FALL FISWG/NCMS TRAINING SESSION
Joe Morton
Threat Manager, Security Risk Operations LMMFC
BUILDING A THREAT MANAGEMENT PROGRAM
BACK TO THE BLUE
Security Risk Operations
Lockheed Martin Proprietary Information
WORKPLACE REALITY
FISWG/NCMS Fall Training Session
No profile exists for an person about to commit workplace violence, however there are signs or
indicators
In many cases targeted workplace violence begins with a personal grudge over a real or
imagined grievance combined with targeted blame:
Studies indicate 85% of violence in the workplace can be identified prior to a serious event,
however they are often not reported by management or coworkers
PATHWAY TO VIOLENCE
WHERE DO I START?
BUILDING A PROGRAM
WORDS MATTER
Workplace Violence Prevention Program
- or -
Threat Management Program
Threat Assessment Program
FISWG/NCMS Fall Training Session
RESOURCES
FISWG/NCMS Fall Training Session
FBI STUDY OF ACTIVE SHOOTERS
FISWG/NCMS Fall Training Session
Key Findings
Typically Experience multiple stressors
Stress perceived by the active
shooter
FBI STUDY OF ACTIVE SHOOTERS
FISWG/NCMS Fall Training Session
ASSOCIATION OF THREAT ASSESSMENT PROFESSIONALS (ATAP)
Founded in 1992 by the Los Angeles Police Department Threat
Management Unit (LAPD TMU)
Non-profit organization
14 Chapters Nationally
Membership of Approximately 2,500
Strict Eligibility Requirements
Diverse Membership:
Law Enforcement Officers
Prosecutors
Mental Health Professionals
Corporate Security Experts
Threat Management Team Members
FISWG/NCMS Fall Training Session
ASSOCIATION OF THREAT ASSESSMENT PROFESSIONALS (ATAP)
Local chapters
Professional networking
Certification
Certified Threat Manager
TM
Leadership opportunities
Local and Association Board of Directors
Recognition
Access to information
Members Only Website Access
Education
Seminars
Annual Conference
https://www.atapworldwide.org/
FISWG/NCMS Fall Training Session
BACK TO THE BASICS
WHAT IS WORKPLACE VIOLENCE?
A SPECTRUM OF
BEHAVIORS
Workplace Violence: A spectrum of behaviors - including overt acts of violence, threats, and other
conduct - that generates a reasonable concern for safety from violence, where a nexus exists
between the behavior and the physical safety of employees and others (such as customer, clients,
and business associates) on-site, or off-site, when related to the organization.
Source: American National Standard on Workplace Violence Prevention and Intervention, ASIS/SHRM WVPI.1-2011, Definitions: Paragraph 3.16
FISWG/NCMS Fall Training Session
U.S. ACTIVE SHOOTER METRICS
FISWG/NCMS Fall Training Session
Average Active Shooting
Incidents per year
2016-2017: 26.5
2000-2006: 6.4
TRENDING
FISWG/NCMS Fall Training Session
PROGRAM STRUCTURE
PROGRAM PILLARS
Intervention
Policy and
Procedures
Education and
Awareness
Threat Management
Teams
Response
Threat Management
Teams
Law Enforcement
Engagement
Active Shooter
Exercises
Continuous
Improvement
Audit and Review
Professional
Development
S a f e a n d S e c u r e W o r k p l a c e
POLICY AND PROCEDURE
COMPREHENSIVE
POLICY
Applicability
All employees, contractors, suppliers, customers, and visitors
Scope
Workplace: any place where employees perform work on behalf of company
Off premise situations with a relationship to the workplace, or affect the workplace
Define Zero Tolerance
Define Prohibited Conduct: “to include, but not limited to…”
Reporting Expectations
Call out Leaders and Managers
Responsibilities
Define Threat Management Team Process
FISWG/NCMS Fall Training Session
EDUCATION AND AWARENESS
CORNER STONE OF
YOUR PROGRAM
New Employee Orientation
New Leader Training
Annual Employee Training
General Awareness
Active Shooter Response Training
Specialty Training
Local Law Enforcement Speakers
Vendors Consultants
ATAP / ASIS / FISWG
Threat Management Team Advanced Training
FISWG/NCMS Fall Training Session
THREAT MANAGEMENT TEAMS
Core Team Structure
Security (Threat Manager) Chair
Human Resources
Legal
Medical
As needed,
Management
Site Leadership
EAP
Outside Consultant
FISWG/NCMS Fall Training Session
THREAT MANAGEMENT TEAM PROCESS
Process:
Concerning behavior is reported
Threat Management conducts a triage (Risk Assessment Tool) 360 view
If appropriate, the TMT is convened
Offsite Support Team and Subjects supervisor are included
TMT Actions:
Determine what immediate action, if any, is required
Violent Act
Suicidal Ideations Behaviors of Concern
Not a Discipline Committee
Provide consultation to management
Oversee and review investigative process Do not conduct the investigation
Develop Long-term Threat Mitigation strategy
FISWG/NCMS Fall Training Session
THREAT MITIGATION
Florida Baker Act Assessment LEO or Medical Assessment
Fitness for Duty Assessment Medical Assessment
Threat Assessment Tools
Professional Consultants
HR/Management Routine Follow-up/Monitoring
Soft Landings
Employee Confidant
Employee Assistance Programs (EAP)
OSINT/Social Media Monitoring Leakage
Public Records Automated Monitoring Solutions
FISWG/NCMS Fall Training Session
ASSESSMENT TOOLS
COLLECT THE DOTS
TO CONNECT THE DOTS
Example Questions:
1. Known Grievance
2. Preoccupation with Violent Themes
3. Known Threats to Workplace or Co-Workers
4. Military Experience/Weapons Familiarity
5. Signs of Preparations for Violence (Final Act Behaviors)
Ask about POSITIVE Support Systems, too!
