Indicators and response

It is extremely difficult to prepare for and prevent acts of extortion, politically motivated violence or criminal attack due to the covert nature of the activities. Therefore it is imperative everyone be aware of potential targets and any unusual activities that may be indicative of such acts. Should suspected acts of violence be identified, it is crucial that the response to the potential threat be appropriate. If you believe an attack has occurred, you should immediately contact Police and Emergency Services personnel.

If you receive a threat by phone, use the Threat Checklist (PDF, 206KB) to record information for the police.

On this page:

General indicators of an attack
Bomb Incidents
Chemical Incidents
Biological Incidents
Summary

General Indicators

There are a number of indicators that precede many such attacks, regardless of the type of threat or the type of target.

Surveillance - Photography or videotaping
Loitering - Access to secure or even unsecured areas by unknown or unidentified persons with no reasonable excuse.
Information requests - Requests for plans, blueprints, or engineering specifications for buildings by those who have no official reason to have them.
Inappropriate clothing - People wearing inappropriate clothing relative to the weather (e.g. excessive clothing worn on warm days).
Multiple indicators - It may be difficult to accurately identify potential terrorist behaviour on the basis of a single indicator. Multiple indicators, however, should arouse considerable suspicion and caution.

Bomb Incidents
Indicators of a Bomb Incident

Indicator	Description
Explosion / Bomb	A bombing is no indication the incident is over. The initial bomb may be designed to draw people into the vicinity of a secondary device to inflict further casualties.
Suspicious packages	Unidentified or unattended packages or other containers should be treated as suspicious. This includes packages/envelopes which arrive in the mail from unknown senders or which have a peculiar odour, or do not have a clear return address.
Suspicious vehicles	Unattended and unoccupied vehicles parked in unauthorised or inappropriate locations, particularly those in close proximity to buildings should be considered suspicious. Particular attention should be paid to vans, trucks or other vehicles that can be used to carry and conceal heavy loads.

Response to a Bomb Incident

Whether it is a car bomb, mail bomb, or suspicious package or device, the following guidelines should be used in dealing with any suspicious item believed to be an explosive.

Turn off all electronic equipment. Radios, pagers, and mobile phones may cause an explosive device to detonate. Use traditional landline telephones to call authorities.
If a suspicious package or device is found, DO NOT TOUCH IT. Immediately evacuate the area and have all people move as far as is possible away from the suspicious package or device.
Remember this. If you can see the suspicious package or device, it can see you. Evacuate to a position of safety where you cannot see the device. Therefore if it explodes, you greatly reduce the likelihood of being injured.

If you are in a building or structure, particularly a high-rise building that is a target of terrorist activity, consider the following:

During the initial attack, you should seek cover under desks or tables. If these items are not readily available, move against an interior wall and protect your head with your arms. Move away from windows and balconies.
If you are able, immediately evacuate the area and move to a safe location.
During evacuation procedures, immediately move away from the targeted location and seek shelter inside a secure area. Glass windows and other building materials may be dislodged and may fall outwards several hundred meters.
If you are outdoors near the targeted location during the initial attack, duck behind an item that will provide you cover, such as a tree or doorway, and get down as low as possible. After the initial attack, move to a safe area away from the targeted location. Stay out of damaged buildings.
Consider the possibility of additional attacks or secondary explosions.

Chemical Incidents
Indicators of Chemical Incident

Chemical agents are a means by which terrorist groups may conduct attacks against urban populations. Some examples of chemical agents include:

Nerve agents: Man made, extremely toxic.
Choking agents: Gases that cause immediate coughing and choking.
Blister agents: These are usually liquids and evaporate slowly. An example is Mustard Gas. Symptoms include reddening of the skin and blistering.
Blood agents: These are inhaled. An example is Hydrogen Cyanide. Symptoms include a flushed face with red lips, frothing at the mouth, vomiting, unconsciousness, and death.

