Hoax threats can be scary, too.

January 09, 2017

Should we be worried? At this time the experts conclude that the series of incidents referencing threats against schools, Jewish facilities and businesses likely do not represent a credible terrorist threat for two reasons:

  1. terrorists’ rarely provide operational insight into their planning, and
  2. the fact that nearly all hoaxes in the United States are conducted by criminal actors or those instigating a nuisance prank.

Due to the common occurrence of bomb threats across the country over the last few years, the experts judge malicious terrorism hoaxes such as bogus emails and phoned-in threats, including robo-calls, will almost certainly continue, diverting resources as they create disturbances and send false alarms. However, don’t become blasé. Someone might take advantage of the hoaxes to accomplish a real attack.


What should we be doing? Consider these incidents to be a teaching moment. How would your organization handle such threats.

  1. Know what you should do. Have a bomb threat plan before an incident happens.  For starters, check out DHS’ Bomb Threat Guidance and Introduction to Bomb Threat Management. Add JCRC-NY’s post, Manhattan bomb threat: lessons learned to your reading list. Now is a good time to review, or to think through your own plans. Our own Emergency Planning: Disaster and Crisis Response Systems for Jewish Organizations has a longer chapter discussing the issue.
  2. Train your phone answerers. Everyone answering the phone (including those who might answer) should be taught how to handle a phone threat with this checklist. Have copies of the bomb threat checklist posted nearby.
  3. You have to communicate.
    • First things first. Call 911. Bring in the cavalry…ASAP. Whether you think the incident is real or a hoax, contact the experts and defer to them. Have a system (with primary and backup callers) that ensures that someone calls 911 immediately. Remember, don’t use a cell phone or walkie-talkie in the area of a suspicious package … you might set it off. Get to your landline.
    • Get the word out. Even if your people know what to do (i.e., you’ve conducted bomb scare drills) you have to let them know that they have to do it. Does your building have a public address system? Do you have cell phone numbers for all of your staff so that you can text them with updates? Can you modify your fire alarm system so that it sounds a distinctive signal for a bomb scare?
    • Let your constituencies know what’s happening. Bomb scares create angst and the possibility of physical danger, but there is the potential for risk to your reputation. No one wants a parent to learn about an incident from the media. Have pre-written messages ready for distribution directly to your constituencies (e.g., by text) stressing the steps you’ve taken and that everyone is safe. Have a point of assembly where worried parents can go for additional information from your best staffers. Work with the police to direct people to the appropriate areas. Do not post specifics on social media.  Click here for resources on crisis communication.
  4. Decisions, decisions. Have someone in charge (and a backup). OK, you receive a threat, now what? Certainly, dial 911, but should you evacuate or not (might someone use a bomb threat in order to trigger an evacuation setting up an active shooter or vehicle ramming?)? In reality there is no perfect answer to this question. Someone has to give the order and there will be no time to waste.
  5. Know where to go. If you decide to evacuate out of an abundance of caution you probably don’t want to stand in the street, especially if the weather is bad. Do you have an agreement with a neighboring institution that allows you to bring people into their facility. By doing so you can keep your people warm and dry and out of harms way.
  6. Keep unused parts of your building locked. It’s good practice to have your staff check your facilities daily, looking for something that “Just Doesn’t Look Right”. As they move through the rooms they should lock the doors. Closets and other storage areas should be kept locked. If you develop such procedures and do receive a bomb threat, the bomb sweep of your building can be accomplished faster.
  7. Consult your leadership about security plans. There will always be Monday morning quarterbacks, but a review of your plans at the Board level should empower those making difficult decisions under duress. As they say, “once is not enough.” Revisit security planning and procedures on a regular basis.

How can we know if the threat is real? The intelligence firm, Stratfor, recently published an article: How to distinguish a bomb threat from a bomb warning. The experts suggest some other possible indicators of a hoax:

  • Most genuine bombers wouldn’t specify the exact timing and target of an attack (since providing that information would jeopardize the success of an event);
  • Most genuine bombers wouldn’t use threats with complex scenarios involving chemical weapons or other advanced capabilities, or cite geographically dispersed targets; and
  • Most genuine bombers wouldn’t use threats involving large numbers of operatives.

