PracticeVideosBlogFlashcards

8.2 Emergency Response, Bomb Threats & The HOT Principle

Key Takeaways

  • The HOT principle is the primary threat evaluation standard for suspicious packages: Hidden (deliberately concealed), Obviously suspicious (wires, timers, batteries, leaks, powder, almond odors), and not Typical for the specific operational environment.

  • Upon identifying a suspected Improvised Explosive Device (IED), guards must execute the 4Cs rule: Confirm (assess via HOT without touching), Clear (evacuate occupants calmly away from glass), Cordon (establish perimeter tape), and Control (guide Dubai Police 999 and EOD specialists).

  • Move away from a suspected device before using radios or phones and stay out of its line of sight. ProtectUK advises no such transmissions within 15m; this is a technical planning reference, not proof of a universal SIRA radius. Follow Dubai Police directions and the site plan.

  • Use the approved suspicious-item plan and police directions. ProtectUK’s initial planning distances are 100m for a small item,200m for a small vehicle/large item and 400m for a large vehicle; take hard cover and do not treat a distance as guaranteed protection.

  • During a telephonic bomb threat, the receiving officer must keep the caller on the line as long as possible, record exact statements verbatim, document background noises and vocal traits on the bomb threat checklist, and alert authorities via Dubai Police (999).

Last updated: November 2026

8.2 Emergency Response, Bomb Threats & The HOT Principle

Quick Summary: Security guards serve as Dubai's first line of defense against explosive threats, terrorism, and critical structural emergencies. The HOT principle (Hidden, Obviously suspicious, not Typical) provides the systematic operational framework for evaluating unattended items without causing unnecessary public disruption. If a suspected Improvised Explosive Device (IED) is identified, guards must never touch or move the item, move away before radio/phone use, take hard cover and use the approved evacuation/cordon plan with police directions, and immediately contact Dubai Police via 999.


Threat Detection & Counter-Terrorism in Dubai

Dubai is an international hub characterized by iconic landmarks, critical transportation networks, multinational corporate headquarters, and high-profile public events. Maintaining the emirate's global reputation as one of the safest cities in the world requires continuous vigilance from private security personnel. Security guards are positioned at the precise choke points—lobbies, loading docks, perimeter gates, and public concourses—where hostile reconnaissance and explosive threats are most vulnerable to early detection.


The HOT Principle for Suspicious Packages

Every day in high-traffic facilities such as shopping malls, airports, transit hubs, and exhibition centers, visitors accidentally misplace personal belongings. Treating every lost umbrella or shopping bag as an explosive device would paralyze commercial operations; conversely, dismissing a genuine threat as lost property risks catastrophic loss of life.

To balance operational continuity with life safety, security professionals apply the HOT Principle:

1. H — Hidden? (Deliberately Concealed?)

Was the item intentionally concealed, tucked away, or placed in an obscure location to avoid routine detection?

  • Suspicious Indicators: An item hidden inside an air-conditioning plenum, stashed behind a toilet water cistern, placed beneath an escalator mechanism, pushed deep behind decorative planters in an executive corridor, or wedged behind a fire hose reel cabinet.
  • Normal / Lost Property Indicators: A shopping bag left sitting directly on a food court chair, a briefcase forgotten beside a reception desk, or an umbrella leaning against an entrance turnstile.

2. O — Obviously Suspicious?

Assess only what can be observed safely. Do not approach to smell, lift or weigh the item, or examine inside it. Does the item exhibit physical, visual, or sensory anomalies indicative of an improvised explosive device (IED) or chemical/biological hazard?

  • Visual / Physical Anomalies: Visible electrical wires, exposed circuit boards, digital timers, mechanical clockwork, external toggle switches, or improvised battery packs attached to the exterior.
  • Structural Signs: Heavy adhesive tape (duct tape, electrical tape) wrapped excessively around seams, unevenly distributed weight, uncharacteristic rigid shapes inside flexible duffel bags, or protruding antennae.
  • Chemical / Biological Signs: Oily, damp, or greasy stains seeping through cardboard packaging; visible powder residues; peculiar chemical odors such as the smell of bitter almonds (cyanide compounds), marzipan, sulfur, fertilizer, or petroleum distillates; or ticking, buzzing, or hissing sounds.

