The Truck, the Tailgater, and the Envelope
You are the lobby officer at a 1,200-employee office building in the District. At 07:15 a rental box truck with out-of-state plates parks in the fire lane 30 feet from the loading dock and the driver walks off without entering the building. At 07:40 he returns, sits in the cab, and does not leave. Meanwhile a courier follows an employee through the badge door without badging, carrying two boxes. At 08:05 the mailroom flags a padded envelope: no return address, an oily stain on one corner, a wire visible at the seam, postmarked 400 miles away, addressed to a division that does not exist. The mailroom clerk has already carried it to the lobby to show you.
1. Rank the three problems, and for each state what you report, to whom, and what you must not do.
Read the worked answer
Rank by potential for mass casualties, not by how annoying each one is.
1. The envelope - treat as a possible improvised explosive device until cleared.
- What you do: put it down where the clerk can set it, isolate the immediate area, keep people out, move yourself and others away and behind hard cover, call 911.
- What you report: exact location, description, who touched it and when, how many people are in the space, and whether anything changed since it was found.
- What you must not do: do not open it, do not shake it, do not put it in water, do not place it in a container, do not carry it through the lobby, and do not transmit on a radio close to it - use a landline or move well away before keying a radio.
- The clerk carrying it to the lobby is a real contamination of the scene. Note it, don't scold him; it changes the evacuation and the interview list.
2. The truck - possible pre-operational surveillance or a vehicle-borne device.
- Report the plate, state, make, rental markings, driver description, times parked and returned, and the fact that he never entered the building.
- Do not approach the vehicle, do not ask the driver to move it, do not touch it.
- Indicators that raise concern: rental, out-of-state, staged in a fire lane near a loading dock, occupant remaining in the cab, arrival at shift-change.
3. The tailgater - an access-control failure, not an emergency.
- Report the employee badge number if you can read it, the courier's company and description, the door, and the time.
- Handle it after the first two, but handle it: the door didn't fail, the culture did.
2. Walk through your evacuation decision and your role once Fire and MPD arrive. Who is in command?
Read the worked answer
Decision framework for the envelope:
- Isolate first, evacuate second, and the size of the evacuation depends on the item. A device in a mailroom on the ground floor near a loading dock is different from a device on the 11th floor.
- Move people away from the item and away from glass, which is the main injury producer in a blast. A shelter-in-place order on upper floors may be safer than pushing 1,200 people through the lobby the item is sitting in.
- Announce plainly, without speculation. "There is a suspicious item in the mailroom. Please move to the east stairwell and out the rear exit." Do not say "bomb."
- Do not use the fire alarm unless the fire plan calls for it; a full alarm may push everyone into the lobby you are trying to clear.
Command:
- You are never the incident commander. The moment MPD/Fire arrive, command transfers to them. Your job becomes facility liaison and resource: floor plans, keys, camera locations, access-control logs, HVAC and utility shutoffs, occupant rosters, the name of the clerk who handled the item.
- Know the language: unified command, an incident command post, a staging area, and a single point of contact. Give one person - you or your supervisor - as the liaison so the fire department isn't getting three different answers.
- Accountability: if you evacuate, someone must have a roster and a rally point, or you will be sending firefighters back in for people who already left.
Afterwards: preserve the entire camera archive, not just the mailroom clip, and start the timeline while the times are still verifiable.
3. The truck driver now walks into the lobby, asks for a specific employee by name, and says he has a delivery. What do you do?
Read the worked answer
This is the moment the earlier observations either pay off or get wasted.
- Do not confirm or deny that the employee works here. Names are the most common pretext for reconnaissance. "I can't confirm who works in this building" is the whole answer.
- Do not accept the delivery into the lobby and do not let him past the access point. Legitimate deliveries at this building go to the loading dock with a manifest and a call-ahead.
- Keep distance and stay behind the counter or a barrier. Do not physically block a vehicle or a person who may be part of something larger; you are gathering information, not making an arrest.
- Ask only what he volunteers, and write it down verbatim: the employee name he asked for, the company, the manifest, his name, the truck, the plate. If he has no paperwork for a named individual, that is a data point.
- Call MPD - you already have a suspicious vehicle report; this connects to it. Give the dispatcher both.
- Preserve the CCTV for the lobby, the dock, and the fire lane, with the recorder's clock offset noted.
In the report, separate observation from inference. "Driver asked for [name] and stated he had a delivery. No manifest was produced. He returned to the truck at 08:19 and departed at 08:24" - not "driver was conducting surveillance." The inference is for the investigator; the facts are for you.