CDSE Pulse Volume 3 Issue 8

Transcription

VOLUME 3 ISSUE 8August 2022THISMONTH’SFOCUSDID YOU KNOW?Antiterrorism is defined asdefensive measures used toreduce the vulnerability ofindividuals and property toterrorist acts.CDSE – Center for Development ofSecurity Excellence@TheCDSECenter for Development ofSecurity ExcellenceCDSE PulsePublished by the DefenseCounterintelligence and Security Agency(DCSA) Center for Development ofSecurity Excellence (CDSE) Marketing andCommunications Office.DCSA LeadershipWilliam K. Lietzau Daniel LecceDirector, DCSADeputy Director, DCSAKevin JonesAssistant Director,TrainingErika RagoneseDeputy AssistantDirector, TrainingCDSE LeadershipHeather MardagaDirectorZinethia ClemmonsChief, Shared ServicesPulse StaffAdriene BrownSamantha DambachChief Content Officer Natalie PerkinsContent Developers/Isaiah BurwellManagersContent WriterMarc PulliamContent DesignerANTITERRORISM AWARENESSANTITERRORISM AWARENESS MONTH 2022:INCREASING VIGILANCE TO DETER THREATSThis August is the twelfthannual Antiterrorism (AT)Awareness Month for theDOD community. Thepurpose of AT awarenessis to promote vigilanceand increase the DODworkforce’s knowledgeregarding potential threats,the AT program, training/resources, force protectionmeasures, and reporting.This program is a proactiveeffort focused on detectingand preventing terroristactivities targetingDOD personnel, theirfamilies, work facilities,and installation criticalinfrastructure.In February 2022, the Officeof the Director of NationalIntelligence (ODNI) releasedtheir Annual ThreatAssessment of the USIntelligence Community.This annual report focuseson the worldwide threatsto U.S. national security forthe upcoming year, andspecifically “provides theIntelligence Community’s(IC’s) baseline assessmentsof the most pressing threatsto U.S. national interests.”Per this report, “Terrorismremains a persistentthreat to U.S. persons andinterests at home andabroad. Individuals andsmall cells inspired by avariety of ideologies andpersonal motivations.probably present thegreatest terrorist threat tothe United States.”In 2020, both the FederalBureau of Investigationand the U.S. Department ofHomeland Security foundthat a range of concerningmotivations and behaviorswere a growing threatto the United States. OnJune 15, 2021, the BidenAdministration released thefirst-ever NationalStrategy for CounteringDomestic Terrorism toaddress the securitychallenge posed bydomestic terrorism. A factsheet released by the WhiteHouse contained pillars toaddress this challenge toAmerica’s national securityand improve the federalgovernment’s response.Pillar 1: Understand andShare Domestic Terrorism-Related InformationPillar 2: Prevent DomesticTerrorism Recruitment andMobilization to ViolencePillar 3: Disrupt and DeterDomestic TerrorismActivityPillar 4: Confront LongTerm Contributors toDomestic TerrorismSign up for the latest security awareness newsletters at https://www.cdse.edu/news/index.html1