Remember, there are no guarantees in security. You will have to weigh the options and make the best decisions possible. If you’ve thought about the options and have made decisions ahead of time, the odds of making the right decision increase dramatically.

Lessons learned: Aventura, FL bomb plot

May 09, 2016

The FBI arrested James Gonzalo Medina (aka James Muhammad) on April 29, 2016 for attempting to use a weapon of mass destruction against persons or property within the United States. Click here for the “Lessons Learned”.

The allegations

Aventura-Turnberry Jewish Center
Aventura-Turnberry Jewish Center

According to a complaint filed with the US District Court for the Southern District of Florida at a hearing on May 2, 2016, Medina was arrested after he attempted to place what he believed to be an improvised explosive device (IED) at the Aventura Turnberry Jewish Center (a large Conservative synagogue) in Aventura, Florida. The device Medina attempted to place and remotely detonate was never operable due to FBI intervention.

Medina, according to the complaint, had stated his desire to conduct an attack, saying it was to “strike back to the Jews” because “It’s a war man and it’s like it’s time to strike back here in America.”

On March 27, 2016, Medina and two associates allegedly discussed an interest in conducting an attack on a synagogue. One of the associates subsequently relayed Medina’s intentions to die in a shooting at a synagogue in Aventura to the FBI. According to the complaint, on or about April 1, 2016, Medina confirmed his desire to conduct a weapons attack using AK-47 rifles and that, if he were to conduct an attack, he would want to do it at a synagogue. Medina further explained his desire to become a martyr in the attack. When Medina was told that there was a Jewish holiday in a few weeks, Medina responded by saying that it would be a good time to attack. He also allegedly discussed hiding a bomb in the bathroom.

The complaint alleged that Medina created a flyer that contained a photo of the ISIS flag and the words “ISIS in America;” and that he made three videos, saying, “I am a Muslim and I don’t like what is going on in this world…Aventura, watch your back. ISIS is in the house;” “Today is gonna be a day where Muslims attack America. I’m going to set a bomb in Aventura;” and one saying goodbye to his family.

On the day of his arrest, Medina allegedly took possession of what he believed to be an explosive device in a parking lot in Hallandale Beach, FL. He did not know that it was inert and of no danger to the public. He was arrested upon his arrival at the synagogue. Read More Lessons learned: Aventura, FL bomb plot

Brussels attack analysis | get smart fast

March 27, 2016

Last week’s attack and sorting through the information overload is daunting. We regularly turn to a few knowledgeable sources to help to guide us when we’re perplexed. Here are a few examples:

  1. Foreign Fighters in Syria/Iraq (2012 to 2014) – per million population

    Founded in 1996, the International Institute for Counter-Terrorism (ICT) is one of the leading academic institutes for counter-terrorism in the world, facilitating international cooperation in the global struggle against terrorism. It is based at the Interdisciplinary Center (IDC), Herzliya and includes some of the top experts in terrorism, counter-terrorism, homeland security, threat vulnerability, risk assessment, intelligence analysis, national security and defense policy. See their The Brussels Attacks – What do we know? & Insights from ICT Experts.

