Observe and report
Assess suspicious behaviour and non-verbal cues. Observe discreetly, record a description, inform relevant parties and assist security when appropriate. For suspicious posted or abandoned items, check ownership from a safe position, do not touch, avoid mobile/wireless devices near the item, use a safe landline to notify security, keep others away and direct responders when they arrive.
Four scenarios and exercise purpose
TTX discussions test plans for armed attackers, suspicious items/vehicles with possible explosive devices, internal threats and unauthorised entry. Bring relevant colleagues together to plan and practise response and identify gaps. Use the official videos and preparedness guides for facilitation rather than testing only whether a plan exists.

