ATTACHMENT 3-FPCON.pdf

Department of Defense

INSTRUCTION

NUMBER 2000.16

October 2, 2006

Incorporating through Change 2, December 8, 2006

USD(P)

SUBJECT: DoD Antiterrorism (AT) Standards

References: (a) DoD Instruction 2000.16, “DoD Antiterrorism Standards,” June 14, 2001

(hereby canceled)

(b) DoD Directive 2000.12, “DoD Antiterrorism (AT) Program,” August 18, 2003

(c) DoD Instruction 2000.14, “DoD Combating Terrorism Program Procedures,”

June 15, 1994 (hereby canceled)

(d) DoD Instruction 2000.18, “DoD Installation Chemical, Biological, Radiological, Nuclear, and High-Yield Explosive Emergency Response Guidelines,” December 4, 2002

(e) through (ag), see Enclosure 1

1. REISSUANCE AND PURPOSE

This Instruction:

1.1. Reissues Reference (a) to update policy implementation, responsibilities, and the antiterrorism (AT) standards for the DoD Components under the authority of Reference (b) for the protection of DoD elements and personnel from acts of terrorism. This update reorganizes the AT standards listed in Enclosure 3 according to the minimum required elements for an AT program: risk management, planning, training and exercises, resource application, and comprehensive program review. It also cancels Reference (c).

1.2. Expands protection of DoD installations to recognize the importance of defending against terrorist use of chemical, biological, radiological, nuclear and high explosive (CBRNE) weapons according to Reference (d).

1.3. Expands requirements to DoD Instruction 5200.08 and DoD 5200.8-R (References (e) and (f)) to address the linkages between AT and Physical Security Programs.

DoDI 2000.16, October 2, 2006

2. APPLICABILITY AND SCOPE

2.1. This Instruction applies to the Office of the Secretary of Defense (OSD), the Military Departments, the Chairman of the Joint Chiefs of Staff, the Combatant Commands, the Office of the Inspector General of the Department of Defense, the Defense Agencies, the DoD Field Activities, and all other organizational entities in the Department of Defense (hereafter referred to collectively as the “DoD Components”). The term “commander(s),” as used herein, refers to personnel assigned to command positions at all levels and their civilian equivalents.

2.2. The standards prescribed in this Instruction apply only to the DoD AT Program.

3. DEFINITIONS

The terms used in this Instruction are defined in Joint Publication 1-02 (Reference (g)) or Enclosure 2.

4. POLICY

Under Reference (b), it is DoD policy:

4.1. To protect DoD personnel, their families, installations, facilities, information, and other material resources from terrorist acts.

4.2. To establish AT standards for the Department of Defense. The primary AT standards are contained in this Instruction and supplemented by guidance contained in References (e) and (f), and DoD O-2000.12-H (Reference (h)).

4.3. That commanders at all levels shall have the authority to enforce security measures and are responsible for protecting persons and property subject to their control.

4.4. That Geographic Combatant Commander AT policies and programs shall take precedence over all AT policies or programs of any DoD Component operating or existing in that command’s area of responsibility (AOR) except for those under the security responsibility of a Chief of Mission (COM) pursuant to the Memorandums of Understanding (References (i) and (j)).

4.5. That the DoD elements and personnel not falling under the AT policies and programs of a geographic Combatant Commander, by law or under Reference (i), shall comply with the Overseas Security Policy Board Security Standards.

4.6. That non-DoD tenants on a DoD installation, facility, or other DoD property must comply with all aspects of the DoD AT program addressed in this Instruction and other AT guidance documents.

4.7. That functional Combatant Commanders will support geographic Combatant Commanders as they exercise overall AT responsibility within their AOR.

5. RESPONSIBILITIES

Under the authority in Reference (b):

5.1. The Assistant Secretary of Defense for Special Operations and Low-Intensity Conflict, under the Under Secretary of Defense for Policy, shall:

5.1.1. In coordination with the Under Secretary of Defense for Intelligence, the Assistant Secretary of Defense for Homeland Defense and the Assistant to the Secretary of Defense for Nuclear and Chemical and Biological Defense Programs, provide AT policy oversight and monitor compliance with this Instruction by the DoD Components, both within and outside the United States.

5.1.2. Develop, publish, and maintain this Instruction to provide standards for protective measures that serve to reduce the vulnerability of DoD personnel, their families, installations, facilities, information, and other material resources to terrorist acts. AT protective measures are an extension of the existing DoD Physical Security Program requirements.

5.1.3. Be the point of contact for the Department of Defense with the Department of State for the standards contained in this Instruction and be responsible at the departmental level for resolving any conflicts with the Department of State between the DoD Components and any United States Country Team with respect to such standards.

5.2. The Heads of the DoD Components shall:

5.2.1. Establish clear AT policies for all DoD elements and personnel that support the geographic Combatant Commanders as they exercise overall responsibility for AT within their

AOR.

5.2.2. Develop and implement comprehensive AT programs pursuant to the requirements and standards established by this Instruction and References (b) and (i), and DoD O-2000.12-P (Reference (k)) and be responsible for the implementation of and compliance with DoD AT policies within their organizations.

5.2.3. Use the standards prescribed in this Instruction as baseline standards. The DoD Components may promulgate unique requirements to supplement the standards contained herein.

5.2.4. Identify the level of command (e.g., the specific subordinate commanders) responsible for meeting the standards prescribed in this Instruction.

6. INFORMATION REQUIREMENTS

The review, assessment, and reporting of AT programs is exempt from licensing in accordance with paragraphs C4.4.1., C4.4.2., C4.4.7., and C4.4.8. of DoD 8910.1-M (Reference (l)).

