8.2 Bomb Threats, Explosive Devices & Incident Command System

Key Takeaways

  • On private commercial property where no suspicious device has been located, the ultimate legal authority and decision to evacuate rests with the property owner, building management, or authorized administrator, not responding law enforcement officers.
  • Systematic facility bomb searches must utilize volunteer employees familiar with the normal premises, proceeding from exterior and lowest levels (basement/ground) upward, executing room quadrant sweeps across four height zones.
  • Responders must enforce absolute radio, cellular, radar, and MDT transmission silence within a minimum 300 to 500-foot perimeter of a suspected explosive device to prevent electromagnetic radiation from detonating electric blasting caps.
  • Responders must maintain mandatory standoff distances: 300 feet for small pipe bombs, 500–1,000 feet for parcels/suitcases, 1,000–1,500 feet for passenger cars, and 1,500–2,500+ feet for trucks, while systematically sweeping staging areas for secondary devices.
  • The Incident Command System (ICS) and NIMS structure operations across Command, Operations, Planning, Logistics, and Finance/Administration under an optimal 1:5 supervisory span of control, utilizing Unified Command for multi-jurisdictional disasters.
Last updated: September 2026

8.2 Bomb Threats, Explosive Devices & Incident Command System

AZPOST Comprehensive Examination Focus: Peace officer recruits must master standard operational procedures for receiving and evaluating bomb threats, executing systematic search protocols, enforcing mandatory explosive standoff perimeters, maintaining radio and electronic transmission silence, sweeping for secondary devices, managing post-blast crime scenes under the 1.5x rule, and establishing the Incident Command System (ICS) pursuant to Ariz. Admin. Code R13-4-116(E)(1)(c)(vi).

Explosive incidents, bomb threats, and catastrophic natural or human-caused disasters represent low-frequency, high-consequence events that test a peace officer's tactical discipline, communication skills, and operational leadership. Improvised explosive devices (IEDs) are engineered to inflict mass casualties, generate systemic public terror, and deliberately target responding public safety personnel. A disciplined, methodical response rooted in the Incident Command System (ICS) is essential to preserve human life, safeguard emergency responders, and secure physical evidence for federal and state criminal prosecution.


1. Bomb Threat Receipt, Evaluation & Evacuation Authority

Bomb threats are delivered through diverse communication channels: telephone calls, written correspondence, electronic mail, social media postings, or third-party reports. The responding patrol officer's initial responsibility is gathering precise intelligence, evaluating threat credibility, and providing objective tactical guidance to facility administrators.

                          [ Bomb Threat Response Workflow ]
                                         |
  [ 1. Threat Intake & Checklist ] ──► [ 2. Credibility Evaluation ] ──► [ 3. Facility Coordination ]
  Exact wording, background noises,     Vague hoax vs. specific details   Building management retains
  caller accent, device location        Detonation time, device type       evacuation decision authority
            │                                                                     │
            ▼                                                                     ▼
  [ 4. Staging & Radio Silence ]   ──► [ 5. Systematic Search ]       ──► [ 6. Device Discovery ]
  300-500 ft silence zone               Bottom-up, quadrant sweeps         Commandeer authority;
  Sweep staging for secondaries         Staff familiar with building        immediate mandatory evac

Threat Intake & The Standard Bomb Threat Checklist

When interviewing a telecommunicator, receptionist, or citizen who received a bomb threat, the officer must systematically record the following details:

  • Exact Phrasing: The literal words spoken by the caller (e.g., "A pipe bomb packed with shrapnel is in the second-floor air duct").
  • Timing Parameters: Exact time the call was initiated, call duration, and stated detonation time.
  • Vocal Characteristics: Gender, estimated age, accent, pitch (raspy, high, deep), speech impediments (lisp, stutter), and emotional state (calm, angry, laughing, panicked, slurred/intoxicated).
  • Background Acoustic Indicators: Street traffic, industrial machinery, office equipment, aircraft noise, sirens, cafeteria dishes, music, or echo effects.
  • Threat Specifics: Why was the bomb placed? What does it look like? What kind of explosive is inside? How will it detonate?

