Guilford County LEPC

Guilford County LEPC On Site Security Scenario Tabletop Exercise (TTX) January 12th, 2012

Agenda • [09:00]: Registration • [09:10]: Welcome, Introductions, and Exercise Overview • [09:20]: Module 1: Identification and Reporting • [10:00]: Module 2: Response • [10:45]: Module 3: Recovery • [11:30]: Review and Next Steps

Welcome and Introductions • Name • Company • Daily Role

Administrative • Phones, pagers, radios • Restrooms • Breaks • Evaluation forms • Additional resources

Purpose • Provide participants the opportunity to evaluate current response concepts, plans, and capabilities for responding to a localized security event. • The focus is on key coordination, critical decisions, and integration of external assets.

Scope • Focus on the role of your company in response to a possible security situation. • Processes and decision making are more important than details. • Emphasis is on coordination, integration of capabilities, problem identification, and problem resolution.

Objectives • Objectives for this exercise are to: • Share policies and procedures with alternate emergency coordination staff • Pressure test assumptions about local emergency responder roles and responsibilities • Discuss internal procedures for this and similar events • Share procedures with the greater responder community

Confidentiality and Information Sharing • As this is a security based scenario you may hear about plans from other companies. • Any operational information about other companies learned here should NOT be shared with others without prior consent! • If you have information that you do not want shared, be sure discuss only as you deem necessary.

Participants • Players • Respond to situations based on current plans and procedures • Observers • Support players during group discussions; are primarily passive observers • Facilitators • Provide situational updates and moderate discussions • Evaluators • Observe and record discussions and decisions

Exercise Structure • Three modules: • Module 1: Identification and Reporting • Module 2: Response • Module 3: Recovery • Each comprised of: • Situation updates • Small group discussions of response issues • Facilitated caucus with presentations from each group

Functional Groups • Agencies represented in the exercise are: • Industry • Public Safety • Environmental Health • Emergency management • Others

Exercise Guidelines • This is an open, low-stress, no-fault environment. • Consider different approaches, and suggest improvements. • Base responses on the current plans and existing abilities and assets. • Interact with other participants to answer questions. • Do not fight the scenario, learn from the discussion

Assumptions and Artificialities • The scenario is plausible, and events occur as they are presented. • There are no hidden agendas or trick questions. • All players receive information at the same time. • Local players should assume that while they are concentrating on the local response, Federal and State responders are initiating their plans, procedures, and protocols.

Module 1: Identification and Reporting

Current EventsDecember 23rd, 2012 at 9:00am • It is the week before Christmas and your facility is operating at normal capacity. • Many administrative staff members have taken time off Christmas vacation. • Part time employees are being used to fill some full time employees who have also taken off for the week.

Current EventsDecember 23rd, 2012 at 9:00am • Typical December weather is in place for the week • High of 35 with a low of 18 forecast for the day • Humidity is at 22% • Winds are variable • 20% chance of wintry mix

Current EventsDecember 23rd, 2012 at 11:45 am • Most employees are on their lunch break with a few employees left at their normal positions • A person, John Doe, enters the front gate and makes it through security saying he is meeting his wife for lunch. • The guard monitoring the cameras notices Doe carrying a black duffle bag but ignores it thinking it might be a Christmas present. • Doe moves into a position that is out of view of the cameras.

Current EventsDecember 23rd, 2012 at 12:35 pm • Employees return from lunch to their work locations. • Doe confronts the employees asking where his wife is. • The cameras show Doe’s wife walking toward Doe yelling something when Doe then pulls out two semi-automatic handguns and fires them at her. • He then yells “No Witnesses” and fires at surrounding employees. • Doe then runs off somewhere in the plant.

Caucus Period • Questions to discuss: • What are your internal procedures based on this scenario? • Who is notified at your facility? • Do you evacuate areas of the facility or shelter in place? • How is this information shared with employees? • Who else do you contact? • How do you respond to this event?

Facilitated Discussion • Questions to discuss: • What are your internal procedures based on this scenario? • Who is notified at your facility? • Do you evacuate areas of the facility or shelter in place? • How is this information shared with employees? • Who else do you contact?

Situation Update December 23rd, 2012 at 12:45 pm • Your internal procedures are enacted • Law enforcement operations are commencing. • Law enforcement is attempting to determine whether the employees remaining on site are the perpetrator or not. • Some of your employees have taken shelter in bathrooms and some have left the facility by foot.

Situation Update December 23rd, 2012 at 1:15 pm • The perpetrator killed himself when confronted by police in the facility parking lot . • EMS reports three dead (including the perpetrator) and five injured. • Law enforcement believes he acted alone and has declared the entire area a crime scene. • Your facility will not be able to re-open for at least 12 hours.

Media December 23rd, 2012 at 1:30 pm • News agencies, hearing the reports on their scanners, have begun to arrive at your location. • News 14 finds some of your employees across the street and tries to talk with your employees about what is going on…

Caucus Period • Do your employees have training on active shooter scenarios? • Do your notification procedures change now that there are injuries and fatalities? • What are your procedures for getting employees off site and back to their homes with no vehicles? • What are your employees trained to do when approached by the media? • What else would your staff be doing now?

Facilitated Discussion • What is the level of training your employees have on active shooter scenarios? • Do your notification procedures change at this point? • What are some methods to assist your employees in getting home without their vehicles? • What are your employees trained to do when approached by the Media? • What else would your staff be doing now?

Module 3: Recovery

Situation Update December 24th, 2012 at 8:00 am • Law enforcement states that your facility must remain closed for another 24 hours. • Today is supposed to be payday for your employees. • Many employees have called their supervisors at home asking about counseling and pay. • Your plant’s corporate officials have arrived at the plant staging area.

Caucus Period • What actions will you take now that your plant will be closed over Christmas day? • How will you manage payroll? • What are your procedures and resources for employee counseling? • Will any plant level support will be given to the families of the victims? • How do you coordinate the ongoing media process when senior leadership are unavailable?

Facilitated Discussion • What actions will you take now that your plant will be closed over Christmas day? • How will you manage payroll? • What are your procedures and resources for employee counseling? • Will any plant level support will be given to the families of the victims? • How do you coordinate the ongoing media process?

Next Steps • After Action Report (AAR)

Closing Comments

Guilford County LEPC