21.2 Antiterrorism (AFH-1 Section 18E)
Key Takeaways
- Installation commanders must run a Random Antiterrorism Measures program covering all units; RAMs tie to every force protection condition, including FPCON Normal, and times, location, and duration must change regularly.
- Commanders conduct comprehensive field and staff antiterrorism training at least annually, and installations and self-supported separate facilities must annually exercise current baseline through FPCON Charlie measures.
- Before overseas travel, consult the Foreign Clearance Guide and get the required area-of-responsibility threat briefing from the security officer, antiterrorism officers, or the appropriate counterintelligence or security organization within three months prior to travel.
- AFI 71-101, Volume 4, requires reportable contacts or reportable information to be reported to AFOSI within 30 days; AFOSI is the sole USAF repository for that information and the installation-level counterintelligence awareness training agency.
- AFH-1 defines espionage, subversion, sabotage, and terrorism as distinct threats; HUMINT collection uses interrogation, source operations, and debriefing, while document and media exploitation is not a primary HUMINT function.
Staff Sergeant and Technical Sergeant tests both require ADTC Level B on AFH 1, 15 February 2025, Section 18E. This is the antiterrorism (AT) program—not Integrated Defense Protection Levels in 18A. Section 18E names force protection conditions where they drive AT training and Random Antiterrorism Measures (RAMs). It does not reprint a five-level FPCON definition table. Learn the AT rules 18E actually states.
Antiterrorism efforts (18.24)
The USAF seeks to deter or limit the effects of terrorist acts by collecting and disseminating timely threat information, training all USAF members, developing comprehensive plans to deter and counter terrorist incidents, allocating funds and personnel, and implementing antiterrorism measures.
At the strategic level, HAF/A2/6 and the Director for Intelligence, Surveillance, Reconnaissance, and Operations ensure timely collection, processing, analysis, production, and dissemination of foreign intelligence, current intelligence, and national-level intelligence concerning terrorist activities, terrorist organizations, and force protection issues.
AFOSI is the lead Air Force agency for collection, investigation, analysis, and response to threats from terrorists, criminal activity, and foreign intelligence and security services. Its primary focus is countering adversary intelligence collection activities against U.S. forces. AFOSI is also the Air Force single point of contact with federal, state, local, and foreign law enforcement, counterintelligence, and security agencies.
Antiterrorism training is at least annual comprehensive field and staff training of AT plans—physical security, continuity of operations, critical asset risk management, and emergency management—using location-specific enemy TTPs and lessons learned. RAMs belong in those plans: all units; random, multiple measures that change the look of the AT program; uncertainty that defeats surveillance. Regularly change times, location, and duration, and involve all units and personnel.
AT program and FPCON as Section 18E lists them
| 18E program element | Requirement in AFH-1 |
|---|---|
| AT effort | Deter or limit terrorist effects through threat information, training, plans, resources, and measures |
| Annual AT training | Comprehensive field and staff training at least annually; location-specific enemy TTPs and lessons learned |
| FPCON exercise | Current baseline through FPCON Charlie measures exercised annually at installations and self-supported separate facilities |
| RAM coverage | All units; random, multiple measures that change the look of the AT program |
| RAM and FPCON | RAMs tie to all force protection conditions, including FPCON Normal |
| RAM unpredictability | Regularly change times, location, and duration; involve all units and personnel |
USAF antiterrorism uses the eyes and ears of military members, civilians, contractors, and dependents. Each installation AT plan tells how to receive and log suspicious activity reports and suspicious incident reports and pass them expeditiously to the servicing AFOSI.
Ground transportation, travel, mail, and personal protection (18.25–18.29)
Ground transportation (18.25). Criminal and terrorist acts against individuals usually occur outside the home after habits are established. AFH-1 identifies the most predictable habit as the route you travel on a regular basis. Pair that with the duty to vary routines.
Overseas travel (18.26). Consult the Foreign Clearance Guide before overseas travel. Get the required AOR threat briefing from the security officer, antiterrorism officers, or the appropriate counterintelligence or security organization within three months prior to travel. Use office symbols on travel documents if the word description denotes a sensitive position. Use military contracted flag carriers. Avoid high-risk areas. Do not use rank or military address on tickets. Do not discuss military affiliation. Have proper identification for airline and immigration officials. Do not carry classified documents unless absolutely mission essential. Dress conservatively.
