Under immediate GUN FIRE – Take cover initially but leave the area as soon as possible - if safe to do so, e.g. (if the shooters are no longer a threat to you or others in your vicinity).
Nearby GUN FIRE - Leave the area immediately, if possible and it is safe to do so.
Evacuation – Beware of location and direction of threat and evacuate away from danger. Assist others in evacuating if safe to do so.
Leave your personal belongings behind – Do not delay your evacuation but if possible take a means of communication (i.e. Mobile phone) with you to facilitate the giving/receiving of further safety advice.
Do not congregate or allow the public to congregate at evacuation points or usual Rendezvous points. Dispersal away from the danger area is vital. However try to maintain contact with your supervisor so they are aware of your safety and location.
REMEMBER – Cover from view does not necessarily mean out of danger, especially if you are not in ‘cover from gun fire.’
IF YOU CAN’T ESCAPE - consider locking yourself and others in a room. Barricade the door then stay away from it. If possible choose a room where escape or further movement is possible. Silence any sources of noise, such as mobile phones, that may give away your presence.
Pass as much information to the Police as possible. Consider using CCTV and other remote methods where able. NEVER risk your own safety or that of others to gain it.
If it is safe to do so, think about the following:
Do not assume that others have already contacted Police. Therefore contact POLICE immediately by dialling 999 or via your control room, giving them the information shown under ‘See’. Using this information the Police will take the necessary action to ensure where possible trains are stopped entering the affected station.
Use all forms of communication available to you – to inform staff, public, neighbouring premises etc of the danger.
Carry out the following actions if safe to do so.
Secure your immediate environment and other vulnerable areas
h.What key messages would you give to them in order to keep them safe?
i.Have the ability to secure key parts of the building to hinder free movement of the gunmen.
j.Does your location store NHS Medical Bags for use by paramedics to treat casualties of such an incident? Do your staff know the location of these bags?
k.Think about incorporating this into your emergency planning and briefings
l.Test your plan.
If you require further information then please liaise with your immediate Supervisor, who can take further advice from your local CTSA.
Annex C - Suspicious items - using the HOT protocol
A suspicious item is one that exhibits unusual characteristics (appearance or placement) and for which a legitimate purpose cannot readily be established.
To avoid unnecessary disruption of the network and alarm to customers, staff should first try to identify the owner of any unattended item. If no owner can be identified, they should then apply 'HOT'. This helps staff to decide quickly whether an unattended item is typical of lost property or whether it is suspicious. It is designed with staff and customer safety in mind as well as minimising disruption to the network and wider society.
The HOT protocol has been used in the rail environment since the early 1990s and is reviewed regularly. It is based on research undertaken by BTP that indicates unattended suspicious items are typically:
Hidden - i.e. placed where they will not be readily seen or noticed as unusual
Obviously suspicious (e.g. by physical appearance, by placement, or because of the circumstances in which they have been discovered)
Not Typical of what you would normally expect to find in that environment
Lost property items are typically:
Not Hidden - often left where people congregate before moving to do something else
Typical of what you would normally expect to find in that environment - a judgement made best by staff with an intimate knowledge of the area in question
It is difficult to define comprehensively how items might appear "obviously suspicious" from their appearance. However, from experience, a suspicious item may display one or more of the following features:
r.wire passing from one package to another;
s.items secured by plastic adhesive tape;
t.annotations (e.g., ‘ON’, ‘ARMED’, ‘DET’, reference to the time delay);