1. Does the house of worship have a security manager or security committee to make security management decisions?
The house of worship does not have a security manager or committee.
The house of worship has a security manager or committee, but security management activities are sporadic.
The house of worship has a security manager or committee. Security management activities are regularly scheduled, but not coordinated with other committees, departments, or groups (e.g., special events planning, childcare).
The house of worship has a security manager or committee. Security management activities are regularly scheduled and coordinated with other committees, departments, and groups, but additional personnel are needed to support the facility’s security mission.
The house of worship has a security manager or committee. Security management activities are regularly scheduled and coordinated with other committees, departments, and groups, and staffing levels fully support the facility’s security mission.
Very Low
Low
Medium
High
Very High
Designate an individual as a security manager or a group of individuals as a security committee, and ensure that person or group is responsible for developing, implementing, and coordinating all security-related activities. If the manager or committee members have no security or law enforcement background, make sure they reach out to local law enforcement to become acquainted. Provide security management training and/or access to training materials and resources.
Schedule regular meetings to review security procedures and incidents.
Coordinate safety and security planning with other committees, departments, and groups.
Hire or appoint additional personnel to support the facility’s security mission.
Regularly assess the facility’s security management program. Conduct security surveys, risk assessments, and threat assessments of the facility and neighboring areas. Implement best practices based on collaborative relationships and new or updated resources.
Background | Reference | More Information
Background: Security managers (also known as security leaders) are responsible for the effective implementation of security policies, programs, directives, and training within their house of worship. Security committees (also known as security teams or departments) are a group of people working together to fulfill this same purpose. They may include religious leaders, congregants, security professionals, and first responders.
Reference: (1) ASIS Houses of Worship Committee, Recommended Best Practices for Securing Houses of Worship Around the World, 2017, accessed January 13, 2020, https://www.asisonline.org/globalassets/get-involved/councils/documents/best-practices-securing-houses-of-worship.pdf (2) Interagency Security Committee (ISC), Facility Security Plan: An Interagency Security Committee Guide, 1st edition, 2015, accessed January 13, 2020, https://www.cisa.gov/sites/default/files/publications/ISC-Facility-Security-Plan-Guide-2015-508.pdf .
For more information: State of New Jersey Office of Homeland Security and Preparedness, Role of Security Coordinators, undated, accessed January 14, 2020, https://static1.squarespace.com/static/54d79f88e4b0db3478a04405/t/5a4d52ee53450af96083504f/1515016942789/Role+of+Security+Coordinators.pdf .
2. Does the house of worship have a written security and emergency operations plan(s)?
The house of worship does not have a written security and/or emergency operations plan(s). All security and emergency response procedures are communicated verbally and may be performed on an ad hoc basis.
The house of worship has some written documentation that partially addresses safety and emergency operations policies, programs, and/or procedures (e.g., a checklist), but a comprehensive plan(s) does not exist.
The house of worship has a written security and emergency operations plan(s). The security plan or portion of the plan addresses some, but not all, of the following areas: identification of threats; security force; access control; monitoring and surveillance; suspicious activity recognition and reporting; financial and cybersecurity; hiring procedures and background checks; daycare, school, and youth security (where applicable); special event and offsite excursion safety and security; and opening, locking, and closing procedures for the facility. The emergency operations plan or portion of the plan addresses some, but not all, of the following areas: threat and hazard analysis; goals and objectives; procedures for medical emergencies, bomb threats, and active shooter incidents; communication, crisis management, and media procedures; evacuation, shelter-in-place, lockout, and lockdown procedures; reunification of children and parents or guardians; and recovery and resumption of operations. The plan(s) addresses maintaining point-of-contact lists, training and exercises, and plan maintenance (e.g., review and revision).
The house of worship has a comprehensive security and emergency operations plan(s) that addresses all of the areas listed previously. However, leadership has not officially approved the plan(s), and the house of worship has not coordinated the plan(s) with first responders (e.g., law enforcement, fire response, and emergency medical services personnel), emergency management officials, and other community partners. If the security and emergency operations plans are combined, facility personnel have explored the option of separating the combined plan into two separate plans.
The house of worship has a comprehensive security and emergency operations plan(s) that addresses all of the areas listed previously. If the security and emergency operations plans are combined, facility personnel are exploring the option of or are in the process of separating the combined plan into two separate plans. Leadership has approved the plan(s) and has coordinated the plan(s) with first responders, emergency management officials, and other community partners.
Very Low
Low
Medium
High
Very High
Establish a collaborative planning team with representatives from the house of worship, as well as first responders and others who may have roles and responsibilities in security and emergency management before, during, and after an incident at the facility. Define roles and responsibilities, and determine a regular schedule of meetings for the planning process. Before developing the plan, identify, assess, and prioritize potential threats and hazards; and determine goals and objectives. Write, review, and approve the plan.
Review and expand the existing plan(s). Format the plan in a way that makes it easy for users to find the information they need and that is compatible with relevant local and state plans. Check the plan for compliance with applicable laws and regulations.
Update the plan(s) to address all of the areas listed above. If the security and emergency operations plans are combined, explore the option of separating security topics from emergency operations topics into two separate plans.
Present the plan(s) to the appropriate leadership and obtain official approval of the plan(s). Coordinate the plan(s) with first responders, emergency management officials, and other community partners. Continue efforts to develop separate plans for security and for emergency operations.
Regularly train, exercise, evaluate, review, and update the plan(s). Effective plans should be reviewed and updated annually based on exercise results, research, evolving threats, and lessons learned from real-world incidents.
Background | Reference | More Information
Background: A security plan provides direction on a facility’s security management and policies. It is a critical component of an effective security program. An emergency operations plan (also known as an emergency plan, emergency action plan, emergency response plan, and crisis plan) addresses threats and hazards to the house of worship and addresses safety needs before, during, and after an incident, which can be aligned with the national approach to preparedness efforts. Comprehensive Preparedness Guide (CPG) 101 is designed to help both novice and experienced planners navigate the planning process, by providing information and instruction on the fundamentals of planning and their application. For more information about CPG 101, visit the Federal Emergency Management Agency’s (FEMA’s) CPG 101 webpage .