VOLUME 3 ISSUE 8August 2022The comprehensive strategy outlined in the fact sheetprovides a nationwide framework for the U.S. Governmentand partners to understand and share domesticterrorism-related information; prevent domestic terrorismrecruitment and mobilization to violence; disrupt anddeter domestic terrorism activity; and confront long termcontributors to domestic terrorism.Most DOD personnel are required to take AT Level 1training annually. CDSE and other DOD/Governmentagencies offer additional training and resources in theareas of AT, insider threat, reporting, active shooter,physical security, travel, etc., which can increase workforceawareness and knowledge of AT/force protection. Thereare also threat awareness and force protection tools allDOD personnel should get familiar with to enable themto remain vigilant and safe from potential terrorist activity.DHS also has a “see something, say something” campaignwhich encourages vigilance in observing and reportingsuspicious activity to prevent and mitigate terrorist and/orcriminal acts.DOD TERRORISM LEVELSHigh - Anti-U.S. terrorists are operationally activeand use large casualty-producing attacks as theirpreferred method of operation. There is a substantialDOD presence and the operating environment favorsthe terrorists.Signifcant - Anti-U.S. terrorists are present and attack personnel as their preferred method of operation or a group uses large casualty-producing attacksas its preferred method, but has limited operationalactivity. The operating environment is neutral.Moderate - Terrorists are present, but there are noindications of anti-U.S. activity. The operating environmentVOLUME favors2 ISSUE 8 the host nation and the U.S.August 2021Low - No terrorist group is detected or the groupactivity is non-threatening.THREAT AWARENESS ANDFORCE PROTECTION TOOLSFORCE PROTECTION STANDARDSDOD and DHS both have advisorysystems to informDOD and the DHS both have systemspersonnel and organizationsthreat levelsin terroristtheirto aboutadvise personnelabout thethreat levels in their locations. Thoseareas. The systems are as follows:systems are Force Protection ConditionStandards, DOD Terrorism Threat Levels,Force Protection Standards and(DOD)- U.S. militarythe NationalTerrorism AdvisoryLearningmeasuresabout these systemsorganizations use a system System.of protectivetocan help raise awareness of possiblereduce vulnerability to terroristattack. These measures,terrorist activities in your area.known as force protection conditions (FPCON), changeas the threat of attack changes.FORCERegionalPROTECTIONcommandersCONDITION STANDARDSannounce the FPCON for unitsundertheircommand.U.S. military organizations use a systemLocal commanders may increasethe FPCONon localof protectivemeasuresbasedto reducevulnerabilityto terroristmeasuresattack. Thesefactors and may apply additionalprotectiontoknown as force protectionreduce the risk of attack. measures,conditions (FPCON), change as thethreat of attack changes. Regionalcommandersannounce theAgencyFPCONDOD Terrorism Levels - The DefenseIntelligencefor units under their command. Local(DIA) and other U.S. agenciesassess a terrorist threat levelcommanders may increase the FPCONfor each country. If there is indicationa terroristgroupbased on localthatfactorsand may applyadditionalprotectionmeasurestois active and targeting U.S. forces,DIAwill issuea terrorismreduce the risk of attack. FPCONswarning report. Regional andlocal U.S. commandersare not the same thing as Defensecan assign a different TerroristThreatAgencyLevel terrorismfor specificIntelligencethreatlevels. CommandersincreaseFPCONS topersonnel, units, and installations.These threatlevelsprovidesafetyand security whenindicate that DOD personnelneedaddedto takeappropriatethreat levels increase. The FPCONs are:precautions.National Terrorism Advisory System (DHS) – NTASadvisories communicate information about terrorist threatsby providing timely, detailed information to the public,Government agencies, first responders, publicFPCONNormalThis condition applies when a general global threat ofpossible terrorist activity exists and warrants a routinesecurity posture. At a minimum, access control will beconducted at all DOD installations and facilities.FPCONAlphaThis condition applies when there is a generalthreat of possible terrorist activity against personneland facilities, the nature and extent of which areunpredictable, and circumstances do not justifyfull implementation of FPCON Bravo measures. Themeasures in this force protection condition must becapable of being maintained indefnitely.FPCONBravoThis condition applies when an increased and morepredictable threat of terrorist activity exists. Themeasures in this FPCON must be capable of beingmaintained for weeks without causing undue hardship,afecting operational capability, and aggravatingrelations with local authorities.FPCONCharlieThis condition applies when an incident occurs orintelligence is received indicating some form ofterrorist action against personnel and facilities is likely.Implementation of measures in this FPCON for morethan a short period will probably create hardshipsand afect the peacetime activities of the unit and itspersonnel.FPCONDeltaThis condition applies in the immediate area where aterrorist attack occurred or when intelligence showsthat a terrorist action against a specifc location orperson is imminent. Normally, this FPCON is declaredas a localized condition.Geographic combatant commanders have the authority to enforceappropriate FP measures to ensure the protection of all DOD elementsSign up for the latest security awareness newslettersat https://www.cdse.edu/news/index.htmland personnelsubject to their control within their geographic areas ofresponsibility (AORs). Examples of FP measures can include 100% ID cardchecks when accessing a base/building, random or 100% vehicle checkswhen accessing base/building locations, and limiting access to a base/2