During a chemical terrorist attack, the best place to be is on high ground far from the dissemination location. This is because most chemical agents are heavier than air and tend to stay near the surface of the ground.

Indicator	Description
Dead Animals/ Fish	Numerous animals dead in the same area.
Blisters / Rashes	Numerous individuals experiencing unexplained water-like blisters, weals (like bee stings) and/or rashes.
Mass Casualties	Health problems including nausea, disorientation, difficulty in breathing, convulsions and death.
Patterns of casualties	Casualties will likely be distributed downwind, or if indoors, by the ventilation system.
Unusual Liquid Droplets	A number of surfaces exhibit oily droplets/film. Water surfaces may also have an oily film on the surface.
Dead / Withered Vegetation	Trees, bushes, food crops and/or lawns that are dead, discoloured or withered, without drought conditions.
Unexplained odours	Smells ranging from fruity to flowery, sharp/pungent, or garlic/horseradish like bitter almonds. All smells will be completely out of character for the surroundings.
Low-lying Clouds	Unusual low-lying cloud and fog-like conditions.

Response to a Chemical Incident

Biological and chemical agents may be disseminated in a variety of fashions, including the use of letters or packages containing these agents. If you receive a letter or package that you suspect is contaminated, do the following:

Handle the letter or package with care. Don't shake/bump it. Even better-don't handle it.
Isolate the package or mail.
Shut down the air conditioning or ventilation system.
Don't open, smell, taste or touch it. This includes your clothing.
Ensure all persons who handled the package wash their hands with soap and water.
Do not brush your clothing.
Remove clothing and place it in a plastic bag as soon as possible (removing of clothing can remove about 80% of the contaminant).
Shower with soap and water. Do not use bleach or other disinfectants.
Make a list of all the people who had contact with the substance or package and give it to the investigating authorities.

This advice still applies if the agent is disseminated by other means - for example, through a ventilation system or some other dispersal method.

Biological Incidents
Indicators of a Biological Incident

There are two basic forms of biological agents. They are bacteria/viruses, and toxins. These agents comprise living organisms. Examples of bacteria are Anthrax and Pneumonic Plague. Examples of viruses are Smallpox and Ebola. Toxins are poisonous substances produced by plants or animals, and include examples such as Botulism and Ricin. Toxins and bacteria, such as Anthrax, are not contagious. However, viruses such as Smallpox are contagious and may be spread from person to person.

Characteristics of biological agents include the following:

No immediate effect. The symptoms take time to appear, from hours/weeks.
They must be inhaled or ingested. They do not penetrate unbroken skin.
They are adversely affected by weather conditions such as sunlight. Therefore, they are more likely to be used at night or in enclosed areas.
Likely to be spread through the use of aerosols.
Symptoms include flu-like symptoms.

There are no characteristic or immediate signatures of the release of biological agents as they are usually colourless and odourless. A biological incident can therefore only be determined on the basis of its effects upon the surrounding area, and generally after a period of time.

Indicator	Description
Unusual number of sick and dying	Casualties may occur minutes to hours to days or weeks after an incident has occurred. The time required before symptoms are observed is dependent on the agent used.
Unscheduled and Unusual Spray	Especially outdoors during periods of darkness.
Abandoned Spray Devices	Devices will have no distinct odours.

Response to a Biological Incident

As per the response for a chemical attack.

Summary

No one likes to think of the "worst-case". But security and business continuity planning is essential for your own safety, and the well-being of your business. This chapter is of necessity, brief. Each business has its own unique situation, and the planning section hopes to raise questions for individual organisations to seek answers as they go about their business planning. The identification and response guides will act as a resource for all businesses faced with such incidents. By adopting the risk management principles outlined earlier, and using the Business Continuity Checklist, your business can be better prepared. Theft, violent crime, fraud, and politically motivated violence all pose a significant threat to Australian businesses. When combined with the potential for naturally occurring hazards and the day-to-day risks of running a business, planning is essential. Do it now!