Terrorism Alerts and the Private Sector

Summary
The U.S. Department of State frequently issues security warnings related to terrorist threats that may
impact U.S. citizens or organizations abroad. Alerts often prompt further questions from OSAC members
about the nature of the threat and what security measures U.S. organizations should take to protect their
operations and employees. This OSAC Traveler Toolkit piece seeks to answer common OSAC member
questions about terrorism-related security alerts and provides resources from the U.S. government and
the private sector to help organizations understand and prepare for terrorist attacks.

Terrorism-Related Security Alerts

U.S. embassies and consulates issue security alerts to inform
Terrorism and Travel Advisories
U.S. citizens of specific safety and security concerns in a
country, such as demonstrations, crime trends, weather events,
U.S. Department of State Travel
and threats of terrorism. Embassies and consulates release
Advisories include information on
alerts on their websites and, often, through social media. U.S.
ongoing terrorism threats. A “T”
citizen travelers enrolled in the Smart Traveler Enrollment
warning on a Travel Advisory
Program (STEP) receive alerts via email or text for the locations
indicates terrorist attacks have
to which they have subscribed. OSAC re-posts security alerts
occurred and/or specific threats
on OSAC.gov.
against civilians, groups, or other
targets may exist. OSAC Country
When the U.S. Department of State identifies a credible threat
Security Reports elaborate on a
of a terrorist attack that may impact U.S. citizens abroad, the
country’s terrorism environment.
relevant embassy or consulate frequently posts a security alert
to warn of the potential attack. The decision to issue a security
alert and the specificity of the alert are determined by the credibility of threat information as well as
requirements to protect intelligence sources and methods. Depending on those considerations,
information included in the security alert may be broad – such as a threat with no timeline against
locations foreigners frequent – or highly specific – such as a threat against a specific location on a certain
date.

Alerts warning of terrorism are almost always prompted by credible intelligence of a terrorist threat. Take
all security alerts seriously. Do not assume alerts are scheduled reminders of ongoing threats. When in
doubt, contact OSAC for further analysis.

Duty to Warn Following a terrorism-related security alert, OSAC may publish a

When U.S. intelligence identifies a
credible and non-counterable
threat to specific U.S. individuals
or organizations, the U.S.
Intelligence Community is
required to issue a warning to
those individuals or organizations.
Learn more about OSAC’s role in
Duty To Warn Notifications: Duty
to Warn Q&A: Making Sense of
the Threat (osac.gov).
report detailing the terrorism environment that prompted the alert
and recommendations for the private sector. Not all alerts will
prompt an OSAC report. OSAC members are encouraged to
contact OSAC for analysis on how a security alert may impact
member operations.
While embassies and consulates frequently post security alerts
concerning threats of terrorism, many terrorist attacks occur
without warning. A lack of recent security alerts does not mean
the threat of terrorism does not exist. Private sector organizations
and employees should be vigilant of the risk of terrorism wherever
they operate, take measures to understand local risks of
terrorism, and prepare for worst-case scenarios.

1
Publication of a terrorism alert, whether by a member of the diplomatic community or the host nation
government, can sometimes thwart or delay a terrorist attack. Alerts may deprive a terrorist group of the
element of surprise, encourage security services to harden soft targets, or lead to arrests of members of
terrorist networks. Do not assume that lack of a terrorist attack means the alert was incorrect or
unnecessary. Take all security alerts seriously.

Preparing for a Terrorist Attack

Consider the following to prepare your organization and employees for a terrorist attack. The below
information is not a holistic review of terrorism preparation procedures. Consult other resources and
consider your organization’s specific needs when preparing your operations and employees for a terrorist
attack.

What to do Following a Security Alert

Notify employees of the alert. U.S. Embassy security alerts frequently make local headlines and spur
rumors. Quick and clear communication with your employees can preempt panic and misinformation.

Review emergency procedures and communications plans. Ensure employees know what to do and
who to contact in the event of a terrorist attack, whether the attack directly impacts them or not.

Review locations relevant to your organization that fall under the alert. This includes physical
organization sites as well as neighborhoods where employees live, visit, and transit. Depending on the
threat, your organization may consider increasing physical security measures or discouraging employees
from visiting certain locations.