  2. The National Consortium for the Study of Terrorism and Responses to Terrorism—better known as START—is a Department of Homeland Security Center of Excellence headquartered at the University of Maryland comprised of an international network of scholars committed to the scientific study of the causes and human consequences of terrorism in the United States and around the world. See their Terrorism in Belgium and Western Europe; Attacks against Transportation Targets; Coordinated Terrorist Attacks.
  3. The U.S. State Department issued a Travel Alert for Europe cautioning that terrorist groups continue to plan near-term attacks throughout Europe, targeting sporting events, tourist sites, restaurants, and transportation. The State Department also maintains a Worldwide Caution which highlights that all European countries remain vulnerable to attacks from transnational terrorist organizations.
  4. Stratfor is a geopolitical intelligence firm that provides strategic analysis and forecasting to individuals and organizations around the world. One of their recent analyses observes, “The Brussels blasts are a striking reminder of the difficulty of preventing attacks against soft targets. Unlike hard targets, which tend to require attackers to use large teams of operatives with elaborate attack plans or large explosive devices to breach defenses, soft targets offer militant planners an advantage in that they can frequently be attacked by a single operative or small team using a simple attack plan. In addition, attacks against transportation-related targets such as metro stations and airports allow attackers to kill large groups of people and attract significant media attention.” Alongside transportation hubs, hotels and restaurants, institutions — such as houses of worship and schools — are classic soft targets. See Brussels Blasts: The Struggle to Secure Soft Targets.
  5. Scott Atran is an anthropologist at France’s National Center for Scientific Research, Oxford University, John Jay College and the University of Michigan and author of Talking to the Enemy and In Gods We Trust. His research specialty is terrorists: how they are recruited, how they think, why are they so effective. He and his team are quite busy these days: he’s embedded with the Peshmerga outside of Mosul interviewing captured (and soon to be executed) ISIL fighters; his team is running experiments in neighborhoods like Molenbeek and around the Bataclan, and tracing out the networks of the friends, family and disciples of the Paris and Brussels terrorists. His, often raw, Facebook posts from the battlefield carry a surrealistic quality. He recently addressed the UN Security Council on The Role of Youth in Countering Violent Extremism and Promoting PeaceWe do not necessarily agree with every one of his conclusions, but he is consistently thoughtful and incisive.

Manhattan bomb threat: lessons learned

November 24, 2015
Bomb threat in Manhattan gets major NYPD response
Waiting for the “All-Clear” while a synagogue building is searched in a major response to a bomb threat in Manhattan. Photo: @ClarkPenaEH

Bomb threats are nothing new. Paris and Brussels have educated more Americans that terrorist attacks are a scary possibility, but the Jewish community has known that for a long time.

Dealing with a bomb threat is never easy, but in today’s environment, planning and cool heads are critical. Click here for a tool for bomb threat planning.

After the NYPD issued an all-clear, we spoke with Aaron Strum, Executive Director of The Jewish Center about his crazy day and “lessons learned”. This is what we learned:

  • Planning is where its at. Even the best organizations can make mistakes if they’re “just winging it”. If you receive a communication (phone, mail, email) what should you do first: evacuate or lockdown? Who’s going to call the police? Do you know what to tell them? Making those decisions during planning sessions is preferable to making them under pressure.
  • Secure-obp_dhs-doj-bomb-threat-guidance-imageGet everyone on the same page.  Often Jewish institutions house multiple organizations under the same roof. Every organization in the building should have the same plan, and there should be a single leader calling the shots. Everyone in the building should have the same training and participate in common exercises and drills.
  • Know who’s in charge…and who’s next. Ok, the call comes in, what’s the next step? Should you evacuate or shelter-in-place? There has to be a clear delineation of  command. At the same time, there have to be backups, with full authority to make decisions, in place.

We recently reviewed the emergency plans for a school that included the instruction, “If a threat is received, find Mr. Levine …” What if Mr. Levine is out of the building? The plan was silent. Should anyone call 911? The plan was silent. Everything stopped until Mr. Levine was found. Plans must be flexible and adaptable, rather than reliant on a single person.

