Experts note that terrorist attacks don’t appear out of thin air. In virtually every situation (and that includes active shooter events) an attacker practices “pre-operational surveillance.” More mundanely, they “case the joint” or just show up to observe, orient themselves to the situation and to decide how they will act during their attack. When suspect behavior is reported (1-888-NYC-SAFE) it can be investigated and an attack can be interrupted.

Determining that it “Just doesn’t look right”

The NYPD Intelligence Bureau just released some excellent guidance. Its primary focus is to help detect suspicious signs along special event routes (e.g., parades) or areas designated for large-scale public gatherings (e.g., demonstrations, celebrations, street fairs, etc.), but can apply to houses of worship, schools, community centers and other gathering points. The following examples of activity, though not fully inclusive, may be of possible concern to law enforcement (Click here for a PDF of the NYPD Indicators of Terrorist Activity guidance):

• The appearance of a suspicious vehicle (including bicycles with a storage basket; motorcycles; utility storage boxes, etc.) parked near the area designated for the event to take place. Items left for a protracted period of time and disregarded.
• Actions by an individual that suggest the pre-event videotaping or still photography of the route or location (and surrounding area) for no apparent reason (i.e., no aesthetic value). Sketching of the area e.g., cross streets, access streets into and out of the area.
• Any request to videotape from a roof or a vacant unit/apartment overlooking the event venue.
• The sudden appearance of a new street vendor in an area adjacent to the event route, the venue’s access doors, or gathering location.
• Unclaimed or suspicious packages/objects found along the special event route/location.
• Individuals sitting or standing at a bus stop and not boarding a bus; Individuals sitting at a particular location (e.g., park bench) at the same time each day for numerous days.
• The very. recent placement of a garbage can, postal mailbox, newspaper kiosk or other stationary object along the special event route/location.
• Recent attempts by unknown individuals to gain access to your building’s roof overlooking the parade route/special event location/venue.
• Inquiries about short-term rental of an apartment or space above your store/business – or in your residential complex — that also happens to offer a view of a parade route or special event location. (Terrorist operatives will often cohabitate to facilitate operational planning.Additionally, they may attempt to position themselves in an area that will ease their surveillance of potential targets.)
• Large plastic drums being stored inside a building (commercial or residential space).
• Reports of small fires or smoke conditions being reported from a particular store or apartment.
• Suspicious inquiries by unknown individuals regarding:
  • The security measures anticipated for the event (e.g., extensive questioning as to
    the searching of backpacks, stopping of vehicles, etc.)
  • The seating of public officials, dignitaries, or other VIPs at an event.