Review travel plans to locations impacted by the alert. Consider your organization’s risk threshold and
criticality of planned travel. Some OSAC members cancel or delay travel following terrorism-related
security alerts, while others impose in-country security measures for traveling employees, such as
booking lower-profile hotels, imposing a curfew, arranging security escorts, or discouraging visits to areas
frequented by foreigners.

Consider de-escalation decision points. If your organization increases security measures or restricts
employee travel, consider why or when such measures would be reversed. Many terrorism-related
security alerts do not have timelines for the threat. OSAC members frequently benchmark their security
measures with those of the relevant U.S. embassy or consulate. Consult OSAC for information on
changes in embassy or consulate security measures.

Consult OSAC for further analysis of the alert and any potential impact to the private sector. Reach out to
OSAC’s regional teams, country chapters, or common interest committees to understand private sector
recommendations and benchmark security posture changes.

How Individuals Can Prepare for a Terrorist Attack

Educate yourself about the terrorism environment in your country or the country to which you plan to
travel. Consult OSAC’s Country Security Reports, Travel Advisories, and other resources like the National
Counterterrorism Center’s International Terrorism Guide Website to understand active terrorist groups,
recent attacks, and common targets and tactics.

Minimize time at locations listed in the security alert or at locations commonly targeted by terrorists.
Depending on the terrorism threat environment, locations targeted by terrorist groups tend to include
areas frequented by tourists, shopping centers, high-end restaurants and hotels, embassies, government
buildings, airports, places of worship, and more.

2
Practice good situational awareness. Make a habit of locating exits, identifying possible hiding places,
and thinking through plans to escape in the event of a terrorist attack or other emergency.

Keep a low profile. Many terrorist organizations target U.S. citizens, tourists, and other foreign
populations. Avoid unnecessarily identifying yourself as a potential target.

If staying at a hotel, familiarize yourself with the hotel’s emergency exits and where they lead. Selecting
a room on the third to fifth floor generally keeps guests out of reach of activity from the street yet within
reach of fire truck ladders. Ensure your organization knows what hotel you are staying in, your floor and
room number, and the number of people in your room. Keep essential documents in an easy-to-reach
location in case you need to evacuate quickly. Ensure the phone works in the hotel room and that you
know how to make an external call if needed.

Know emergency communications procedures for your organization. Keep emergency contacts saved
or memorized and know who to contact in the event of an emergency, including security managers from
your organization and if applicable, American Citizen Services at the nearest U.S. embassy or consulate.
Consider alternative communications methods or rally points in the event of internet or cellular
communications disruptions.

Prepare your home and vehicle with emergency supplies, including a multiday supply of food, water,
and medications, a first-aid kit, phone chargers, batteries, a radio, and other essential items. Visit
Ready.gov for a list of recommended emergency supplies.

Complete pre-travel preparations recommended by the U.S. Department of State for travel to high-risk
areas, especially areas with terrorism warnings on the Travel Advisory or recent embassy or consulate
alerts. Review U.S. Department of State advice for high-risk area travelers.

Report suspicious behavior to local authorities and your organization’s security manager. See the U.S.
Department of Homeland Security’s If You See Something, Say Something page for tips on recognizing
suspicious behavior.

How Organizations Can Prepare for a Terrorist Attack

Educate employees on the terrorism environment in the countries in which your organization operates.
Consult OSAC’s Country Security Reports, Travel Advisories, and other resources like the National
Counterterrorism Center’s International Terrorism Guide Website to understand active terrorist groups,
recent attacks, and common targets and tactics.

Review physical security measures for your organization and employees. Consider increasing,
updating, and diversifying security measures to make your organization’s security less predictable and
harder for possible attackers to overcome. Encourage employees to vary routes, methods, and timing of
arrival to work sites to avoid time/place predictability of employees.

Consider whether terrorists have targeted organizations like yours in the region and take extra
precautions as needed. Consider how visible your organization should be in terms of signage and
publicity, and whether employees should openly identify as members of a U.S. organization in public.

Train employees on your organization’s emergency procedures and communications plans. Ensure
employees and their family members understand what to do and who to contact in the event of a terrorist
attack.