Evacuation Decision-Making Authority

A foundational legal and procedural distinction heavily emphasized on the AZPOST Comprehensive Exam governs who holds the authority to order an evacuation:

  • Private Commercial / Corporate Property (No Device Located):
    • When a bomb threat has been received but no suspicious package or confirmed explosive device has been located, the legal decision and ultimate responsibility to order an evacuation rests solely with the property owner, building manager, or authorized corporate administratorNOT the responding police officer.
    • Law Enforcement Role: Responding officers serve as professional advisors. Officers inform management of threat assessment criteria, assist in coordinating evacuation routes if management chooses to evacuate, provide perimeter security, and coordinate facility searches.
  • Emergency Exception (Suspicious Device or Package Located):
    • The moment a suspicious package, improvised device, or military ordnance is actually discovered, public safety emergency authority preempts private management authority. Law enforcement and fire commanders assume complete operational control, order immediate mandatory evacuation, establish exclusion zones, and secure the perimeter.

Evacuation Logistics & Assembly Area Safety

If facility management elects to evacuate (or if a device is found), the evacuation must be executed methodically:

  • Personal Property: Evacuees should be instructed to take personal items (backpacks, briefcases, purses, coats) with them. Unattended personal items left behind create hundreds of false leads that exhaust search resources.
  • Assembly Point Selection: Evacuees must be moved to open areas at least 500 to 1,000 feet away from the structure. Assembly points must never be located in parking lots or near parked vehicles, where vehicle-borne secondary devices could be concealed.

2. Facility Search Protocols & Search Methodology

If facility management elects to search the premises prior to or concurrent with an evacuation, searches must follow a disciplined, systematic procedure to ensure thorough coverage.

Utilizing Building Occupants & Staff

Building occupants, maintenance workers, and custodial personnel are the single most valuable resource for conducting a facility search. Responding patrol officers do not possess baseline familiarity with the building—they do not know which supply box was delivered that morning, which maintenance cart belongs in which hallway, or which ceiling tile is normally out of alignment. Volunteer employees who know their workspace intimately can instantly identify objects that are foreign, displaced, or suspicious. Responding officers should supervise, organize, and guide staff search teams while monitoring life safety.

Systematic Search Sequence

Searches must proceed systematically from exterior and public areas toward interior secure areas, and from the ground upward:

                                  [ Structural Search Progression ]
                                                  |
  [ Level 1: Exterior & Public ] ──► [ Level 2: Ground Floor / Basements ] ──► [ Level 3: Upper Floors & Roof ]
  Trash cans, bushes, mailboxes,      Boiler rooms, maintenance shops,          Quad-zone room searches;
  parking structures, lobbies         HVAC closets, public restrooms            ceiling voids, elevator shafts
  1. Exterior Entry & Public Perimeter: Trash cans, landscape shrubbery, exterior window ledges, mailboxes, street drain grates, and adjacent parking structures.
  2. Lowest Floors / Basements: Sub-basements, boiler rooms, HVAC machinery rooms, electrical intake rooms, and janitorial closets. Explosives detonated on ground or basement levels cause progressive structural collapse of the floors above.
  3. Public Common Areas: Entrance lobbies, reception areas, public restrooms, elevators, central stairwells, and cafeterias.
  4. Upper Floors & Tenant Spaces: Room-by-room progression, moving systematically from the bottom floor to the top floor.
  5. Roof & Mechanical Penthouse: Elevator machinery rooms, rooftop HVAC air handling units, and water towers.

