Andrea Schultz from the Department of Homeland Security, Commercial Facilities Sector, Power Point Presentation from the 2012 FTI Seminar on Venue Emergency Preparedness.

1. The Office of Infrastructure Protection
National Protection and Programs Directorate
Department of Homeland Security
Commercial Facilities Sector Specific Agency Overview
Fox Theatre Institute Seminar
13 November 2012

2. Commercial Facilities Overview
 CF is a diverse, vast and virtually unregulated sector consisting of eight
distinct subsectors; Retail, Lodging, Sports Leagues, Real Estate, Gaming
Entertainment and Media, Outdoor Events and Public Assembly.
 CF resources and products fall into a number of categories: 1) facility
assessment tools; 2) awareness materials – posters, videos, and webinars;
3) training materials and on-line courses; 4) protective measures guides;
5) leveraging efforts and resources of public and private sector partners.
 The public-private partnerships are completely voluntary and need to
account for the concerns and priorities of the private sector
 CF business model is open access with high volume of persons going
through the facility. Therefore security measures have to be tailored to
those concerns and heavily reliant on the awareness and training of
employees.

3. DHS Programs Overview
 Active Shooter Program
 Risk Self- Assessment Tool
 Protective Security Advisor Program
 DHS Awareness Training Courses
 Protective Measures Guide
 Training Videos
3

4. Active Shooter Program
 The Department has developed a multimedia package to assist commercial
facilities owners and operators on how to prepare for and respond to an
active shooter in their facility. The components that make up the Active
Shooter program includes the following:
• Active Shooter: How to Respond Materials
• Active Shooter: What You Can Do - Independent Study Course
• Active Shooter: Workshop Series
• Active Shooter: Webinar

5. Active Shooter – How To Respond Materials
 Material consists of 3 products:
– Basic Guide Book
– Break Room poster
– Pocket Emergency Measures
Guide
 FEMA Emergency Management
Institute online training: (IS-907)
Active Shooter, What You Can Do
http://training.fema.gov/EMIWeb/IS/
IS907.asp
5

6. Active Shooter: What You Can Do-
Independent Study Course
 The Department has developed an
independent online study
course, Active Shooter: What You Can
Do, to provide Commercial Facilities
Sector owners, operators, and
employees with guidance on how to
prepare for and respond to active
shooter crisis situations. (over
125,000 completed)
 Access this course through the
Federal Emergency Management
Agency Emergency Management
Institute at
http://training.fema.gov/EMIWeb/IS/IS
907.asp.
 Trainer’s packet to be available soon.
In final stages of development.
6

7. Active Shooter Workshop Series
 These scenario-based workshops help private sector professionals and law
enforcement representatives from Federal, State, and local agencies learn
how to prepare for, and respond to, an active shooter situation through
facilitated discussion.
 Through the course of the exercise, participants evaluate current response
concepts, plans, and capabilities for coordinated response to an active
shooter incident.
 To register for an Active Shooter Workshop, contact
ASworkshop@hq.dhs.gov.

8. Active Shooter Webinar
 On September 27, 2011, the Department hosted a 90-minute interactive
virtual roundtable designed to help the private and public sector understand
the importance of developing an emergency response plan and the need to
train employees on how to respond if confronted with an active shooter.
 Participants learned about the three types of active shooters and how their
planning cycles and behaviors differ.
• Workplace/School
• Criminal
• Ideological
 Access the Webinar at https://connect.hsin.gov/asaware2011

9. Risk Self-Assessment Tool (RSAT)
 A free and secure Web-based application to assist managers of
amusement and theme parks with the identification and management of
security vulnerabilities. RSAT uses facility input in combination with threat
and consequence estimates to conduct a comprehensive risk assessment
 RSAT modules consists of the following:
• Lodging
• Racetracks
• Convention Centers
• Amusement and Theme Parks
• Stadiums and Arenas
• Performing Art Centers
• Shopping Centers
• Available January 2013
9

