Power of Hello

Industries face a variety of threats, both internal and external, from hostile governments, terrorist groups, disgruntled employees and malicious introducers. Alert employees can spot suspicious activity and report it. The power is in the employee, citizen, patron, or any person who can observe and report.

Used effectively, the right words can be a powerful tool. Simply saying “Hello” can prompt a casual conversation with unknown individuals and help you determine why they are there. The OHNO approach – Observe, Initiate a Hello, Navigate the Risk, and Obtain Help – helps employees observe and evaluate suspicious behaviors, and empowers them to mitigate potential risk, and obtain help when necessary.

The OHNO approach describes activities and behaviors that may be suspicious or indicative of criminal activity. These activities may be constitutionally protected and should be reported only when there are articulable facts to support a rational conclusion that the behavior is suspicious. Do not report based solely on protected activities, race, religion, gender, sexual orientation, or a combination of only such factors.

Observe

• Stay vigilant of your surroundings.
• Alert employees can identify suspicious behavior, such as: Putting down a bag or item and then walking away from it.
• A prolonged interested in or taking pictures/videos of personnel, facilities, security features, or infrastructure in an unusual or covert manner. Unauthorized people trying to enter a restricted area by impersonating authorized personnel.
• Loitering at a location without a reasonable explanation.
• Suspicious Activity Indicators:
  • Expressed or implied threats to commit an act of violence or destruction.
  • Using abusive language that a reasonable person might find threatening.
  • Any statements or behaviors indicative of suicidal or homicidal ideations.
  • Contextually inappropriate statements about harming others.
  • Exaggerated or violent gestures e.g. clenching fists or jaws could be interpreted as threatening or intimidating.

Initiate a Hello

Acknowledging a risk can significantly deter a threat. Use the Power of Hello to engage with individuals you observe in your space. (Tip: Active listening is key)

• Smile, make eye contact, and introduce yourself.
• “Hello, how are you?”
• “How can I assist you?”
• “Welcome, is this your first time here?”
• “Are you looking for something or someone in particular?”
• “Let me take you to the person or place you are looking for.”
• “I will be here in case you need help.”

Navigate the Risk

Navigate the risk by asking yourself if the behavior you have observed is suspicious.

Consider these questions in reference to the person if you notice exhibiting threatening or suspicious behavior. Does the person appear to be:

• Legitimately patronizing the business or service?
• Wearing clothing consistent with the weather or gathering of the day?
• Acting in a way that suggests they have a legitimate reason to be there or in a manner that would arouse suspicion of terrorism or other criminality in a reasonable person?
• Avoiding security?
• Taking pictures of security cameras or exit areas?
• Showing irritated or detached behavior when acknowledged that would arouse suspicion in a reasonable person?
• Asking questions about the business functions or employee information? (Who is closing? What is their schedule like? How many people work here? Etc.)
• Causing you to feel threatened? (If you feel threatened, calmly walk away and call 9-1-1)

Obtain Help

After navigating the risk, obtain help from management or authorities. Use the OHNO approach to provide the best information to first responders and security personnel.

• Call 911 for emergencies or if you feel in danger.
• To organize your thoughts to management or the police ask yourself 5Ws:
  • What is happening?
  • Who is doing it?
  • Where is it taking place?
  • When did you observe it?
  • Why are they here?
• You can submit suspicious activity reports to your local law enforcement or call the non-emergency number.
• Work to develop a relationship with local police/fire authorities.
• Have law enforcement and fire department phone numbers listed for all employees to see.

Resources

CISA provides the Power of Hello tools and resources with no endorsement of any specific company, entity, or content. The tools and resources identified are a starting point for an organization’s employee vigilance campaign and do not encompass all resources.

• CISA’s Cyber Essentials is a guide for leaders of small businesses as well as leaders of small and local government agencies to develop an actionable understanding of where to start implementing organizational cybersecurity best practices. 
• The Department of Homeland Security developed their See Something, Say Something campaign in order to support public safety and security by targeting individual citizens and teaching them how to report.
• The Nationwide Suspicious Activity Reporting (SAR) Initiative (NSI) is a joint collaborative effort by the U.S. Department of Homeland Security, the Federal Bureau of Investigation, and state, local, tribal, and territorial law enforcement partners. This initiative provides law enforcement with another tool to help prevent terrorism and other related criminal activity by establishing a national capacity for gathering, documenting, processing, analyzing, and sharing SAR information.
• The Nationwide SAR Initiative developed the Suspicious Activity Reporting Indicators and Behavior visual chart to be used to report indicators and behavior of a possible threat.  
• The See Something Say Something FDA Campaign is an educational visual to see signs, and stop a threat.
• The U.S. Department of Labor created workplace violence website which provides information on the extent of violence in the workplace, assessing the hazards in different settings and developing workplace violence prevention plans for individual worksites.
• Developed by the San Diego Police Department, Tips for Reporting Suspicious Persons, Activities, Vehicles, etc To Prevent Terrorism (.pdf, 152 KB) is a report targeted to individuals, community groups, and businesses, as well as with schools, hospitals, religious groups, private organizations, and other government agencies to fight crime and improve the quality of life for the people of San Diego.
• America’s Neighborhood Watch Program was developed by the National Sherriff’s Association to target individual citizens to help them support local law enforcement and their local community to stop crime.
• The National Crime Prevention Council’s (NCPC) mission is to be the nation’s leader in helping people keep themselves, their families, and their communities safe from crime. To achieve this, NCPC produces tools that communities can use to learn crime prevention strategies, engage community members, and coordinate with local agencies.
• Santa Clara County created Workplace Violence Prevention: A Guide for Employees (.pdf, 761 KB) to mitigate workplace violence against different persons of risk, such as strangers, or family members. It contains measures and procedural practices that ought to take place to maximize employee security.
• Running a Staff Vigilance Campaign was created by Centre for the Protection of National Infrastructure to guide employers how to engage their staff in threat reporting and protection against risk.
• Hostile Reconnaissance: Understanding and Countering the Threat (.pdf, 406 KB) is a guide by the Centre for the Protection of National Infrastructure on understanding threat produced for security managers.
• The Substance Abuse and Mental Health Services Administration (SAMHSA), within the U.S. Department of Human Services leads public health efforts to advance the behavioral health of the nation and to improve the lives of individuals living with mental and substance use disorders, and their families. To learn more, click here: SAMHSA - Substance Abuse and Mental Health Services Administration.
• The Interagency Security Committee's Violence in the Federal Workplace: A Guide for Prevention and Response provides guidance on how agencies can develop a workplace violence program capable of preparing for, preventing, and responding to incidents of workplace violence.