LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
XYZ Port Facility
Maritime Security Exercise
Date : dd-mm-yyyy
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Port Facility Live Exercise
Responses to Intrusion,
Contingencies and exchange of DoS
Exercise LE 3
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Scope
•
•
•
•
•
•
•
•
•
•
•
Date, time, location
Aim
Objectives
Desired outcomes
Controllers
Players
Materials
Scenario
Communications
Safety
Debrief
For Controllers Only
• Master Events List
• Controller Tasks
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Schedule
• Start:
• Estimated End:
• Location:
• Debrief:
• Report by:
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Aim
• To enhance the
proficiency of the port
facility security team in
responding to intrusions
and contingencies as well
as communication with a
ship for exchange of DoS.
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Objectives
• Security staff to handle routine security
matter and contingencies in accordance with
the procedures in the PFSP.
• Security staff to complete an exchange of
DoS with a ship and to implement the
additional measures, if necessary.
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Desired Outcomes
• Able to respond correctly to routine security matters
and contingencies.
• Able to carry out an exchange of DoS with the ship
and implement any additional measures as required.
• Able to carry out their duties relating to all security
matters confidently.
• Able to suggest changes or improvements to the
security plan and procedures, if any.
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Exercise Director
• Mr. BBB
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Control Team
• Chief Controller – Security Manager or
equivalent
• Operations Controller – Operations
Supervisor or equivalent
• Technical Controller – Engineering
Supervisor or equivalent
• Electrician technician
• Technician for intrusion system.
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Control Team (cont)
• Simulator 1 & 2 – Assuming the role of
salespersons
• 2 x driver of vehicle for unaccompanied
baggage and ship’s store
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Participants (Players)
• Port Facility Security Officer
• Security staff
• Operations staff
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Materials
• Consignment of unaccompanied and delivery
vehicle
• Consignment of ship’s store and delivery vehicle
• Ship in harbour
• Placard that states “A hole has been cut in the
fence”
• Brochures on office equipment
• 2 or more suitcases stuffed with clothing
• 2 x empty LPG cylinder
• Heavy suitcase, simulating a bomb
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Scenario
• Economic downturn lead to slowdown in
shipping industry and increased competition
between port facilities.
• Several incidents ranging from technical
glitches, operational incidents and even
administrative matters that have disrupted
operations at Port Facility ABC recently
which points to possibility of sabotage.
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Communications
• Mobile phone
– 1234567
• Walkie-Talkie
– Player – Ch YY
– Controllers – Ch ZZ
• Other communications means
as required
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Code Work
CODE WORD
MEANING
Exercise XYZ Start
The exercise is to commence
Exercise XYZ Hold
The exercise is temporarily suspended
Exercise XYZ Go
The exercise is to resume from where it was suspended
Exercise XYZ Abort
The exercise is to be terminated (prematurely)
Exercise XYZ End
The exercise is completed
For Exercise
The message or statement that follows this preamble
relates to the exercise only, and is not to be confused with real
activity. This should be used to prefix all telephone or radio
communications relating to simulated events for the exercise
e.g. “For exercise, I am from the Black September terrorist
group. A bomb has been placed in your lobby.”
No Duff
The message or statement that follows this preamble relates to
a real event or instruction e.g. “No duff, Mr. KLJ has fallen
and cut his hand at the Restricted Area Gate 3. Please send a
vehicle to pick him up.”
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Safety
• Physical safety of personnel is paramount
• There is to be no physical contact between
player and controllers acting as intruders,
etc.
• Security staff are not to use abusive
language when talking to controllers acting
as “intruders”
• Do not neglect the safety of equipment
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Debrief
• Location:
• Secretary:
• Attendance
–
–
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Any questions ?
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Following Presentation Slides are
for Controllers Only
• Master Events List
• Controller Tasks
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Master Events List
S/N
Time
Event
001
0845
002
0900
All participants in
position
Exercise Start
003
0905
004
0915
Purpose
Commence
exercise
Hole found in
Test
fence
response to
security
breach,
facilitate
exercise
play
Potential
Test
intruders,
procedure
pretending to be
for access
salespersons for control, set
office equipment up for
asked to enter the further
port facility to talk injects.
to the
administrative
staff
Action By
To
Means of
Delivery
Expected
response
Chief
Controller
Ops
Controller
All
Walkie
Talkie
Placard
None
Potential
Intruder
Guard at
personnel
entrance
Patrolling
Guard
Report, take
action to
address the
breach
Walk to
Follow
pass office procedures
to grant
access
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
S/N
Time
Event
Purpose
Action By
To
Means of
Delivery
Phone
Expected
response
Seek
medical
attention,
manpower
to replace
guards.
Drive away None
005
0920
All guards at
pass office taken
ill with stomach
cramps and
vomiting.
Test ability to
mobilize
additional
manpower
Operations
Controller
Security
Supe
006
0930
Guards at
monitoring
station
0935
Follow up to
inject, potential
for further
exercise play
Close inject.
Potential
intruder
007
Operations
Controller
Security
Supe
Phone
Possibility
of
deliberate
mischief
008
0945
The salesmen
drives away after
been refused
entry
Guards had all
bought food
from a vendor
that was outside
the port facility
Delivery of a
consignment of
unaccompanied
baggage
To verify
baggage
screening
procedures.
Set up for
further injects.