Mail (18.27). Watch for tampering. AFH-1-based indicators include excessive postage, springiness in the top or bottom, and an unknown place of origin or no return address.
Personal protection (18.28). Individual vigilance is integral stateside and overseas. AFH-1 lists: dress and behave so you do not draw attention; be inconspicuous and avoid publicity; travel in small groups; avoid spontaneous gatherings or demonstrations; be unpredictable; vary daily routines to and from home and work; be alert for anything suspicious or out of place; avoid giving unnecessary personal details unless identity can be verified; be alert to strangers on government property for no apparent reason; and refuse to meet with strangers outside your workplace.
Family members (18.29). Spouses and children take basic precautions, including restricting house keys, locking all entrances at night (including the garage), and keeping the house locked even when someone is home.
Human intelligence and threat types (18.30)
Human intelligence (HUMINT) is intelligence derived from human sources and collectors, where the human being is the primary collection instrument. Counterintelligence protects against those threats. HUMINT has three primary functions: interrogation (questioning a person in the custody of the questioning force to answer collection requirements); source operations (elicitation, including unsolicited walk-ins, developed sources, and unwitting persons with access); and debriefing (questioning cooperating sources, consistent with law). Document and media exploitation is not a primary HUMINT function but may be conducted by intelligence personnel with language support.
Threat types as AFH-1 lists them
| Term | AFH-1 definition |
|---|---|
| Espionage | Obtaining, delivering, transmitting, communicating, or receiving information about national defense with intent or reason to believe it may be used to injure the United States or advantage any foreign nation |
| Subversion | Acts inciting DoD military or civilian personnel to violate laws, disobey lawful orders or regulations, or disrupt military activities, with the willful intent to interfere with or impair the loyalty, morale, or discipline of the U.S. Armed Forces |
| Sabotage | Acts with intent to injure, interfere with, or obstruct the national defense by willfully injuring or destroying, or attempting to injure or destroy, national defense or war material, premises, or utilities, as well as human and natural resources |
| Terrorism | The calculated use of unlawful violence or threat of unlawful violence to inculcate fear intended to coerce or intimidate governments or societies in pursuit of goals that are generally political, religious, or ideological |
Incident reporting and protection of the President (18.31–18.32)
Incident reporting (18.31). AFI 71-101, Volume 4, Counterintelligence, requires reportable contacts or reportable information to be reported, verbally or in writing, to AFOSI immediately (within 30 days of the contact). Contact includes any exchange of information, solicited or unsolicited telephone calls, e-mail, radio contact, and face-to-face meetings. Reportable information includes an indication that a foreign intelligence or terrorist organization may have targeted a person for intelligence exploitation, and information that military members, civilian employees, or DoD contractors have contemplated, attempted, or effected the deliberate compromise or unauthorized release of classified or unclassified controlled information.
AFOSI initiates and conducts all USAF counterintelligence investigations, operations, collections, and related activities. When appropriate, or when overseas, AFOSI coordinates with the CIA and the FBI. AFOSI is the installation-level training agency for counterintelligence awareness briefings and the sole USAF repository for reportable information.
Protection of the President and others (18.32). AFI 71-101, Volume 2, Protective Service Matters, records a formal DoD–U.S. Secret Service agreement. Individuals affiliated with the U.S. Armed Forces have a special obligation to report information regarding the safety and protection of the U.S. President or anyone else under Secret Service protection, including the Vice President, the President-elect and Vice President-elect, and visiting heads of foreign states or foreign governments. In most cases, former Presidents and their spouses are also afforded lifetime Secret Service protection.
A Technical Sergeant who drives the same gate-to-gym route every duty day is the predictable target 18.25 warns about—even at FPCON Normal, because RAMs still apply. A Staff Sergeant who waits past 30 days to mention a walk-in question about the flight line has missed the AFOSI window.
What is the intent of an installation Random Antiterrorism Measures program under AFH-1 Section 18E?
How does AFH-1 Section 18E connect Random Antiterrorism Measures to force protection conditions?
Before official overseas travel, when must an Airman receive the required area-of-responsibility threat briefing from the security officer, antiterrorism officers, or the appropriate counterintelligence or security organization?
AFI 71-101, Volume 4, requires an Airman who has a reportable contact or acquires reportable information to report it, verbally or in writing, to which agency and within what time?