INTRODUCTION
Welcome to the Annual Security Refresher Briefing for the University of California, Office of the President. As an individual holding a University of California-sponsored DOE and/or DOD security clearance, you have been entrusted with responsibilities to yourself, your fellow colleagues, the University, the Federal government, and the nation.
DOE Order 470.1, Chapter 4, "Safeguards and Security Awareness Program," requires that all DOE contractor personnel with a clearance receive an annual security refresher briefing (ASR). The ASR is designed to highlight significant issues related to your clearance. Again this year, the ASR is being presented in two formats, electronically and in the familiar booklet format. Although more information is covered in the cross-linked electronic version (found at: http://labs.ucop.edu/security/brief05), the information contained in this booklet covers most of the same material. After reading the booklet, simply print and sign your name and return the last page to the University Research Security Office using the self-addressed form. The electronic version requests E-mail confirmation of this briefing.
The topics presented in this refresher briefing include the following:
- London Bombings
- Terrorism Awareness for Citizens
- Seven Signs of Terrorism
- Hosting Foreign Visitors
TERRORISM AWARENESS AND THE U.S.
July 7, 2005 Statement by Secretary Michael Chertoff, U.S. Department of Homeland Security
There have been several recent instances where terrorist attacks around the globe have brought to the attention of the world the need for increased public awareness and the need for the public to report certain suspicious activity. As the result of the London bombings, Secretary Chertoff in his recent statement to the U.S. public advised:
Ladies and Gentlemen, we are closely monitoring the bombings that occurred in London. I have spoken to the President and to my counterparts, the Home Secretary in the United Kingdom.
The thoughts and prayers of the American people are with the victims of this tragedy and our friends in Britain.
In light of today's attacks in London, the United States Government is raising the threat level from Code Yellow, or Elevated, to Code Orange, High; targeted only to the mass transit portion of the transportation sector. This only includes regional and inter-city passenger rail, subways and metropolitan bus systems. We are also asking for increased vigilance in other transportation systems.
Currently, the United States has no specific, credible information suggesting an imminent attack in the United States. However, we know the tactics and methods of terrorist, as demonstrated by the horrific rail bombings in Madrid last year. The intent of al Qaeda and affiliated organizations to attack in Europe and the United States has been well documented and continues to be reflected in intelligence reporting.
We have already taken additional measures to secure transit systems since 9-11 and the railway bombing in Madrid. At the direction of the President, we are working with the Department of Transportation, our other federal partners, state and local officials and transportation authorities to take all necessary precautions and to increase the security of our transportation systems and the citizens who depend on them.
We have asked state and local leaders and transportation officials to increase their protective measures including: additional law enforcement, bomb-detecting K9 teams, increased video surveillance, spot testing in certain areas, added perimeter barriers, extra intrusion detection equipment and increased number of inspections of trash receptacles and other storage areas.
We ask the public to remain alert and to report any suspicious activity, particularly on or around transportation systems, to your local law enforcement authorities. But we are not simply suggesting that people avoid public transportation systems; rather, we are asking that they do so with an increased awareness of their surroundings.
We have been in continuous contact with federal, state and local authorities, as well as our allies in the United Kingdom as they investigate this incident. We are reviewing intelligence streams and the information out of London closely and will continue to provide regular updates to the public as soon as information becomes available.
Again, our thoughts and prayers are with the British people and the grieving families. American stands with you in this time of crisis, to assist and support you in every way possible.
Terrorist may bomb and attack and attempt to use weapons of fear to shake the will of free nations and free people. But we have a more powerful arsenal; it includes our resolution and resiliency, and an unyielding determination to do what we can and must to keep our citizens and our allies safe and track down the perpetrators of this incident and bring them to justice.
TERRORISM AWARENESS FOR U.S. CITIZENS
How You Can Help Your Local Police Fight Terrorism: Be Their Eyes & Ears
Law enforcement officers who are your State's first line of defense against terrorism need your assistance in detecting and preventing future terrorist attacks. This guide provides general information on how you can help.
DESCRIBING SUSPICIOUS BEHAVIOR
- WHO did you observe?
- WHAT did you see, Be specific.
- WHERE did you see it?
- WHEN did you see it?
- WHY is it suspicious?
YOU MUST BE:
- ACCURATE (most important)
- FAST
- COMPLETE
- PREPARE TO GIVE A DESCRIPTION OF:
- Person:
- Sex
- Age (approximate)
- Height (use 2" blocks ex. 5'8" or 5'10")
- Weight (approximate, use 10 lb. Blocks ex. 180 lb. or 190 lb)
- Build (medium, heavy set, thin, etc.)
- Hair (use 2 blocks)
- Complexion (light, dark, ruddy, olive)
- Peculiarities (scar, tattoos, missing limbs)
- Clothing (from head to toe, style, defects)
- Weapons (if any)
- Method of escape (direction, vehicle, etc.)
