Homeland Security Preparedness
Homeland Security Preparedness tests all-hazards awareness, terrorism indicators, suspicious activity reporting, critical infrastructure protection, and the civil-liberties limits on police action.
Suspicious activity reporting
Suspicious Activity Reporting (SAR) captures observed behavior that may indicate pre-operational planning for terrorism or serious crime. Report facts-who, what, when, where, and why it seemed unusual-through the proper channel, such as the North Carolina Information Sharing and Analysis Center (ISAAC) or the local fusion center. SAR is not a substitute for reasonable suspicion or probable cause, and a trooper should not detain someone based only on a hunch or protected activity.
Indicators and infrastructure
Pre-attack indicators can include unusual surveillance, photography of security features, elicitation about schedules or access, testing of security, acquiring unusual quantities of materials, dry runs, or impersonation. Critical infrastructure-water, power, transportation, communications-warrants heightened observation, but observation must be behavior-based, not identity-based.
Active threats and information sharing
For an active threat, the immediate priority is stopping the threat and protecting life; first responders may bypass wounded persons to engage the attacker. Share information need-to-know, protect sensitive products, and avoid unauthorized disclosure.
Worked example: A trooper sees a person photographing a water treatment plant's access gate and asking an employee about shift changes. The trooper notes the person's description, vehicle, time, and exact statements; does not detain without reasonable suspicion; and submits a factual SAR to the fusion center. Reasoning: the behavior is specific and pre-operational in nature, but photography alone may be protected. The report should preserve facts and let analysts assess the nexus.
Traps: profiling by race, religion, or national origin; treating a SAR as probable cause; self-deploying to a terrorism scene; disclosing sensitive information; ignoring First Amendment-protected activity; failing to document specific observations.