National Protection and Programs DirectorateDepartment of Homeland Security

The Office of Infrastructure Protection

Fox Theatre Institute Seminar

13 November 2012

Commercial Facilities Sector Specific Agency Overview

Commercial Facilities Overview CF is a diverse, vast and virtually unregulated sector consisting of eight

distinct subsectors; Retail, Lodging, Sports Leagues, Real Estate, Gaming Entertainment and Media, Outdoor Events and Public Assembly.

CF resources and products fall into a number of categories: 1) facility assessment tools; 2) awareness materials – posters, videos, and webinars; 3) training materials and on-line courses; 4) protective measures guides; 5) leveraging efforts and resources of public and private sector partners.

The public-private partnerships are completely voluntary and need to account for the concerns and priorities of the private sector

CF business model is open access with high volume of persons going through the facility. Therefore security measures have to be tailored to those concerns and heavily reliant on the awareness and training of employees.

3

DHS Programs Overview Active Shooter Program Risk Self- Assessment Tool Protective Security Advisor Program DHS Awareness Training Courses Protective Measures Guide Training Videos

Active Shooter Program The Department has developed a multimedia package to assist

commercial facilities owners and operators on how to prepare for and respond to an active shooter in their facility. The components that make up the Active Shooter program includes the following: • Active Shooter: How to Respond Materials• Active Shooter: What You Can Do - Independent Study Course• Active Shooter: Workshop Series• Active Shooter: Webinar

5

Active Shooter – How To Respond Materials Material consists of 3 products:

– Basic Guide Book– Break Room poster– Pocket Emergency Measures

Guide FEMA Emergency Management

Institute online training: (IS-907) Active Shooter, What You Can Do http://training.fema.gov/EMIWeb/IS/IS907.asp

6

Active Shooter: What You Can Do- Independent Study Course

The Department has developed an independent online study course, Active Shooter: What You Can Do, to provide Commercial Facilities Sector owners, operators, and employees with guidance on how to prepare for and respond to active shooter crisis situations. (over 125,000 completed)

Access this course through the Federal Emergency Management Agency Emergency Management Institute at http://training.fema.gov/EMIWeb/IS/IS907.asp.

Trainer’s packet to be available soon. In final stages of development.

Active Shooter Workshop Series These scenario-based workshops help private sector professionals and

law enforcement representatives from Federal, State, and local agencies learn how to prepare for, and respond to, an active shooter situation through facilitated discussion.

Through the course of the exercise, participants evaluate current response concepts, plans, and capabilities for coordinated response to an active shooter incident.

To register for an Active Shooter Workshop, contact ASworkshop@hq.dhs.gov.

Active Shooter Webinar On September 27, 2011, the Department hosted a 90-minute interactive

virtual roundtable designed to help the private and public sector understand the importance of developing an emergency response plan and the need to train employees on how to respond if confronted with an active shooter.

Participants learned about the three types of active shooters and how their planning cycles and behaviors differ. • Workplace/School• Criminal• Ideological

Access the Webinar at https://connect.hsin.gov/asaware2011

9

Risk Self-Assessment Tool (RSAT) A free and secure Web-based application to assist managers of

amusement and theme parks with the identification and management of security vulnerabilities. RSAT uses facility input in combination with threat and consequence estimates to conduct a comprehensive risk assessment

RSAT modules consists of the following:• Lodging • Racetracks• Convention Centers • Amusement and Theme Parks • Stadiums and Arenas • Performing Art Centers• Shopping Centers

• Available January 2013

10

Risk Self-Assessment Tool The tool provides the following two reports once the assessment is

complete: The Self-Assessment Report - provides facility management with

information regarding its existing security strengths, most vulnerable areas, and options for enhancements.

The Benchmark Report - compares the user’s facility to similar types of facilities that have completed RSAT assessments.

Additionally, RSAT incorporates Protected Critical Infrastructure Information (PCII) protections into the self-assessment process to ensure that the information entered into RSAT will be protected from public disclosure under the Freedom of Information Act and similar State and local disclosure laws, and from use in civil litigation or as the basis for regulatory action.

1. Facility recognizes need to pursue risk assessment.

2. Requests User ID via RSAT Secure Portal(https://RSAT.ANL.GOV)

3. Registration is vetted & approved;facility receives User ID/Password.

4. Facility completes the RSAT survey.

5. Assessment Report now available. (Submission to DHS is optional but required to access Benchmark Report).

6. Once 25 facilities of the same type have submitted data, a Benchmark Report is available.

RSAT Lifecycle

12

DHS Awareness Training Courses Training Courses

– Surveillance Detection Training for Commercial Infrastructure Operators and Security Staff Course (3 day)

– Protective Measures Course (2 day)– Bombing Prevention Workshop (1 day)– Private Sector Counterterrorism

Awareness Workshop (1 day)– IED Search Procedures (1 day)– IED Awareness Bomb Threat

Management Workshop (4 hrs)– Soft Target Awareness Course (4 hrs)

For more information e-mail the Office of Infrastructure Protection at OBP@dhs.gov

13

Online Training Courses IS 906 Workplace Security Awareness

– This course provides guidance to individuals and organizations on how to improve the security in your workplace. No workplace—be it an office building, construction site, factory floor, or retail store—is immune from security threats.

IS 907 Active Shooter: What You Can Do– Upon completing this course, the participant will be able to:

• Describe actions to take when confronted with an active shooter and responding law enforcement officials.• Recognize potential workplace violence indicators. • Describe actions to take to prevent and prepare for potential active shooter incidents.• Describe how to manage the consequences of an active shooter incident.

– This course is not written for law enforcement officers, but for non-law enforcement employees. The material may provide law enforcement officers information on recommended actions for non-law enforcement employees to take should they be confronted with an active shooter situation.

IS 912 Retail Security Awareness: Understanding the Hidden Hazards The purpose of this course is to make persons involved in commercial retail operations aware of the

actions they can take to identify and report suspicious purchases or thefts of products that actors could use in terrorist or other criminal activities.

14

Training Videos An example of awareness materials developed for

industry employees.– Developed in collaboration with industry

professionals– Provides information to help employees identify

and report suspicious activities and threats in a timely manner

– Available at www.dhs.gov/cfsector (streaming and downloadable)

• No Reservations: Suspicious Behavior in Hotels (Spanish version now available)

• Check-it What’s in the Bag• What’s In Store

Options for Consideration in the event of an Active Shooter incident– Available for download on HSIN-CS

16

SSTEP Series Sector-Specific Tabletop Exercise Program; designed for each sector for use by

the critical infrastructure owner and operators. Provide CI O/O with useful exercise planning and conduct template to address sector-specific threats, issues, and concerns.– Information Sharing Series

• Retail• Lodging• Sports Leagues• Outdoor Events (Amusement and Theme Parks)• Dams• Chemical Facilities

– Supply Chain– Major Earthquake– Workplace Aggression

17

In Production Online Training

Surveillance Awareness (early 2013) Best Practices for Screening Patrons at Public Assembly Venues guide SSTEP for Cyber threats Information Sharing Exercise Series for Gaming Industry, with SSTEP to

follow VBIED Awareness Workshop Series

For more information visit:www.dhs.gov/criticalinfrastructureAndrea Schultz, andrea.schultz@hq.dhs.gov

Jim Hardy, james.hardy@hq.dhs.gov

CFSTeam@hq.dhs.govwww.dhs.gov/cfsector