- Vehicle:
- License Plate (most important)
- Year, make, model & color
- Body type (2 door, 4 door, van, SUV, etc.)
- Passenger (number of people in vehicle)
- Damage or anything unusual (logos, etc.)
- Markings or anything unusual
IF YOU OBSERVE SUSPICIOUS ACTIVITY:
- DO NOT take direct action
- DO NOT confront the individual
- DO NOT reveal your suspicions
- DO record as many details as possible
- DO notify the appropriate authorities as soon as possible
COMMUNITY SUPPORT
- Get your family, friends and neighbors involved
- Be alert and aware of everyday activities in your neighborhood
- Become a "Blockwatcher" or "Neighborhood Watcher" report incidents, conditions and crimes to your local police
- Get to know your police and sheriffs department's officers who patrol your community
- Report suspicious activities
POSSIBLE TERRORIST INDICATORS
Terrorists often strike at government and civilian targets to instill fear. Persons engaged in terrorism are trained to blend into their surroundings and it is often difficult to identify them. However, since most attacks are well organized and planned, terrorists will generally conduct training, surveillance and "dry runs" prior to commission of their crimes. Sometimes, these acts might provide an opportunity for someone to detect a possible terrorist act in the making.
WAYS TO IMPROVE OBSERVATION SKILLS
- Employ good listening skills
- Do not let personal feelings interfere with the incident
- Look at the entire situation before making a judgment
- Watch for non-verbal communication signs
- Use feedback to obtain and verify information report
- Observe and report - notify your local police!
- DO NOT become personally involved
7 SIGNS OF TERRORISM
Extracted from video narrated by Sgt. Jerry King, Michigan State Police
When a terrorist incident occurs, it affects all people. Each one of us has a responsibility to protect our homeland, state, and our country from a terrorist attack. As part of a daily routine, being observant and reporting anything out of the ordinary could be a first step in preventing a terrorist attack. Following are the seven signs that may prevent a terrorist attack.
1. Surveillance - The first sign is surveillance - what should you be looking for and what should be reported? During the planning phase, a terrorist will often conduct surveillance on possible targets in order to determine the strengths and weaknesses of their target. Also, to determine the strengths and weaknesses of the response time of the emergency responses. Examples of surveillance activities are:
- Recording or monitoring activities
- Drawing diagrams
- Making notes on maps
- Using vision-enhancing devices: They use vision enhancing devices such as binoculars, possessing floor plans or blueprints of places such as high tech firms, financial institutions, government or military facilities.
Any of these surveillance type acts may be a sign that something is not right. If you feel you have observed something suspicious, do not dismiss it, but report it to the police.
2. Elicitation - The second sign is elicitation. Elicitation is when someone attempts to gain information about an important place or business and its operation. An important place may be a school, a power plant, a bridge, a stadium, a shopping mall. Terrorist may ask what the building is used for, the building operations, deliveries and security related information. That alone or together with other facts may reveal security strengths and weaknesses. Attempts to gather information may be made by fax, U.S. mail, e-mail, phone or in person.
3. Test of Security - This is another way for terrorists to gather information. This may be done by walking or driving into restricted areas to observe security or law enforcement responses. They may also try to enter a physical security or barriers in order to access procedures strengths and weaknesses
4. Acquiring Supplies - Terrorists need to acquire supplies and equipment to carry out the attack. Acquiring supplies may include purchasing or stealing law enforcement or military equipment and supplies such as identification badges, uniforms and decals. Terrorists may also obtain explosives, weapons, ammunition, chemicals and chemical equipment. Airline boarding passes may also be used in planning an attack. Forging or photocopying personal information, passports or other documents is another method used to obtain supplies.
5. Suspicious people "who don't belong" - Another sign is a suspicious person who doesn't belong. This is someone who is suspicious in the workplace, building, or neighborhood because of their behavior, their unusual questions or statements they make. Keep in mind that police officers often receive complaints that may seem routine in nature, but afterwards result in more significant incidents. If you feel you have seen something suspicious, do not dismiss it; report it to the police.
6. Dry run/Trial runs - Before carrying on the final operation, terrorists usually conduct a trial run or dry run. The trial run consists of putting people into positions and moving them around according to their plans without committing the terrorist act. It could also mean mapping out the route to determine the traffic.
7. Deploying assets for getting into position - The seventh sign is deploying assets for getting into position. Deploying assets is placing people, equipment and/or supplies at or near the target. If you see suspicious activity, this may be the only opportunity you have to report it to the police.
In conclusion, it is important to remember that the 7 Signs of Terrorism may occur months or even years apart. If you see any suspicious or criminal activity, do not try to stop the suspect, call the police immediately and report the incident. Law enforcement personnel have procedures in place to share with the local, state and federal homeland security officers. The success of securing our homeland depends on our vigilance, commitment, and ability to recognize these signs.
