Districts Mutual Insurance Criminal ACT Tabletop Exercise October 21, 2011

1. Districts Mutual InsuranceCriminal ACT Tabletop ExerciseOctober 21, 2011

2. To review and evaluate current practices, procedures, resources and actions in the context of a response to a serious crime occurring in a college setting. • To promote greater understanding and ability to apply emergency response principles. • To make improvements in your plan. Tabletop objectives:

3. This is not a pass/fail event. It is a discussion of probable responses to a hypothetical emergency and cascading events, testing your plan. • The exercise will be an open dialogue. All ideas are welcome. • No ridicule - no GOTCHA. • One person speaks at a time. • The scenario will be accepted as is. However, the facilitators may make modifications at their discretion. • No hypothetical resources are available. GROUND Rules:

4. A female student food service employee reported a “suspicious” man walking though the food service area. He came in, kept his face down and his back to the checkout area. He didn’t look at the menu board, didn’t get a tray, and didn’t purchase anything. He just walked around the perimeter and kept his distance from those getting food. He was described as an “Anglo male with a grey hooded sweatshirt and jeans.” • The next day, an employee working at the food service checkout reported a man of similar description standing in the hall outside looking intently at the checkout area . She reported that he didn’t enter and he kept staring at her. Scenario:

5. You have these two reports - what more do you need to know? • How do you find the information? • Does your Emergency Response Plan provide any direction for actions at this time? • What, if any, are your next steps? Questions:

6. Scenario – ONE day later: • A female food service staff member reported that while walking to her car after work, a man followed her. • Her description of the man was similar to the earlier description given in the last two complaints. • She got in her car and left the parking lot without further incident.

7. This is the third report you have received. Is there any organized response at this point? If an organized response, who is in charge and what is the response? • What, if any, are your concerns and protective measures you might consider? • What, if any, facilities measures are taken (e.g., increased security)? • What additional notifications, if any, are made? Questions:

8. Scenario –two days later,2:30 PM: • A smoke bomb is set off at a classroom building, in a stairwell designated as an emergency exit. • Students panic thinking the smoke was from a fire, and rush to exit. Much confusion regarding who to call and someone finally calls 911. The fire department is deployed.

9. Scenario –two days later,2:30 PM (Con’t): • A student is pushed in the stairwell and falls, breaking her leg. Other students just run around her and do not help; someone takes video with a smart phone and sends to local TV news and posts on YouTube. The video goes viral within hours. • Police, EMT, and Fire are now on campus.

10. Who is in charge? • What is the college’s immediate response? • Is a Emergency Operations/Crisis Command Center activated? If yes, how, when, and where? • What is the college’s relationship to law enforcement at this point? Questions:

11. Foodservice is a contracted service. • Food service has a student employee who is paid by the college. • The food service manager is on campus but not in the immediate area. • Usually during mid-afternoon the Manager removes cash from drawers; since he is not present, cash is still in place. • The manager, food service employees and student employees have never been invited to participate in the college’s emergency response training. • Staff is busy changing from lunch to afternoon snack items. Scenario –three days later 2:30 PM Situational Report

12. Scenario –three days later,3:00 PM: • Three armed men enter the food service area demanding money. • They startle the student employee and she drops a tray of utensils. This was the student who made the initial “suspicious person” report. • The criminals force the student employee to open the cash drawers. However, she is able to hit the silent alarm.

13. Scenario –three days later,3:00 PM (con’t): • A worker in the back hears all the noise and goes to investigate. • One of the criminals reacts by hitting him in the head, knocking him to the floor unconscious. • In a panic, the criminals grab money from the cash registers and take the student employee hostage and escape by car.

14. Scenario –two days later, 1:55 PM: • Someone captures this photo of the getaway car leaving the scene with the student hostage. • About two miles from campus, the student is thrown from the car and suffers a broken arm, cuts and bruises. • Police have set up a search grid in an attempt to locate the car.

15. Questions: • At this time, who is primarily responsible for the response? • Is an Emergency Operations/ Crisis Command Center activated? If yes, how, when, and where? • Broadcast and print media are now arriving on campus - how will they be addressed? • Is the college in full operation? If not, what areas are impacted? • What is the college’s relationship to law enforcement at this point?

16. The student who suffered the broken leg in the smoke bomb incident has been hospitalized. Parents of the student have seen the video. They call a lawyer and come to the hospital. • This smoke bomb is considered by police to have been a means to test law enforcement response times. • The student that was taken hostage has also been hospitalized. • The outside media, student media, students, faculty and staff are demanding information and action. Update:

17. What actions will you now take? What actions with/for the hospitalized students? • How is the college working with law enforcement? • Do you activate your emergency response/crisis management team or a crisis media response team? Questions:

18. Who is the Incident Commander? • Who is the Public Information Officer? • Who is the Law Enforcement Liaison Officer? • What is the role of the college administration? INCIDENT COMMANDS Structure (ICS) Questions:

19. The campus and community is fearful. • The print and broadcast media is critical of the college’s response and demanding information. • Both students who were injured have retained lawyers and are suing the college for not providing adequate protection or training in how to respond to a criminal emergency. Situational Report5:00 PM:

20. Situational Report5:15 PM: • A “person of interest” was detained by Campus/Local Police during a surveillance operation of campus parking lots.

21. What kinds of disruptions are occurring on and off campus due to these events. • There are now a number of public agencies on campus. How will unified cooperation and command be established? • What areas of responsibility does the college Emergency Operations/Command Center retain? • What is the current involvement of Student Health Services? Counseling? Security? Administration? Others? • The event is attracting statewide and national media attention – How will you handle the media? Who is the college spokesperson? • Will you close the college? If yes, why? What information will the decision makers need? Questions:

22. Other students and their family members are calling the college wanting information. Most of the callers are receiving busy signals. These family members are telling the media that the college is indifferent and uncaring and not bothering to answer the phone inquiries. How do you respond? • Family members who cannot get through to the college are also calling elected officials and Board Members, complaining about the lack of response to their phone calls by the college. How do you answer officials who want to launch an investigation into the college’s lack of response? Final Questions:

23. In this scenario, how well would your plan work and what needs to be improved? • In this scenario, how well did your Command Team operate and what needs to be improved? • How effectively would your internal student/staff communications plan operate and what needs to be improved? • How effective would your crisis media relations plan be in this scenario and what needs to be improved? • How will the college resume “normal” operations and how will that planning be communicated and by who? Debrief:

24. What could be done to improve Campus Security operations? • What internal departments would have been required to work together? Could these departments work together? • Do you think your college would have worked successfully with the public agencies, especially law enforcement? • Does your college administration appreciate the implications of a situation like this scenario? If not, what can you do to help their understanding? DEBRIEF:

25. This table top exercise will lead to your college to decide to: • Keep Doing _______________________________________ • Stop Doing _______________________________________ • Start Doing _______________________________________ Action Plan:

26. Questions? CRIMINAL ACT TABLETOP EXERCISE