Room Quadrant Search Technique (The Four-Height Sweeps)

When searching an individual room, searchers divide the space into four distinct horizontal height sweeps:

| Sweep Level | Height Boundary | Search Focus & Common Locations | |:---|:---|:---|| | Sweep 1: Floor to Waist | Floor level up to approximately 3 feet | Under desks, beneath carpets/rugs, behind furniture, wastebaskets, low cabinets, heating vents. | | Sweep 2: Waist to Eye Level | 3 feet up to approximately 6 feet | Desk drawers, filing cabinets, bookshelves, window sills, wall hangings, clothing hanging in closets. | | Sweep 3: Eye Level to Ceiling | 6 feet up to the ceiling line | High shelving, light fixtures, tops of tall bookcases, wall-mounted air diffusers, picture frames. | | Sweep 4: False Ceiling (Plenum) | Above suspended ceiling tiles | Carefully lift drop-ceiling panels; visually inspect HVAC ducting, electrical junction boxes, wiring chases. |

[!CAUTION] The Golden Rule of Suspicious Packages: NEVER TOUCH, MOVE, TILT, JAR, SHAKE, OPEN, OR UNCOVER A SUSPECTED EXPLOSIVE DEVICE. Never cut wires, operate switches, or immerse the device in water. Mark the exact location, clear the area, retreat behind solid structural cover, and notify the certified Hazardous Devices Unit (Bomb Squad).


3. Improvised Explosive Devices (IEDs), Military Ordnance & Electronic Silence

Improvised explosive devices can be assembled using commercial, military, or household components. Recognizing physical anomalies and understanding initiation mechanisms protects first responders from catastrophic injury.

The Anatomy of an IED: PIES / FPIC Framework

Under federal bomb data center standards, an IED requires four foundational functional components, summarized by the acronym PIES (or FPIC):

  • P — Power Source: Provides electrical energy to initiate detonation (e.g., 9V batteries, AA battery packs, vehicle batteries, capacitor circuits).
  • I — Initiator: Converts electrical or mechanical energy into explosive shockwaves (e.g., commercial electric blasting caps, non-electric caps, model rocket igniters, modified lightbulbs).
  • E — Explosive Charge: The main chemical charge that generates blast overpressure and thermal damage (e.g., commercial dynamite, ammonium nitrate/fuel oil [ANFO], black powder, smokeless powder, TATP/peroxide explosives, military C-4).
  • S — Switch (Firing Mechanism): The trigger circuit that closes the loop between the power source and initiator. Switches can be:
    • Command: Controlled directly by the perpetrator (cellular phone, radio transmitter, wire line).
    • Time: Clockwork, digital timer, chemical delay.
    • Victim-Operated: Tripwire, pressure plate, tilt switch (mercury or ball-bearing), infrared motion sensor, or photocell (light-sensitive).
  • C — Container: The housing that confines the explosion and produces shrapnel (e.g., steel pipe, pressure cooker, ammunition can, briefcase, vehicle).

Military Ordnance & Desert Munitions Hazards in Arizona

Arizona features vast tracts of public lands, military training reserves (e.g., Barry M. Goldwater Range, Yuma Proving Ground, Fort Huachuca, historical WWII desert training centers), and active blasting operations. Patrol officers frequently encounter unexploded military ordnance (UXO):

  • Types Encountered: Mortar rounds, 20mm/30mm cannon shells, aerial practice bombs, hand grenades, artillery projectiles, and white phosphorus markers.
  • Aging Degradation Hazards: Military ordnance exposed to the extreme desert heat and sun for decades becomes chemically degraded, highly sensitive to thermal shock, and acutely unstable. Picric acid or nitrocellulose crystallization can detonate under the slightest friction.
  • Operational Action: Never approach, move, touch, or cast shadows across UXO. Mark the GPS coordinates, establish a 1,000-foot standoff perimeter, and request military Explosive Ordnance Disposal (EOD) through dispatch.

Radio Frequency (RF) & Electronic Transmission Silence

Handheld police radios, cellular telephones, mobile data terminals (MDTs), radar guns, and satellite transmitters emit electromagnetic radio frequency (RF) energy. In an IED environment, RF transmissions can induce stray electrical currents into delicate electric blasting caps or activate commercial radio receiver circuits (e.g., pagers, garage door receivers, cell phones) wired into an explosive switch, triggering premature detonation.

