profession, your reporting of suspicious activity is critical to hometown and homeland security. You are a valuable member of the SAR community, and you could be the key to successfully preventing future terrorist attacks on our nation.

What is suspicious activity? What is considered suspicious activity? One of the key lessons learned from September 11th and other terrorist attacks around the world is that events that may seem unrelated may actually be part of a larger terrorist plot. Like other criminals, terrorists engage in precursor actions to carry out their plots for destruction. They make plans, acquire materials, engage in information collection, and often commit other criminal activities in support of their plans. These actions involve activities or behaviors that may be: suspicious, indicators of what may lie ahead, or possible pieces to a larger puzzle. Suspicious activity is defined as observed behavior reasonably indicative of pre-operational planning associated with terrorism or other criminal activity. Simply stated, these are actions that could be a signal of future crime, including terrorist acts. To help understand what types of actions could be potentially related to terrorism, previous terrorism events have been reviewed and analyzed for commonalities. The result is a set of indicators and behaviors that were present in previous terrorist events. Although these behaviors do not necessarily mean that someone is definitely engaged in a criminal or terrorist activity, they do provide justification for further analysis and they should be reported. When you think about suspicious activity, the key is NOT to focus on WHO - race, ethnicity, national origin, or religious beliefs - of those we think might be involved in suspicious activities, but rather to focus on identifying their behaviors. These activities are suspicious based upon: what - the observable behaviors, where - the location of specific activities, when - the timelines of events, and how - the tools and methods. Information you observe may be a precursor to criminal activity, including terrorism. Sharing suspicious activity information plays a critical role in public safety and has solved crimes, saved lives when linked together, and helped prevent terrorist attacks.

Types of suspicious activity. You are encouraged to report suspicious behavior that is reasonably indicative of pre-operational planning associated with terrorism, or other criminal activity. The following are examples of suspicious behavior that should be reported when observed. Breach or attempted intrusion of a restricted area, a secured protected site, or a non-public area by unauthorized persons, such as impersonating authorized personnel to access government buildings, military installations, or other protected critical infrastructure or key resources. Misrepresentation through presentation of false insignias, documents, or identification to cover possible illegal activity, such as stolen or counterfeit identification, or use of a stolen uniform. Theft, loss, or diversion of materials associated with a facility, or a secured protected site, such as stolen badges, uniforms, emergency vehicles, or technology that are proprietary to a facility, or a secured protected site. Sabotage, tampering, or vandalism of a facility or protected site, such as arson, or damage committed at a research or industrial facility. Cyber attacks to compromise or attempt to compromise, or disrupt an organization's information technology infrastructure, such as denial of service attacks on government and corporate targets, and tracking software on group websites. The communication of a spoken, written, expressed, or implied threat to commit a crime that will result in death or bodily injury to another person, a facility or a secured protected site. Aviation activity or operation of an aircraft manned or unmanned, such as an unmanned aerial vehicle or drone in a manner that poses a threat to people or property and that would arouse suspicion of terrorism or other criminality in a reasonable person. Such activity may or may not be a violation of federal aviation regulations. Examples may include requests for pilot training that are inconsistent with normal flight training procedures, or flying in restricted areas near military or government facilities, or entertainment venues. These suspicious activities are crimes. If you observe these activities call 911 immediately. Other potential criminal or non criminal activities, some of which may be constitutionally protected, may be considered suspicious activity if they arouse suspicion of terrorism or other criminality in a reasonable person. These activities include eliciting information, or questioning individuals at a level beyond curiosity about an event or particular facets of a facilities, or a building's purpose, operations, or security, such as attempts to obtain specific information about personnel or occupants, equipment, or training related to the security of a facility. Testing or probing of security through deliberate interactions with, or challenges to installations, personnel, or systems that reveal physical, personnel, or cybersecurity capabilities, such as repeated false alarms intended to test emergency services response time, and rehearse procedures. Recruiting or financing by providing direct financial support to operation teams and contacts, or building operations teams and contacts, or compiling personnel data, banking data, or travel data. Materials acquisition and/or storage of unusual quantities of materials, such as cell phones pagers, or radio-controlled toy servos or controllers, fuel, chemicals or toxic materials, and timers, or other triggering devices. Acquisition of expertise by attempting to obtain or conduct training, or otherwise obtain knowledge or skills, and security concepts, military weapons or tactics, or other unusual capabilities. Collection or discovery of unusual amounts of weapons including explosives, chemicals, and other destructive materials, or evidence, detonations or other residue, wounds or chemical burns. Actions associated with a characteristic of unique concern to specific sectors for example, the public health sector with regard to their personnel, facilities, systems or functions, taking pictures, or video of persons facilities, buildings, or infrastructure in an unusual or surreptitious manner that would arouse suspicion of terrorism or other criminality in a reasonable person. Examples include taking pictures, or video of infrequently used access points, the superstructure of a bridge, personnel performing security functions, for example, patrols, badge, vehicle checking. Security related equipment, for example, perimeter, fencing, security cameras, and so on. Observation surveillance by demonstrating unusual or prolonged interest in facilities, buildings, or infrastructure beyond mere casual, for example, tourists or professional, for example, engineers, interest and examples include observation through binoculars, taking notes, attempting to mark off or measure distances, and so on. Photography, asking questions, and other similar activities are not inherently criminal behaviors, and may be protected under the First Amendment of the US Constitution. For this reason if you report on these types of activities a law enforcement officer will need to gather additional facts or circumstances to be able to explain why the behavior observed is suspicious. For example, did the individual take steps to conceal his or her location? Did he or she try to otherwise avoid detection while taking pictures? Ultimately the context, facts, and circumstances will be essential elements for determining whether the suspicious behaviors are reasonably indicative of preoperational planning associated with terrorism, or other criminal activity. It is important to recognize that a single suspicious behavior or act by a person does not make him or her a terrorist, but reporting a behavior or incident you observe, so that law enforcement can compare it with other pieces of information is critical to understanding whether additional action is appropriate. When you observe something that you think law enforcement should know about, you should report it.