7. EFFECTIVE DATE

This Instruction is effective immediately.

Enclosures – 4 E1. References, continued E2. Definitions E3. DoD Antiterrorism (AT) Standards E4. DoD FPCON

ENCLOSURE 1 5

E1. ENCLOSURE 1

REFERENCES, continued

(e) DoD Instruction 5200.08, “Security of DoD Installations and Resources,” December 10, 2005

(f) DoD 5200.8-R, “Physical Security Program,” May 1991

(g) Joint Publication 1-02, “DoD Dictionary of Military and Associated Terms”, 12 April 2001

(h) DoD O-2000.12-H, “DoD Antiterrorism Handbook,”1 February 9, 2004

(i) Memorandum of Understanding Between DOS and DoD on Security of DoD Elements and Personnel in Foreign Areas, December 16, 1997

(j) Memorandum of Understanding between the Department of State and the Department of Defense on Security on the Arabian Peninsula, September 16, 1996,

(k) DoD O-2000.12-P, “DoD Antiterrorism Strategic Plan,” June 15, 2004

(l) DoD 8910.1-M, “DoD Procedures for Management of Information Requirements,” June 30,

(m) Section 1072(2) of title 10, United States Code

(n) DoDI 5240.10, “Counterintelligence Support to the Combatant Commands and The Defense Agencies,” May 14, 2004

(o) DoD Directive 5200.27, “Acquisition of Information Concerning Persons and Organizations not Affiliated with the Department of Defense,” January 7, 1980

(p) DoD 5240.1-R, “Procedures Governing the Activities of DoD Intelligence Components that Affect United States Persons,” December 1982

(q) Under Secretary of Defense for Acquisition, Technology, and Logistics Memorandum, “DoD Policy on Drinking Water Vulnerability Assessments and Emergency Response Plans,” July 3, 2003

(r) Defense Threat Reduction Agency JSIVA Security Classification Guide,1 February 2001

(s) Joint Requirements Oversight Council Memo, JROCM 180- 3, “Chemical, Biological, Radiological, and Nuclear (CBRN) Defense Baseline Capabilities Assessment,”2 September 11, 2003.

(t) Unified Facilities Criteria (UFC) 4-010-01, “DoD Minimum Antiterrorism Standards for Buildings,”1 October 8, 2003

(u) DoD Directive C-4500.51, “DoD Non-Tactical Armored Vehicle Policy,”1 May 4, 1987

(v) Unified Facilities Criteria 4-010-02, “DoD Minimum Antiterrorism Standoff Distances for Buildings,”1 October 8, 2003

(w) Unified Facilities Criteria 4-021-01, “Design and O&M: Mass Notification Systems1,” December 18, 2002

(x) Defense Federal Acquisition Regulation Supplement (DFARS)

(y) DoD Directive 6490.2, “Comprehensive Medical Surveillance,” October 21, 2004

(z) CJCS Instruction 3121.01B, Standing Rules of Engagement / Standing Rules For the Use of Force For US Forces3, June 13, 2005

1 A copy of this document is available via Secure Internet Protocol Router Network at www.atep.smil.mil 2 The JROCM 180-3 is available via Secure Internet Protocol Router Network at http://j8.js.smil.mil 3 The CJCSI 3121.01B is available via Secure Internet Protocol Router Network at http://js.smil.mil.

ENCLOSURE 1 6

(aa) DoD Directive 5210.56, “Use of Deadly Force and the Carrying of Firearms by DoD Personnel Engaged in Law Enforcement and Security Duties,” November 1, 2001

(ab) CJCS Instruction 3150.25B, “Joint Lessons Learned Program, February 15, 20054

(ac) CJCS Guide 5260, “Antiterrorism Personal Protection Guide: A Self-Help Guide to Antiterrorism”, October 14, 20054

(ad) CJCS Pocket Card 5260, “Antiterrorism Individual Protective Measures”, October 1, 20014

(ae) DoD 4500.54-G, “DoD Foreign Clearance Guide (FCG) 5,” current edition

(af) CJCS Instruction 5261.01D, “Combating Terrorism Readiness Initiatives Fund”, December 16, 2005

(ag) Defense Threat Reduction Agency (DTRA) Antiterrorism Vulnerability Assessment Team Guidelines,6 March 1, 2002

4 Unclassified CJCS Instructions, Guides, and Pocket Cards are available at www.dtic.mil/cjcs_directives/index.htm 5 The FCG is available via http://www.fcg.pentagon.smil.mil 6 The DTRA Vulnerability Assessment Team Guidelines are available at www.dtra.mil

ENCLOSURE 2 7

E2. ENCLOSURE 2

DEFINITIONS

E2.1. Antiterrorism (AT). See Joint Publication 1-02 (Reference (g)).

E2.2. AT Awareness. Fundamental knowledge of the terrorist threat and measures to reduce personal vulnerability to terrorism.

E2.3. AT Program. The AT program is one of several security-related programs that fall under the overarching Combating Terrorism and Force Protection programs. The AT program is a collective, proactive effort focused on the prevention and detection of terrorist attacks against DoD personnel, their families, facilities, installations, and infrastructure critical to mission accomplishment as well as the preparation to defend against and planning for the response to the consequences of terrorist incidents. Although not elements of AT, plans for terrorism consequence management preparedness and response measures as well as plans for continuing essential military operations are important adjuncts to an effective AT program. The minimum elements of an AT program are AT risk management, planning, training and exercises, resource application, and a program review.