Family, Faith, Community, etc.
FISWG/NCMS Fall Training Session
DOMESTIC VIOLENCE
Possible Signs:
Unexplained bruises, black eyes or other injuries
Inappropriate clothing for the time of year, heavy
make-up
Frequent upsetting phone calls, gifts at the workplace
Leaving work area numerous times to take calls
Isolation, withdrawn, keeps away from others
Frequent work absences
Lowered productivity
Threat Management
Domestic Violence isn’t a “private matter,” it comes to work with the victim
2016 Security Week Case Study (DV Shelter at Security table, 2 hours):
57 employees approached
Three (3) employees received immediate services
Three (3) employees approached the table within groups (separate) and
appeared to be looking for information but not identifying themselves
HOW TO RESPOND
Threat Management
Do not ignore the situation, if intervention is appropriate, take action.
Do not try to diagnose the problem
Respect the person’s privacy, and at the same time, open the door to offer help
Respecting privacy may not mean keeping the issue a secret
Advise HR / Security to help ensure the safety of the victim and the workplace.
If they Self-Disclose:
Offer Assurance
Listen and believe what they say, without judging
Communicate your concern for their safety
Encourage them to call EAP
If you have a concern:
Let them know what you observed
Express your concern, and make a statement of support
If they deny being abused, do not press the issue, reaffirm support and offer EAP
DOMESTIC VIOLENCE RESOURCE
FISWG/NCMS Fall Training Session
VineLink (https://vinelink.vineapps.com/state)
Developed specifically for domestic violence victims
Notified when their abuser is released from jail
Captures all arrests, not just DV cases
PROGRAM PILLARS
Intervention
Policy and
Procedures
Education and
Awareness
Threat Management
Teams
Response
Threat Management
Teams
Law Enforcement
Engagement
Active Shooter
Exercises
Continuous
Improvement
Audit and Review
Professional
Development
S a f e a n d S e c u r e W o r k p l a c e
HOW TO GET THERE
Law Enforcement Coordination
Liaison and Networking
Familiarization Programs
Executive Buy-in
Active Shooter Table Top Exercises (TTX)
Have the right people at the table
Business Continuity
Active Shooter Full-Scale Exercises (FSE)
Planning, planning, planning
Keep it realistic
Focus on improving and understanding the response concept, identify opportunities
and challenges and develop solutions
ACTIVE SHOOTER PREPAREDNESS AND RESPONSE
PROGRAM PILLARS
Intervention
Policy and
Procedures
Education and
Awareness
Threat Management
Teams
Response
Threat Management
Teams
Law Enforcement
Engagement
Active Shooter
Exercises
Continuous
Improvement
Audit and Review
Professional
Development
S a f e a n d S e c u r e W o r k p l a c e
CONTINUOUS IMPROVEMENT
Audit and Review Your Program at least Annually
Consultants
Internal Audit
Self-Inspection
Professional Development
Professional Associations ATAP
ASIS Global Security Conference (GSC)
Professional Training
FISWG/NCMS Fall Training Session
ITPSO CORRELATION
Insider Threat Definition:
The threat presented by a person who has or once had authorized access to
information, facilities, networks, people, or resources and who wittingly or
unwittingly committed: acts in contravention of law or policy that resulted in or
might result in harm through the loss or degradation of government or company
information, resources or capabilities; or destructive acts to include physical harm to
others in the workplace.
- Intelligence and National Security Alliance (INSA)
FISWG/NCMS Fall Training Session
QUESTIONS?
FISWG/NCMS Fall Training Session