6.1 Homeland Security Awareness & Terrorist Threat Indicators

6.1 Homeland Security Awareness & Terrorist Threat Indicators

Core Homeland Security Mandate: N.J.A.C. 13:55A-4.1(b) requires at least two hours of homeland security and counter-terrorism instruction in every 24-hour SORA course, because certified officers are often the first observers and reporters of threats. Certified officers must recognize the behavioral, visual, and physical signatures of terrorist pre-operational surveillance, vehicle-borne explosives, and suicide bombers, escalating actionable intelligence through proper facility and state reporting channels.

Private security officers occupy the front lines of physical defense across New Jersey's critical infrastructure, corporate campuses, transportation hubs, and public gathering spaces. Understanding terrorist methodologies, recognizing early indicator patterns, and adhering strictly to non-confrontational explosive safety protocols are vital professional responsibilities.

---

1. The Post-9/11 Security Paradigm & Statutory SORA Mandate

The tragic events of September 11, 2001, fundamentally altered the security landscape throughout the United States, with a profound and lasting impact on the State of New Jersey. Due to New Jersey's direct geographic proximity to Lower Manhattan, thousands of New Jersey residents commuted daily to the World Trade Center, and hundreds lost their lives. In the immediate aftermath, state leaders, the New Jersey State Police (NJSP), and the Office of the Attorney General recognized critical vulnerabilities across the state's sprawling transportation, chemical, and commercial infrastructure.

Before SORA, New Jersey had no statewide training standard for contract security officers. To rectify this dangerous gap, the New Jersey Legislature enacted the Security Officer Registration Act (SORA) in 2004 (codified at N.J.S.A. 45:19A-1 et seq.). Under the administrative regulations established in N.J.A.C. 13:55A, the NJSP Private Detective Unit incorporated mandatory counter-terrorism and homeland security awareness into the compulsory 24-hour training curriculum.

The Security Officer as a "Force Multiplier"

Nationally, the 9/11 Commission reported that the private sector controls about 85 percent of the nation's critical infrastructure. As a consequence, private security guards are positioned at access control gates, perimeter fence lines, shipping docks, and lobby security consoles where potential adversaries must conduct surveillance prior to launching an attack. Under SORA, security officers are not expected to act as tactical counter-assault units; rather, they serve as the vital "eyes and ears" of homeland security, tasked with detecting subtle threat indicators and reporting them before an attack materializes.

---

2. New Jersey's Critical Infrastructure Landscape & Vulnerability Profile

The federal Cybersecurity and Infrastructure Security Agency (CISA) identifies 16 critical infrastructure sectors whose assets, systems, and networks are considered so vital to the United States that their incapacitation would have a debilitating effect on security, national economic security, or public health. New Jersey hosts an extraordinary concentration of high-priority critical infrastructure assets:

Key New Jersey Target Sectors

• The "Chemical Coast" (Petrochemical & Hazardous Chemical Sector): The industrial corridor along the New Jersey Turnpike—stretching through Middlesex, Union, Essex, and Hudson Counties (including Linden, Elizabeth, Bayonne, Newark, and Carteret)—contains one of the densest concentrations of petroleum refineries, bulk chemical manufacturing plants, and hazardous liquid storage facilities in the world. Often termed by counter-terrorism analysts as a high-consequence zone, an attack in this corridor could threaten millions of residents across the metropolitan area.
• Maritime and Port Facilities: Port Newark-Elizabeth Marine Terminal, operated under the Port Authority of New York and New Jersey (PANYNJ), represents the largest container port on the East Coast. Security personnel protect container storage yards, gantry cranes, rail transfer hubs, and international maritime shipping lanes against sabotage, smuggling, and waterside intrusion.
• Transportation Corridors and Transit Hubs: New Jersey serves as the premier transportation crossroad of the Northeast. Critical transit infrastructure includes the Northeast Corridor rail line, NJ TRANSIT rail and bus systems, the PATH subway network connecting Newark and Jersey City to Manhattan, Newark Liberty International Airport (EWR), and vital vehicular river crossings including the Lincoln Tunnel, Holland Tunnel, and George Washington Bridge.
• Energy Generation & Power Distribution: The PJM Interconnection electrical transmission grid, high-voltage switching substations, natural gas pipeline compressor stations, and nuclear power generation facilities (including the Salem and Hope Creek Nuclear Generating Stations in Salem County).
• Commercial, Financial, and Data Centers: Major corporate headquarters, pharmaceutical research laboratories in Central Jersey, massive data server farms supporting Wall Street trading operations in Jersey City, and high-capacity public entertainment venues such as MetLife Stadium and the Meadowlands Sports Complex.

---

3. Recognizing Terrorist Pre-Operational Surveillance Indicators

Terrorist attacks rarely occur spontaneously. Hostile organizations and violent extremists follow a structured Terrorist Planning Cycle: Broad Target Selection → Initial Surveillance → Final Target Selection → Pre-Attack Surveillance & Intelligence Gathering → Rehearsals & Security Probing → Deployment & Attack Execution → Escape or Exploitation.