10. Risk Self-Assessment Tool
 The tool provides the following two reports once the assessment is
complete:
 The Self-Assessment Report - provides facility management with
information regarding its existing security strengths, most vulnerable
areas, and options for enhancements.
 The Benchmark Report - compares the user’s facility to similar types of
facilities that have completed RSAT assessments.
 Additionally, RSAT incorporates Protected Critical Infrastructure Information
(PCII) protections into the self-assessment process to ensure that the
information entered into RSAT will be protected from public disclosure
under the Freedom of Information Act and similar State and local disclosure
laws, and from use in civil litigation or as the basis for regulatory action.
10

11. RSAT Lifecycle
1. Facility recognizes need 2. Requests User ID via 3. Registration is vetted & approved;
to pursue risk assessment. RSAT Secure Portal facility receives User ID/Password.
(https://RSAT.ANL.GOV)
4. Facility completes the 5. Assessment Report 6. Once 25 facilities of
RSAT survey. now available. the same type have
(Submission to DHS is submitted data, a
optional but required to
Benchmark Report is
access Benchmark Report).
available.

12. DHS Awareness Training Courses
 Training Courses
– Surveillance Detection Training for
Commercial Infrastructure Operators
and Security Staff Course (3 day)
– Protective Measures Course (2 day)
– Bombing Prevention Workshop (1
day)
– Private Sector Counterterrorism
Awareness Workshop (1 day)
– IED Search Procedures (1 day)
– IED Awareness Bomb Threat
Management Workshop (4 hrs)
– Soft Target Awareness Course (4 hrs)
 For more information e-mail the Office of
Infrastructure Protection at
OBP@dhs.gov
12

13. Online Training Courses
 IS 906 Workplace Security Awareness
– This course provides guidance to individuals and organizations on how to improve the security in your
workplace. No workplace—be it an office building, construction site, factory floor, or retail store—is
immune from security threats.
 IS 907 Active Shooter: What You Can Do
– Upon completing this course, the participant will be able to:
• Describe actions to take when confronted with an active shooter and responding law enforcement
officials.
• Recognize potential workplace violence indicators.
• Describe actions to take to prevent and prepare for potential active shooter incidents.
• Describe how to manage the consequences of an active shooter incident.
– This course is not written for law enforcement officers, but for non-law enforcement
employees. The material may provide law enforcement officers information on
recommended actions for non-law enforcement employees to take should they be
confronted with an active shooter situation.
 IS 912 Retail Security Awareness: Understanding the Hidden Hazards
 The purpose of this course is to make persons involved in commercial retail operations
aware of the actions they can take to identify and report suspicious purchases or thefts of
products that actors could use in terrorist or other criminal activities.
13

14. Training Videos
 An example of awareness materials developed for
industry employees.
– Developed in collaboration with industry
professionals
– Provides information to help employees identify
and report suspicious activities and threats in a
timely manner
– Available at www.dhs.gov/cfsector
(streaming and downloadable)
• No Reservations: Suspicious Behavior in Hotels
(Spanish version now available)
• Check-it What’s in the Bag
• What’s In Store
 Options for Consideration in the event of an
Active Shooter incident
– Available for download on HSIN-CS
14

16. SSTEP Series
 Sector-Specific Tabletop Exercise Program; designed for each sector for use by
the critical infrastructure owner and operators. Provide CI O/O with useful
exercise planning and conduct template to address sector-specific
threats, issues, and concerns.
– Information Sharing Series
• Retail
• Lodging
• Sports Leagues
• Outdoor Events (Amusement and Theme Parks)
• Dams
• Chemical Facilities
– Supply Chain
– Major Earthquake
– Workplace Aggression
16

17. In Production
 Online Training
 Surveillance Awareness (early 2013)
 Best Practices for Screening Patrons at Public Assembly Venues guide
 SSTEP for Cyber threats
 Information Sharing Exercise Series for Gaming Industry, with SSTEP to
follow
 VBIED Awareness Workshop Series
17

18. For more information visit:
www.dhs.gov/criticalinfrastructure
Andrea Schultz, andrea.schultz@hq.dhs.gov
Jim Hardy, james.hardy@hq.dhs.gov
CFSTeam@hq.dhs.gov
www.dhs.gov/cfsector