Reference: (1) ASIS Houses of Worship Committee, Recommended Best Practices for Securing Houses of Worship Around the World, 2017, accessed January 13, 2020, https://www.asisonline.org/globalassets/get-involved/councils/documents/best-practices-securing-houses-of-worship.pdf (2) U.S. Department of Homeland Security (DHS), U.S. Department of Education (ED), U.S. Department of Justice (DOJ), Federal Bureau of Investigation (FBI), and U.S. Department of Health and Human Services (HHS), Guide for Developing High-Quality Emergency Operations Plans for Houses of Worship, June 2013, accessed January 13, 2020, https://www.fema.gov/node/guide-developing-high-quality-emergency-operations-plans-houses-worship .
For more information:
National Criminal Justice Reference Service, Safeguarding Houses of Worship toolkit, undated, accessed January 13, 2020, https://www.justnet.org/resources/Houses_of_Worship.html .
Anti-Defamation League (ADL), ADL Guide to Protecting Your Religious or Communal Institution, 2017, accessed January 14, 2020, https://cdn.fedweb.org/fed-2/2/ADL-Guide-to-Protecting-Your-Religious-Institution.pdf .
National Disaster Interfaiths Network, “Disaster Tip Sheets for U.S. Religious Leaders,” 2007, https://n-din.org/disaster-tips-sheets-for-u-s-religious-leaders .
City of Fairfax Office of Emergency Management, Model Emergency Operations Plan for Houses of Worship, 2014, accessed January 13, 2020, http://www.fairfaxva.gov/Home/ShowDocument?id=7314 .
DHS Cybersecurity and Infrastructure Agency (CISA), “Active Shooter Emergency Action Plan Guide and Template,” undated, accessed March 3, 2020, https://www.cisa.gov/publication/active-shooter-emergency-action-plan-guide .
DHS CISA, “Active Shooter Emergency Action Plan Video,” undated, accessed March 9, 2020, https://www.cisa.gov/active-shooter-emergency-action-plan-video .
United Jewish Communities, Emergency Planning: Disaster and Crisis Response Systems for Jewish Organizations, 2003-2005, accessed January 15, 2020, http://www.jcrcny.org/wp-content/uploads/2013/10/EmergencyManual.2.0.pdf .
3. Are employees and volunteers trained on the security and emergency operations plan(s)?Skip this question if the house of worship does not have a written security and emergency operations plan(s).
The house of worship does not train employees and volunteers on the security and emergency operations plan(s).
The house of worship provides some information or training to some employees and volunteers, but not to everyone involved with implementing the plan(s). The house of worship may provide training less often than annually.
The house of worship provides at least annual training to everyone involved with implementing the plan(s) but no recurring training throughout a calendar year. Although all parties have completed training on the plan, they may not have easy access to references that will prompt them to execute their responsibilities effectively when an incident occurs (e.g., quick reference guides, badge-sized reference cards).
The house of worship provides annual training to everyone involved with implementing the plan(s), as well as some type of refresher training. Refresher training may be sporadic, for example, only after a threat or incident. The house of worship provides concise and user-friendly reference guides on the plan(s), policies, and procedures.
The house of worship provides comprehensive training to everyone involved with implementing the plan(s) annually, as well as regular refresher training throughout the year (e.g., quarterly). The house of worship provides concise and user-friendly reference guides on the plan(s), policies, and procedures.
Very Low
Low
Medium
High
Very High
Provide training to everyone involved in the plan(s) so they understand their roles and responsibilities before, during, and after an incident.
At least once a year, hold a meeting to educate all involved parties on the plan. Show involved parties where evacuation sites, reunification areas, media areas, and triage areas will be located. Provide training on the skills necessary for individuals to fulfill their roles. Persons will be assigned specific roles in the plan that will require special skills, such as first aid and the provision of personal assistance services for children, the elderly, individuals with disabilities, and others with access and functional needs.
Provide follow-up training to everyone involved in the plan(s) annually and throughout a calendar year. Provide appropriate and relevant literature on the plan(s), policies, and procedures (e.g., quick reference guides, badge-sized reference cards).
Provide regular refresher training throughout the year (e.g., once a quarter) to everyone involved in the plan(s).
Regularly assess the training program for the security and emergency plan(s) to identify and remedy any gaps or shortfalls.
Background | Reference | More Information
Background: Skip this question if the house of worship does not have a written security and emergency operations plan(s). Training may include presentations developed within the house or worship or affiliated religious organization. Often, guest speakers or presentations from security subject matter experts are beneficial. Providing checklists, flip cards, or other routinely updated and refreshed reference material aids learning comprehension and retention.
Reference: DHS, ED, DOJ, FBI, and HHS, Guide for Developing High-Quality Emergency Operations Plans for Houses of Worship, June 2013, accessed January 13, 2020, https://www.fema.gov/node/guide-developing-high-quality-emergency-operations-plans-houses-worship .
For more information:
DHS, “Training,” undated, accessed January 22, 2020, https://www.ready.gov/business/implementation/training .
FEMA, “National Incident Management System,” August 10, 2015, accessed January 22, 2020, https://training.fema.gov/nims/ .
FEMA, “You Are the Help Until Help Arrives,” undated, accessed January 22, 2020, https://community.fema.gov/until-help-arrives .
DHS, “Stop the Bleed,” November 25, 2019, accessed January 22, 2020, https://www.dhs.gov/stopthebleed .
DHS CISA, “Active Shooter Preparedness,” undated, accessed January 20, 2020, https://www.cisa.gov/active-shooter-preparedness .
FEMA Emergency Management Institute, “IS-360: Preparing for Mass Casualty Incidents: A Guide for Schools, Higher Education, and Houses of Worship,” September 12, 2019, accessed January 22, 2020, https://training.fema.gov/is/courseoverview.aspx?code=IS-360
FEMA Emergency Management Institute, “IS-906 Workplace Security Awareness Training,” September 12, 2019, accessed January 22, 2020, https://training.fema.gov/emiweb/is/courseoverview.aspx?code=IS-906 .
4. Are congregants trained on elements of the security and emergency operations plan(s)? Skip this question if the house of worship does not have a written security and emergency operations plan(s).
The house of worship does not train congregants on elements of the plan(s) (e.g., evacuation routes, responding to an active-shooter incident).
The house of worship provides some training to congregants at least once a year. Training may be limited to the appropriate emergency response actions for primary locations only (e.g., main gathering area, fellowship hall, classrooms).