  • When the cavalry comes over the hill, they’re in charge. OK, you have your plan and you like it. One element of your plan is to designate someone to be at the door to meet the first responders. Brief them about the details, but you’re probably going to have to repeat yourself when the next wave of police come (The UWS event had the precinct, Emergency Service Unit, Strategic Response Group and the Bomb Squad respond). Someone may overrule your plan. Assume that they know what they’re talking about.
  • You must be able to communicate.
    • Internally. That means PA systems, intercoms, walkie-talkies, texts, runners, whatever. Everyone in the building has to know what is happening so that they can execute their role in your plan.
    • Externally. Everyone will want to know what’s going on and you will be deluged by phone calls, texts, emails. Plan on that. Quick tips:
      • Forward your calls. Parents want to know that their kids are safe. Have the capacity to forward your calls from the main number to a cell phone or an alternate landline.
      • Mass notification system, phone trees, email groups or mass texting. There are many ways to do it, but people want to know something. There are services and software that can efficiently handle the problem using multiple channels (simultaneous email, landline and cell phone calls/texts) or you can set up your own system (e.g., free services like Google Hangouts or search for “group texting”). Bottom line: set something up ahead of time, draft sample messages and be ready.
      • Media nudnikim. Somehow, enterprising reporters will find you. Remember, your first responsibility is to your constituents, not the media. You don’t have to talk to them, at least until you have time to breathe. (See our  Disaster and Crisis Response Systems for Jewish Organizations, p. 171 ff)
  • Determine places of assembly. So, you’re evacuating and it’s 10° outside. Where should you go with your dozens or hundreds of students? Another school, a public place? In this case there was a synagogue building close by (which went into lockdown, at the advice of the NYPD), but don’t wing it. Find the best place and have a discussion with them ahead of time. Often, you can develop a mutual assistance agreement (See our  Disaster and Crisis Response Systems for Jewish Organizations, p. 111 ff). Also remember that you need dismissal/parental pickup plans that will work in the place of assembly.
  • Know your building. Before issuing an “all-clear” someone will have to search every place in your building that a bomb can be hidden.
    • Lock unused spaces. As a matter of course, keep unused spaces in your building and closets, elevator rooms, mechanical rooms, etc., locked. If spaces need not be searched the search will go quicker.
    • List hidden spaces. Every building has nooks and crannies hidden to most people, even to those using the building every day. Make  a list of those places, floor-by-floor. When the search for a device is underway, you don’t want them to miss anything.
  • Do a post-incident postmortem. Take the time to have the key players sit down to decide what went right and what went wrong. Then modify your plans accordingly.

 

Focus on resources: DHS Protective Security Advisors

August 03, 2015

PSA imageRecently, we received an inquiry from an out-of-state colleague. Some of his questions could be answered over the phone, but it was clear that an on-site consultation was in order.

I asked my colleague, “Do you know your Protective Security Advisor (PSA)?” He replied, “What?”

DHS employs PSA’s in all 50 states and many states have multiple regions. Our experience here in NY is that our PSA’s are a wonderful resource. They are hard-working, knowledgeable and professional.

  • Security surveys. Subject to time constraints you can ask your PSA to conduct security surveys and assessments of your facilities. We’ve joined our PSA’s during some of these sessions and their suggestions are both sound and pragmatic.
  • Training. PSA’s have access to a wide variety of training options, e.g. active shooters, suspicious packages, severe weather. Even if you don’t know your exact need, talk to them. They can open up a variety of resources for you.
  • Special events planning. Let them know if you are planning a high profile event. They can advise you on security and logistical issues.
  • Outreach. Get on their radar. They will invite you to various trainings and events.

Click here for more information on Protective Security Advisors. To contact your local PSA, please contact PSCDOperations@hq.dhs.gov. To contact NY PSA’s or if you have questions or need other assistance please complete the form below.

Updated: Bomb Threat Guidance 2013

June 25, 2013

OBP_DHS DOJ Bomb Threat Guidance Image

Did you hear the one about a forgetful British bridegroom who made a hoax bomb threat rather than admit he’d neglected to book the venue for his wedding? He was sentenced to a year in jail.

What should you do if your organization receives a threat? The FBI and DHS released a new “pocket” bomb threat guidance document available here. It provides a two-page overview to help  you deal with bomb threats: planning and preparation, your “emergency toolkit”, what you should do if you receive a threat, how to assess the threat and the possible responses.

Now is a good time to review, or to think through your own plans. Our own Emergency Planning: Disaster and Crisis Response Systems for Jewish Organizations has a longer chapter discussing the issue. Learn how to handle a phone threat with this checklist.

Finally, read an New York Times account of an October 15, 2012 bomb threat (with an actual pipe bomb) to the Home Depot store in Huntington, NY. The store’s bomb threat plan was put to good use.

Kudos to Manhattan DA and NYPD on synagogue bomb plot conviction

December 05, 2012
Mayor Bloomberg, DA Cy Vance and Police Commissioner Kelly announce the arrests of two plotting to blow up Manhattan synagogues.