VOLUME 3 ISSUE 8August 2022sector organizations, airports and other transportationhubs. NTAS consists of two types of advisories: bulletinsand alerts. If warranted, DHS will share alerts regardingpotential terrorist activity. You can also subscribe tothe bulletins and alerts by visiting the NTAS webpage.Download this poster to share information about NTASadvisories.Security is a shared responsibility. Organizations areencouraged to provide opportunities to learn more aboutAT with awareness campaigns in August and throughoutDOD and the DHS both have systemsthe year. Share this newsletter,whichlists trainingandto advisepersonnelabout the terroristawareness tools, within youragencytotheirpromotesecuritythreatlevels inlocations.Thosesystemsare Force ProtectionConditionvigilance and reporting to yourworkforce.IndividualsDOD Terrorism Threat Levels,can do their part to supportStandards,theATprogrambypracticingand the National Terrorism Advisorysafety and security best practiceslearnedaboutthroughATSystem. Learningthese systemscanhelpraiseawarenessofpossibletraining at work and home. Learn your organization’sactivitiesbombin yourthreats,area.emergency procedures for terroristevacuation,active shooter, and other situations.MostCONDITIONimportantly,FORCE PROTECTIONSTANDARDSreport any suspicious activity to your security personnelU.S. military organizations use a systemor law enforcement. Awareness,vigilance, and reportingof protective measures to reduceare key to detecting and preventingandvulnerability terroristto terroristactivitiesattack. Thesemeasures,knownas force protectionkeeping yourself, your family,and yourworkplacesafe andconditions (FPCON), change as thesecure!“As (Secretary of Defense) Austin has emphasized,the department is focused on prohibited activity; noton a particular ideology, thought or political orientation. The new definition preserves a service memVOLUMEright2 ISSUEof8 expression to the extent possible, whileber’sAugust 2021also balancing the need for good order and discipline to affect military combat and unit readiness.”John F. Kirby, Pentagon press secretaryTHREAT AWARENESS AND–FORCEPROTECTION TOOLSthreat of attack changes. Regionalcommanders announce the FPCONfor units under their command. Localcommanders may increase the FPCONbased on local factors and may applyadditional protection measures toreduce the risk of attack. FPCONsare not the same thing as DefenseIntelligence Agency terrorism threatlevels. Commanders increase FPCONS toprovide added safety and security whenthreat levels increase. The FPCONs are:FPCONNormalThis condition applies when a general global threat ofpossible terrorist activity exists and warrants a routinesecurity posture. At a minimum, access control will beconducted at all DOD installations and facilities.FPCONAlphaThis condition applies when there is a generalthreat of possible terrorist activity against personneland facilities, the nature and extent of which areunpredictable, and circumstances do not justifyfull implementation of FPCON Bravo measures. Themeasures in this force protection condition must becapable of being maintained indefnitely.FPCONBravoThis condition applies when an increased and morepredictable threat of terrorist activity exists. Themeasures in this FPCON must be capable of beingmaintained for weeks without causing undue hardship,afecting operational capability, and aggravatingrelations with local authorities.FPCONCharlieThis condition applies when an incident occurs orintelligence is received indicating some form ofterrorist action against personnel and facilities is likely.Implementation of measures in this FPCON for morethan a short period will probably create hardshipsand afect the peacetime activities of the unit and itspersonnel.FPCONDeltaThis condition applies in the immediate area where aterrorist attack occurred or when intelligence showsthat a terrorist action against a specifc location orperson is imminent. Normally, this FPCON is declaredas a localized condition.Geographic combatant commanders have the authority to enforceappropriate FP measures to ensure the protection of all DOD elementsand personnel subject to their control within their geographic areas ofresponsibility (AORs). Examples of FP measures can include 100% ID cardchecks when accessing a base/building, random or 100% vehicle checkswhen accessing base/building locations, and limiting access to a base/building. FPCON levels are normally displayed at base/building accessgates and on installation/agency websites. If you have questions regardingFPCON levels at your location, check with your local security ofce.Sign up for the latest security awareness newsletters at https://www.cdse.edu/news/index.htmlSign up for the latest security awareness newsletters at https://www.cdse.edu/news/index.html53