E2.3.1. AT Risk Management. The process of systematically identifying, assessing, and managing risks arising from operational factors and making decisions that balance risk cost with mission benefits. The end products of the AT risk management process shall be the identification of areas and assets that are vulnerable to the identified threat attack means. From the assessment of risk based upon the three critical components of AT risk management (threat assessment, criticality assessment, and vulnerability assessment), the commander must determine which assets require the most protection and where future expenditures are required to minimize risk of attack or lessen the severity of the outcome of an attack. The commander shall decide on how best to employ given resources and FP measures to deter, mitigate, and prepare for a terrorist incident.

E2.3.2. AT Planning. The process of developing specific guidance and execution-oriented instructions for subordinates. An AT Plan contains command-specific guidance for the establishment of an AT program and the implementation of the AT standards prescribed by this Instruction.

E2.3.3. AT Training and Exercises. The development of individual, leader, and collective skills, and the conduct of comprehensive exercises to validate plans for AT, incident response, terrorism consequence management, and continuity of essential military operations.

E2.3.4. AT Resource Application. The process of applying risk management to vulnerabilities, and where the resultant risk is not acceptable after applying mitigation measures, elevate the vulnerability with a resource request using the existing Planning, Programming, Budgeting, and Execution (PPBE) system, the Combating Terrorism Readiness Initiative Fund (CbT-RIF), the Physical Security Program, and other funding mechanisms. Central to success in

ENCLOSURE 2 8

resource application is tracking and ensuring sufficient funding for identified AT program life-cycle costs and assessed shortfalls to mitigate risk associated with terrorist capabilities.

E2.3.5. Comprehensive AT Program Review. The systematic assessment of the AT program against the standards prescribed by this Instruction.

E2.4. Antiterrorism Officer (ATO). The principal military or civilian advisor charged with managing the AT Program for the commander or DoD civilian exercising equivalent authority.

E2.5. Combating Terrorism (CbT). For the purpose of this Instruction, CbT within the Department of Defense encompasses all actions, including AT (defensive measures taken to reduce vulnerability to terrorist acts), counterterrorism (offensive measures taken to prevent, deter, and respond to terrorism), terrorism consequence management (preparation for and response to the consequences of a terrorist incident or event), and terrorism intelligence support (collection and dissemination of terrorism-related information) taken to oppose terrorism throughout the entire threat spectrum, including terrorist use of CBRNE.

E2.6. Counterterrorism. See Reference (g).

E2.7. Criminal Intelligence (CRIMINT). Law enforcement information derived from the analysis of information collected through investigations, forensics, crime scene and evidentiary processes to establish intent, history, capability, vulnerability, and modus operandi of threat and criminal elements.

E2.8. Criticality Assessment. A criticality assessment addresses the effect of temporary or permanent loss of key assets or infrastructures on the installation or a unit's ability to perform its mission. The assessment also examines costs of recovery and reconstitution including time, funds, capability, and infrastructure support.

E2.9. Defense Critical Asset. An asset of such extraordinary importance to DoD operations in peace, crisis, and war that its incapacitation or destruction would have a very serious, debilitating effect on the ability of the Department of Defense to fulfill its mission.

E2.10. DoD Contractor. Any individual, firm, corporation, partnership, association, or other legal non-Federal entity that enters into a contract directly with the Department of Defense to furnish services, supplies, or both, including construction. Defense contractors may include U.S.

nationals, local citizens, or third country nationals. Defense contractors do not include foreign governments or representatives of foreign governments that are engaged in selling to the Department of Defense or a DoD Component, or foreign corporations wholly owned by foreign governments.

E2.11. DoD Elements and Personnel. DoD military and civilian personnel and their dependent family members; DoD contractors; DoD installations and facilities; DoD-owned, leased, or managed infrastructure and assets critical to mission accomplishment; and other DoD-owned, leased, or managed mission essential assets.

ENCLOSURE 2 9

E2.12. DoD Personnel. Uniformed Military Service members and DoD Federal civilian employees hired and paid from appropriated and non-appropriated funds under permanent or temporary appointment.

E2.13. Emergency Responders. Firefighters, law enforcement, security personnel, emergency medical technicians, emergency management and operations personnel, Explosive Ordnance Disposal personnel, physicians, nurses, medical treatment providers at medical treatment facilities, disaster preparedness officers, public health officers, bio-environmental engineers, and mortuary affairs personnel.

E2.14. Family Member. Individuals defined as “Dependent” in Section 1072(2) of Title 10 U.S.C. (Reference (m)). Includes spouses; unmarried widows; unmarried widowers; unmarried legitimate children, including adopted children or stepchildren, who are under 21, incapable of self support or under 23 and enrolled in a full-time institution of higher learning. Also, the family members of DoD civilian employees, particularly as it pertains to those assigned overseas. The DoD standard for family members requiring Level I AT awareness training is 14 years or older (or younger at the discretion of the DoD sponsor).

E2.15. Force Protection. See Reference (g).

E2.16. Force Protection Condition (FPCON). A DoD-approved system standardizing DoD’s identification of and recommended preventive actions and responses to terrorist threats against U.S. personnel and facilities. The system is the principal means for a commander to apply an operational decision on how to protect against terrorism and facilitates coordination among DoD Components and support for antiterrorism activities.

E2.17. Force Protection Detachment (FPD). A Counterintelligence (CI) element that provides comprehensive CI support to transiting ships/personnel/aircraft in regions of elevated threat.

E2.18. High-Risk Billet (HRB). Authorized personnel billet (identified and recommended by appropriate authority) that because of grade, assignment, travel itinerary, or symbolic value may make personnel filling them an especially attractive or accessible terrorist target.

