FOR OFFICIAL USE ONLY Guilford County LEPC On Site Security Scenario Tabletop Exercise (TTX) January 12 th, 2012

FOR OFFICIAL USE ONLY 2 Agenda [09:00]: Registration [09:10]: Welcome, Introductions, and Exercise Overview [09:20]: Module 1: Identification and Reporting [10:00]: Module 2: Response [10:45]: Module 3: Recovery [11:30]: Review and Next Steps

FOR OFFICIAL USE ONLY Welcome and Introductions Name Company Daily Role 3

FOR OFFICIAL USE ONLY 4 Administrative Phones, pagers, radios Restrooms Breaks Evaluation forms Additional resources

FOR OFFICIAL USE ONLY 5 Purpose Provide participants the opportunity to evaluate current response concepts, plans, and capabilities for responding to a localized security event. The focus is on key coordination, critical decisions, and integration of external assets.

FOR OFFICIAL USE ONLY 6 Scope Focus on the role of your company in response to a possible security situation. Processes and decision making are more important than details. Emphasis is on coordination, integration of capabilities, problem identification, and problem resolution.

FOR OFFICIAL USE ONLY 7 Objectives Objectives for this exercise are to: –Share policies and procedures with alternate emergency coordination staff –Pressure test assumptions about local emergency responder roles and responsibilities –Discuss internal procedures for this and similar events –Share procedures with the greater responder community

FOR OFFICIAL USE ONLY Confidentiality and Information Sharing As this is a security based scenario you may hear about plans from other companies. Any operational information about other companies learned here should NOT be shared with others without prior consent! If you have information that you do not want shared, be sure discuss only as you deem necessary. 8

FOR OFFICIAL USE ONLY 9 Participants Players –Respond to situations based on current plans and procedures Observers –Support players during group discussions; are primarily passive observers Facilitators –Provide situational updates and moderate discussions Evaluators –Observe and record discussions and decisions

FOR OFFICIAL USE ONLY 10 Exercise Structure Three modules: –Module 1: Identification and Reporting –Module 2: Response –Module 3: Recovery Each comprised of: –Situation updates –Small group discussions of response issues –Facilitated caucus with presentations from each group

FOR OFFICIAL USE ONLY 11 Functional Groups Agencies represented in the exercise are: –Industry –Public Safety –Environmental Health –Emergency management –Others

FOR OFFICIAL USE ONLY 12 Exercise Guidelines This is an open, low-stress, no-fault environment. Consider different approaches, and suggest improvements. Base responses on the current plans and existing abilities and assets. Interact with other participants to answer questions. Do not fight the scenario, learn from the discussion

FOR OFFICIAL USE ONLY 13 Assumptions and Artificialities The scenario is plausible, and events occur as they are presented. There are no hidden agendas or trick questions. All players receive information at the same time. Local players should assume that while they are concentrating on the local response, Federal and State responders are initiating their plans, procedures, and protocols.

FOR OFFICIAL USE ONLY 14 Module 1: Identification and Reporting

FOR OFFICIAL USE ONLY 15 Current Events December 23 rd, 2012 at 9:00am It is the week before Christmas and your facility is operating at normal capacity. Many administrative staff members have taken time off Christmas vacation. Part time employees are being used to fill some full time employees who have also taken off for the week.

FOR OFFICIAL USE ONLY 16 Current Events December 23 rd, 2012 at 9:00am Typical December weather is in place for the week High of 35 with a low of 18 forecast for the day Humidity is at 22% Winds are variable 20% chance of wintry mix

FOR OFFICIAL USE ONLY 17 Current Events December 23 rd, 2012 at 11:45 am Most employees are on their lunch break with a few employees left at their normal positions A person, John Doe, enters the front gate and makes it through security saying he is meeting his wife for lunch. The guard monitoring the cameras notices Doe carrying a black duffle bag but ignores it thinking it might be a Christmas present. Doe moves into a position that is out of view of the cameras.

FOR OFFICIAL USE ONLY 18 Current Events December 23 rd, 2012 at 12:35 pm Employees return from lunch to their work locations. Doe confronts the employees asking where his wife is. The cameras show Doe’s wife walking toward Doe yelling something when Doe then pulls out two semi- automatic handguns and fires them at her. He then yells “No Witnesses” and fires at surrounding employees. Doe then runs off somewhere in the plant.

FOR OFFICIAL USE ONLY Caucus Period Questions to discuss: –What are your internal procedures based on this scenario? –Who is notified at your facility? –Do you evacuate areas of the facility or shelter in place? –How is this information shared with employees? –Who else do you contact? –How do you respond to this event? 19

FOR OFFICIAL USE ONLY Facilitated Discussion Questions to discuss: –What are your internal procedures based on this scenario? –Who is notified at your facility? –Do you evacuate areas of the facility or shelter in place? –How is this information shared with employees? –Who else do you contact? 20

FOR OFFICIAL USE ONLY 21 Situation Update December 23 rd, 2012 at 12:45 pm Your internal procedures are enacted Law enforcement operations are commencing. Law enforcement is attempting to determine whether the employees remaining on site are the perpetrator or not. Some of your employees have taken shelter in bathrooms and some have left the facility by foot.

FOR OFFICIAL USE ONLY 22 Situation Update December 23 rd, 2012 at 1:15 pm The perpetrator killed himself when confronted by police in the facility parking lot. EMS reports three dead (including the perpetrator) and five injured. Law enforcement believes he acted alone and has declared the entire area a crime scene. Your facility will not be able to re-open for at least 12 hours.

FOR OFFICIAL USE ONLY 23 Media December 23 rd, 2012 at 1:30 pm News agencies, hearing the reports on their scanners, have begun to arrive at your location. News 14 finds some of your employees across the street and tries to talk with your employees about what is going on…

FOR OFFICIAL USE ONLY Caucus Period Do your employees have training on active shooter scenarios? Do your notification procedures change now that there are injuries and fatalities? What are your procedures for getting employees off site and back to their homes with no vehicles? What are your employees trained to do when approached by the media? What else would your staff be doing now? 24

FOR OFFICIAL USE ONLY Facilitated Discussion What is the level of training your employees have on active shooter scenarios? Do your notification procedures change at this point? What are some methods to assist your employees in getting home without their vehicles? What are your employees trained to do when approached by the Media? What else would your staff be doing now? 25

FOR OFFICIAL USE ONLY 26 Module 3: Recovery

FOR OFFICIAL USE ONLY 27 Situation Update December 24 th, 2012 at 8:00 am Law enforcement states that your facility must remain closed for another 24 hours. Today is supposed to be payday for your employees. Many employees have called their supervisors at home asking about counseling and pay. Your plant’s corporate officials have arrived at the plant staging area.

FOR OFFICIAL USE ONLY Caucus Period What actions will you take now that your plant will be closed over Christmas day? How will you manage payroll? What are your procedures and resources for employee counseling? Will any plant level support will be given to the families of the victims? How do you coordinate the ongoing media process when senior leadership are unavailable? 28

FOR OFFICIAL USE ONLY Facilitated Discussion What actions will you take now that your plant will be closed over Christmas day? How will you manage payroll? What are your procedures and resources for employee counseling? Will any plant level support will be given to the families of the victims? How do you coordinate the ongoing media process? 29

FOR OFFICIAL USE ONLY 30 Next Steps After Action Report (AAR)

FOR OFFICIAL USE ONLY 31 Closing Comments