More tips for package screening

November 03, 2010
Wall Street Journal, “Focus on Cargo Security Steps”, November 1, 2010

We continue to advise Jewish institutions to carefully screen their mail and packages. Be suspicious of any item coming from an unknown sender, especially unknown senders from overseas.

If you receive a package from an unknown sender and suspect that it could be an explosive device or it may contain a hazardous substance, do not disturb it, do not try to open it. Leave the room, close the door and call 911.  For specific steps see steps below.

The packages from Yemen discovered last week were designed to be hard to detect, even with an x-ray device. They prove that terrorist tactics are evolving and adapting to our security measures.

Although none of the following suggestions can definitively “rule-in” or “rule-out” a shipment, think about the following before opening any parcel:

  • Was the delivery from an expected shipper? Did your usual UPS driver deliver the package? Was the package from one of your regular vendors? (e.g., The NYPD received a call this week about a printer toner delivery to a Jewish institution. The caller was questioned and told that, because they had ordered the toner and it came from their usual office supply company, the shipment should not be considered suspicious.) Even if the package is from a regular supplier, did it come from the right address. Did it come from overseas?
  • Even without sophisticated equipment you can often tell when something is wrong. Use your “Just Doesn’t Look Right” instincts.
    • Was the package professionally packed? People who regularly order over the internet can probably answer this question.
    • Did someone tamper with this box? Does it appear that the package was opened and resealed? Are there additional layers of tape or different tape and/or fasteners? Are there cut marks on the packaging?
    • Was the package one of a dozen or all by itself?
  • Talk to your mail carrier, FedEx and UPS deliverer. They are your first line of defense and they probably know what kind of packages they deliver to your facility. Ask them about any briefings received about the screening done at their central facilities. Let them know, in a friendly way, that you are “counting on them”.

Recommended mail protocols (from previous post)
We recommend that organizations consider and adopt formal mail screening protocols, appropriate for their organization, staff and building. Your protocols should consider that a variety of hazards can arrive by mail, including explosives and toxins.

Your protocols may include steps, such as:

  1. Larger organizations should continue to screen and x-ray their mail. The USPS best practices for mail center security can be found here. It contains an excellent chapter, “Protect Your Business from Package Bombs and Bomb Threats”.
  2. All organizations, large and small, need to examine all mail and packages, whether delivered via the post office, UPS, FedEx, other carrier or hand delivered.
  3. Whether or not your organization has a mail room, designate and train specific people to screen your organization’s mail. Make sure that they know what your screening protocols are and know what to do if they find anything suspicious.
  4. Screen your mail in a separate room. That way if you find anything suspicious, you can easily isolate it.
  5. If you believe that an envelope or package contains a hazardous substance (e.g., an unknown white powder) instruct your screener to avoid inhaling the particulates, wash his/her hands with soap and room temperature water and isolate him/her in an adjoining, designated area away from the substance and await instructions from the first responders (This will take some planning. You don’t want anyone walking past the other employees and possibly contaminating them).
  6. If you deem an item to be suspicious: 
    • Do not open it.
    • Do not shake it.
    • Do not examine or empty the contents.
    • Leave the room.
    • Close the door.
    • Alert others in the area.
    • Call 911.
    • Shut down your HVAC (heating, ventilation and cooling) systems, if possible.
    • Consider whether you want to vacate your premises.

If you have a specific question about a package mailed to you, you can contact:

USPS POSTAL INSPECTION SERVICE
PO BOX 555
NEW YORK NY 10116-0555
Phone : 877-876-2455
Thanks to MSA Security for many of these ideas.Check out more security, counterterrorism and emergency preparedness guidance at: www.jcrcny.org/securityresources.

Rethinking mail screening

November 01, 2010

Due to critical intelligence information two sophisticated explosive devices shipped via air cargo with explosives were intercepted before detonation. John Brennan, the deputy national security adviser, said on Sunday that there might be additional devices like the two discovered last Friday.

Both of these packages were addressed to former addresses of synagogues in the Chicago area. However, investigators are still attempting to determine whether the devices were meant to explode in transit or at their ultimate destination.