E2.19. High-Risk Personnel (HRP). Personnel who, by their grade, assignment, symbolic value, or relative isolation are likely to be attractive or accessible terrorist targets.

E2.20. Higher Headquarters Assessment (HHA). An overall assessment by a higher headquarters of how an organization is managing its AT program, to include management and compliance effort by subordinate organizations.

E2.21. Joint Staff Integrated Vulnerability Assessment (JSIVA). A JSIVA is a “vulnerability-based” evaluation of an installation's ability to deter and/or respond to a terrorist incident. A “vulnerability-based” assessment considers both the current threat and the capabilities that may be employed by both transnational and local terrorist organizations, both in terms of their mobility and the types of weapons historically employed.

ENCLOSURE 2 10

E2.22. Overseas Security Policy Board (OSPB). The OSPB was a National Security Council body established to consider, develop, coordinate, and promote security policies, standards, and agreements on overseas security operations, programs and projects that affect all U.S.

Government Agencies under the authority of a COM abroad. The Department of State Director for Diplomatic Security chaired the OSPB. National Security Presidential Directive (NSPD) 1, February 13, 2001, disestablished the OSPB and assigned the duties to various Policy Coordination Committees. However, the OSPB continues in its charter and is a sub-group of the Records and Access Information Security Policy Committee of the National Security Council.

The Secretary of State has designated the Assistant Secretary, Bureau of Diplomatic Security, to chair the OSPB.

E2.23. Physical Security. That part of security concerned with physical measures designed to safeguard personnel; to prevent unauthorized access to equipment, installations, material, and documents; and to safeguard them against espionage, sabotage, damage, and theft.

E2.24. Security

E2.24.1. Measures taken by a military unit, activity, or installation, to protect against all acts designed to, or that may, impair its effectiveness.

E2.24.2. A condition that results from establishing and maintaining protective measures that ensures a state of inviolability from hostile acts or influences.

E2.25. Special Event. An activity characterized by a large concentration of personnel and/or a gathering where distinguished visitors are involved, often associated with a unique or symbolic event.

E2.26. Terrorism. See Reference (g).

E2.27. Terrorism Consequence Management. DoD preparedness and response for mitigating the consequences of a terrorist incident including the terrorist use of a Weapon of Mass Destruction (WMD). DoD consequence management activities are designed to support the Lead Federal Agency (domestically, Department of Homeland Security; overseas, Department of State) and include measures to alleviate damage, loss of life, hardship or suffering caused by the incident;

protect public health and safety; and restore emergency essential government services.

E2.28. Terrorism Incident Response Measures. A set of procedures established for response forces to deal with the effects of a terrorist incident.

E2.29. Terrorism Threat Assessment

E2.29.1. The process used to conduct a threat analysis and develop an evaluation of a potential terrorist threat.

E2.29.2. The product of a threat analysis for a particular unit, installation, or activity.

ENCLOSURE 2 11

E2.30. Terrorism Threat Level. See Reference (g).

E2.31. Terrorism Vulnerability Assessment

E2.31.1. An assessment to determine the vulnerability to a terrorist attack against an installation, unit, exercise, port, ship, residence, facility, or other site. It identifies areas of improvement to withstand, mitigate, or deter acts of violence or terrorism.

E2.31.2. The process the commander uses to determine the susceptibility to attack from the full range of threats to the security of personnel, family members, and facilities, which provide a basis for determining AT measures that can protect personnel and assets from terrorist attacks.

E2.31.3 A systematic examination of the characteristics of an installation, system, asset, application, or its dependencies to identify vulnerabilities.

E2.32. Vulnerability E2.32.1. In AT, a situation or circumstance, which if left unchanged, may result in the loss of life or damage to mission essential resources.

E2.32.2. The susceptibility of a nation or military force to any action by any means through which its war fighting potential or combat effectiveness may be reduced or will to fight diminished.

E2.32.3. The characteristics of a system that cause it to suffer a definite degradation (incapability to perform the designated mission) as a result of having been subjected to a certain level of effects in an unnatural (manmade) hostile environment.

E.2.32.4. The characteristics of an installation, system, asset, application, or its dependencies that could cause it to suffer a degradation or loss (incapacity to perform its designated function) as a result of having been subjected to a certain level of threat or hazard.

E2.33. Weapons of Mass Destruction (WMD). See Reference (g).

ENCLOSURE 3 12

E3. ENCLOSURE 3

DoD ANTITERRORISM (AT) STANDARDS

E3.1. DoD STANDARD 1: AT Program Elements. The minimum required elements of a DoD Component AT program shall be: risk management (STANDARD 3); planning (including the AT Plan) (STANDARD 7); training and exercises (STANDARD 23); resource application (STANDARD 30); and comprehensive program review (STANDARD 31). The development and maintenance of the AT program elements should be ongoing and continuously refined to ensure the relevance and viability of all defensive measures employed to reduce vulnerabilities to terrorist capabilities.

E3.2. DoD STANDARD 2: Intelligence Support to the DoD AT Program

E3.2.1. The Director, Defense Intelligence Agency (DIA), sets the DoD Terrorism Threat Level identifying the potential threat to DoD interests in a particular country, including the United States. The Director, DIA, shall coordinate, if necessary, with the Department of State to minimize conflicting classification of threat levels for the affected country. The DoD Terrorism Threat Level applies whether or not U.S. personnel are present in the country. The Geographic Combatant Commanders may also set Terrorism Threat Levels for specific personnel, family members, units, installations, or geographic regions in countries within the Geographic Combatant Commander’s AOR, using the definitions and criteria established by the Director, DIA.