VOLUME 3 ISSUE 8August 2022CDSE/DOD ANTITERRORISM AND FORCE PROTECTION RESOURCESPRODUCTTYPEURLAntiterrorism Officer Level II (GS109.16)eLearning 9/Antiterrorism Considerations and Design/Construction StandardsPhysical its/PhysicalSecurity-Toolkit/Active Shooter g.gov/cdse/multimedia/shorts/active-shooter/story html5.htmlCI Foreign Travel v/cdse/multimedia/shorts/ci-foreign-travel/story html5.htmlDOD Prevention, Assistance, and parc/page 0005.htmlCI Awareness and Reporting Course for DODEmployees (CI116.16)eLearning 6/Targeted ViolenceSecurityAwareness /multimedia/games/kinetic/index.htmlCJCS Guide 5260, A Self Help Guide toAntiterrorismJob Library/Handbooks/CJCS%20Guide%205260.pdf?ver qVc2hqnMpe1UOrNcgY175A%3d%3dAntiterrorism Individual Protective Measures CardJob Aid/ n/files/9115/6513/1214/CJCS 5260 Pocket Card.pdfInsider Threat Toolkit (Kinetic Violence Tab)Job etic-violenceSign up for the latest security awareness newsletters at https://www.cdse.edu/news/index.html4

VOLUME 3 ISSUE 8August 2022OTHER FEDERAL AGENCY ANTITERRORISM RESOURCESPRODUCTSOURCEURLTraveler ResourcesU.S. Department of roadCounterterrorism GuideOffice of the Director forNational T: Products and ResourcesOffice of the Director forNational tures/1464Preventing TerrorismDepartment of ng-terrorismSee Something/ Say SomethingCampaignDepartment of say-something/recognize-the-signsNational Terrorism AdvisoryAlerts/ BulletinsDepartment of rism-advisory-systemSign up for the latest security awareness newsletters at https://www.cdse.edu/news/index.html5

VOLUME 3 ISSUE 8August 2022SIGN UP FOR FALL EDUCATIONCLASSESRegistration is still open for the fall semester of CDSEEducation classes that run from August 22 to December18, 2022. There are 14 courses available during the fallsemester. Several of the courses are full but seats are stillavailable in some courses including the following: Writing and Communication Skills for SecurityProfessionals (ED 201) Organizational Considerations in Applying Securitywithin the Federal and DOD Bureaucracy (ED 502) Understanding Adversaries and Threats to the UnitedStates and the DOD (ED 504)Learn more about all of the classes being offered andregister for them by accessing the links located here:https://www.cdse.edu/Education/Courses/To register, log into the Security, Training, Education,and Professionalization Portal (STEPP) via: https://cdse.usalearning.gov/local/pwt privacy policy/view.phpUPCOMING WEBINARSIf you have any questions, or need additional information,send inquiries to: dcsa.cdseeducation@mail.milCDSE invites you to join our upcoming webinars:NBIS The Future of Personnel VettingThursday, August 18, 20221:00pm to 2:00 pm ETPhysical Security Posture: Security-In-DepthWednesday, August 31, 20221:00 – 2:00 p.m. ETCounter Insider Threat Resources for YourOrganizationThursday, September 8, 202212:00 – 1:00 p.m. ETDisinformation and Insider ThreatTuesday, September 13, 202212:00 – 1:00 p.m. ETPersonnel Vetting Policy Overview with OUSD(I&S)Wednesday, September 14, 20221:00 – 2:00 p.m. ETRegister today for these events and join the discussion!Sign up for the latest security awareness newsletters at https://www.cdse.edu/news/index.html6

