Threat awareness
The 28-slide toolkit introduces online radicalisation, returning fighters and decentralised attacks, and ordinary items such as vehicles being misused as weapons. Its examples from Puchong, Manchester, Barcelona, Surabaya, Berlin and Westminster are historical illustrations, not a current threat-count dashboard.
Brief staff to remain alert without panic. Warning signs should be assessed in context; a person’s religious or ethnic identity is not evidence of a threat.
Employee response
Notice suspicious objects, activity and circumstances and use official reporting routes. During an attack, leave danger quickly and quietly if safe, leave possessions behind and stay out of sight. If escape is unsafe, hide, silence the phone and secure the entrance where possible. Report location, attacker details and movement when safe.
The toolkit encourages first-aid and CPR/AED training. Ensure scene safety, call 995 for medical emergencies and follow dispatcher and AED prompts. Do not treat its brief improvised-bleeding instructions as a replacement for current recognised training.
Employer preparation
Maintain employee, next-of-kin, customer and supplier contacts. Establish group messaging and a recognised company information source before an incident. Protect physical premises and IT systems through appropriate layered controls.
Build an inclusive workplace through fair employment, grievance handling, team activities and values such as respect, fairness, empathy, harmony and resilience. Leaders should demonstrate the behaviours they expect.
After an attack and planning a staff session
Use verified information, discourage rumours and support affected colleagues. A practical staff session can combine threat examples, local routes and reporting arrangements, a response rehearsal, and discussion of how colleagues will support one another. Update company-specific contacts and plans before presenting the toolkit.