E3.2.2. The Heads of the DoD Components shall:

E3.2.2.1. Task the appropriate officials under their command or control to gather, analyze, and circulate appropriate terrorism threat information. When local information indicates gaps, commanders shall forward timely requests for information via appropriate intelligence collection and production channels.

E3.2.2.2. Develop Priority Intelligence Requirements (PIR) and Commander’s Critical Information Requirements (CCIR) to focus collection and analysis efforts.

E3.2.2.3. Provide units in transit with tailored terrorist threat information.

E3.2.2.4. Integrate countersurveillance, surveillance detection, CI, and other specialized skills as a matter of routine in all AT programs.

E3.2.2.5. Identify an official as the focal point for the integration of operations and local or host-nation intelligence, CI, and CRIMINT information.

ENCLOSURE 3 13

E3.2.2.6. Incorporate proactive techniques to detect and deter terrorists, particularly in support of assets or activities conducted in areas designated with SIGNIFICANT or HIGH threat levels. These activities shall include, but are not limited to: in-transit forces, HRP, special events, and high-value military cargo shipments.

E3.2.2.7. Ensure counterintelligence support for those DoD Components without organic counterintelligence capability within provisions of DoDD 5240.10 (Reference (n)).

E3.2.2.8. Ensure that commanders at all levels forward up and down the chain of command all information pertaining to suspected terrorist threats, or acts of terrorism involving DoD elements and personnel or assets for which they have responsibility, including the provision of such information to appropriate interagency officials.

E3.2.3. The Secretaries of the Military Departments shall ensure that military personnel are trained to maximize the use of information derived from law enforcement liaison, and from intelligence and CI processes and procedures. This includes intelligence procedures for handling PIR for in-transit units and implementation of procedures to conduct intelligence preparation of the battlespace and mission analysis.

E3.2.4. DoD intelligence, CI, and law enforcement elements shall disseminate information on U.S. persons to DoD Components as appropriate in support of AT program implementation within the provisions of DoD Directive 5200.27 (Reference (o)) and DoD 5240.1-R (Reference (p)).

E3.3. DoD STANDARD 3: AT Risk Management

E3.3.1. The Heads of the DoD Components shall establish an AT Risk Management process modeled upon the principles outlined in Reference (h) and applied in all aspects of AT program implementation and planning, including operational plans and decisions, development of risk mitigation measures, and the prioritization and allocation of resources. The essential components of AT Risk Management include: assessing the terrorist threat (threat assessment) determining the criticality of assets (criticality assessment); identifying the vulnerabilities of facilities, programs, and systems to terrorist attack; including the use of CBRNE or similar capabilities (vulnerability assessment), risk assessment, and outlining DoD Component capabilities to deter terrorist incidents, employ countermeasures, and mitigate and recover from the effects of a terrorist incident.

E3.3.2. The DoD Component AT Risk Management process and procedures shall be reviewed at least annually. An AT Program Review, an HHA, or a JSIVA visit satisfies the annual requirement.

ENCLOSURE 3 14

E3.4. DoD STANDARD 4: Terrorism Threat Assessment. The Heads of the DoD Components shall:

E3.4.1. Establish a Terrorism Threat Assessment process consistent with the principles outlined in Reference (h) to identify the full range of known or estimated terrorist threat capabilities (including the use or threat of use of CBRNE and WMD) for those DoD Elements and Personnel that have AT responsibilities. These assessments shall be updated on an annual basis or more frequently as the terrorist threat environment dictates. Assessments shall be tailored to local conditions and address terrorist group’s operational capability, intentions, and activity, and whether the operational environment is conducive to terrorist activity.

E3.4.2. Prepare specific Terrorism Threat Assessments to support operational planning and risk decisions for unique mission requirements or special events including, but not limited to, in-transit forces, training and exercises, operational deployments, and special events.

E3.4.3. Implement effective processes to integrate and fuse all sources of available threat information from local, State, Federal, host-nation law enforcement agencies; the appropriate local, State, Federal, and host-nation Intelligence Community (IC) activities; other local community officials and individuals; the applicable U.S. country team; port authority officials and husbanding contractors, as appropriate, to provide for a continuous analysis of threat information to support the Threat Warning process.

E3.4.4. Terrorism Threat Assessments shall be integrated into the risk management process and be a major source of analysis and justification for recommendations to raise or lower FPCON levels, implementation of Random AT Measures (RAM), AT enhancements including Physical Security Program changes, program and budget requests, and used when conducting terrorism vulnerability assessments.

E3.5. DoD STANDARD 5: Criticality Assessment. The Heads of the DoD Components shall:

E3.5.1. Establish a Criticality Assessment process consistent with the principles outlined in Reference (h) and consistent with DoD STANDARD 3 to identify, classify, and prioritize mission-essential assets, resources, and personnel critical to DoD mission success. Criticality Assessments shall also be conducted for non-mission essential assets such as high-population facilities, mass gathering activities, and any other facility, equipment, service, or resource deemed important by the commander warranting protective measures to ensure continued efficient operation; protection from disruption, degradation, or destruction; and timely restoration.

E3.5.2. Update Criticality Assessments at least annually to determine the degree of asset criticality based upon the following factors: relative importance, effect of loss, recoverability, mission functionality, substitutability, and reparability. Criticality Assessments, consistent with E3.1.3, shall provide the basis for identifying those assets that require specific protective measures and priorities for resource allocation when developing and updating the AT Plan.