Delivery
driver
Guards at
baggage
screening
Drive to
port
facility
Follow
procedures
to process
baggage.
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
S/N
Time
Event
Purpose
Action By
To
Means of
Delivery
Simulated
fault
Expected
response
Verify fault,
seek
technical
assistance
009
0950
Test
responses to
equipment
failure
Technical
Controller
Staff at
baggage
screening
010
1000
Facilitate
exercise play
Technical
Controller
011
1005
Fault in cargo
screening
equipment(s)
while in the
middle of
screening
baggage
Need 1 hour to
rectify fault in
cargo screening
equipment,
Agent for MV
BLUESTAR
requests for DoS
as ship is at a
different level of
Security.
Staff at
cargo
screening
Simulated
fault
Ops staff
Email
Alternative
arrangement
for
screening.
Contact ship
to complete
DoS
Test comms
between port
facility and
ship
Ops
Controller
(Ship’s
Agent)
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
S/N
Time
Event
Purpose
Action By
To
Means of
Delivery
Isolate
power
Expected
response
Report, seek
technical
assistance,
response
plan for
blackout
012
1010
Blackout at
monitoring
station.
Technical Guards at
controller monitoring
station
013
1020
Delivery
driver
014
1025
Delivery of a
consignment of
ship’s stores
together with
empty LPG
cylinders
Intrusion alarm
activated in one
of the buildings.
Test
response to
incidents,
readiness of
backup
power
supply.
To test goods
screening
procedures.
Staff at
cargo
screening
Drive to
port facility
Detect LPG
cylinders
Test
response to
intrusion
alarm
Technicia
n
Guards at
monitoring
station
Remote
activation
Take actions
in response
to intrusion
alarm
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
S/N
Time
Event
Purpose
Action By
To
Means of
Delivery
Expected
response
015
1030
To test
telephone
bomb threat
procedures.
Operation
s
controller
Ops staff
Telephone
016
1035
Close inject,
to indicate
possible acts
of intrusion
Operation
s
controller
Patrolling
guards
Verbal
Evaluate
legitimacy of
the phone
threat and
adopt the
necessary
actions.
Search
building
017
1040
Telephone bomb
threat demanding
the port facility to
stop all activities
or else the bomb
will go off and
“kill everyone”.
Signs of
tampering found
at the side
entrance of the
building.
Cargo screening
equipment
rectified. Found a
blown fuse
Facilitate
exercise play,
indicate signs
of tampering
Technical
Controller
Staff at
cargo
screening
Verbal
Stand-down
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
S/N
Time
Event
Purpose
Action By
To
Means of
Delivery
Expected
response
018
1045
019
1055
Facilitate
exercise play,
test
procedures
for dealing
with
suspicious
baggage
Close inject,
test
procedures
for
evacuation
020
When
evacuation
completed
A suspicious
looking suitcase
was found in the
janitor’s closet in
the same
building where
intrusion
occurred.
Operations
Manager orders
evacuation of the
building where
the suspicious
suitcase was
found.
Exercise Ends
Ops
Ops
controller staff
Telephone
Take actions
to deal with
suspicious
suitcases
Ops
Manager
Telephone
Evacuate
building
End of
exercise
Chief
All
Controller
Walkie
talkie
None
Ops
staff
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Controller Tasks
• Ops Controller will place the placard stating
a hole has been cut in the fence at a suitable
location and wait for the arrival of the
patrolling guard. EPCT will decide on the
exact location for this exercise.
• The two intruders will attempt to enter the
port facility with the pretext of presenting
their office equipment to the administrative
staff. They will have all proper identification
documents and brochures for office
equipment.
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Controller Tasks (cont)
• The extra bags should be loaded to the
vehicle with the consignment of
unaccompanied baggage before it enters the
port. The driver should follow all procedures
and provide all necessary documentation for
the delivery of the baggage. If detected, the
driver should produce the Letter of
Identification and be allowed to deliver the
unaccompanied baggage. If not detected,
the driver should deliver the simulated
contraband to the Chief Controller.
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Controller Tasks (cont)
• The technical controller should declare that
the screening equipment is not working but
should take measures to ensure security is
not compromised when actual items are
delivered. EPCT will decide on the exact
location and equipment to be used for this
exercise.
• The technical controller, with the help of the
electrical technician, will switch off the main
power to the monitoring station.
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Controller Tasks (cont)
• The empty LPG cylinders must be loaded
onto the delivery vehicle before it reaches
the port facility. The driver of the vehicle
with the empty gas cylinders will attempt to
enter the port facility to deliver the ship’s
stores. The driver will have all the proper
documents for the stores but not for the gas
cylinders. If detected, the driver should
produce the Letter of Identification and be
allowed to deliver the ship’s stores. If not
detected, the driver should deliver the 2 LPG
cylinders to the Chief Controller.
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Controller Tasks (cont)
• The technician for the intrusion detection equipment
should remotely trigger the intrusion alarm for a
building. The Operations Controller will be onsite
and inform the security staff that there are signs of
tampering. The EPCT will decide on the exact
location and details of the tampering
• The Operations Controller will call the Ops Room for
the bomb threat. The Operations Controller should
try to alter his/her voice by using a cloth to cover
his mouth or similar. The EPCT will decide on the
exact message to be delivered.
LE 3 - Responses to Intrusion, Contingencies and exchange of DoS
Any questions ?