Threat Levels

Level Description
LOW A Low Condition is declared when there is a low risk of terrorist attacks. Federal departments and agencies should consider the following general measures in addition to the agency-specific Protective Measures they develop and implement:
Refining and exercising as appropriate preplanned Protective Measures;
Ensuring personnel receive proper training on the Homeland Security Advisory System and specific preplanned department or agency Protective Measures; and
Institutionalizing a process to assure that all facilities and regulated sectors are regularly assessed for vulnerabilities to terrorist attacks, and all reasonable measures are taken to mitigate these vulnerabilities.
GUARDED A Guarded Condition is declared when there is a general risk of terrorist attacks. In addition to the Protective Measures taken in the previous Threat Condition, Federal departments and agencies should consider the following general measures in addition to the agency-specific Protective Measures that they will develop and implement:
Checking communications with designated emergency response or command locations;
Reviewing and updating emergency response procedures; and
Providing the public with any information that would strengthen its ability to act appropriately.
ELEVATED An Elevated Condition is declared when there is a significant risk of terrorist attacks. In addition to the Protective Measures taken in the previous Threat Conditions, Federal departments and agencies should consider the following general measures in addition to the Protective Measures that they will develop and implement:
Increasing surveillance of critical locations;
Coordinating emergency plans as appropriate with nearby jurisdictions;
Assessing whether the precise characteristics of the threat require the further refinement of preplanned Protective Measures; and
Implementing, as appropriate, contingency and emergency response plans.
HIGH A High Condition is declared when there is a high risk of terrorist attacks. In addition to the Protective Measures taken in the previous Threat Conditions, Federal departments and agencies should consider the following general measures in addition to the agency-specific Protective Measures that they will develop and implement:
Coordinating necessary security efforts with Federal, State, and local law enforcement agencies or any National Guard or other appropriate armed forces organizations;
Taking additional precautions at public events and possibly considering alternative venues or even cancellation;
Preparing to execute contingency procedures, such as moving to an alternate site or dispersing their workforce; and
Restricting threatened facility access to essential personnel only.
SEVERE A Severe Condition reflects a severe risk of terrorist attacks. Under most circumstances, the Protective Measures for a Severe Condition are not intended to be sustained for substantial periods of time. In addition to the Protective Measures in the previous Threat Conditions, Federal departments and agencies also should consider the following general measures in addition to the agency-specific Protective Measures that they will develop and implement:
Increasing or redirecting personnel to address critical emergency needs;
Assigning emergency response personnel and pre-positioning and mobilizing specially trained teams or resources;
Monitoring, redirecting, or constraining transportation systems; and
Closing public and government facilities.

Seven Signs of Possible Terrorist Activity

Surveillance Someone recording or monitoring activities. This may include the use of cameras (either still or video), note taking, drawing diagram annotating on maps, or using binoculars or other vision-enhancing devices
Elicitation People or organizations attempting to gain information about military operations, capabilities, or people. Elicitation attempts may be made by mail, fax, telephone, or in person.
Tests of security Any attempts to measure reaction times to security breaches or to penetrate physical security barriers or procedures in order to assess strengths and weaknesses.
Acquiring supplies Purchasing or stealing explosives, weapons, ammunition, etc. Also includes acquiring military uniforms, decals, flight manuals, passes or badges (or the equipment to manufacture such items) or any other controlled items.
Suspicious persons
out of place
Suspicious persons out of place: People who don't seem to belong in the workplace, neighborhood, business establishment, or anywhere else. Includes suspicious border crossings and stowaways aboard ship or people jumping ship in port
Dry run/Trial run Putting people into position and moving them around according to their plan without actually committing the terrorist act. This is especially true when planning a kidnapping, but it can also pertain to bombings. An element of this activity could also
Deploying assets People and supplies getting into position to commit the act. This is a person's last chance to alert authorities before the terrorist act occurs.

Other Items of Potenital Interest

  • Weapons, ammunition, explosives or police scanners
  • Numerous computers, flat-bed scanners, GPS's or I.D. templates
  • Rental, theft, or purchase of a 1 ton (or larger) truck or van
  • Rental of a house or apartment and pay cash several months ahead
  • Provides very vague personal information and asks a lot of questions
  • Unusual Odors
  • Covered Windows
  • Installs additional locks on the house or apartment.
  • Modification of a truck or van with heavy springs to handle heavier load
  • Suspicious rental or theft of limousine
  • Explosives, theft or sale of explosive powders or blasting caps
  • Large sale or theft of ammonium nitrate fertilizer
  • Multiple sets of identification
  • Training manuals, radical literature, GPS units, maps, hotel receipts or photos
  • Training manuals, radical literature, GPS units, maps, hotel receipts or photos
  • Coded communication
  • Non-Military persons with military style weapons, clothing and equipment
  • AND ANY COMBINATION OF THE ABOVE ACTIVITIES.

Suspicious Packages

Suspicious Mail or Packages