E3.6. DoD STANDARD 6: Terrorism Vulnerability Assessment

E3.6.1. The Heads of the DoD Components shall:

ENCLOSURE 3 15

E3.6.1.1. Establish a Terrorism Vulnerability Assessment process consistent with the principles outlined in References (h) and the DoD Drinking Water Policy (Reference (q)) to provide a vulnerability-based analysis of mission-essential assets, resources, and personnel critical to mission success that are susceptible to terrorist attack.

E3.6.1.2. Within 90 days of a completed assessment, prioritize identified vulnerabilities, develop a plan of action to mitigate or eliminate the vulnerabilities, and report to the first general officer, flag officer, or civilian equivalent director in the chain of command the results of the assessment.

E3.6.1.3. Ensure that the DoD vulnerability database (the Core Vulnerability Assessment Management Program (CVAMP)) is populated with all assessment results within 120 days from completion of the assessment.

E3.6.1.4. Conduct and update Terrorism Vulnerability Assessments at least annually or more frequently if the terrorist threat assessment or mission requirements dictate. Terrorism Vulnerability Assessments shall be conducted at a minimum for, but not limited to:

E3.6.1.4.1. Any facility populated daily by 300 or more DoD personnel.

E3.6.1.4.2. Any DoD facility bearing responsibility for emergency response or physical security plans and programs, or determined to host critical infrastructure.

E3.6.1.4.3. Any DoD facility or activity possessing authority to interact with local non-military or host-nation agencies or having agreements with other agencies or host-nation agencies to procure these services.

E3.6.1.4.4. Sea and air ports of embarkation and debarkation; movement routes (sea, air, ground, and rail); and assembly, staging, reception, and final beddown locations in support of any battalion, squadron, ship, or equivalent operational deployment; similar sized in-transit movement or training exercise; and any movement or shipment of military cargo (including Military Sealift Command voyage charters).

E3.6.1.4.5. Any personnel designated as HRP. These assessments are referred to as Personal Security Vulnerability Assessments (PSVA). PSVA will conform to Defense Criminal Investigative Office formats.

E3.6.1.4.6. Any event or activity determined to be a special event or other activity involving a gathering of 300 or more DoD personnel.

ENCLOSURE 3 16

E3.6.1.4.7. Off-installation housing, schools, daycare centers, transportation systems, and routes used by DoD personnel and their dependent family members when the Terrorism Threat Level is SIGNIFICANT or higher consistent with DoD STANDARD 3.

E3.6.1.5. Classify information derived from vulnerability assessments pursuant to the requirements outlined in the Defense Threat Reduction Agency JSIVA Security Classification Guide (Reference (r)).

E3.6.2. Geographic Combatant Commanders will:

E3.6.2.1. Establish the frequency for assessments, which should be conducted at least annually for those locations considered critical to strategic projection. The frequency of assessments and who conducts them is listed in Table E3.T1.

E3.6.2.2. Prescribe policies for no-notice or short-notice movements to locations where a Vulnerability Assessment has not been accomplished or is not current. Predeployment vulnerability assessments should assist commanders in updating AOR-specific training (see DoD STANDARD 29) and in obtaining necessary physical security materials and equipment to implement protective measures.

Table E3.T1.

Type of Assessment Conducted by Frequency PSVA Defense Criminal Investigative

Office (or others as designated) Conduct per DoDI 2000.16 STANDARD 16; validate at least annually; conduct triennially

VA of critical Roads, bridges, sea and air ports, and staging/bed down areas

DoD Component Per GCC guidance See DoDI 2000.16 STANDARD 6

VA of DoD Day Care, schools, & routes

DoD Component At Threat Level: Significant

VA of Installations and facilities

With 300 personnel, or

Responsible for emergency response/critical infrastructure

DoD Component (local), Higher Headquarters, Service, Geographic Combatant Command, or JSIVA

At least annually Per DoDI 2000.16 STANDARD 6

Program Review DoD Component (local) or as HHA

Per E3.1.31.2

At least annually and in predeployment

External Higher Headquarters Assessment (HHA)/ Program Review

Higher Headquarters, Geographic Combatant Command, JSIVA

Per E3.1.31.5

Triennially

CJCS led HHA CJCS Per E3.1.31.6

Triennially

Change 2, 12/8/2006 ENCLOSURE 3 17

E3.7. DoD STANDARD 7: AT Plan

E3.7.1. The Heads of the DoD Components shall:

E3.7.1.1. Develop and maintain a comprehensive AT Plan for all DoD Elements and Personnel that have AT responsibility. Use of the Joint Antiterrorism (JAT) Guide, the only OSD and Joint Staff approved AT software planning tool, when used in its entirety, satisfies all minimum planning elements prescribed in this document. An AT Plan will not be considered complete unless signed and exercised.

E3.7.1.2. Incorporate AT principles into all operational plans and risk decisions using the standards prescribed by this Instruction as a baseline to develop and implement AT policies in support of the DoD Components’ unique roles and mission requirements. At a minimum, AT plans shall be developed at the installation, separate or leased facility/space, and ship levels, and also for operational deployments, training exercises, and special events.

E3.7.1.3. Tailor AT plans to the level of command or activity for which the AT principles were developed. At a minimum AT plans shall address:

E3.7.1.3.1. The minimum essential AT program elements (see STANDARD 1) and standards prescribed by this Instruction.

E3.7.1.3.2. Specific threat risk mitigation measures to establish a local baseline defensive posture. The local baseline defensive posture shall facilitate systematic movement to and from elevated security postures, including the application of Random Antiterrorism Measures (RAM).

