Antiterrorism Planning for Corporations methodology

I. Threat Vulnerability Assessment

As security professionals, we do a lot of these. The TVA is an honest assessment of the threats facing a particular facility. Don't forget to include problems not always associated with terrorism, such as crime, fraud, etc. Since the aim is to produce a security plan that will be used every day, you might as well include all the security problems you face daily. The later steps help harden your facility against all sorts of security threats, not just terrorism.

A popular formula for Risk is Threat X Vulnerability X Impact, and there are many more.

There are a number of software tools that you can employ in this stage: RAMCAP Plus, SVA Pro, CARVER Shock, ASVACO, etc. Your choice will likely be influenced by your industry, budget, and experience.

Once you have identified your vulnerabilities, fix them.

II. Security Measures

In this stage, we build in security measures that will allow us to smoothly escalate the degree of protection we have in place in consonance with an increase in the alert or threat level.

III. Observation

This stage, and the next, are the heart of antiterrorism security operations. Most terrorist attacks are preceded by a period of surveillance to determine target suitability and target defensive measures. Given enough time, a terrorist could determine enough information about a target to put the odds of a successful attack in his favor.

We can watch for this surveillance, though, and pass it on to counterterrorism forces, who can mount a countersurveillance operation to destroy the terrorist group.

The act of observation also sends an important message to terrorists - we are watching, and we are ready for you. That alone is usually enough to convince them to move on.

Recent advances in artificial intelligence technology can support the observation function.

IV. Random Antiterrorism Measures

Change one small feature of your defensive plan every day. Any terrorist watching will quickly realize that they cannot predict with any accuracy what your defensive measures will be on any given day, and they will see that you have a plan. They will conclude that you are a hard target, and they will likely move on.

V. Response

As security professionals, we do a lot of this too. We have response plans for all sorts of emergencies. We will add to this response plans for surveillance detection, bomb attack, arson attack, active shooter scenario, hostage-taking, etc.

All this, and a lot more, is available in The Sword and The Shield: Antiterrorism Planning for Corporations and Non-Governmental Organizations

What is terrorism?

The definition that I prefer is: "A violent act where the victim is not the intended target."

For example, the USS Cole and its crew were the victims of a suicide bombing by al Qaeda in October of 2000, but the target was US policy in the Middle East.

Following this definition, a kidnap for ransom is considered terrorism.