The pre-attack surveillance and rehearsal phases represent the period of greatest vulnerability for an adversary, making it the most likely window for observant security personnel to detect and disrupt the plot.

Primary Surveillance Signatures

1. Visual and Electronic Documentation:
   • Individuals observed repeatedly photographing, videotaping, or sketching physical security features, access gates, guard booths, perimeter fencing, electronic badge readers, and vehicle barriers.
   • Prolonged observation of closed-circuit television (CCTV) cameras, specifically noting camera angles, blind spots, panning patterns, and illumination levels at night.
   • Operating consumer Unmanned Aircraft Systems (drones / UAS) over secure perimeters, loading bays, chemical holding tanks, or rooftops.
2. Elicitation and Information Gathering:
   • Posing subtle or probing questions to security guards, maintenance workers, delivery drivers, or facility staff regarding operational routines.
   • Inquiring about shift changeover times, total guard staffing levels on weekends and holidays, whether security guards are armed, patrol frequencies, electronic alarm response times, and the average response time of local municipal police.
3. Probing and Security Testing:
   • Intentionally tripping an exterior beam sensor, rattling a perimeter gate, or trespassing briefly into a restricted staging area to time how quickly security guards arrive.
   • Staging a minor diversion (such as a staged argument, flat tire, or minor vehicle breakdown outside a main gate) to draw guards away from primary access points while an accomplice observes procedures.
   • Attempting unauthorized entry using forged credentials, expired employee badges, or fictitious delivery paperwork to test the diligence of gatekeepers.
4. Suspicious Staging and Loitering:
   • Vehicles parked for extended periods in locations with clear lines of sight toward entry barriers, loading docks, or executive parking areas without legitimate commercial purpose.
   • Individuals sitting in parked vehicles with tinted windows or using binoculars, optical lenses, or telephoto camera gear pointed at facility checkpoints.

---

4. Vehicle-Borne Improvised Explosive Devices (VBIEDs)

A Vehicle-Borne Improvised Explosive Device (VBIED) utilizes a passenger car, pickup truck, sport utility vehicle, commercial van, or box truck as a delivery platform for massive quantities of high explosives. Because a motor vehicle can conceal hundreds or thousands of pounds of explosive compounds—such as ammonium nitrate mixed with fuel oil (ANFO)—combined with heavy metal shrapnel, VBIEDs possess catastrophic destructive capability.

Physical Recognition Indicators

• Suspension and Weight Irregularities: The vehicle sits visibly low to the ground in the rear, the tires appear compressed under unnatural weight, or the vehicle sags, bounces sluggishly, or scrapes bottom when crossing standard speed bumps or driveway aprons.
• Sensory and Olfactory Signatures: Strong, uncharacteristic odors emanating from the passenger cabin, trunk, or cargo bed, including pungent smells of diesel fuel, fertilizer (ammonia), bitter almonds, ether, acetone, or acid.
• Cargo Concealment and Visual Clues: Cargo areas covered completely by heavy tarpaulins, blankets, or plywood boards; side and rear windows covered with cardboard, aluminum foil, spray paint, or heavy non-standard tinting to obscure interior visibility.
• Vehicle Alterations and Plates: Missing, altered, or obscured license plates; mismatched front and rear plates; expired temporary cardboard registrations; or hastily applied, magnetic, or misspelled commercial logos intended to mimic legitimate delivery couriers.
• Unauthorized Staging Locations: Unattended vehicles parked in violation of posted signs in delivery docks, staged directly adjacent to primary structural columns, parked within underground garages beneath occupied multistory buildings, or parked near high-volume pedestrian entrances.
• Driver Behavior: The operator displays intense nervousness, profuse sweating, trembling hands, a refusal to lower windows fully, avoidance of eye contact, or abruptly abandons the vehicle with the engine running and flees on foot.

---

5. Person-Borne Improvised Explosive Devices (PBIEDs / Suicide Bombers)

A Person-Borne Improvised Explosive Device (PBIED) involves an individual carrying an explosive mechanism—typically integrated into a tactical vest, suicide belt, modified backpack, or heavy jacket—designed to detonate within crowded pedestrian environments to maximize human casualties.

Physical and Clothing Signatures

• Seasonally Inappropriate Attire: Wearing a heavy overcoat, ski parka, or layered bulky clothing during hot summer or mild spring weather to conceal the bulk of an explosive harness.
• Unnatural Body Contours: Clothing that appears unnaturally stiff, rigid, or protruding around the midsection, chest, or torso, failing to drape naturally over the body.
• Visible Detonation Components: Exposed wires, electrical tape, toggle switches, or battery packs protruding from collars, sleeves, or hems, or held tightly in a clenched fist.
• Chemical Traces: Strong localized odors of almonds, shoe polish, burned sulfur, or organic solvents; white powdery residues, crystallization, or bleached discoloration on outer garments.