HOSTING FOREIGN VISITORS
Purpose
Hosting foreign visitors is a critical responsibility. This is especially true when the foreign national is from a country that is directly competing against the United States militarily or economically. The purpose of this briefing is to:
- Enhance your understanding of risks associated with foreign visits,
- Inform you how to identify and mitigate these risks, and
- Remind you of your responsibilities as a host of foreign visitors.
Risks
The Department of Energy (DOE) is a leader in the development of new and advanced technologies. In order to discover new technologies, DOE often searches out the individuals and programs from other countries with the desirable scientific and technical skills and joins them in cooperative and joint ventures to achieve our goals. By engaging in such ventures, DOE has become a major contributor to the development of future technologies that benefit the United States and the world.
There are inherent risks with site visits and other associations with foreign nationals. Even though the "cold war" is officially over, all countries still pursue their own self-interests. Today the self-interest of many foreign countries is primarily advanced by economic, rather than by military means. In today's race for international economic strength and influence, all countries are competitors.
Site visits or assignments to DOE facilities provide foreign countries with a low cost and low risk opportunity to gain access to needed technologies. Most foreign nationals are here just for their stated purpose. However, a few visitors have hidden agendas and are on site to collect information and this information doesn't have to be classified to be valuable and desirable. Unclassified information is often targeted because it is generally more accessible, easier to obtain and may not be available to the visitor at home.
Lawrence Berkeley National Laboratory (LBNL) Clearance Holders
For guidance in hosting foreign visitors, LBNL clearance holders should refer to the following website: http://www.lbl.gov/Workplace/HR/guest/
Host Responsibilities
Before you host a foreign visitor or assignee:
- Ensure that benefits gained from the visit outweigh their potential risks;
- Determine the areas of your work that may be sensitive, but not classified, and might shed light on classified work;
- Assess whether discussion of selected unclassified information with foreign nationals could divulge proprietary details related to cooperative research or other collaborative work at your facility and
- Carefully craft your security plan to insure the security of the visit.
During the visit:
- Be alert to indications that any of your foreign guests might be collecting information as a result of intelligence tasking, or might be an intelligence officer. Some indicators are:
- A visitor inquires too frequently about information outside the stated subject area of the visit or seeks information and gives little in return;
- In a group of visitors, one individual doesn't have the same level of expertise as others in the group; does not stay focused on the agenda of the visit; or engages in incongruous behavior for the occasion;
- A "wandering" visitor who is offended when he is challenged about his presence in locations away from his normal work space; or
- A visitor is overly curious about people, programs and areas beyond the scope of the visit.
- Deflect inquiries that seek information that should not be shared about you, your colleagues, your employer, DOE, or other U.S. government agencies, programs and policies.
- Exercise caution if you assist your foreign visitor with mailing of packages or letters out of the U.S. Review the contents before mailing.
- Monitor computer access. Often intelligence collectors look for sensitive projects or proprietary business information on unclassified networks.
- Ensure that the visitor's access is restricted to information and locations approved for the visit.
REPORTING REQUIREMENTS
If you suspect a visitor has a hidden agenda, or if you observe any suspicious behavior, contact your counterintelligence or security officer. Also report any attempts to probe for information, efforts to put you in a compromising situation, and any other anomalous behaviors.
Note: DOE Order 472.1C and Presidential Decision Directive/NSC 12 require the reporting of contacts with people of any nationality who seek classified or sensitive information without authorization.
CONCLUSION
As a host for the visit of a foreign national, you should maintain awareness before the visit, diligence during the visit, and caution in subsequent interactions with the visitor. As a visit progresses, permanent employees often forget that the visitor is a foreign national who is only temporarily with the Department. Security restrictions can be forgotten or overlooked. You are personally responsible for maintaining the security of the visit and for precluding the inadvertent or intentional passage of unauthorized information.
QUESTIONS
For additional information or answers to questions concerning your host responsibilities, contact your local counterintelligence officer or call the DOE Office of Counterintelligence at (202) 586-1247.
Remember, in today's global economic competition, knowledge has value. Intellectual property is the key to our country's continued success.
REFERENCES
U.S. Department of Energy (DOE) "Safeguards and Security Awareness Program," Chapter 4, Directive 470.1
"National Industrial Security Program Operating Manual," paragraphs 3-107, Refresher Briefings, January 1995, U.S. Deputy Secretary of Defense.
Security Department, Los Alamos National Laboratory
U.S. Department of Energy "Hosting Foreign Visitors" pamphlet Office of Counterintelligence
ACKNOWLEDGEMENT
Please email Willie Archie to acknowledge that you have read this version of the University of California 2005 Security Refresher Briefing. Include the following statement in the body of your message:
| I acknowledge receipt of the University of California 2005 Security Refresher Briefing in compliance with U.S. Department of Energy and U.S. Department of Defense security requirements. |
It is important to include your name after the above statement.
We will be contacting you if your email statement is not received by November 30, 2005.
Thank you.
willie.archie@lao.ucop.edu