The house of worship provides comprehensive training to congregants annually and throughout the year. Congregants are trained on appropriate emergency response actions regardless of their location in the house of worship (e.g., including hallways, bathrooms).
Very Low
Medium
Very High
Provide at least annual training on the security and emergency operations plan(s) for all congregants.
Evaluate the need to provide more frequent training to congregants. Evaluate the completeness of training and provide additional information as necessary. Train congregants on appropriate emergency response actions regardless of their location in the house of worship. Ensure congregants are trained to cooperate and not to interfere with first responders.
Regularly assess the training program to identify and remedy any gaps or shortfalls. Document the delivery of training.
Background | Reference | More Information
Background: Skip this question if the house of worship does not have a written security and emergency operations plan(s). The more congregants are trained on the plan, the more effectively they will be able to act before, during, and after an incident to lessen the impact on life and property. During an incident, the natural human reaction, even for those who are highly trained, is to be startled, feel fear and anxiety, and even experience initial disbelief and denial. Loud and unfamiliar noise (e.g., from alarms, gunfire, and/or explosions) and people shouting and screaming should be expected. Training provides the means to regain composure, recall at least some of what has been learned, and commit to the appropriate emergency response actions. Repetition in training shortens the time it takes to orient, observe, and respond appropriately.
Reference: DHS, ED, DOJ, FBI, and HHS, Guide for Developing High-Quality Emergency Operations Plans for Houses of Worship, June 2013, accessed January 13, 2020, https://www.fema.gov/node/guide-developing-high-quality-emergency-operations-plans-houses-worship .
For more information: United Jewish Communities, Emergency Planning: Disaster and Crisis Response Systems for Jewish Organizations, 2003-2005, accessed January 15, 2020, http://www.jcrcny.org/wp-content/uploads/2013/10/EmergencyManual.2.0.pdf .
5. Has the house of worship coordinated the security and emergency operations plan(s) with first responders?Skip this question if the house of worship does not have a written security and emergency operations plan(s).
The house of worship has not coordinated with first responders regarding emergency preparedness.
The house of worship has provided the security and emergency operations plan(s) to first responders but has not solicited or implemented their input on the plan. The house of worship has not shared critical information about the building or facilities (e.g., floor plans, location of critical assets or areas, and notification and contact lists). Emergency responders have not toured the house of worship in order to familiarize themselves with the layout of the building and grounds.
The house of worship has coordinated the security and emergency operations plan(s) with first responders and has shared critical information about the building and facilities. Although emergency responders have toured the facility, the house of worship has not initiated activities to bring them onsite regularly.
The house of worship has coordinated the security and emergency operations plan(s) with first responders and has provided critical information about the building and facilities. The house of worship has initiated activities to regularly bring emergency responders onsite (e.g., with training activities or traffic control). The house of worship has not created crisis response kits for first responders to use in an emergency.
The house of worship has coordinated the security and emergency operations plan(s) with first responders and has shared critical information about the building and facilities. Emergency responders come onsite regularly (e.g., for training activities or traffic control). The house of worship has created crisis response kits for first responders to use in an emergency. Local law enforcement may not have conducted a security assessment of the facility.
Very Low
Low
Medium
High
Very High
Provide the security and emergency operations plan(s) to local law enforcement and other first responders as necessary.
Review the security and emergency operations plan(s) with first responders, and make changes as necessary. Share critical building and facilities information with first responders. Invite law enforcement, fire response, and emergency medical services personnel who have a role in the plan to tour the house of worship.
Offer the facility as a training and exercise location for law enforcement. Ask for assistance with traffic control if necessary. Consider hiring off-duty officers as part of the security program. Notify law enforcement of special events.
Create a crisis response kit that contains the information and equipment needed for effective management of a major critical incident. The kit may include the following information: (1) camera locations; (2) up-to-date floor plans; (3) list of key personnel and phone numbers (senior staff, facilities, security, etc.); (4) master key(s); (5) building/security force radio (if applicable); and (6) evacuation routes and assembly area locations. Due to the sensitive nature of the contents of the kit, take measures to safeguard it appropriately. Designate more than one individual to meet and assist first responders and provide them with the crisis response kit in the event of an incident.
Continue coordination with first responders. Coordinate with law enforcement to conduct security surveys, risk assessments, and threat assessments of the facility and neighboring areas. Review the contents of the crisis response kit quarterly to ensure it remains up to date. Coordinate with first responders regarding the contents of the kit. Test the radio(s) on a monthly basis, and keep batteries charged. Use the crisis kit during a drill.
Background | Reference | More Information
Background: Skip this question if the house of worship does not have a written security and emergency operations plan(s). A crisis response kit provides easy access to relevant information for first responders to enhance emergency response. Crisis kit contents usually include floor plans, point-of-contact lists, evacuation routes, and assembly area locations, among other components.
Reference: (1) ISC, Planning and Response to an Active Shooter: An Interagency Security Committee Policy and Best Practices Guide, November 2015, accessed January 15, 2020, https://www.cisa.gov/sites/default/files/publications/isc-planning-response-active-shooter-guide-non-fouo-nov-2015-508.pdf (2) DHS, ED, DOJ, FBI, and HHS, Guide for Developing High-Quality Emergency Operations Plans for Houses of Worship, June 2013, accessed January 13, 2020, https://www.fema.gov/node/guide-developing-high-quality-emergency-operations-plans-houses-worship (3) ASIS Houses of Worship Committee, Recommended Best Practices for Securing Houses of Worship Around the World, 2017, accessed January 13, 2020, https://www.asisonline.org/globalassets/get-involved/councils/documents/best-practices-securing-houses-of-worship.pdf .
For more information: Lockyer, Bill, and Delaine Eastin, Partnering for Safe Schools, undated, accessed January 22, 2020, https://www.cde.ca.gov/ls/ss/cp/documents/crisisrespbox.pdf .
6. Does the facility exercise the security and emergency operations plan(s)?Skip this question if the house of worship does not have a written security and emergency operations plan(s).
The house of worship does not exercise the plan(s) on an annual basis.
The house of worship exercises the plan(s) at least once annually. Exercises are tabletop or drills and involve relevant facility personnel. They do not include community partners (e.g., first responders, local emergency management staff).