VOLUME 3 ISSUE 8August 2022NEW AND UPDATEDCYBERSECURITY COURSESNOW AVAILABLECDSE recently released one new and one updatedcybersecurity eLearning course:New Risk Management Framework (RMF): PrepareStep (CS101.16). This course provides training toDOD personnel with assessment and authorizationresponsibilities to help them prepare their organizationto manage its security and privacy risks using the RiskManagement Framework. To learn more, register, andaccess course resources, visit ted Introduction to the Risk ManagementFramework (RMF) (CS124.16). This course identifiespolicies and regulations that govern the DOD RMFprocess and defines DOD Information Technology andthe categories of DOD information affected by the RMF.Additionally, it provides an understanding of the SevenStep Implementation process of RMF and the RMF’sapplicability to the DOD Acquisition Process.This course was updated to introduce a new RMF PrepareStep because of major changes to Policy and Guidance. Italso reflects updates to information flow, content, graphicsand terminology refresh to ensure alignment withNational Institute of Standards and Technology (NIST) 80037 Rev 2, Risk Management Framework for InformationSystems and Organizations: A System Life Cycle Approachfor Security and Privacy.To learn more and register for the updated course, /UPCOMING SECURITYCONFERENCESRegister now for the Insider Threat Virtual SecurityConference. Registration is not yet available for theDOD Security Conference but will be announcedin future Pulse issues, the CDSE Flash, CDSE’s socialmedia and on the CDSE Webinars and Conferenceswebpage.2022 Insider Threat Virtual Security ConferenceSeptember 1, 20222022 Virtual DOD Security Conference (vDSC)October 12-13, 2022NATIONAL INSIDER THREATAWARENESS MONTHNational Insider Threat Awareness Month (NITAM) isnext month! First held in 2019, NITAM is an annual,month-long campaign during September that bringstogether thousands of U.S. security professionalsand policy makers from Government and industry,located in 25 countries around the globe, to educateGovernment and industry about the risks posed byinsider threats and the role of insider threat programs.This year’s theme is “Critical Thinking in Digital Spaces.”For more information, visit the NITAM website.Sign up for the latest security awareness newsletters at https://www.cdse.edu/news/index.html7

VOLUME 3 ISSUE 8August 2022PERSEREC COUNTER-INSIDERTHREAT SUMMITSEPTEMBER DOD SECURITYSPECIALIST COURSEThe DefensePersonnel andSecurity ResearchCenter (PERSEREC)Threat Lab will hostthe Counter-InsiderThreat (C-InT) Social& Behavioral Science(SBS) Summit:September 1-30,2022.This 30-dayvirtual training eventwill feature live webinars, prerecorded webcasts, articles,books, training aids, and other open-source resourcescreated and curated by leading subject matter experts incounter-insider threat research and practice. The Summit willfocus on building Cognitive Immunity. Register here: https://sbssummit.com/The next DOD Security Specialist Course (SSC) isscheduled to start September 12, 2022 and is entirelyvirtual! The four-week, virtual SSC has been well-receivedwithin the community averaging over 85 percent approvalrating amongst students. The course provides students abaseline of fundamental knowledge to perform commonDOD security tasks and practices. It incorporates industrial,information, personnel, and physical security disciplinesto understand their interrelationships, related policies,programs, and procedures.To learn more, register, and view the requiredprerequisites, visit: ed-Courses/GS101/WHAT THE SECURITY COMMUNITY IS SAYINGAntiterrorism Officer (ATO) Level II (GS109.16)-eLearning“Great great course. Very informative.”“Good Course, study guides helped.”“Glad we have this ability to mitigate the loss of AT Level IItravel training teams.”CDSE NEWSCDSE offers an email subscriber news service to getthe latest CDSE news, updates, and information. Youmay be receiving the Pulse through your subscription,but if you were forwarded this newsletter fromanother source and would like to subscribe to thePulse or one of our other publications, visit our newspage to sign up or update your account today https://www.cdse.edu/news/index.html.Insider ThreatBulletinsFlashQuarterlyProduct ReportSign up for the latest security awareness newsletters at https://www.cdse.edu/news/index.htmlDisclaimer: The editorial content of this publication is the responsibility of the Center for Development of Security Excellence Marketing and Communications Office.8

THIS ANTITERRORISM AWARENESS MONTH'S FOCUS ANTITERRORISM AWARENESS MONTH 2022: INCREASING VIGILANCE TO DETER THREATS . and increase the DOD workforce's knowledge regarding potential threats, the AT program, training/ resources, force protection measures, and reporting. This program is a proactive effort focused on detecting and preventing .