3. T — Typical? (Not Typical for the Environment?)

Is the item typical for the specific venue, environment, and ongoing activities?

  • Typical Context: A sports backpack placed on a bench inside a gymnasium locker room, or a hard hat and tool case left on an active construction floor.
  • Atypical / Highly Suspicious Context: A heavy, taped cardboard box left abandoned inside an executive boardroom, an unattended military-style duffel bag placed beside a primary structural load-bearing pillar in a subterranean parking garage, or a locked briefcase sitting in an emergency fire escape stairwell.
Assessment CriterionLost Property CharacteristicSuspicious Package (IED) Characteristic
H — Hidden?Left in plain sight on chairs, tables, or countertops.Deliberately concealed under stairwells, in ceiling voids, or behind trash bins.
O — Obviously Suspicious?Clean commercial packaging, standard personal luggage.Protruding wiring, taped seams, battery packs, oil stains, chemical/almond odor, powder leaks.
T — Typical?Matches the venue (e.g., shopping bag in a retail mall).Entirely out of place (e.g., heavy duffel bag next to building chiller plant or electrical substation).

Immediate Actions Upon Discovering a Suspicious Package: The 4 Cs

When an item fails the HOT test and is assessed as potentially hostile, security personnel must immediately execute the 4 Cs Response Framework: Confirm, Clear, Cordon, and Control.

  [ CONFIRM ]  ──>  [ CLEAR ]  ──>  [ CORDON ]  ──>  [ CONTROL ]
  Assess via HOT    Evacuate safe    Establish safe   Guide Police 999
  Do NOT touch!     standoff zone    perimeter tape   and EOD teams

1. Confirm

Quickly evaluate the item using the HOT principle from a safe distance. NEVER touch, tilt, shake, lift, open, or tamper with the item. Improvised explosive devices may incorporate anti-handling switches, such as mercury tilt switches, pressure-release switches, light-sensitive photocells, or tension-release tripwires that detonate the moment the package is moved or opened.

2. Clear

Evacuate all individuals from the immediate danger area. Evacuation must be conducted calmly and authoritatively without shouting "Bomb!", which induces stampedes and crowd crushing. Direct occupants away from windows and glass facades. Blast overpressure shatters plate glass into high-velocity aerodynamic shards that cause the vast majority of secondary blast injuries.

3. Cordon

Establish a physical barrier tape perimeter around the danger zone. Position security guards at all access points, stairwell entries, and corridor intersections to prevent building occupants or curious bystanders from wandering into the danger area.

4. Control

Maintain the perimeter, keep a clear path for arriving emergency services, and immediately brief arriving Dubai Police and Explosive Ordnance Disposal (EOD) commanders regarding the item's precise location and physical appearance.


Radio-Frequency Precautions and Safe Communication

One of the most vital rules in counter-terrorism safety is the mandatory cessation of all radio and cellular transmissions within the vicinity of a suspected explosive device.

The Physics of Electro-Explosive Detonation

Modern IEDs frequently employ electric blasting caps (electro-explosive devices) to initiate the main explosive charge. Handheld two-way radios (transmitting at 4 to 5 watts) and cellular mobile phones emit high-frequency radio frequency (RF) electromagnetic radiation. If a radio or mobile phone is operated in close proximity to an explosive device, the device's external wiring or internal circuitry acts as an antenna. The radio waves induce an electrical current in the wiring. If that induced current reaches the blasting cap's bridge-wire threshold, it will detonate the bomb instantly.

Operational RF Precautions

  • Move Away Before Transmitting: ProtectUK advises no radio or mobile-phone use within 15m of a suspicious item and staying out of its line of sight. Use this as a planning reference; apply any greater restriction in the site plan or police direction.
  • RF Distance Is Not Blast Clearance: Continue to the appropriate evacuation distance and hard cover. Being outside a radio-restriction radius does not mean you are safe from blast or fragments.
  • Call from Safety: Use the approved communication method from a safe location. A hardwired phone is not a reason to remain near the item; report its location and visible warning signs to police and control.