The house of worship exercises the plan(s) at least once annually. Exercises are tabletop or drills and include community partners (e.g., first responders, local emergency management staff). The facility does not develop an after-action report for each exercise.
The house of worship exercises the plan(s) at least once annually. Exercises are functional and include community partners (e.g., first responders, local emergency management staff). The facility develops an after-action report for each exercise and uses it to improve plans and procedures.
The house of worship exercises the plan(s) at least once annually. Exercises are simultaneous functional exercises and include community partners (e.g., first responders, local emergency management staff). The facility develops an after-action report for each exercise and uses it to improve plans and procedures.
Very Low
Low
Medium
High
Very High
Test the plan at least once annually through either a tabletop exercise or a drill. Tabletop exercises are small group discussions that walk through a scenario and the courses of action a facility will need to take before, during, and after an incident. During drills, personnel use the actual facility grounds and buildings to practice responding to a scenario.
Invite community partners to participate in exercises that test the plan(s).
Document the results of all exercises, areas for improvement, and lessons learned in after-action reports. Conduct a functional exercise where events are projected through a scenario with updates that drive activity. A functional exercise is conducted in a realistic, real-time environment; however, movement of personnel and equipment is usually simulated. One aspect of a functional exercise is that participants use their real-world communication. Sometimes for that reason these are referred to as command post exercisers.
Conduct simultaneous functional exercises to validate and evaluate multiple capabilities and functions.
After conducting multiple simultaneous functional exercises, explore the option of holding a full-scale exercise as a capstone that involves multiple agencies, organizations, jurisdictions, and even congregants. Full-scale exercises are the most complex and resource-intensive type of exercise. They often include many players operating under a cooperative system such as the Incident Command System.
Background | Reference | More Information
Background: Skip this question if the house of worship does not have a written security and emergency operations plan(s). An exercise is a way to train for, assess, practice, and improve performance in a risk-free environment. Exercises can be used for testing and validating policies, plans, procedures, training, equipment, and agreements; clarifying and training personnel in roles and responsibilities; improving coordination and communications; and identifying gaps and opportunities for improvement. If a house of worship has a combined security and emergency operations plan, it may exercise the emergency operations portion of the plan only.
Reference: (1) DHS, Homeland Security Exercise and Evaluation Program (HSEEP), 2020, accessed March 11, 2020, https://preptoolkit.fema.gov/documents/1269813/1269861/HSEEP_Revision_Apr13_Final.pdf/65bc7843-1d10-47b7-bc0d-45118a4d21da 2) DHS, ED, DOJ, FBI, and HHS, Guide for Developing High-Quality Emergency Operations Plans for Houses of Worship, June 2013, accessed January 13, 2020, https://www.fema.gov/node/guide-developing-high-quality-emergency-operations-plans-houses-worship .
For more information:
DHS, “Exercises,” undated, accessed January 22, 2020, https://www.ready.gov/business/testing/exercises .
FEMA, “HSEEP Policy and Guidance,” undated, accessed January 22, 2020, https://preptoolkit.fema.gov/web/hseep-resources .
FEMA, “National Incident Management System,” August 10, 2015, accessed January 22, 2020, https://training.fema.gov/nims/ .
FEMA Emergency Management Institute, “IS-120.C: An Introduction to Exercises,” September 12, 2019, accessed March 9, 2020, https://training.fema.gov/is/courseoverview.aspx?code=IS-120.c .
United Jewish Communities, Emergency Planning: Disaster and Crisis Response Systems for Jewish Organizations, 2003-2005, accessed January 15, 2020, http://www.jcrcny.org/wp-content/uploads/2013/10/EmergencyManual.2.0.pdf .
7. Does the facility have lockdown, lockout, and shelter-in-place procedures?
The facility does not have lockdown, lockout, and shelter-in-place procedures.
The facility has some lockdown, lockout, and shelter-in-place procedures, but procedures may lack sufficient detail. Information concerning lockdown, lockout, and shelter-in-place procedures and locations has not been communicated to congregants.
The facility has comprehensive lockdown, lockout, and shelter-in-place procedures. Lockdown, lockout, and shelter-in-place procedures and locations have been communicated to congregants, but key information is not posted throughout the building.
The facility has comprehensive lockdown, lockout, and shelter-in-place procedures. Lockdown, lockout, and shelter-in-place procedures and locations have been communicated to congregants, and key information is posted throughout the building. However, the facility does not have a regular cycle for reviewing and updating the lockdown, lockout, and shelter-in-place procedures. The facility has not evaluated the need for any “safe rooms” for protection against extreme threats or hazards (e.g., tornado, hurricane, or active shooter). “Safe rooms” are designated spaces where people can retreat to in the event of an immediate threat of danger.
The facility has comprehensive lockdown, lockout, and shelter-in-place procedures. Lockdown, lockout, and shelter-in-place procedures and locations have been communicated to congregants, and key information is posted throughout the building. The facility regularly reviews the lockdown, lockout, and shelter-in-place procedures and implements updates as needed. The facility has “safe rooms” to provide immediate life-safety protection against extreme threats or hazards, or has evaluated the need for these spaces.
Very Low
Low
Medium
High
Very High
Develop lockdown procedures to ensure all persons are secured quickly in rooms away from immediate danger during incidents that pose an immediate threat of violence in the house of worship. Develop lockout procedures to ensure all persons on the premises return to and are secured within the building when conditions outside the house of worship are unsafe. Develop shelter-in-place procedures for situations when persons are required to remain in the facility, perhaps for an extended period, because it is safer inside the building or a room than outside.
Review and expand existing lockdown, lockout, and shelter-in-place procedures. Ensure information concerning lockdown, lockout, and shelter-in-place procedures and locations is communicated to congregants, including individuals with disabilities or others with access and functional needs.
Post key information (e.g., lockout procedures, lockdown and shelter-in-place locations) throughout the facility to provide congregants with easy access to this information.
Regularly assess the facility’s lockdown, lockout, and shelter-in-place procedures, and update them as needed. Use after-action reports for each exercise of the security and emergency operations plan(s) to improve these procedures. Evaluate the need for and integration of “safe rooms” in order to provide immediate life-safety protection against extreme threats or hazards. A designated safe room may be equipped with a duress button, telephone, and reinforced doors.