E3.7.1.3.3. AT Physical Security Measures (see STANDARD 13).

E3.7.1.3.4. AT Measures for Off-installation Facilities, Housing, and Activities (see

STANDARD 15).

E3.7.1.3.5. AT Measures for HRP (see STANDARD 16).

E3.7.1.3.6. AT Construction and Building Considerations (see STANDARD 17).

E3.7.1.3.7. AT Measures for Logistics and Other Contracting (see STANDARD 18).

E3.7.1.3.8. AT Measures for Critical Asset Security (see STANDARD 19).

E3.7.1.3.9. AT Measures for Intransit Movements.

E3.7.1.3.10. Terrorism Incident Response Measures (see STANDARD 20).

Change 2, 12/8/2006 ENCLOSURE 3 18

E3.7.1.3.11. Terrorism Consequence Management Measures, including CBRNE and WMD mitigation planning (see STANDARD 21).

E3.7.1.3.12. FPCON Implementation Measures, including site-specific AT measures (see STANDARD 22).

E3.7.1.3.13. CBRN Defense Joint Enabling Concepts of Sense, Shape, Shield, and Sustain per JROCM 180-3 (Reference (s)).

E3.7.2. The Geographic Combatant Commanders shall provide AT planning information (e.g., airfield, port, and movement route information and threat; vulnerability and criticality assessment data) to deploying DoD Component units to enable them to perform risk management and develop a tailored AT plan.

E3.7.2.1. Direct the execution of advance site reviews to facilitate the AT planning process in areas assessed as SIGNIFICANT or HIGH Threat Level or where a specific Terrorism Warning is in effect.

E3.7.2.2. At the discretion of the Geographic Combatant Commander, such security efforts may be waived for deployments or visits to controlled locations such as existing military installations or ships afloat. Augmentation of assessment personnel may be necessary to enable subordinate Component Commanders to discharge their responsibility to provide security, surveys, assessments, CI, and countersurveillance support, and to act as the liaison with the country team, host-nation security force, husbanding contractor, and port authority.

E3.7.2.3. In countries where available, FPD will assist by providing surveys, assessments, CI, and countersurveillance support, and act as the liaison with the country team, host-nation security forces, husbanding contractor, and port authority.

E3.8. DoD STANDARD 8: AT Program Coordination

E3.8.1. The Geographic Combatant Commanders shall coordinate AT and security matters with the appropriate Chiefs of Mission and host-nation authorities for countries within their AOR and with the Heads of the other DoD Components whose personnel are stationed in or transit the respective Geographic Combatant Commander’s AOR.

E3.8.2. The Heads of the DoD Components (whose personnel will be stationed in, or transit, the AOR of a Geographic Combatant Commander) shall:

E3.8.2.1. Initiate coordination of AT matters with the appropriate Geographic Combatant Commander pursuant to the requirements established by Reference (b).

E3.8.2.2.. Coordinate AT matters with local, State, Federal, and host-nation authorities pursuant to existing law and DoD policy to support AT planning and program implementation.

Change 2, 12/8/2006 ENCLOSURE 3 19

E3.8.3. Subordinate elements of the DoD Components that are tenant units on installations or separate facilities shall coordinate their AT program and plan requirements with the host installation or separate facility commander or civilian equivalent director. Tenant units shall participate fully in installation and separate facility AT programs. At locations where there are multiple DoD Components, such as DoD-leased facilities or other facilities where DoD occupies space, the designated senior DoD Component shall be responsible for integrating and coordinating individual DoD Component security plans into a comprehensive installation or facility or area-wide AT program.

E3.9. DoD STANDARD 9: Antiterrorism Officer (ATO). The Heads of the DoD Components shall:

E3.9.1. Ensure subordinate elements designate, in writing, a Level II-certified (see DoD STANDARD 26 for criteria) commissioned officer, non-commissioned officer, or civilian staff officer as the ATO. ATOs shall be assigned at the battalion, ship, squadron, and separate facility and higher levels (stationary or deployed). A deploying unit having 300 or more personnel assigned or under the operational control of a designated commander will have a Level II-certified ATO.

E3.9.2. At the Combatant Command, Military Department, and Defense Agency or Field Activity Headquarters level, designate, train, and resource a full-time staff to support ATOs in administering their respective AT programs.

E3.9.3. Consider maintaining full-time AT staffs, including individuals with CBRNE expertise, at the Component Command, installation, separate facility, and other subordinate headquarters levels as appropriate.

E3.10. DoD STANDARD 10: Antiterrorism Working Group (ATWG). The Heads of the DoD Components shall establish an ATWG at the installation and separate facility level and higher (stationary or deployed) that meets at least semi-annually or more frequently, depending upon the level of threat activity, to oversee the implementation of the AT program, to develop and refine AT plans, and to address emergent or emergency AT program issues. ATWG membership shall include the ATO, the Commander (or a designated representative), representatives of the principal staff, including CBRNE expertise, tenant unit representatives, and other representatives as required to support AT planning and program implementation.

Change 2, 12/8/2006 ENCLOSURE 3 20

E3.11. DoD STANDARD 11: Threat Working Group (TWG). The Heads of the DoD Components shall establish a TWG at the installation and separate facility level and higher (stationary or deployed) that meets at least quarterly or more frequently, depending upon the level of threat activity, to develop and refine terrorism threat assessments and coordinate and disseminate threat warnings, reports, and summaries. TWG membership shall include the ATO;

the Commander (or a designated representative); members of the staff; tenant unit representatives; and appropriate representation from direct-hire, contractor, local, State, Federal, and host-nation law enforcement agencies and the IC.