Provide resources to employees to prepare them for a terrorist attack. Consider providing emergency
trainings or first aid courses. OSAC’s Security Overseas Seminar, accessible to OSAC members on
OSAC.gov, can help organizations and their employees prepare for a terrorist attack and other security
challenges they may face overseas.

3
What to Do During an Attack

Evaluate your environment. Terrorist attacks can take many forms, including shootings, bombings, or a
combination of attack methods. The best response depends on the nature of the attack and your specific
circumstances. Remain calm and evaluate the situation to determine if you should evacuate or shelter in
place.

Run, hide, or fight if you are in an active shooter situation. See the FBI’s “Run. Hide. Fight.” training
video and Quick Reference Guide.

Get down on the ground in the event of an explosion. Seek cover behind something that will shield your
body from further explosions. Once explosions have subsided, leave the area as quickly and safely as
possible. Do not stop to gather personal belongings.

Beware of secondary explosions and complex attacks. Move away from windows and seek cover if
you hear an explosion or gunfire nearby. A stronger secondary explosion could shatter windows, killing or
injuring onlookers. Terrorists frequently use secondary attacks or explosions to target first responders.
Remain vigilant and evacuate the attack site as quickly and safely as possible.

Prepare to shelter in place for an extended period if you are unable to evacuate during the initial attack.
Silence cell phones if you are hiding. Some attacks may end in a matter of minutes while others may
continue for days. Security services may need an extended period of time to secure the area before you
can safely evacuate. If hiding, do not leave unless you are sure it is safe. If someone encourages you to
come out, confirm they are a member of the security services and not the attacker. Do not contact news
services or post about your location on social media while hiding, as you may reveal your hiding place to
the attackers.

Follow instructions from authorities. Avoid running or making sudden movements that may cause
security forces to mistake you for an attacker. Keep your hands visible and clearly identify yourself as a
victim around security forces.

Conduct first aid on yourself before assisting others. Assist others if it is safe to do so.

What to Do After an Attack

Account for employees. Notify the nearest U.S. embassy or consulate of any missing U.S. citizens.

Assess physical safety of your organization’s sites. Even if no damage is visible, nearby explosions or
gunfire could have harmed infrastructure. Authorities may require you to turn off utilities following an
explosion. Consider additional security measures that would make your organization less vulnerable to
similar attacks in the future.

Continue monitoring local news and follow instructions from local authorities. Terrorist attacks may
prompt a state of emergency, cellular or internet service shutdowns, limits to constitutional rights, road
checkpoints, border restrictions, or limits to transportation options.

Consider additional safety measures for employees according to the security environment following the
attack. Terrorist attacks may lead to discrimination or targeting of certain populations. Consider options to
support the safety of employees who may be impacted by heightened social tensions.

Consider mental health assistance for employees. Terrorist attacks can be traumatic to employees and
family members, whether they were directly impacted by the attack or not.

4
Resources
Understanding the Threat Environment

• Counterterrorism Guide - National Counterterrorism Center (dni.gov)

• Country Security Reports (osac.gov)
• Terrorism (state.gov)
• Travel Advisories (state.gov)
• Travel to High-Risk Areas (state.gov)

Preparing for a Terrorist Attack

• Build A Kit | Ready.gov

• How to prepare in case of a terrorist attack | British Red Cross
• If You See Something, Say Something® | Homeland Security (dhs.gov)
• Terrorism Safety Tips – Before, During, & After | American Red Cross

Terrorist Attack Survival Resources

• Active Shooter Safety Resources — FBI

• Active Shooter Event Quick Reference Guide — FBI
• Attacks in Crowded and Public Spaces | Ready.gov
• Explosions | Ready.gov
• OSAC Security Overseas Seminar
• What To Do During Terrorist Attack | Safety and Security (uonbi.ac.ke)
• What to Do: Surviving a Bombing Attack - YouTube

The opinions expressed here do not necessarily reflect those of the U.S. Department of State or any affiliated organization(s). Nor
have these opinions been approved or sanctioned by these organizations. This product is unclassified based on the definitions in
E.O. 13526. OSAC’s full disclaimer and copyright policy is available on our site at OSAC.gov/About/Disclaimer.