Research, evaluate, and implement enhancements to lockdown, lockout, and shelter-in-place procedures based on collaborative relationships and new or updated resources.
Background | Reference | More Information
Background: Lockdown procedures are actions the house of worship will execute to secure individuals inside the building during incidents that pose an immediate threat of violence within the facility, when movement within the building is unsafe. The primary objective of a lockdown is to ensure all persons are secured quickly in rooms away from immediate danger. Lockout procedures are actions the house of worship will execute to secure individuals inside the building during incidents that pose an immediate threat of violence outside the facility, when exiting the building is unsafe. During a lockout, movement within the house of worship may be permissible, but all exterior doors remain locked and individuals should avoid exposed areas (e.g., glass doors, windows). Windows may need to be covered. Shelter-in-place procedures are actions the house of worship will execute when individuals are required to remain indoors, perhaps for an extended period, because it is safer inside the building or a room than outside. Depending on the threat or hazard, persons may be required to move to rooms that can be sealed (such as in the event of a chemical or biological hazard) or without windows, or to a weather shelter (such as in the event of a tornado).
Reference: DHS, ED, DOJ, FBI, and HHS, Guide for Developing High-Quality Emergency Operations Plans for Houses of Worship, June 2013, accessed January 13, 2020, https://www.fema.gov/node/guide-developing-high-quality-emergency-operations-plans-houses-worship .
For more information:
8. Does the house of worship have mass notification capabilities?
The house of worship does not have a way to alert the entire facility of imminent danger. The house of worship does not monitor external sources for important emergency information (e.g., weather alerts, public safety announcements from local first responders, and national public warnings from the Emergency Alert System).
The house of worship monitors external sources for important emergency information and has a public address system for onsite emergency communications but lacks ways to communicate warnings to individuals who need other accommodations such as visual signals. The house of worship does not periodically test the system.
The house of worship monitors external sources for important emergency information and has both audio and visual mass notification systems for onsite emergency communications. They are unique and separate from communications channels used for routine announcements. The house of worship periodically tests the system.
Very Low
Medium
High
With consideration of the size of the facility and the congregation, install a public address system to provide a means of mass communication and to provide warning and alert information, along with actions to take before and after an incident. Monitor external sources for important emergency information (e.g., weather alerts, public safety announcements from local first responders, and national public warnings from the Emergency Alert System).
Explore options to communicate warnings more effectively beyond only audible alerts, such as strobe lights. Test the emergency mass communication system periodically to ensure its functionality and so employees, volunteers, and congregants are familiar with its use.
Verify that employees, volunteers, and congregants know how to respond appropriately to alerts onsite. Ensure that notification protocols are readily available and understood by those who may be responsible for sending out or broadcasting an announcement.
Background | Reference | More Information
Background: (1) The size of the house of worship and the congregation gathering within may negate the need for a public address system. (2) Mass notification systems available today offer capabilities far beyond those of a traditional public address system. The goal of these systems is to broadcast information rapidly to facilitate appropriate response actions. New technologies have created the ability to reach people using multiple methods such as public announcement, email, text message, desktop notification, etc.
Reference: DHS, ED, DOJ, FBI, and HHS, Guide for Developing High-Quality Emergency Operations Plans for Houses of Worship, June 2013, accessed January 13, 2020, https://www.fema.gov/node/guide-developing-high-quality-emergency-operations-plans-houses-worship .
For more information: United Jewish Communities, Emergency Planning: Disaster and Crisis Response Systems for Jewish Organizations, 2003-2005, accessed January 15, 2020, http://www.jcrcny.org/wp-content/uploads/2013/10/EmergencyManual.2.0.pdf .
9. Does the house of worship have crisis communications plans and procedures?
The house of worship does not have any crisis communications plans or procedures.
The house of worship has crisis communications plans and procedures that address emergency contacts, chain of command, and distribution of mass notifications, but they may lack some level of detail. A spokesperson for the congregation may not have been designated or may have been designated without relevant training and/or resources.
The house of worship has comprehensive crisis communications plans and procedures that address emergency contacts, chain of command, distribution of mass notifications, coordination with local government officials (e.g., public information officers), and support for affected congregants who prefer not to engage with the media. A spokesperson for the congregation has been designated and adequately trained.
Very Low
Medium
Very High
Develop a plan for crisis communications. Include a list of emergency contacts such as law enforcement, religious leaders, relevant volunteers, security committee members, and others. Establish emergency communication protocols to clearly designate the chain of command as to who should be contacted in the event of an emergency or major incident. Coordinate communication procedures that include mass notification texts, social media posts, and emails.
Evaluate crisis communications plans and procedures for completeness. Include procedures for coordinating with local government, crisis communications, and external affairs officials (e.g., public information officers). Ensure plans address how affected congregants will be supported if they prefer not to engage with the media. This may include strategies for keeping the media separate from congregants while the emergency is ongoing and supporting congregants who may experience unwanted media attention at their homes. Designate a spokesperson for the congregation to gather the facts and issue statements. Provide the spokesperson with relevant training and/or resources. Stipulate that other congregants refrain from speaking to the media.
Regularly review crisis communications plans and procedures to identify and remedy any gaps or shortfalls. Use after-action reports from operations plan(s) exercises to improve these plans and procedures.
Background | Reference | More Information
Background: Crisis communications plan and procedures facilitate prompt response and outreach during and following an emergency, enabling a house of worship to reach various audiences with information pertinent to their interests and needs. House of worship leadership must be prepared to communicate effectively with government officials, the general public, and the media to deliver information that informs without frightening of provoking unnecessary alarm when emergencies occur.
Reference: (1) ASIS Houses of Worship Committee, Recommended Best Practices for Securing Houses of Worship Around the World, 2017, accessed January 13, 2020, https://www.asisonline.org/globalassets/get-involved/councils/documents/best-practices-securing-houses-of-worship.pdf (2) DHS, “Crisis Communications Plan,” January 21, 2016, accessed January 23, 2020, https://www.ready.gov/business/implementation/crisis .
For more information:
Substance Abuse and Mental Health Services Administration (SAMHSA), Communicating in a Crisis: Risk Communication Guidelines for Public Officials, 2019, accessed January 23, 2020, https://store.samhsa.gov/product/communicating-crisis-risk-communication-guidelines-public-officials/pep19-01-01-005 .