Behavioral and Physiological Indicators

• Rigid Posture and Robotic Gait: Walking in a stiff, awkward manner without normal arm swinging or torso rotation due to the physical constraint of strapped explosive pipes or rigid blast plates.
• Clenched Hands on Concealed Triggers: Hands clenched inside pockets or gripping a wire, switch, or dead-man's trigger (a switch designed to detonate if the bomber is shot or releases hand pressure).
• Extreme Physiological Stress: Profuse facial sweating despite cool ambient temperatures, dilated pupils, rapid shallow breathing, a flushed or pale complexion, and a blank, glazed, or hyper-focused stare.
• Psychological Fixation: Mumbling silent prayers or mantras, total detachment from surroundings, refusal to make eye contact with security personnel, and visible panic upon encountering a uniformed security post, access turnstile, or canine patrol.
• Evasive Action: Abruptly reversing direction, attempting to circumvent screening magnetometers, or forcing passage through exit doors upon spotting security guards.

---

6. Escalation Protocols & Reporting Channels: NJOHSP & 1-866-4-SAFE-NJ

When encountering suspected terrorist surveillance or explosive threat indicators, security officers must follow strict operational procedures. The cardinal rule of explosive safety is non-confrontation: security guards must never attempt to physically tackle, seize, or search an individual suspected of carrying a suicide vest, nor approach a suspected VBIED.

Operational Action Sequence

1. Do Not Confront or Touch: Physical contact with a suicide bomber can provoke an immediate intentional detonation or trigger an electronic inertia switch. Touching a vehicle or suspicious package can trigger anti-handling mercury switches.
2. Isolate and Evacuate: Quietly and rapidly direct civilian occupants away from the danger zone, moving behind solid structural cover (concrete columns, brick walls, earth berms).
3. Call 911 for Imminent Threats: If an active suicide bomber, armed intruder, or imminent explosive hazard is present, call 911 immediately from a landline phone outside the blast zone. Provide clear, concise tactical descriptions.
4. Report Non-Emergency Intelligence to NJOHSP: For suspicious pre-operational surveillance, probing activities, elicitation attempts, or photography of security posts that do not represent an in-progress violent emergency, report the intelligence to the state's centralized counter-terrorism hub:
   • New Jersey Office of Homeland Security and Preparedness (NJOHSP)
   • Statewide Counter-Terrorism Tip Line: 1-866-4-SAFE-NJ (1-866-472-3365)
   • Electronic Tip Submission: tips@njohsp.gov or NJOHSP's online Suspicious Activity Reporting Form (anonymous reports are accepted)
   • What Happens Next: NJOHSP's Counter-Threat Watch Unit manages the New Jersey Suspicious Activity Reporting System (NJSARS), which shares threat-related reports with law enforcement and links to the FBI's eGuardian system.

The SALUTE Reporting Standard

When documenting and transmitting suspicious activity reports, officers should organize observations using the SALUTE format:

• S — Size: Number of individuals, vehicles, or items observed.
• A — Activity: Precise actions witnessed (e.g., measuring distances, photographing camera mounts, recording guard rotations).
• L — Location: Exact physical location, gate number, street address, or coordinates.
• U — Uniform / Attire: Specific descriptions of clothing, colors, logos, headwear, or disguise elements.
• T — Time: Date, exact time of observation, and duration of the event.
• E — Equipment: Make, model, color, and license plate of vehicles; camera types; drones; measuring tools; or visible weapons.

---

7. Comparative Reference Table: Threat Indicators, Signatures, and Response Protocols

---

8. Practical Scenarios & Common Compliance Pitfalls

Scenario: The Inquisitive Photographer at the Refinery Gate

Scenario: While stationed at a main truck access gate of a petrochemical storage facility along the New Jersey Turnpike, Officer Torres observes a passenger car parked on the public shoulder 100 yards away. An individual exits the vehicle and uses a high-powered digital camera with a telephoto lens to photograph the gate barrier, the guard booth, the perimeter security cameras, and the overhead lighting fixtures. When Officer Torres walks toward the gate line, the individual returns to the car and drives away heading south.

Proper Protocol: Officer Torres immediately notes the exact time, vehicle make, model, color, license plate number, and a detailed physical description of the driver. He records the specific physical security elements photographed. Because the vehicle has departed and no immediate life threat exists, Officer Torres files an objective incident report with facility management and submits a formal suspicious activity report to the New Jersey Office of Homeland Security and Preparedness (NJOHSP) via 1-866-4-SAFE-NJ.

Common Compliance Pitfalls

• Confronting a Suspected Suicide Bomber: Attempting to physically grab, tackle, or wrestle a person suspected of wearing a suicide vest. This often results in immediate detonation, killing the officer and surrounding bystanders.
• Dismissing Surveillance as Harmless Photography: Assuming that someone taking photos of fence lines or guard rotations is merely a tourist or hobbyist without logging the event or notifying supervisors.
• Failing to Collect Vehicle Identification: Observing a suspicious probing incident but failing to capture the license plate state and number, leaving law enforcement investigators with no actionable lead.