1. STRATEGIC ANALYSIS & INFORMATION CENTER OHIO HOMELAND SECURITY (U) Warning: This document is UNCLASSIFIED//FOR OFFICIAL USE ONLY (U//FOUO) and is subject to all 28 CFR Part 23 handling procedures. This product may contain personal identifying information (PII) that must be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with all applicable policies and procedures, and is not to be released to the public, the media, or other personnel who do not have a valid need-to- know without prior approval of the SAIC.

2. Agenda OHS/SAIC Mission Ohio Fusion Center Network Regional Coordinators/ TLO Program Intelligence Production CIMS Current Threat Picture UNCLASSIFIED//FOR OFFICIAL USE ONLY

3. OHS/SAIC Mission Statement The SAIC (Ohio’s primary fusion center) is a partnership among multiple jurisdictions and disciplines that serve as a one-stop shop for intelligence and information sharing. Primary purpose is to “connect the dots” with the aim of preventing acts of terrorism an other threats to the public safety. UNCLASSIFIED//FOR OFFICIAL USE ONLY

4. OHS/SAIC Mission Statement Provide the local implications of national intelligence to front-line law enforcement, public safety, and private sector partners. Provide interdisciplinary expertise and situational awareness to decision-makers at all levels of government. Analyze and disseminate information form a multitude of sources in order to prevent terrorism and other crimes. UNCLASSIFIED//FOR OFFICIAL USE ONLY

5. The Ohio Fusion Center Network The SAIC is part of the National Network of Fusion Centers. 78 Fusion Centers located throughout the United States. Ohio has three federally recognized fusion centers. Northeast Ohio Regional Fusion Center (NEORFC) Greater Cincinnati Fusion Center (GCFC) UNCLASSIFIED//FOR OFFICIAL USE ONLY

6. NEORFC OHS/SAIC Greater Cincinnati Fusion Center

7. Fusion Liaison Officer (FLO) Program The FLO program was developed to establish a baseline intelligence capability throughout the state, utilizing existing law enforcement resources. FLOs build relationships within the community to promote information sharing, increase collaboration and awareness. Over 600 Officers and Fire Fighters part of the program. In 2015 the FLO Program is being expanded to include Public Health, Corrections, Emergency Management, as well as other Government Agencies and the Private Sector. UNCLASSIFIED//FOR OFFICIAL USE ONLY

8. Regional Coordinators UNCLASSIFIED//FOR OFFICIAL USE ONLY North Mary Tyler 614-357-0818 Cell 614-644-3895 Office South Bob Schlicher 614-205-6433 Cell 614-387-1135 Desk 1 36 4 87 52

9. Infrastructure Protection (IP) Unit UNCLASSIFIED//FOR OFFICIAL USE ONLY

10. Intelligence Production UNCLASSIFIED//FOR OFFICIAL USE ONLY

11. Recent Intelligence Production UNCLASSIFIED//FOR OFFICIAL USE ONLY

12. Contact & Information Management System Ohio Fusion Center Network Analyst Production: SAIC-Ohio Daily Briefing, Situational Awareness Bulletins… NEORFC- Weekly Intelligence Bulletin GCFC- Officer Safety, Critical Infrastructure Bulletins Other Production: Production from 78 Fusion Centers Department of Homeland Security (DHS) Products Federal Bureau of Investigation (FBI) Products Upcoming Trainings for Law Enforcement and Private Sector partners. UNCLASSIFIED//FOR OFFICIAL USE ONLY

13. Contact & Information Management System UNCLASSIFIED//FOR OFFICIAL USE ONLY https://ext.dps.state.oh.us/CIMS/

14. Current Threat Picture Evolving Tactics, Techniques, and Targets UNCLASSIFIED//FOR OFFICIAL USE ONLY

15. “The purpose of targeting America is to exhaust her and bleed her to death…and collapse under its own weight as a result of its military, human, and financial losses…target the American system!” General Guidelines for Jihad Ayman al-Zawahiri (Leader of al-Qa‘ida) September 2013 UNCLASSIFIED//FOR OFFICIAL USE ONLY “If only you knew that reward, honor, elevation, and glory there is in Jihad – in this world and in the hereafter - none of you would be remiss in setting out to wage jihad. Oh Allah, give strength to Islam and the Muslims, humiliate polytheism and the polytheists, and support Your servants, the monotheistic mujahedeen, all over the world. ” Call to Jihad in declaring a new Caliphate/the Islamic State Abu Bakr al-Baghdadi (Leader Islamic State in Iraq and the Levant (ISIL) ) July 2014