SAMHSA, “Communications,” May 28, 2019, accessed January 23, 2020, https://www.samhsa.gov/dtac/dbhis-collections/disaster-response-template-toolkit/communications .
SAMHSA, “Disaster Response Templates: Messaging Through Other Media,” October 21, 2019, accessed January 23, 2020, https://www.samhsa.gov/dtac/dbhis-collections/disaster-response-template-toolkit/messaging-through-other-media .
United Jewish Communities, Emergency Planning: Disaster and Crisis Response Systems for Jewish Organizations, 2003-2005, accessed January 15, 2020, http://www.jcrcny.org/wp-content/uploads/2013/10/EmergencyManual.2.0.pdf .
10. Does the house of worship receive threat information, security-related bulletins, advisories, or alerts from an external source?
The house of worship does not receive any threat information, security-related bulletins, advisories, or alerts from an external source.
The house of worship monitors open-source intelligence information related to threats against houses of worship, but has not joined any trusted communities of peers and partners exchanging issues, ideas, intelligence, and other information across private networks.
The house of worship monitors open-source intelligence information related to threats against houses of worship and is part of at least one vetted, private information-sharing network such as the Faith-Based Information Sharing & Analysis Organization (FB-ISAO). In addition, the house of worship has contacted the local police department regarding access to crime report information, and receives such information if it is available. However, the house of worship does not network locally to gain intelligence information.
Very Low
Medium
High
Monitor open-source intelligence information related to threats against houses of worship for criminal, cybercrime, and terrorist activities.
Request access to a vetted, private information-sharing network such as FB-ISAO. Contact the local police department regarding access to crime report information.
Establish a networking group with other religious leaders in the community to share best practices and intelligence information regarding safety and security. Reach out to the local Protective Security Advisor for assistance with coordinating this networking group.
Reference | More Information
Reference: ASIS Houses of Worship Committee, Recommended Best Practices for Securing Houses of Worship Around the World, 2017, accessed January 13, 2020, https://www.asisonline.org/globalassets/get-involved/councils/documents/best-practices-securing-houses-of-worship.pdf .
For more information:
DHS, “Protective Security Advisors,” undated, accessed February 12, 2020, https://www.cisa.gov/protective-security-advisors .
FB-ISAO, “Services,” 2020, accessed January 22, 2020, https://faithbased-isao.org .
11. Does the house of worship participate in any external security or emergency preparedness working groups?
The house of worship does not participate in any external security or emergency preparedness working groups.
Facility personnel are connected with a federal, state, local, or private sector security or emergency preparedness working group. They may not regularly attend meetings, but they receive information.
Facility personnel are connected with a security or emergency preparedness working group. They regularly attend meetings and receive information.
Facility personnel are connected with a security or emergency preparedness working group. They regularly attend meetings and receive information. They may participate in special events or activities that the working group sponsors. They may have leadership positions in the group.
Facility personnel are connected with two or more security and/or emergency preparedness working groups. They regularly attend meetings and receive information. They may participate in special events or activities that a working group sponsors. They may have leadership positions in a group.
Very Low
Low
Medium
High
Very High
Reach out to other religious leaders in the community, local law enforcement, and/or federal, state, or local homeland security or emergency management officials to identify opportunities to participate in security or emergency preparedness working groups.
Prioritize attendance at security or emergency preparedness working group meetings.
Seek out more ways for facility personnel to benefit from participating in the security or emergency preparedness working group, for example, by getting involving in special events or activities or by taking leadership positions in the group.
Join other security or emergency preparedness working groups to increase engagement and gain additional resources in these areas.
Assess the need to engage with additional security or emergency preparedness working groups.
Background | Reference | More Information
Background: A security or emergency preparedness working group (also called work groups, task forces, and a variety of other names) are groups in which practitioners, often representing various disciplines, come together to contribute their time, expertise, passion, and experiences to help develop and implement strategies to improve overall security and/or emergency preparedness among houses of worship. This type of working group would be external to the house of worship. It may be through the affiliated religious organization or an interfaith collaboration.
Reference: (1) ASIS Houses of Worship Committee, Recommended Best Practices for Securing Houses of Worship Around the World, 2017, accessed January 13, 2020, https://www.asisonline.org/globalassets/get-involved/councils/documents/best-practices-securing-houses-of-worship.pdf (2) DHS, NIPP 2013: Partnering for Critical Infrastructure Security and Resilience, 2013, accessed March 11, 2020, https://www.cisa.gov/sites/default/files/publications/national-infrastructure-protection-plan-2013-508.pdf .
For more information:
Short list of sample working groups (not specifically endorsed by DHS). *FB-ISAO, “Working Groups,” 2020, accessed January 22, 2020, https://faithbased-isao.org/membership/working-groups .
*ADL, Homepage, 2020, accessed January 22, 2020, https://www.adl.org .
12. Does the house of worship conduct background checks on employees and volunteers?
The house of worship does not conduct any background checks on employees or volunteers.
The house of worship procures background checks on select individuals only.
The house of worship procures background checks on all employees and volunteers. However, the type of background checks conducted may provide minimal information, creating a false sense of security.
The house of worship procures thorough background checks on all employees and volunteers. Unique detailed checks are conducted according to an individual’s position (e.g., credit checks for anyone handling money). However, background checks are conducted only initially (e.g., upon hire or when volunteer services began) and not on a recurring basis.
The house of worship procures thorough background checks on all employees and volunteers. Background checks are conducted initially and on a recurring basis.
Very Low
Low
Medium
High
Very High
After seeking legal counsel, procure background checks for employees and volunteers, especially for individuals working with children. Establish a standard waiting period when a new person arrives before allowing them to serve in various capacities, such as childcare. Keep personnel files on all staff and volunteers.
Procure background checks on all employees and volunteers.
Procure thorough background checks that include criminal history and prior employment. Require individuals who handle money to consent to a credit and background check. Run a license check on individuals who drive vehicles.
Procure recurring background checks for all employees and volunteers on a regular basis.
Audit personnel files regularly to verify background checks have been completed and recurring checks are completed as scheduled.