                  [ Electronic Silence Perimeter (300 to 500 Feet) ]
                                         │
       +---------------------------------+--------------------------------+
       │                                                                  │
  [ WITHIN 300-500 FT ]                                          [ OUTSIDE 500 FT ]
  - Turn off handheld radios                                     - Resume radio transmissions
  - Do not use cellular phones                                   - Dispatch Bomb Squad / Fire
  - Power down MDTs & vehicle radar                              - Coordinate mutual aid
  - Use landline phones or runners                               - Establish staging outside line-of-sight
  • The Rule of Electronic Silence: Responders must enforce strict radio and cellular silence within a minimum of 300 to 500 feet of any suspected explosive device.
  • Operational Protocol: Turn off vehicle and handheld radios before approaching within 300 feet. Use landline telephones, runner personnel, or face-to-face communication. Transmit emergency radio traffic only after retreating outside the 500-foot perimeter.

4. Standoff Distances & Secondary Explosive Devices

Enforcing mandatory minimum standoff distances isolates the blast overpressure wave and fragments within an exclusion perimeter, protecting responders and the public from lethal trauma.

Mandatory Minimum Standoff Distances

According to the National Counterterrorism Center (NCTC) and FBI Bomb Data Center standoff guidelines, officers must enforce the following perimeter distances:

Threat / Device TypeEstimated Explosive CapacityMandatory Evacuation DistanceMinimum Hard Cover Distance
Pipe Bomb / Small Parcel5 lbs (2.3 kg)300 feet (91 m)70 feet (21 m) behind solid concrete/earth
Briefcase / Suitcase / Box50 lbs (23 kg)500 to 1,000 feet (152–305 m)150 feet (46 m) behind solid concrete/earth
Passenger Sedan (Compact VBIED)500 lbs (227 kg)1,000 to 1,500 feet (305–457 m)400 feet (122 m) behind solid concrete/earth
Commercial Cargo Van / Delivery Truck1,500 lbs (680 kg)1,500 to 2,500 feet (457–762 m)640 feet (195 m) behind solid concrete/earth
Semi-Trailer / Bulk Fuel Tanker10,000+ lbs (4,536 kg)2,500 to 5,000+ feet (762–1,524 m)1,250 feet (381 m) behind solid concrete/earth

[!IMPORTANT] The Line-of-Sight Rule & True Cover: If an officer has an unobstructed direct line of sight to a suspected explosive device, the officer is standing within the lethal blast fragmentation zone. Patrol vehicle sheet metal, car doors, and plate-glass commercial windows provide zero ballistic protection against blast overpressure and supersonic shrapnel. Officers must position themselves behind substantial structural cover: reinforced concrete walls, masonry retaining walls, or earthen berms.

Secondary Explosive Devices: The Ambush Tactic

A secondary explosive device is a bomb placed deliberately to detonate after the primary incident, specifically targeting first responders, tactical teams, incident commanders, evacuees, or gathering media personnel. Perpetrators exploit predictable emergency response habits, planting secondary devices near:

  • Primary public evacuation assembly areas.
  • Incident Command Posts (ICPs) and emergency vehicle staging areas.
  • Triage corridors and casualty collection points.
  • Obvious entry corridors and police cruiser parking areas.

Mandatory Safety Protocol: Never establish an Incident Command Post, staging area, or triage site without first conducting a rigorous, 360-degree sweep for secondary explosive devices. Maintain continuous armed security around command facilities throughout the operational operational period.


5. Post-Blast Crime Scene Management & Forensic Perimeter

If an explosive device detonates, the operational environment immediately transitions into a mass casualty rescue event and a major federal and state post-blast forensic crime scene.