16. Homegrown Violent Extremists (HVEs) UNCLASSIFIED//FOR OFFICIAL USE ONLY An HVE is defined by the Department of Homeland Security as a person of any citizenship who has lived and/ or operated primarily in the United States or its territories who advocates, is engaged in, or is preparing to engages in ideologically-motivated terrorist activities (including providing support to terrorism) in furtherance of political or social objectives promoted by a foreign terrorist organization.

17. Americans Targeting Americans Smaller-scale, more-achievable, less- detectable attacks, but focus remains on spectacular attack U.S. is not immune to homegrown violent extremism Prevalence of Westerners in leadership roles and as operatives for AQ and its affiliates Wider use of the Internet, social networking sites, and social media, e.g. Inspire magazine, ideologues The idea of successful failures, lone wolves, “a call to arms,” and the duty of the follower in U.S. UNCLASSIFIED//FOR OFFICIAL USE ONLY

18. Al-Qa‘ida’s and ISIL’s English-language publications encouraging attacks on the Homeland

19. Terrorist Tactic of Concern: The Use of Social Media Target Western audiences with propaganda, recruit/radicalize. Increase impact of attack, create confusion, disinformation, denial and deception. Cheap, effective, and no physical contact. What is your plan if terrorists live tweet during an attack in your area? UNCLASSIFIED//FOR OFFICIAL USE ONLY

21. “Potential” Terrorist Inspired Incidents Transnational: Michael Zehaf-Bibiau – On 10-22-2014 shot and killed a Canadian soldier at the National War Memorial. He then traveled on foot to the Canadian Parliament building where he fired 20 to 30 shots before being killed by a Canadian security member of Parliament. Believed to be a Canadian born, 32 year old convert to Islam. Martin Couture Rouleau – Islamic convert and known potential extremist threat, ran down two Canadian soldiers with a car killing one. This event occurred on 20 October, 2014 near Montreal, Canada. Domestic: Alton Nolen - Beheaded a co-worker at a food processing company in Moore, Oklahoma on September 25th, 2014. Nolen had been fired from the company. Police Department spokesman stated “he recently started trying to convert some of his co-workers to the Muslim religion.” Zale H. Thompson - attacked several police officers in Queens… described by police officials on Friday as a “self-radicalized” Muslim convert who was inspired by terrorist groups like the Islamic State and Al Qaeda, but who most likely acted alone and on his own initiative. UNCLASSIFIED//FOR OFFICIAL USE ONLY

22. Terrorism Related Incidents in Ohio Transnational: Iyman Faris – Worked as a truck driver in the Columbus area, planned on attacking the Brooklyn Bridge in New York and had high level contacts with Al Qaeda that included supplying the terrorist organization with cell phones, sleeping bags, and cash Nuradin Abdi – Columbus, Ohio resident (entered the US illegally from Somalia in 1999) who wanted to target crowded malls in the Columbus area for maximum casualties Christopher Paul – Lived near Columbus (Worthington, Ohio) and conducted terrorist training in Burr Oak State Park in southern Ohio and desired to bomb various targets in Europe and the United States Domestic: Anarchist Plot in 2012 – Five subjects attempted to blow up a northern Ohio bridge among other targets before being apprehended by the FBI. The group went as far as placing what they believed to be bombs at the bridge’s base structures UNCLASSIFIED//FOR OFFICIAL USE ONLY Source: USA Today

23. Outlook & Actions The SAIC has been working with our Federal counterparts to ensure that our state and local partners within the state are aware of current threats and indicators of potential terrorist activity. We remain alert to emerging and quickly evolving threats, and continue to share information through regional analytic discussions, monthly information and intelligence sharing briefings, nationwide video teleconferences, as well as analyst exchanges as a means to share best practices, lessons learned, and threat streams. UNCLASSIFIED//FOR OFFICIAL USE ONLY

24. SAIC Suspicious Activity Reporting UNCLASSIFIED//FOR OFFICIAL USE ONLY