Planning Standoff Distances and Police-Directed Cordons

Blast effects are divided into three destructive mechanisms: shock wave overpressure, thermal fireball radiation, and fragmentation / shrapnel. For initial planning, ProtectUK staff guidance gives the distances below. They are not a published universal SIRA examination rule or a guarantee of protection. Follow the approved site plan and Dubai Police directions, move out of line of sight, use substantial hard cover and avoid glass. Container appearance does not reliably reveal explosive quantity.

Suspected ItemProtectUK Initial Planning Distance
Small item, such as a rucksackAt least 100m
Small vehicle or large item, such as a car or wheelie binAt least 200m
Large vehicle, such as a van or lorryAt least 400m

Choose safe routes and assembly locations according to the actual threat and police advice. Do not impose a fixed affected-floor count or estimate TNT capacity by looking at a package or vehicle.

Secondary Device Awareness

Tactical terrorists historically employ secondary devices—a second, often larger explosive device planted along natural evacuation routes, at designated outdoor assembly points, or near emergency vehicle access gates, specifically designed to harm fleeing crowds and arriving first responders. Security guards must conduct a rapid visual sweep of the outdoor assembly point before directing hundreds of building occupants into the area.


Telephonic Bomb Threat Management Protocol

Not all explosive threats arrive as physical packages; many are initiated via anonymous telephone calls to building switchboards, reception desks, or security control consoles.

The Operational Goal of the Receiving Guard

The officer who answers a telephonic bomb threat holds a critical intelligence-gathering responsibility. The primary objective is to keep the caller on the line as long as humanly possible. Every additional second provides crucial acoustic, linguistic, and operational clues.

The Immediate Action Steps

  1. Remain Calm: Never argue with, interrupt, or insult the caller. Speak in a polite, steady, non-threatening tone.
  2. Silently Alert Team Members: Write a note stating "BOMB THREAT ON LINE 1 — ALERT SUPERVISOR & POLICE" and pass it to a colleague, who will immediately notify the Control Room and initiate emergency escalation.
  3. Do NOT Hang Up: Keep the caller talking if practical while a colleague alerts police. Note any displayed number and preserve the call details. After disconnection, follow the site’s phone-system and police instructions; do not assume leaving a handset off-hook is required for tracing.
  4. Document Verbatim Statements: Write down the caller's exact words. Do not paraphrase.

The Bomb Threat Checklist

The receiving officer must systematically document the following parameters:

  • Exact Timestamps: Time the call was received, duration of call, time disconnected.
  • Caller Voice Characteristics: Gender, estimated age, language spoken, native accent (e.g., Gulf Arabic, South Asian, European, Levantine, North American), pitch (deep, high, squeaky), rate of speech (fast, slow, hesitant), tone (calm, angry, agitated, hysterical, laughing, slurred, nasal, whispering, reading from a prepared script).
  • Ambient Background Noises: Street traffic, vehicle horns, construction machinery, aircraft engines, train/metro announcements, office machinery, music, television/radio broadcasts, cafeteria dishes, echoing rooms, children's voices.

Critical Questions to Ask the Caller

  • "Where is the bomb placed right now?"
  • "What time will it explode?"
  • "What does the package or vehicle look like?"
  • "What kind of explosive or device is inside it?"
  • "What will cause it to detonate?"
  • "Did you place the bomb yourself?"
  • "Why did you place this device?"
  • "What is your name, and where are you calling from?"

Active Assailant Response: Dynamic Lockdown & "Run, Hide, Tell"

In the event of an active armed assailant, active shooter, or bladed-weapon terrorist attack, standard fire evacuation procedures do not apply. Funneling people through main fire corridors or gathering them at public assembly points exposes crowds to direct gunfire or targeted assault.