[ Detonation Event ] ──► [ Secondary Device Sweep ] ──► [ Life Safety & Evac ] ──► [ Establish 1.5x Perimeter ]
  Mass casualties           Protect responders first      Triage injured         50% buffer beyond debris

Operational Priorities at Post-Blast Scenes

  1. Secondary Device Protective Sweep: Before rescue personnel swarm the blast seat, emergency personnel must perform a rapid visual sweep of arrival corridors and staging locations for unexploded secondary devices.
  2. Life Safety & Emergency Triage: Extract ambulatory and critical victims to a casualty collection point established outside the blast hazard zone.
  3. Establishing the Forensic Perimeter (The 1.5x Rule):
    • Under standardized FBI and ATF forensic guidelines, the outer crime scene perimeter must be established at 1.5 times (150%) the distance of the farthest piece of blast debris, shrapnel, or bomb component discovered.
    • Example: If fragments of a vehicle-borne device or shattered metal casing are discovered 400 feet from the blast seat, the perimeter tape must be set at a minimum distance of 600 feet (400 × 1.5 = 600) in all directions.
  4. Preservation of Physical Evidence: The blast seat contains microscopic explosive chemical residues, fragments of copper wiring, solder joints, timer components, and battery casings vital to identifying the bomb maker. Entry into the blast zone must be restricted exclusively to certified Hazardous Devices technicians, ATF/FBI Joint Terrorism Task Force (JTTF) investigators, and arson investigators. A formal, continuous Scene Security Entry Log must document every entry and exit.

6. Incident Command System (ICS) & NIMS Framework

The Incident Command System (ICS), integrated within the National Incident Management System (NIMS), provides a standardized, modular organizational structure for managing complex emergencies, mass casualty incidents, and hazardous events.

                                [ Incident Commander (IC) ]
                                             |
       +-------------------------------------+-------------------------------------+
       |                                     |                                     |
[ Public Information Officer ]       [ Safety Officer ]                  [ Liaison Officer ]
       |
       +-------------------+------------------+------------------+-----------------+
       |                   |                                     |                 |
[ Operations Section ] [ Planning Section ]            [ Logistics Section ] [ Finance/Admin Section ]
Executes tactical      Collects intelligence;          Provides gear, comms, Tracks costs, hours,
actions; directs       tracks resources;               food, facilities,     claims, contracts
perimeter & search     drafts Action Plan (IAP)        and transportation

The Role of the Initial Responding Officer

The first arriving peace officer on scene assumes Incident Command by default. The officer maintains command until formally relieved by a higher-ranking supervisor or specialized commander through a structured, face-to-face transfer of command. Initial responsibilities include: establishing a secure command post outside the hazard zone, identifying safe staging locations, setting isolation perimeters, and transmitting an initial size-up to dispatch.

The Five Major Functional Sections of ICS

Functional SectionOperational ResponsibilitiesKey AZPOST Exam Distinctions
CommandOverall incident management, setting strategic objectives, and agency coordination. Includes Command Staff: Safety Officer (monitors hazardous conditions; has authority to halt unsafe operations), Public Information Officer (PIO) (media management), and Liaison Officer (inter-agency contact).The Incident Commander is responsible for all functions until delegating them to separate Section Chiefs.
OperationsDirects and executes all tactical operations to accomplish incident objectives (e.g., perimeter containment, building searches, bomb disposal, traffic control, and rescue).The Operations Section Chief is the tactical "doer" managing field resources.
PlanningCollects, evaluates, and disseminates operational intelligence; tracks resource status; maintains incident documentation; and develops the written Incident Action Plan (IAP).Focuses on tracking "where resources are" and "what will happen next."
LogisticsProcures and provides all facilities, equipment, transportation, supplies, food, medical services, and communications support for incident personnel.The "support engine" that keeps responders supplied and functioning.
Finance / AdminManages financial tracking, procurement contracts, personnel payroll/overtime recording, property damage claims, and worker's compensation processing.Tracks operational expenditures and legal liability costs.

Supervisory Span of Control & Unified Command

  • Span of Control: Under NIMS standards, the optimal supervisory ratio is 1 supervisor to 5 subordinates (with an acceptable operational range of 1:3 to 1:7). If a supervisor manages more than seven units, the structure must expand by creating divisions or groups.
  • Unified Command: Applied when an incident impacts multiple jurisdictional boundaries or requires coordinated multi-agency authority (e.g., municipal police, county sheriff, fire department, FBI, ADOT). Agency commanders co-locate at a single Incident Command Post, formulate a single integrated set of incident objectives and a consolidated Incident Action Plan, while preserving each agency's statutory authority.