General guidance
We continue to advise Jewish institutions to carefully screen their mail and packages. Be suspicious of any item coming from an unknown sender, especially unknown senders from overseas. Both devices were sent from Yemen, but some analysts speculate that terrorists might send devices to other countries for subsequent rerouting.

If you receive a package from an unknown sender and suspect that it could be an explosive device or it may contain a hazardous substance, do not disturb it, do not try to open it. Leave the room, close the door and call 911. Other suggestions for mail screening are provided below.



Classic suspicious mail guidance
While the classic mail and package security guidance is still applicable, terrorists are highly intelligent and adaptable. Remember: Be suspicious of any item coming from an unknown sender, especially unknown senders from overseas. It also pays to be wary of envelopes and/or packages with the following markers, even if the package is sent from the U.S.:

  • No return address
  • Restrictive markings (e.g., confidential, personal)
  • Rigid or bulky
  • Strange odor
  • Lopsided or uneven
  • Excessive tape or string
  • Misspelled words/outdated names or titles
  • Addressed to title only (e..g., “Chief Executive Officer” rather than “John Doe, Chief Executive Officer”)
  • Incorrect title
  • Badly typed or written
  • Possibly mailed from a foreign country
  • Excessive postage

Recommended mail protocols 
We recommend that organizations consider and adopt formal mail screening protocols, appropriate for their organization, staff and building. Your protocols should consider that a variety of hazards can arrive by mail, including explosives and toxins.  Your protocols may include steps, such as:

  1. Larger organizations should continue to screen and x-ray their mail. The USPS best practices for mail center security can be found here. It contains an excellent chapter, “Protect Your Business from Package Bombs and Bomb Threats”.
  2. All organizations, large and small, need to examine all mail and packages, whether delivered via the post office, UPS, FedEx, other carrier or hand delivered.
  3. Whether or not your organization has a mail room, designate and train specific people to screen your organization’s mail. Make sure that they know what your screening protocols are and know what to do if they find anything suspicious.
  4. Screen your mail in a separate room. That way if you find anything suspicious, you can easily isolate it.
  5. If you believe that an envelope or package contains a hazardous substance (e.g., an unknown white powder) instruct your screener to avoid inhaling the particulates, wash his/her hands with soap and room temperature water and isolate him/her in an adjoining, designated area away from the substance and await instructions from the first responders (This will take some planning. You don’t want anyone walking past the other employees and possibly contaminating them).
  6. If you deem an item to be suspicious: 
    • Do not open it.
    • Do not shake it.
    • Do not examine or empty the contents.
    • Leave the room.
    • Close the door.
    • Alert others in the area.
    • Call 911.
    • Shut down your HVAC (heating, ventilation and cooling) systems, if possible.
    • Consider whether you want to vacate your premises.

    Plot Involving Suspicious Packages

    October 31, 2010
    Key Points from the NYPD
    • Since Thursday night, law enforcement officials identified two suspicious packages addressed to two synagogues in Chicago. 
    • Initial reports indicate that the packages contain explosive material. Forensic analysis is underway. 
    • The packages were discovered in Dubai and East Midlands Airport in the United Kingdom. 
    • Cargo planes at Newark International Airport and Philadelphia International Airport originating in Yemen were searched for similar suspicious packages. 
    • Media reports indicate that one woman was arrested in Yemen on suspicion of mailing the packages and that authorities are searching for others.
    Implications for New York City 
    • The NYPD is working closely with our federal partners in the intelligence community to investigate this incident. 
    • At this time, there is no known specific threat to New York City connected to this incident. 
    • The NYPD recommends that all New Yorkers remain vigilant. 
    • In the event a suspicious package is found, call 911 and do not handle it.
    Implications for the Jewish community
    • There are no known additional specific threats to Jewish institutions at this time.
    • Jewish institutions continue to be targeted by those wishing to attack the United States.
    • Jewish communal institutions should review their security precautions and ensure continued vigilance, both for mail and direct threats.
    • Jewish communal institutions and known leaders should be suspicious of any packages from unknown senders. Terrorists know how to adapt. Do not assume that bombs only come from Yemen. 
    • In the event a suspicious package is found, do not handle it and call 911. Be prepared to evacuate your building.