Minnesota’s Public Safety Answering Points (PSAPs) are potentially vulnerable to malicious acts intended to disrupt their ability to receive 911 calls and/or communicate with emergency responders. A proactive approach to Suspicious Activity Reporting (SAR) and information sharing can help mitigate this threat. Emergency Communication Networks recommends reporting suspicious activity that may be a precursor to a criminal/terrorist act executed against a PSAP. Suspicious activity is described as “observed behavior reasonably indicative of preoperational planning associated with terrorism or other criminal activity.” 

These behaviors include:

• Eliciting Sensitive Information: Questioning individuals or otherwise soliciting information regarding PSAP operations at a level beyond mere curiosity and in a manner that would arouse suspicion of terrorism or criminal activity in a reasonable person (e.g., staffing levels, work hours, physical security, access points, etc.).
• Testing or Probing Security/Breach or Attempted Intrusion: Deliberate acts to identify PSAP security capabilities and protocols; unauthorized personnel attempting to enter or actually entering a restricted area, secured protected site, or nonpublic area; impersonation of authorized personnel/vendors, etc.
• Observation/Surveillance/Photography: Demonstrating unusual, prolonged, or surreptitious interest in the actions of PSAP personnel, facilities, and/or emergency communications infrastructure beyond mere casual or professional interest and in a manner that would arouse suspicion of terrorism or criminal activity in a reasonable person (e.g., observation through binoculars; taking notes/pictures/video of entry points, building access systems, security cameras, utilities, fencing; attempting to mark off or measure distances, etc.).
• Cyber-Attack: Compromising or attempting to compromise or disrupt a PSAPs information technology infrastructure. This includes Telephony Denial of Service (TDoS) attacks designed to disrupt call handling platforms for 911 and/or administrative telephone lines.
• Sabotage/Tampering/Vandalism: Damaging, manipulating, defacing, or rendering inoperable fencing, security cameras, doors, gates, access control systems, utilities, and/or other equipment and infrastructure.

NOTE: A number of the behaviors noted above are considered lawful, constitutionally protected activities. No single act should be viewed as the basis for investigative/enforcement action. The totality of circumstances should be considered when determining the appropriate course of action.