Background | Reference | More Information
Background: Various types of background checks and background check services are readily available, and some background check companies cater specifically to religious organizations. Background checks commonly include Social Security number traces and address verification as well as searches of misdemeanor and felony criminal records at county, state, and national levels; sex offender registries; and civil records. It is vital that houses of worship intending to screen job applicants follow legal requirements associated with conducting background checks. Seek legal counsel before proceeding with this action.
Reference: ASIS Houses of Worship Committee, Recommended Best Practices for Securing Houses of Worship Around the World, 2017, accessed January 13, 2020, https://www.asisonline.org/globalassets/get-involved/councils/documents/best-practices-securing-houses-of-worship.pdf .
For more information:
ASIS International, Auditing Management Systems: Risk, Resilience, Security, and Continuity—Guidance for Application (ANSI/ASIS SPC.2-2014), Alexandria, VA: ASIS International, 2014.
Walsh, T.J., and R.J. Healy, Protection of Assets: Investigation, Michael E. Knoke, Ed., Alexandria, VA: ASIS International, 2011.
13. Does the facility provide security information to employees, volunteers, and congregants?
The house of worship does not provide security information to employees, volunteers, and congregants.
The house of worship provides information about specific security incidents to employees and volunteers. The facility does not provide security awareness information.
The house of worship provides information about specific security incidents as well as security awareness information to employees and volunteers. However, security awareness information is limited in scope and availability (e.g., provided occasionally).
The house of worship provides information about specific security incidents as well as security awareness information to employees and volunteers on a recurring basis. Security awareness information is detailed and comprehensive, but distribution is limited (e.g., emails only). The house of worship also encourages congregants to take personal responsibility for strengthening the community’s security culture, for example, with messages in printed materials already regularly distributed.
The house of worship provides information about specific security incidents as well as security awareness information to employees and volunteers on a recurring basis. Congregants also receive security awareness information. Security awareness information is detailed, comprehensive, and communicated through a variety of formats (e.g., emails, posters, announcements, regular meetings).
Very Low
Low
Medium
High
Very High
Provide information about specific security incidents to employees and volunteers.
Provide security awareness information in addition to information about specific security incidents.
Provide more detailed and comprehensive security awareness information. Disseminate information regularly.
Disseminate security information through a variety of formats (e.g., emails, posters, announcements, regular meetings). Explore ways to expand and increase messaging to congregants regarding steps they can individually take to strengthen the facility’s security culture.
Continue to provide security information to employees, volunteers, and congregants. Solicit feedback regarding the usefulness of the type of information provided.
Background | Reference | More Information
Background: SecuritySecurity information refers to information about specific security incidents as well a security awareness information such a potential threats and actions individuals can take to minimize risks.
Reference: Walsh, T.J., and R.J. Healy, Protection of Assets: Crisis Management, Michael E. Knoke, Ed., Alexandria, VA: ASIS International, 2011.
For more information:
DHS, “If You See Something, Say Something®,” undated, accessed January 22, 2020, https://www.dhs.gov/see-something-say-something .
DHS, Security of Soft Targets and Crowded Places–Resource Guide, April 2019, accessed January 15, 2020, https://www.cisa.gov/sites/default/files/publications/19_0424_cisa_soft-targets-and-crowded-places-resource-guide.pdf .
DOJ’s Community Relations Service, https://www.justice.gov/crs , and its program, Protecting Places of Worship, https://www.justice.gov/file/1058496/download .
DHS, Online Suspicious Activity Reporting (SAR) Training for Law Enforcement and Hometown Security Partners, undated, accessed January 22, 2020, https://www.dhs.gov/nationwide-sar-initiative-nsi/online-sar-training .
14. Does the facility have procedures for bomb threats and suspicious items?
The facility does not have procedures for bomb threats or suspicious items.
The facility has some written documentation that addresses bomb threats and suspicious items, but detailed, comprehensive procedures do not exist. Mail and shipping procedures ensure all mail and packages are delivered to a single location. External entities cannot deliver mail or packages directly to an individual.
The facility has bomb threat and suspicious item procedures, but some information may be lacking. The facility may not communicate these procedures to employees and volunteers. Congregants are aware that if they encounter a suspicious item, they should leave it alone and notify someone in authority.
The facility has a detailed bomb threat plan and comprehensive suspicious item procedures that define characteristics and outline appropriate response actions. The facility communicates these procedures to employees and volunteers but does not provide them any training. Congregants are aware that if they encounter a suspicious item, they should leave it alone and notify someone in authority.
Detailed guidelines provide the appropriate actions for responding to a bomb threat, and comprehensive procedures define common characteristics of suspicious items and outline appropriate response actions. The facility communicates these plans and procedures to employees and volunteers, and it provides them related training as appropriate. Congregants are aware that if they encounter a suspicious item, they should leave it alone and notify someone in authority.
Very Low
Low
Medium
High
Very High
Develop two checklists, one to help to help employees and volunteers to respond to a bomb threat and another to help personnel identify suspicious items left around or within the house or worship, or delivered to the facility. Establish procedures for regular delivery services and employees to ensure all mail and packages are delivered to a single location. Ensure external entities cannot deliver mail or packages directly to an individual.
Develop detailed guidelines for responding to a bomb threat and comprehensive procedures for suspicious items that define their common characteristics and outline appropriate response actions. Share these plans and procedures with employees and volunteers. Ensure congregants are aware that if they encounter a suspicious item, they should leave it alone and notify someone in authority.
Review the existing bomb threat and suspicious item procedures, and incorporate additional information as needed. Share the updated procedures with employees and volunteers.
Provide regular training on bomb threat and suspicious item procedures as appropriate.
Test bomb threat and suspicious item procedures. Review bomb threat and suspicious package procedures to identify and remedy any gaps or shortfalls. Based on the results of a risk assessment and if budgets allow, explore options for centralizing mail and package handling and processing operations at a location separate from the house of worship.
Background | Reference | More Information
Background: A suspicious item may contain dangerous materials. Suspicious items vary in size and shape, and can be boxes, envelopes, backpacks, bags, or other items, and they may be delivered to the house of worship or left unattended around or within the building. They may have powdery substances felt through or appearing on them; oily stains or discolorations on the exterior; strange odors; and/or excessive packaging material, like tape or string. The package may be lopsided or bulky, and it may emit ticking sounds or have protruding wires or exposed aluminum foil. Active shooters may use explosives or suspicious packages as a diversion or distraction.
