LE 3 - Responses to Intrusion, Contingencies and exchange of DoS XYZ Port Facility Maritime Security Exercise Date : dd-mm-yyyy

LE 3 - Responses to Intrusion, Contingencies and exchange of DoS

XYZ Port FacilityMaritime Security Exercise

Date : dd-mm-yyyy


Port Facility Live Exercise

Responses to Intrusion, Contingencies and exchange of DoS

Exercise LE 3


Scope• Date, time, location• Aim• Objectives• Desired outcomes• Controllers• Players• Materials• Scenario• Communications• Safety• Debrief

For Controllers Only• Master Events List• Controller Tasks


Schedule• Start:

• Estimated End:

• Location:

• Debrief:

• Report by:


Aim

• To enhance the proficiency of the port facility security team in responding to intrusions and contingencies as well as communication with a ship for exchange of DoS.


Objectives

• Security staff to handle routine security matter and contingencies in accordance with the procedures in the PFSP.

• Security staff to complete an exchange of DoS with a ship and to implement the additional measures, if necessary.


Desired Outcomes

• Able to respond correctly to routine security matters and contingencies.

• Able to carry out an exchange of DoS with the ship and implement any additional measures as required.

• Able to carry out their duties relating to all security matters confidently.

• Able to suggest changes or improvements to the security plan and procedures, if any.


Exercise Director

• Mr. BBB


Control Team

• Chief Controller – Security Manager or equivalent

• Operations Controller – Operations Supervisor or equivalent

• Technical Controller – Engineering Supervisor or equivalent

• Electrician technician• Technician for intrusion system.


Control Team (cont)

• Simulator 1 & 2 – Assuming the role of salespersons

• 2 x driver of vehicle for unaccompanied baggage and ship’s store


Participants (Players)

• Port Facility Security Officer• Security staff• Operations staff


Materials

• Consignment of unaccompanied and delivery vehicle

• Consignment of ship’s store and delivery vehicle• Ship in harbour• Placard that states “A hole has been cut in the

fence”• Brochures on office equipment• 2 or more suitcases stuffed with clothing• 2 x empty LPG cylinder• Heavy suitcase, simulating a bomb


Scenario

• Economic downturn lead to slowdown in shipping industry and increased competition between port facilities.

• Several incidents ranging from technical glitches, operational incidents and even administrative matters that have disrupted operations at Port Facility ABC recently which points to possibility of sabotage.


Communications

• Mobile phone– 1234567

• Walkie-Talkie– Player – Ch YY– Controllers – Ch ZZ

• Other communications meansas required


Code WorkCODE WORD MEANING

Exercise XYZ Start The exercise is to commence

Exercise XYZ Hold The exercise is temporarily suspended

Exercise XYZ Go The exercise is to resume from where it was suspended

Exercise XYZ Abort The exercise is to be terminated (prematurely)

Exercise XYZ End The exercise is completed

For Exercise The message or statement that follows this preamblerelates to the exercise only, and is not to be confused with real activity. This should be used to prefix all telephone or radio communications relating to simulated events for the exercise e.g. “For exercise, I am from the Black September terrorist group. A bomb has been placed in your lobby.”

No Duff The message or statement that follows this preamble relates to a real event or instruction e.g. “No duff, Mr. KLJ has fallen and cut his hand at the Restricted Area Gate 3. Please send a vehicle to pick him up.”


Safety

• Physical safety of personnel is paramount• There is to be no physical contact between

player and controllers acting as intruders, etc.

• Security staff are not to use abusive language when talking to controllers acting as “intruders”

• Do not neglect the safety of equipment


Debrief

• Location:

• Secretary:

• Attendance– –


Any questions ?


Following Presentation Slides arefor Controllers Only

• Master Events List• Controller Tasks


Master Events ListS/N Time Event Purpose Action By To Means of

DeliveryExpected response

001 0845 All participants in position

002 0900 Exercise Start Commence exercise

Chief Controller

All Walkie Talkie

None

003 0905 Hole found in fence

Test response to security breach, facilitate exercise play

Ops Controller

Patrolling Guard

Placard Report, take action to address the breach

004 0915 Potential intruders, pretending to be salespersons for office equipment asked to enter the port facility to talk to the administrative staff

Test procedure for access control, set up for further injects.

Potential Intruder

Guard at personnel entrance

Walk to pass office

Follow procedures to grant access


S/N Time Event Purpose Action By To Means of Delivery

Expected response

005 0920 All guards at pass office taken ill with stomach cramps and vomiting.

Test ability to mobilize additional manpower

Operations Controller

Security Supe

Phone Seek medical attention, manpower to replace guards.