7. Exam Traps & High-Yield Takeaways

Critical High-Yield Traps for Section 8.2

  1. Evacuation Authority on Private Property: When no device has been found, the property owner or business manager retains the sole legal decision to evacuate, not the responding patrol officer. Only upon finding an actual suspicious device does public safety emergency power commandeer mandatory evacuation.
  2. Radio Silence Radius: Standard protocols mandate strict electronic transmission silence within 300 to 500 feet of a suspected explosive device.
  3. Post-Blast Perimeter Formula: The outer forensic perimeter must extend 1.5 times (150%) beyond the farthest piece of blast debris found.
  4. ICS Section Functional Matching: Planning tracks resources and writes the IAP; Logistics provides the equipment, food, and facilities; Operations executes tactical missions; Finance/Admin tracks expenditures.
  5. The Safety Officer's Unique Power: The Safety Officer has the independent authority to bypass the Incident Commander and immediately halt or suspend any operational action that poses an imminent threat to life or safety.

8. Real-World Operational Application Scenario

Operational Scenario: At 0945 hours, a telecommunicator receives a phoned-in bomb threat at a three-story corporate call center in Scottsdale, Arizona. The caller states: "There is an ammonium nitrate device packed inside a heavy black duffel bag in the basement mechanical room, set to detonate at 1100 hours to punish corporate greed."

  • Intake & Credibility Evaluation: Officer Campbell arrives at 0955 hours and interviews the call center director. Campbell documents the specific threat details (ammonium nitrate, black duffel bag, basement mechanical room, 1100 detonation). The director decides to evacuate all 250 employees. Officer Campbell coordinates an orderly evacuation, instructing employees to carry their personal backpacks and purses and assemble at a public park 800 feet east of the facility, safely avoiding the commercial vehicle parking lot.
  • Search Execution & Device Discovery: Accompanying a volunteer facilities maintenance supervisor who possesses keys and intimate knowledge of the physical plant, Officer Campbell conducts a systematic search starting with the exterior and the basement level. In the corner of the basement mechanical room next to a major chilled water pipe, the supervisor identifies an unfamiliar, bulging black duffel bag with exposed copper wiring and a digital clock mechanism taped to the exterior. Officer Campbell immediately halts the search.
  • Electronic Silence & Retreat: Following safety protocols, Officer Campbell does not touch, tilt, or disturb the bag. He immediately instructs the supervisor to exit with him. Campbell does not touch his portable radio, cell phone, or body-worn camera controls. Once 400 feet outside the facility, Campbell uses an external landline telephone to notify dispatch of the confirmed suspicious device.
  • Perimeter & ICS Command Post: Campbell establishes an initial perimeter at 500 feet, diverting traffic away from the block. He designates an Incident Command Post at a municipal fire station 1,200 feet away behind a concrete structural wall, conducting an immediate 360-degree sweep for secondary devices before occupying the space. Upon arrival of the Phoenix Police Bomb Squad and Scottsdale Fire Department, Campbell conducts a structured face-to-face transfer of command, establishing a Unified Command structure.
Test Your Knowledge

When investigating a phoned-in bomb threat at a privately owned commercial office building where no suspicious package or explosive device has yet been located, who holds the ultimate legal authority and responsibility to order an evacuation of the facility?

A
B
C
D
Test Your Knowledge

Why do standard hazardous device response protocols mandate strict radio frequency (RF) and cellular telephone silence within 300 to 500 feet of a suspected explosive device?

A
B
C
D
Test Your Knowledge

Following the detonation of an explosive device, what is the standardized forensic formula used by first responders and bomb technicians to establish the initial outer crime scene perimeter?

A
B
C
D
Test Your Knowledge

In the Incident Command System (ICS), which functional section is specifically responsible for gathering, evaluating, and tracking incident intelligence, managing resource status, and preparing the formal Incident Action Plan (IAP)?

A
B
C
D