Reference: (1) ASIS Houses of Worship Committee, Recommended Best Practices for Securing Houses of Worship, 2012, accessed January 14, 2020, http://sacramentointerfaith.org/wp-content/uploads/2015/06/ASIS-best-practices.pdf (2) DHS and ISC, Best Practices for Mail Screening and Handling Processes: A Guide for the Public and Private Sectors, 1st edition, September 27, 2012, accessed March 3, 2020, https://www.cisa.gov/sites/default/files/publications/isc-mail-handling-screening-nonfouo-sept-2012-508.pdf .
For more information:
DHS, “Nationwide SAR Initiative (NSI),” undated, accessed January 22, 2020, https://www.dhs.gov/nsi .
DHS CISA, “What To Do – Bomb Threat,” undated, accessed January 22, 2020, https://www.cisa.gov/what-to-do-bomb-threat .
DHS CISA, “Bomb Threat Training Video,” undated, accessed January 22, 2020, https://www.cisa.gov/what-to-do-bomb-threat .
DHS CISA, “Unattended vs. Suspicious Item Postcard and Poster,” undated, accessed March 3, 2020, https://www.cisa.gov/publication/unattended-vs-suspicious-item-postcard-and-poster .
DHS Office for Bombing Prevention, “AWR-335 — Response to Suspicious Behaviors and Items for Bombing Prevention (RSBI),” undated, accessed January 22, 2020, https://cdp.dhs.gov/obp .
DHS Office for Bombing Prevention, Bomb Threat Checklist, 2014, accessed March 3, 2020, https://www.cisa.gov/sites/default/files/publications/dhs-bomb-threat-checklist-2014-508.pdf .
DHS and DOJ, Bomb Threat Guidance, 2016, accessed March 3, 2020, https://www.cisa.gov/sites/default/files/publications/dhs-doj-bomb-threat-guidance-brochure-2016-508.pdf .
DOJ FBI, FBI Bomb Data Center, General Information Bulleting 2012-1: The Bomb Threat Challenge, undated, accessed January 14, 2020, http://cdpsdocs.state.co.us/safeschools/Resources/FBI/FBI-BombThreatChallenge-1.pdf .
Bureau of Alcohol, Tobacco, Firearms and Explosives, Threat Assessment Guide for Houses of Worship, 2004, accessed January 14, 2020, https://www.hsdl.org/?view&did=447823 .
ADL, ADL Guide to Protecting Your Religious or Communal Institution, 2017, accessed January 14, 2020, https://www.adl.org/sites/default/files/ADL-Guide-to-Protecting-Your-Religious-or-Communal-Institution-2016.pdf .
DHS and ISC, Best Practices for Safe Mail Handling, undated, accessed March 3, 2020, https://www.fbiic.gov/public/2010/nov/safe_Mail_Handling.pdf .
15. Does the house of worship have cash management controls?
The house of worship does not have established cash management controls. Any cash-handling policies and procedures are communicated verbally and may be performed on an ad hoc basis. If cash is stored onsite, it is not adequately secured in a safe. A lockable cash drawer may be in use.
Cash storage is adequately secured with a safe, or money is deposited immediately after collection. The house of worship has established cash-handling policies and procedures and financial safety protocols. However, dual custody or dual controls are not required for all cash-handling procures. Financial records may lack detail or be incomplete.
Cash storage is adequately secured or money is deposited immediately. The house of worship has established cash-handling policies and procedures and financial safety protocols. A two-party system is in place to ensure that no one person has sole access to contributions and other collections. Financial records are detailed and accurate. However, not all individuals with cash access have undergone a background check that includes a credit check.
Cash storage is highly secured or money is deposited immediately. The house of worship has established cash-handling policies and procedures and financial safety protocols. Financial records are detailed and accurate. Individuals with cash access have undergone a thorough background check that includes a credit check.
Cash storage is highly secured or money is deposited immediately. The house of worship has established cash-handling policies and procedures and financial safety protocols. Financial records are detailed and accurate. Individuals with cash access have undergone a thorough background check that includes a credit check, and they have signed a confidentiality agreement agreeing not to remove and/or release any financial data in any way.
Very Low
Low
Medium
High
Very High
Establish written policies and procedures that identify administrative controls and requirements to provide resource and expenditure safety, security, and accountability. Provide secure storage of contributions and other collections.
Keep detailed and accurate financial records. Implement requirements for multiple persons to handle money. Basic internal controls dictate that (1) at least two people (preferably unrelated) should be present when counting money and another individual may observe the process; (2) at least two people (preferably unrelated) should be required to open a safe or vault; and (3) if the safe or vault is opened using a combination, the combination should be split into segments and given to two or more people.
Screen individuals with access to contributions and other collections with a thorough background check that includes a credit check.
Require individuals with cash access to sign a confidentiality agreement stating that they will not copy, photograph, remove and/or release any financial data.
Conduct regular and reconciliations, internal reviews, and audits. Submit financial reconciliations to leaders for review regularly (e.g., monthly). Periodically conduct an unscheduled count or reconciliation of petty cash.
Reference | More Information
Reference: (1) ASIS Houses of Worship Committee, Recommended Best Practices for Securing Houses of Worship Around the World, 2017, accessed January 13, 2020, https://www.asisonline.org/globalassets/get-involved/councils/documents/best-practices-securing-houses-of-worship.pdf (2) ECCU, Handling Cash: A Common-Sense Approach to Securing Your Ministry’s Most Liquid Asset, undated, accessed January 14, 2020, /resources-tools/resources/houses-worship-self-assessment-tool-resources .
For more information:
State of New Jersey Office of Homeland Security and Preparedness, Facility Self-Assessment, January 2019, accessed January 14, 2020, https://static1.squarespace.com/static/54d79f88e4b0db3478a04405/t/5c3e22af898583ec9bab10ae/1547575983886/Facility+Self+Assessment+Tool+January+2019.pdf .
DHS, ED, DOJ, FBI, and HHS, Guide for Developing High-Quality Emergency Operations Plans for Houses of Worship, June 2013, accessed January 13, 2020, https://www.fema.gov/node/guide-developing-high-quality-emergency-operations-plans-houses-worship .