The "Run, Hide, Tell" Protocol

SIRA integrates international best practices for active hostile assailant scenarios:

  1. RUN (Escape if Possible):
    • If a clear, safe escape path exists, evacuate the area immediately.
    • Leave all personal belongings, laptops, and bags behind.
    • Urge others to follow, but do not allow their indecision to slow your escape.
    • Keep hands clearly visible, fingers spread, and empty when encountering approaching police officers.
  2. HIDE (Shelter & Barricade if Escape is Cut Off):
    • If running exposes you to gunfire, find immediate ballistic cover (behind reinforced concrete, not drywall partitions).
    • Enter a secure room, lock the door, and barricade it heavily using heavy desks, cabinets, and chairs.
    • Turn off all interior lights, close window blinds, and silence mobile phones completely (turn off both ringer and vibration mode).
    • Stay low to the ground, away from interior doors and vision panels, and remain completely silent.
  3. TELL (Report to Authorities):
    • As soon as it is safe to do so without compromising your hidden position, dial 999 for Dubai Police.
    • Provide vital tactical intelligence: exact building address, specific floor/room, number of attackers, physical descriptions, clothing, types of weapons seen (handguns, rifles, knives), number of shots fired, and casualty estimates.

UAE Emergency Services Hierarchy & Contact Protocols

Security officers in Dubai must know the precise statutory emergency contact numbers and the jurisdictional responsibilities of each agency:

  ┌───────────────────────────────────────────────────────────────┐
  │                 UAE EMERGENCY SERVICES DIRECTORY               │
  ├───────────────────────┬───────────────────────────────────────┤
  │  DUBAI POLICE         │  999  (Law enforcement, armed threats,│
  │                       │        explosives, crimes, accidents) │
  ├───────────────────────┼───────────────────────────────────────┤
  │  DUBAI AMBULANCE      │  998  (DCAS - Medical emergencies,    │
  │                       │        trauma, cardiac arrests, triage│
  ├───────────────────────┼───────────────────────────────────────┤
  │  DUBAI CIVIL DEFENCE  │  997  (DCD - Fire suppression, HAZMAT,│
  │                       │        structural rescue, entrapment) │
  └───────────────────────┴───────────────────────────────────────┘
  • Dubai Police (999): The primary statutory law enforcement authority. Dispatched for active crimes, violent assaults, bomb threats, suspicious packages, terrorism, traffic collisions with injuries, and Explosive Ordnance Disposal (EOD).
  • Dubai Ambulance / DCAS (998): Dubai Corporation for Ambulance Services. Dispatched for acute life-threatening medical emergencies, cardiac arrests, major trauma, falls from height, severe burns, and mass-casualty triage.
  • Dubai Civil Defence / DCD (997): Dispatched for building fires, chemical/gas leaks (HAZMAT), vehicle fires, elevator passenger entrapments, and structural collapse rescues.
Loading diagram...
Suspicious Package Incident Escalation and HOT Assessment Protocol
Test Your Knowledge

Why should guards move away and avoid radio/mobile transmissions close to a suspected explosive device?

A

Because radio frequency signals will trigger building fire sprinkler valves to discharge

B

Because cellular networks automatically route local radio traffic to emergency services dispatchers

C

Because emergency radio broadcasts deplete central control room battery backups prematurely

D

Because radio frequency (RF) energy emitted by transceivers can induce an electrical current in the blasting cap, triggering accidental detonation

Test Your Knowledge

Using ProtectUK staff guidance as a technical planning reference, what initial distances apply to a small suspicious rucksack and a large vehicle such as a van or lorry?

A

At least 100m for the small item and 400m for the large vehicle, with hard cover and police directions

B

Minimum 15 meters for a small package, and minimum 50 meters for a suspected vehicle

C

Minimum 50 meters for a small package, and minimum 100 meters for a suspected vehicle

D

Minimum 200 meters for a small package, and minimum 1,000 meters for a suspected vehicle

Test Your Knowledge

An on-duty security officer at a corporate reception desk receives an anonymous phone call stating that an explosive device has been planted in the facility. What is the officer's immediate primary objective during the call?

A

Immediately hang up the handset and sound the general building fire alarm horn

B

Challenge and argue with the caller to identify their residential address and employer

C

Keep the caller on the line as long as possible while taking verbatim notes and having a colleague silently alert Dubai Police (999)

D

Transfer the incoming call directly to Dubai Civil Defence while abandoning the reception desk

Sections you finish are checked off in the contents.