Privacy, Civil Rights, and Civil Liberties. The primary purpose of suspicious activity reporting is to provide law enforcement with significant leads for further investigation and to help prevent crime, including terrorism. The reporting and sharing of SAR information must be done in a lawful way, therefore suspicious activity reporting focuses on documenting information regarding behaviors, and incidents. Attributes of an individual such as race, ethnicity, national origin, or religion must not be considered as factors creating suspicion, but they may be documented, to describe a particular suspect for identification purposes. Information should be reported to law enforcement where there is a legitimate concern that a person's behavior, or an incident poses a threat, or could be linked to a crime. It is important to remember that when you contact law enforcement, you are making an official report. Reporting someone or something to the police based solely on prejudice, race, religion, ethnicity, sexual orientation, status, or affiliation is simply wrong and is counterproductive to preventing crime and terrorism. Even though your profession may provide for unique opportunities to observe suspicious activity you are not empowered to act as a law enforcement officer. Report only what you observe and follow your organization's policies and protocols. Do not take additional actions outside the scope of your normal duties. Protecting the privacy, civil rights, and civil liberties of Americans is critical to preserving our democratic principles, and to building trust among individuals, government agencies, the private sector, and the communities they serve. By continually recognizing the significance of these rights, we collectively build and enhance trusted relationships with members of the community. Only by building trust will we achieve a level of public cooperation that will maximize our ability to keep our communities and our nation safe, and secure from crime and terrorism. Protection of privacy, civil rights, and civil liberties is a fundamental principle that underlies the nationwide SAR initiative, and other homeland security initiatives, such as the, 'If You See Something Say Something,' campaign.

Public Awareness-'If You See Something, Say Something' Campaign. Making individuals and citizens better informed and empowered is crucial, and the US Department of Homeland Security, or DHS, has launched a national campaign around a slogan you probably know well: 'If You See Something, Say Something.' This campaign was first implemented by New York City's Metropolitan Transit Authority, or MTA. New York MTA has authorized DHS to utilize the trademark slogan as the hallmark of its national campaign. You may have seen signs, public service announcements, videos, and other materials in a number of different settings advertising this campaign. The goal of the 'If You See Something, Say Something' campaign is to make people more aware, and also provide them with the tools they need to report activity if they see something suspicious. Through this campaign DHS is raising awareness of potential terrorist tactics and emphasizing the importance of reporting suspicious activity to law enforcement. But that's just one side of the equation. It is also a partnership among citizens, businesses, local police, public safety professionals, and fusion centers.

What Happens to a SAR Once it is Reported? The Role of Fusion Centers. The national network of fusion centers is the first stop for suspicious activity reporting analysis. When you report a SAR to a local law enforcement agency, they will in turn provide it to a fusion center for additional review. Fusion Centers receive information from a variety of sources, such as SARs from local law enforcement officers and tips from citizens, the private sector, emergency responders, and other government entities, including federal partners. Centers then fuse this information to conduct timely analysis and produce relevant products to disseminate to their customers. Qualified analysts or investigators at these centers review and determine whether the information has a potential connection to terrorism, and meets the criteria for sharing nationwide. If it meets the criteria, the information is shared through the NSI and forwarded to the Federal Bureau of Investigation, or FBI, and law enforcement agencies nationwide for investigative follow-up. Some fusion centers provide direct feedback on suspicious activity reporting to the contributors. Others do not. If you don't receive feedback on a SAR you reported, understand that this is not a reflection of the value of the information you provided. These centers are able to compare locally gathered SAR information with behaviors, indicators, and threats reported by other agencies to more accurately develop a state, or regional threat picture. Before 9/11 we did not have fusion centers and their respective capabilities. Now that we have these centers, we are better prepared to detect and respond to potential indicators of terrorism.

Your Role in Reporting Suspicious Activity. Hometown security begins with you. As a citizen you have a duty to report a crime. As a hometown security partner, if you observe suspicious activity you are encouraged to report that information directly to your local law enforcement agency. Check with your organization regarding any existing process or procedures in place. In some cases, agencies may already have an established relationship with the state or major urban area fusion center, and a designated method for reporting SARs directly to the fusion center. You should ask your supervisor whether you have a designated information or intelligence liaison, sometimes referred to as a fusion liaison officer, who works for the fusion center, and whether your agency has additional policies on submitting SARs to local law enforcement and the fusion center. Remember the information you observe and report is valued and will be reviewed to determine whether there is a potential link to terrorism. With eyes and ears on our streets, and working with citizens and communities every day, you play an important role in protecting your community. Law enforcement and fusion centers across the nation depend on partnerships within the public sector, and throughout the private sector. The suspicious activity information that you report could aid in the detection and disruption of a terrorist plot. We hope this part of the training has increased your awareness of the value of the NSI, the National Network of Fusion Centers, and critical programs such as 'If You See Something, Say Something.', enhanced your understanding of the behaviors associated with pre-incident terrorism activities, conveyed the significance of your role in reporting suspicious activity, emphasized the foundational role that protecting privacy, civil rights, and civil liberties has with the NSI and the 'If You See Something, Say Something' program. With your help terrorist acts against our homeland will be prevented, and our communities will be resilient and safe.