E3.12. DoD STANDARD 12: AT Executive Committee (ATEC). The Heads of the DoD Components shall establish an AT executive-level committee or similarly structured corporate body at the installation and separate facility level and higher (stationary or deployed) that meets at least semi-annually to develop and refine AT program guidance, policy, and standards; to act upon recommendations of the ATWG and TWG; and to determine resource allocation priorities to mitigate or eliminate terrorism-related vulnerabilities.

E3.13. DoD STANDARD 13: AT Physical Security Measures. The Heads of the DoD Components shall:

E3.13.1. Apply the principles of Reference (f)) and fully integrate them into AT Plans to ensure employment of a holistic security system to counter terrorist capabilities. Well-designed AT physical security measures are multi-layered and include the integration and synchronization of the following essential elements: detection (human, animal, or sensors to alert security personnel of possible threats and unauthorized entry attempts at or shortly after occurrence);

assessment (electronic audio-visual means, security patrols, or fixed posts to localize and determine the size and intentions of unauthorized intrusion or activity); delay/denial (active and passive security measures including barriers to impede intruders’ efforts); communication (command and control procedures) and response (trained and properly equipped security forces).

The development of comprehensive AT physical security measures requires the integration of facilities, physical security equipment, trained personnel, and procedures oriented at a minimum in support of perimeter and area security, access and egress control, protection against CBRNE attacks (including those using the postal system), HRP protection, barrier plans, and facility standoff distances.

E3.13.2. Develop AOR or other mission-specific physical security policies to guide subordinate development of local physical security systems and the purchase of physical security equipment.

E3.13.3. Coordinate and integrate tenant command and unit security plans and measures into the AT Plan.

Change 2, 12/8/2006 ENCLOSURE 3 21

E3.14. DoD STANDARD 14: Random Antiterrorism Measures (RAM). The Heads of the DoD

E3.14.1. Develop and implement RAM as an integral component of the overall AT program guided by the principles outlined in Reference (i). To maximize the effectiveness and deterrence value, RAM should be implemented without a set pattern, either in terms of the measures selected, time, place, or other variables. RAM, at a minimum, shall consist of the random implementation of higher FPCON measures in consideration of the local terrorist capabilities.

Random use of other physical security measures should be used to supplement FPCON measures.

E3.14.2. Employ RAM, in conjunction with site-specific FPCON measures (see DoD STANDARD 22), in a manner that portrays a robust security posture from which terrorists cannot easily discern security AT and security patterns or routines.

E3.14.3. Include tenant units and commands in RAM planning and execution.

E3.14.4. Develop command-unique and site-specific FPCON measures for added deterrence effect (see DoD STANDARD 22).

E3.15. DoD STANDARD 15: AT Measures for Off-Installation Facilities, Housing, and Activities. The Heads of the DoD Components shall:

E3.15.1. Develop in their overall AT programs specific AT measures for off-installation facilities, housing, transportation services, daycare centers, and other activities used by or involving a mass-gathering of DoD personnel and their dependent family members. These risk mitigation measures shall include, but are not limited to: emergency notification and recall procedures; guidance for selection of off-installation housing, temporary billeting, and other facility use (including compliance with Unified Facilities Criteria 04-010-01 (Reference (t)) for leased, newly constructed, and expeditionary buildings); physical security measures; CBRNE defensive measures; and shelter-in-place, relocation, and evacuation procedures.

E3.15.2. Develop Mutual Aid Agreements or other similarly structured protocols with the appropriate local, State, Federal, and host-nation authorities to coordinate security measures and assistance requirements to ensure the protection of DoD personnel and their family members at off-installation facilities and activities.

Change 2, 12/8/2006 ENCLOSURE 3 22

E3.16. DoD STANDARD 16: AT Measures for High-Risk Personnel (HRP). The Heads of the DoD Components shall:

E3.16.1. Develop AT measures pursuant to the principles outlined in Reference (h) for personnel designated as HRP, for those personnel occupying HRB, and for other personnel designated as distinguished visitors.

E3.16.2. Annually, identify to the responsible Military Department those personnel designated as HRP, and those personnel assigned to HRB.

E3.16.3. Identify to the responsible Military Department those personnel, including designated HRP family members, requiring formal HRP training before assignment. This will enable the Military Departments to schedule the required training.

E3.16.4. Ensure HRP and family members, as appropriate, complete appropriate high-risk training (personal protection, evasive driving, AT awareness, and hostage survival); are properly cleared for assignment to HRBs, facilities, or countries requiring such protection; and have been thoroughly indoctrinated on the duties and responsibilities of protective service personnel.

E3.16.5. Ensure that HRP designees and their family members are familiar with treaty, statutory, policy, regulatory, and local constraints on the application of supplemental security measures for certain high-ranking DoD officials who are provided additional protection due to their position.

E3.16.6. Complete PSVA for each person designated as HRP. PSVA will be initiated within 90 days of an individual’s assignment to an HRB or designation of an individual as HRP. PSVA will be revalidated annually and updated if the Terrorism Threat Level changes but no less than every 3 years.

E3.16.7. Review HRP security measures within 60 days of changes to the Terrorism Threat Level for the affected country and HRP.

E3.16.8. Comply with the provisions of the DoD Non-Tactical Armored Vehicle Policy (DoD C-4500.51, Reference (u)) for the acquisition and use of non-tactical armored vehicles.

E3.17. DoD STANDARD 17: AT Construction and Building Considerations. The Heads of the

E3.17.1. Fully…