006 0930 The salesmen drives away after been refused entry

Follow up to inject, potential for further exercise play

Potential intruder

Guards at monitoring station

Drive away

None

007 0935 Guards had all bought food from a vendor that was outside the port facility

Close inject. Operations Controller

Security Supe

Phone Possibility of deliberate mischief

008 0945 Delivery of a consignment of unaccompanied baggage

To verify baggage screening procedures. Set up for further injects.

Delivery driver

Guards at baggage screening

Drive to port facility

Follow procedures to process baggage.



Expected response

009 0950 Fault in cargo screening equipment(s) while in the middle of screening baggage

Test responses to equipment failure

Technical Controller

Staff at baggage screening

Simulated fault

Verify fault, seek technical assistance

010 1000 Need 1 hour to rectify fault in cargo screening equipment,

Facilitate exercise play


Staff at cargo screening

Simulated fault

Alternative arrangement for screening.

011 1005 Agent for MV BLUESTAR requests for DoS as ship is at a different level of Security.

Test comms between port facility and ship

Ops Controller (Ship’s Agent)

Ops staff Email Contact ship to complete DoS



Expected response

012 1010 Blackout at monitoring station.

Test response to incidents, readiness of backup power supply.

Technical controller


Isolate power

Report, seek technical assistance, response plan for blackout

013 1020 Delivery of a consignment of ship’s stores together with empty LPG cylinders

To test goods screening procedures.

Delivery driver


Drive to port facility

Detect LPG cylinders

014 1025 Intrusion alarm activated in one of the buildings.

Test response to intrusion alarm

Technician


Remote activation

Take actions in response to intrusion alarm



Expected response

015 1030 Telephone bomb threat demanding the port facility to stop all activities or else the bomb will go off and “kill everyone”.

To test telephone bomb threat procedures.

Operations controller

Ops staff Telephone

Evaluate legitimacy of the phone threat and adopt the necessary actions.

016 1035 Signs of tampering found at the side entrance of the building.

Close inject, to indicate possible acts of intrusion

Operations controller

Patrolling guards

Verbal Search building

017 1040 Cargo screening equipment rectified. Found a blown fuse

Facilitate exercise play, indicate signs of tampering



Verbal Stand-down



Expected response

018 1045 A suspicious looking suitcase was found in the janitor’s closet in the same building where intrusion occurred.

Facilitate exercise play, test procedures for dealing with suspicious baggage

Ops controller

Ops staff

Telephone Take actions to deal with suspicious suitcases

019 1055 Operations Manager orders evacuation of the building where the suspicious suitcase was found.

Close inject, test procedures for evacuation

Ops Manager

Ops staff

Telephone Evacuate building

020 When evacuation completed

Exercise Ends End of exercise

Chief Controller

All Walkie talkie

None


Controller Tasks

• Ops Controller will place the placard stating a hole has been cut in the fence at a suitable location and wait for the arrival of the patrolling guard. EPCT will decide on the exact location for this exercise.

• The two intruders will attempt to enter the port facility with the pretext of presenting their office equipment to the administrative staff. They will have all proper identification documents and brochures for office equipment.


Controller Tasks (cont)

• The extra bags should be loaded to the vehicle with the consignment of unaccompanied baggage before it enters the port. The driver should follow all procedures and provide all necessary documentation for the delivery of the baggage. If detected, the driver should produce the Letter of Identification and be allowed to deliver the unaccompanied baggage. If not detected, the driver should deliver the simulated contraband to the Chief Controller.


Controller Tasks (cont)

• The technical controller should declare that the screening equipment is not working but should take measures to ensure security is not compromised when actual items are delivered. EPCT will decide on the exact location and equipment to be used for this exercise.

• The technical controller, with the help of the electrical technician, will switch off the main power to the monitoring station.


Controller Tasks (cont)• The empty LPG cylinders must be loaded

onto the delivery vehicle before it reaches the port facility. The driver of the vehicle with the empty gas cylinders will attempt to enter the port facility to deliver the ship’s stores. The driver will have all the proper documents for the stores but not for the gas cylinders. If detected, the driver should produce the Letter of Identification and be allowed to deliver the ship’s stores. If not detected, the driver should deliver the 2 LPG cylinders to the Chief Controller.


Controller Tasks (cont)• The technician for the intrusion detection equipment

should remotely trigger the intrusion alarm for a building. The Operations Controller will be onsite and inform the security staff that there are signs of tampering. The EPCT will decide on the exact location and details of the tampering

• The Operations Controller will call the Ops Room for the bomb threat. The Operations Controller should try to alter his/her voice by using a cloth to cover his mouth or similar. The EPCT will decide on the exact message to be delivered.


Any questions ?

Documents

LE 3 - Responses to Intrusion, Contingencies and exchange of DoS XYZ Port Facility Maritime Security Exercise Date : dd-mm-yyyy