Antiterrorism Level 1 Pre Assessment Guide for Threat Awareness Training

Prioritize threat spotting skills by focusing on specific cues such as repeated observation of entry points, unusual interest in access routines, or unexplained proximity to restricted zones. These markers help build a reliable baseline for daily vigilance.

Strengthen decision-making by reviewing scenario types that highlight suspicious approaches, unexpected requests for internal details, or attempts to bypass identification procedures. Each situation trains rapid assessment grounded in location, intent, and behavior patterns.

Increase personal safety by practicing responses to abrupt changes in crowd movement, unattended items placed near infrastructure, or contact from individuals seeking unauthorized support. Consistent drills build confidence and reduce reaction delays during high-pressure moments.

Antiterrorism Level I Awareness Training Topics Overview

Follow the Department of Defense’s required curriculum outlined in official trainingguidance, which includes threat awareness, protective security measures, and basic countermeasures. :contentReference[oaicite:0]{index=0}

The course covers four core themes:

Anticipate–recognizing potential threat scenarios,

Be Vigilant–maintaining awareness of surroundings,

Don’t Be a Target–minimizing visibility and predictability,

Respond & Report–reacting and notifying authorities when suspicious behaviors occur. :contentReference[oaicite:1]{index=1}

Key topic modules include:

• Introduction to Terrorism and Common Attack Methods
• Force Protection Conditions (FPCON) and Threat Levels :contentReference[oaicite:2]{index=2}
• Surveillance Detection Techniques
• Insider Threats and Insider Security Awareness
• Active Shooter Fundamentals and Response Options :contentReference[oaicite:3]{index=3}
• Security During Off-Duty Activities (Travel, Hotels, Personal Premises)
• Travel Security: Air and Ground
• Hostage Survival Principles
• CBRNE Attack Indicators and Personal Protective Measures :contentReference[oaicite:4]{index=4}

Refer to the official Level I reference manual hosted on JKO’s Antiterrorism Electronic Library for detailed threat-cycle models, FPCON definitions, and response protocols. :contentReference[oaicite:5]{index=5}

::contentReference[oaicite:6]{index=6}

Recognizing Common Surveillance Indicators

Watch for repeated appearances of the same person, vehicle, or device near restricted zones, as recurring presence within short intervals often signals data-gathering attempts. Track patterns such as identical parking spots, identical clothing across days, or vehicles arriving without clear purpose.

Monitor behaviors that reveal information collection, including prolonged observation from public areas, unusual interest in entry points, or frequent note-taking. Individuals who adjust their position whenever security personnel move, or who maintain line-of-sight on controlled facilities, warrant immediate reporting.

Identify methods involving technology, such as discreet camera placement, phone filming from a distance, drones hovering near access points, or attempts to capture badge scans. Any attempt to record guard rotations or delivery schedules should trigger notification to the security chain.

Flag probing actions such as staged requests for directions, unexpected inquiries about building hours, or attempts to learn staff routines. These approaches often test reactions, response time, or willingness to reveal restricted details.

Assessing Suspicious Behaviors in Public Areas

Prioritize observation of actions that break from routine patterns, especially those indicating interest in access points, personnel movements, or security responses.

• Individuals repeatedly circling the same location without a clear purpose, particularly near controlled facilities or transportation hubs.
• People attempting to blend into crowds while avoiding eye contact with security personnel or cameras.
• Use of oversized clothing or bags in warm weather, suggesting concealment of tools, devices, or hazardous materials.
• Attempts to monitor guard rotations, emergency exits, or utility panels from a distance.

Evaluate verbal cues and interactions that aim to gather sensitive details or gauge reaction times.

1. Unprompted questions about building hours, staffing numbers, or delivery schedules.
2. Efforts to distract personnel through small talk while scanning restricted areas.
3. Requests for access assistance by individuals without identification or a clear reason for presence.

Respond by documenting the behavior, noting appearance, direction of movement, and any associated objects or vehicles. Immediate reporting to the chain of security supervision ensures rapid assessment and potential intervention.

Identifying High-Risk Travel Situations

Use government travel advisories from sources such as the U.S. Department of State to gauge threat levels for specific regions before planning movement.

Prioritize caution in areas with recent reports of armed activity, roadside explosives, targeted kidnappings, or attacks on transportation corridors. Regions with disrupted local policing, contested political control, or active extremist recruitment also demand heightened awareness.

Scrutinize travel routes for choke points such as tunnels, narrow bridges, crowded bus depots, or isolated checkpoints. These locations allow hostile groups to restrict movement and reduce escape options.

Verify transportation providers–including taxis, rideshares, and private shuttles–to ensure licensing and traceable contact information. Unmarked vehicles offering unsolicited rides significantly raise risk.

