4.1 Terrorism & Suspicious Activity in DC

Washington, D.C., is a uniquely high-profile environment, serving as the political epicenter of the United States. Due to the unparalleled concentration of federal government agencies, national monuments, foreign embassies, critical infrastructure, and high-profile individuals, the city represents a prime target for both domestic and international terrorism. As a security guard operating in the District of Columbia, maintaining a heightened state of situational awareness is not merely a component of your job—it is a critical necessity for public safety, national security, and the preservation of life. The definition of terrorism encompasses the unlawful use of force and violence against persons or property to intimidate or coerce a government, the civilian population, or any segment thereof, in furtherance of political or social objectives.

Understanding the nuanced distinction between domestic and international threats is essential for modern security professionals. Domestic terrorism is perpetrated by individuals or groups inspired by or associated with primarily U.S.-based movements that espouse extremist ideologies. These ideologies can be of a political, religious, social, racial, or environmental nature. In recent years, lone-wolf actors and decentralized domestic groups have posed significant challenges to law enforcement. Conversely, international terrorism involves groups or individuals whose terrorist activities are foreign-based and/or directed by countries or groups outside the United States. Regardless of the origin, the tactics often overlap, making the rigorous recognition of suspicious activities your primary defense mechanism against an attack.

Terrorist attacks are rarely, if ever, spontaneous events. They are the culmination of a distinct terrorist planning cycle, which includes target selection, surveillance, deployment, the attack itself, and the escape. The preparatory and surveillance phases are the most vulnerable times for terrorists and the optimal, often only, time for security personnel to detect and disrupt their plans. Indicators of surveillance and terrorist planning are subtle but recognizable if you are vigilant. These include individuals discreetly drawing maps of facility layouts, taking excessive photographs or video recordings of security infrastructure (such as cameras, access control points, HVAC intakes, or vehicle barriers), and observing shift changes and guard patrol routines.

Another critical indicator is the testing of security responses. Adversaries may intentionally trigger alarms, leave unattended bags, or breach restricted areas simply to measure how quickly security and law enforcement respond, and what specific procedures are enacted. Additionally, elicitation is a common tactic where individuals attempt to gain non-public information about a facility’s operations. This might involve someone asking unusually detailed questions about the number of guards on duty, the location of VIPs, or the technical specifications of alarm systems. To systematically identify these behaviors, security professionals must utilize a behavioral observation approach rather than profiling based on race, ethnicity, religion, or national origin. Profiling is not only unethical and illegal, but it is also highly ineffective; the focus must strictly remain on identifying anomalous behavior itself.

When suspicious activity is identified, it must be documented and reported meticulously using formal Suspicious Activity Reporting (SAR) procedures. In Washington, D.C., the primary mechanism for reporting such information to the Metropolitan Police Department (MPD) is through the "iWatch" program. The iWatch program is a community awareness initiative that educates the public and security professionals about behaviors and activities that may have a connection to terrorism. The motto "If You See Something, Say Something" is operationalized through this program. When documenting an observation for reporting, the SALUTE report format is highly effective and internationally recognized: Size (number of persons or vehicles involved), Activity (what exactly they are doing), Location (the exact physical location), Uniform (clothing or physical description), Time (the precise date and time of the observation), and Equipment (any weapons, tools, cameras, or vehicles).

Beyond local law enforcement, suspicious activities involving critical infrastructure or apparent terrorist plotting must also be routed to federal agencies, specifically the Federal Bureau of Investigation (FBI) and the Joint Terrorism Task Force (JTTF). The JTTF operates as a partnership between various local, state, and federal agencies to investigate and neutralize terrorist threats. These highly trained federal agencies rely heavily on the eyes and ears of front-line security personnel to piece together fragmented information into actionable intelligence. A seemingly minor observation by a security guard at an office building might be the critical missing piece in a massive federal investigation.

Indicators of Suspicious Activity and Surveillance

It is absolutely imperative to understand that your role as a security guard is not to investigate, interrogate, or independently intervene, but rather to observe and report. Confronting suspected terrorists can escalate a situation dangerously, trigger a premature attack, and compromise ongoing law enforcement investigations. When contacting the MPD, the FBI, or your central dispatch, provide clear, objective, and deeply detailed descriptions. Note the exact time, specific behaviors observed without assumptions, physical descriptions (height, weight, hair color, distinct marks/tattoos), and any vehicle information, including license plate numbers, make, model, color, and direction of travel. By maintaining a vigilant posture and utilizing established reporting channels like iWatch and the JTTF, security guards in D.C. play an indispensable role in the broader homeland security apparatus, safeguarding not just their specific post, but the nation's capital as a whole.