Response to Acts of Unlawful Interference and Contingency Planning
From plan to response
Contingency planning prepares the organisation to respond to acts of unlawful interference: hijacking, sabotage, bomb threats, attacks at the airport, hostage situations and suspicious items. Plans must be written, exercised and reviewed. An unexercised plan is an assumption, not a capability.
The response cycle is detect, assess, decide, act, communicate, recover. Clear command and control and defined roles are essential, as is interoperability with police, emergency services and other agencies.
Bomb threats and suspicious items
A bomb threat requires a structured response: record the details, notify, assess credibility, decide on search or evacuation, and preserve evidence. For a suspicious item, the principles are: do not touch, do not use radio equipment near it, isolate and evacuate to a safe distance, and notify. The concept of evacuation versus shelter matters: evacuation can move people towards a device, so decisions must be based on assessment.
Communication and recovery
Communication must be planned for both internal and external audiences, including the media. Recovery includes restoring operations, investigation, debriefing and learning.
Traps
- Answers that treat evacuation as always correct. Sometimes isolation and sheltering is safer.
- Forgetting documentation and evidence preservation.
- Assuming plans are static. They must be tested and updated.
Worked example
A caller claims a device is on a specific flight. The correct sequence is to record and clarify the call, notify the security manager, assess credibility against known indicators, and decide whether to search the aircraft, the terminal, or both, in coordination with police. The decision is documented, and the aircraft is not released until the search is complete.
Security Culture, Human Factors and Quality Control
Culture as a control
Security culture is the shared set of values, attitudes and behaviours that determine how security is actually done. It is the difference between the procedure as written and the procedure as performed. A strong culture has leadership commitment, clear accountability, reporting without fear, learning from error, and a challenge culture in which anyone can question an unsafe or insecure act.
Human factors explain why competent people fail. Relevant concepts include vigilance decrement (attention declines over time), complacency, confirmation bias (seeing what you expect), fatigue, workload, automation bias (over-trusting the machine), and social pressure to keep the queue moving. These are system issues, not simply individual failings.
Quality control
Quality control provides assurance that controls work. It includes audits, inspections, tests, performance testing of screening equipment and operators, competency assessment, recurrent training, and incident reporting and investigation. A just culture distinguishes between error (which should be reported and learned from) and recklessness (which must be addressed).
Traps
- Treating human error as the root cause. The question is why the system allowed the error to matter.
- Confusing training with competence. Training is an input; competence is demonstrated performance.
- Assuming audits are about blame. They are about assurance and improvement.
Rule of thumb
When a question describes a person who missed a threat, look for the system factor: was the image clear, was the shift too long, was there pressure to speed up, was the alarm resolution procedure usable? The best answer usually addresses the system, not just the individual.