Minimize exposure at airports, train stations, and border crossings where queues and screening lines create predictable patterns. Adjust arrival times to avoid peak congestion periods and limit stationary waiting.

Monitor local communication channels for sudden curfews, road closures, or public unrest, as these conditions increase vulnerability for travelers unfamiliar with alternate routes or shelter options.

Selecting Safe Responses to Unexpected Approaches

Increase distance immediately when an unfamiliar person closes in without a clear reason, especially in parking structures, transit hubs, or building entrances. A step back combined with a neutral verbal cue such as “I can’t help you” disrupts proximity-based threats.

Avoid providing personal details–including lodging, unit affiliation, daily schedule, or transportation plans–when questioned by strangers. Even simple disclosures can support profiling or targeting.

Redirect unsolicited inquiries toward official channels. For example, instruct the individual to speak with posted security personnel or a designated reception point. This approach removes you from the interaction while still acknowledging the person.

Terminate contact if the individual attempts to stall you with excessive friendliness, persistent requests, or vague explanations for why they need information. Maintain a firm tone and move toward a populated area or controlled-access point.

Prioritize reporting if the person displays behaviors such as scanning entrances, observing vehicle patterns, or fixating on identification badges. Provide a description, approximate location, and direction of movement to your security office or local authorities.

Evaluating Physical Security Weak Points

Inspect access points first, focusing on doors with worn hinges, loose strike plates, or malfunctioning badge readers. Any location where a latch fails to close fully creates an opening that can be exploited within seconds.

Check lighting around building perimeters and parking areas. Shadowed zones near dumpsters, loading docks, or stairwell exits increase concealment opportunities. Replace dim bulbs and verify motion-activated fixtures trigger within two seconds of movement.

Review fence integrity by scanning for cut wiring, lifted sections, or gaps near drainage pathways. Measure exposed openings larger than six inches, as these permit unauthorized entry without tools.

Observe employee entry habits to identify procedural gaps. Tailgating through controlled doors, propping exits with objects, or bypassing turnstiles significantly weakens protective layers. Document frequency and report repeat violations.

Evaluate blind spots in camera coverage using a basic walk-through while monitoring the live feed. Areas behind columns, stair landings, or storage racks often fall outside the viewing angle and require repositioning or additional devices.

Understanding Protective Actions During Hostile Events

Select a response based on proximity to danger, available exits, and obstacles that could restrict movement. Prioritize options that reduce visibility and exposure to direct harm.

• Move away immediately if a clear path exists. Choose routes with multiple turns or barriers that break line of sight. Avoid escalators and narrow corridors where movement can stall.
• Take cover when escape is blocked. Position yourself behind solid structures such as concrete pillars, engine blocks, or reinforced walls. Avoid drywall, glass partitions, and office furniture, as these provide minimal protection.
• Secure a room by locking doors, switching off lights, and silencing devices. Use belts, cables, or furniture wedges to reinforce door frames lacking strong latching mechanisms.
• Stay low to reduce the chance of being targeted. Crawling behind fixed objects helps minimize exposure while repositioning.
• Signal authorities discreetly only when it is safe. Provide details on location, number of people present, observed weapons, and direction of movement.
• Follow commands from responders once they enter the area. Keep hands visible and avoid sudden movements to prevent misidentification.

Review workplace layout regularly to know which rooms lock from the inside, which hallways connect to external exits, and which spaces offer the strongest structural shielding.

Interpreting Threat Cues in Scenario-Based Questions

Identify the earliest observable cue that alters risk levels and select an action tied directly to that signal rather than to background details.

Prioritize cues that show intent–such as purposeful positioning, concealment attempts, or alignment with high-traffic routes–over cues based solely on appearance. Use scenario prompts to determine where timing, proximity, and environmental control intersect and choose the option that reduces exposure first.

Applying Reporting Procedures for Potential Threat Activity

Capture the earliest observable detail–location, time, direction of movement–and transmit it to your designated security channel without interpreting intent on your own.

Prioritize information that supports rapid verification. Provide:

• Exact coordinates or nearest landmark

• Number of involved individuals and distinguishing actions

• Vehicle identifiers such as color, plate characters, and load condition

• Noted objects placed, carried, or transferred

• Any route used to approach or exit the area

Use structured phrasing to avoid gaps. Deliver short, sequential data blocks instead of narratives. Maintain distance from the activity and avoid confrontation while observing from a protected position.

Follow the chain-of-contact protocol assigned to your unit or facility. If the primary point is unavailable, escalate to the next listed contact without delay. Provide updates only when new observable details appear, not guesses or assumptions.