How to use the 120-page course
The course follows Nadia, a 30-year-old barista and SGSecure representative at the fictional Beano’s Coffee. Each module combines learning objectives, scenarios, quizzes, suggested staff-sharing activities and resources. Use the modules for employees, employers and representatives, adapting routes and procedures to the actual workplace.
The regional incident map and 2019 assessment figures are historical teaching material. Review old contacts, cybersecurity controls and medical instructions before using them in current training.
Module 1: Threat awareness
Explain historical regional attacks, online influence and lone-actor risks. Ordinary objects can be misused; terrorism is not confined to one religious group. Use short case discussions and a knowledge check.
Module 2: Responding to an attack
Identify suspicious articles, behaviour and vehicles in context. Practise safe escape, sheltering and reporting, and arrange recognised life-saving training. Do not touch a suspicious object or approach an attacker.
Module 3: Inclusive workforce
Promote respectful values, understand cultural practices, adopt fair policies and resolve grievances. Provide feedback channels and recognise employees who model inclusion.
Module 4: Protecting the workplace
Assess business interruption, physical access and cyber risks. Combine perimeter and access controls with secure backups, software updates and employee reporting.
Module 5: Communication capability
Maintain employee and next-of-kin contacts, backup suppliers and neighbour networks. Use group channels and a tested call tree to reach people and account for safety.
Module 6: Aftermath and recovery
Activate crisis communication, provide verified updates, oppose rumours and support distressed colleagues. Practise psychological first aid while respecting privacy and the choice not to discuss the event.
Scenario learning and answer checks
Threats involve behaviour and circumstances, not clothing colour or group identity. When suspicious circumstances arise, obtain appropriate assistance rather than carrying a weapon or investigating independently.
In the café scenario where an armed threat is nearby, consider securing the premises to keep people safe if the threat is outside; do not direct people toward danger. Evacuation briefings, safety briefings and first-aid courses are useful; gossip is not preparedness.
Know employee and next-of-kin contacts so missing or injured colleagues can be followed up. Group messaging helps warn people, receive safety reports and communicate alternative work arrangements. Neighbour relationships support early warning and mutual assistance.
If a colleague declines to recount a traumatic event, respect the choice, remain available and avoid comparison with someone else’s recovery.
Training delivery and safe first aid
A repeatable session uses the introductory video, relevant local case discussion, a practical explanation or rehearsal, then a quiz and debrief. Record gaps and arrange refresher sessions. The original casualty quiz includes improvised tourniquet steps; use recognised current first-aid training and 995 instructions for actual care, with tourniquets only when appropriately trained.
Detailed warning signs and proportionate reporting
The modules describe unusual concealment, visible wires, unexplained surveillance or security questions, refusal to explain a visit, and leaving an object then immediately departing. Suspicious articles may be abandoned in an unusual place or show wires, stains, unusual securing material or abnormal sounds. Do not approach an item to smell, examine or test it.
Vehicle indicators in the course include abandonment near buildings, unusual loads, suspicious contents, apparent tampering, repeated unexplained circuits and objects attached beneath a vehicle. No single indicator proves an attack. Report observations safely; investigation and threat assessment belong to trained personnel.
The birthday-food and Borough Market scenarios
In the fictional birthday scenario, a colleague dismisses Zafir’s tandoori chicken using an ethnic comparison. Nadia’s response explains cultural differences, invites empathy and discourages hasty judgment. The lesson is to address disrespect without ridiculing another culture, because small everyday divisions can deepen during a crisis.
The module’s 2017 Borough Market example describes restaurant staff lowering shutters while people fled danger. It illustrates why a workplace needs both escape routes and the ability to shelter from an outside threat. Building controls must be selected for the actual threat and must preserve safe emergency escape.
Layered physical protection and cyber habits
The course’s five physical layers are deterrence, detection, delay, denial of entry and response. Perimeters, reinforced landscaping, gates, bollards and anti-intrusion barriers are examples, with unobstructed pedestrian movement. Cyber lessons include secure backups, prompt updates, suitable antivirus, strong accounts, careful browsing and reporting suspicious email. These measures complement, rather than replace, business-continuity planning.
Communication records, call trees and recovery messaging
The course asks where protected employee records are kept, who can access them, how groups warn colleagues and receive safety reports, and how call-tree results return to the coordinator. Recovery planning includes a spokesperson, writer and coordinator, stakeholder and backup-vendor lists, anticipated questions, empathetic tone, verified timing and a factual incident sheet. Practical messages should help people decide what to do, not simply defend the organisation’s image.
Official originals and language editions
- Lesson plans ↗ PDF