UNITED NATIONS – INDONESIA STANDARD OPERATING PROCEDURES

SOP III.1

BOMBS
1. Mail Letter/Package Bombs

Filter out suspicious letters and packages before they have a chance to explode. Staff who receive
suspect packages, letter mail or other articles via the postal system, by hand or commercial delivery
service should immediately notify the Agency Security Focal Point and their manager. Suspect in this
sense means an item that may contain an improvised explosive device, anthrax, etc. The suspect
item should be placed aside and not opened. If the item cannot be determined to be safe through
visual or technical examination, the Agency Security Focal Point will order the evacuation of staff from
the office.

Indications to look for are:

• Origin and address: a letter or package addressed by hand, often in an unusual style of
handwriting, mailed from a location unfamiliar to the recipient;
• Thickness: a letter which is thicker than normal;
• Weight: a letter/package which is heavier than you would normally expect for its size;
• Stiffness: a letter which is stiffer or more rigid than normal. Do not bend;
• Grease marks: dark, greasy stains on a letter/package caused by the explosive "sweating";
• Tape: tape around the edges and sealing of the flaps of an envelope or parcel;
• Smell: a letter/parcel which smells like almond (or marzipan) or has some other unusual
odour;
• Balance: a lopsided letter/package, heavier at one end than the other; and
• Enclosures: a sealed enclosure inside the outer mailing envelope or carton.

Follow procedures as for discovery of a suspect package/bomb.

2. Bomb Threat

Bomb threats can come at anytime and by numerous means eg often by phone call. Attachment 1 to
this Annex provides the Bomb Threat Telephone Checklist that is to be beside every office telephone
and followed if a bomb threat is received by telephone. On receipt of a bomb threat:

• Full or partial evacuation.

• If a time for detonation given, evacuate immediately anyway.
• Consider possibility of search before evacuation.
• Signal for evacuation – BOMB THREAT, EVACUATE, MOVE TO ALTERNATIVE
ASSEMBLY POINT IMMEDIATELY – repeat.
• Designate evacuation route and check it for explosive devices.
• Leave everything.
• Neutralize elevators so they cannot be used.
• Ensure orderly evacuation and avoid panic.
• Assist disabled and visitors.
• Call Police/TNI.
• Cut off electricity/gas at the main source, if possible, to reduce fire hazard.
• Evacuate a safe distance (at least 100 metres) to Alternative Assembly Point.
• The decision to permit re-entry will be made by the ASC/DO in consultation with appropriate
authorities.

09 Oct 06 RESTRICTED DISTRIBUTION – INTERNAL UN USE ONLY Page 1 of 6

 UNITED NATIONS – INDONESIA STANDARD OPERATING PROCEDURES

2.1 Procedures for Evacuation Stairs

Procedure for evacuating people from a building containing a suspected hidden terrorist bomb is
different from evacuating people from a burning building. A specific stair should be designated for
evacuation. People leaving the building should be requested to leave by way of this exit. However,
search this stair for bombs before the evacuation and also search the entire exit path. Search the

Access corridors leading to the stair, the stairway and the discharge lobby into which the stair feeds.

2.2 Instructions to People

People being asked to leave a building in which a bomb is reported should be told to take all
belongings with them, so there will be fewer items to search for the hidden explosives. Also, people
should be directed to leave unlocked, their desks, offices and lockers. This too, will assist the bomb
search and reduce damage to locks and doors. Leave lights on and windows open, and as long as it
will not trigger an explosion, turn noise making machines off. It will assist bomb searchers. Mobile
radios should be shut off 300 feet from the suspected bomb area and portable radios should be shut
off during the search.

The following instructions should be given to staff that have telephones:

1. Listen closely, be calm and courteous and do not interrupt the caller.
2. Record the exact time of the call and its duration.
3. Record the exact words of the caller.
4. Try to ask the following questions:

a. Why are you doing this?

b. Why did you call me?
c. Who or what do you represent?
d. What do you want me to do?
e. What is your name?

In the case of a bomb threat, the following questions should be asked first:

a. When is the bomb going to explode?

b. Where is the bomb, which floor?
c. What kind of bomb is it?
d. What does it look like?
e. How big is it?
f. Who set the bomb?

Request more information by expressing a desire to save lives. Legitimate callers often wish to avoid
death and injury.

Upon completion of the call, report the incident immediately and record your impression of the person
involved using the attached checklist.

Record all other useful information, such as whether the caller seems familiar with your surroundings,
your comings and goings, etc.

3. Searching for Explosives/Bombs (only when police not available)

Bomb searching begins outside the building. First, vehicles parked in the street around the building
are examined. Owners are requested to move vehicles. Any vehicle not identified by a local resident
and not moved must be considered a potential vehicle bomb. Next, the outside sidewalk around the

09 Oct 06 RESTRICTED DISTRIBUTION – INTERNAL UN USE ONLY Page 2 of 6

 UNITED NATIONS – INDONESIA STANDARD OPERATING PROCEDURES

perimeter of the building is examined for the bomb. Window sills on the first floor are often the site of a
package bomb. Then the building's interior is searched, starting in the cellar and working upward. Pay
attention to areas where a bomber could gain access inside the building and easily place an explosive
package and set a timing device unnoticed. Bathrooms, stairways, refuse containers, storage areas
and supply closets are places in which a bomb may be hidden. Note: If a suspected bomb is
discovered, do not touch or disturb. Note the location, floor and room. Report this to the ASFP. Do
not use portable radios that may trigger an explosion during search.

• Staff to be familiar with area to search i.e. section head/admin staff.

• One area at a time so minimal presence i.e. FSCO, Section head.
• Do not move, jar or touch anything.
• ID any object foreign to the area.

• Bombs can be concealed in boxes, bags, luggage, thermos bottles, furniture and office
technology.
• Any package of unusual size or shape or emits an uncharacteristic sound.
• Any object with wires or a battery present.
• Any package marked with the words "bomb", "danger" or similar.
• Check false ceiling areas, rest rooms, closets, storage areas, utility areas, trash
receptacles, computer rooms, everywhere.
• Search thoroughly enough so that, once completed and no device found, the threat can
reasonably be classified as a hoax. When undertaking an office search, look for any
object which fits the description mentioned in the threat

4. Bomb Indicators

• Unusual device attached to a pressure or flammable container or cylinder.

• Unusual looking or misplaced mailing containers leaking oil or wired.
• Abandoned vehicles that do not appear to belong in the area.
• Strong chemical odors.
• Any unusual container out of place.
• Obvious bomb making pieces such as: blasting caps, wire, or clock- timers.
• Unusual rags hanging on hooks inside restroom stalls.

5. Types of Bombs.

Several common types of explosive devices are used by terrorists, to kill or destroy. These are:

• Pipe bomb. A pipe bomb is a fragment bomb; it kills and injures by exploding pieces of
flying metal. This type of bomb can be identified by a section of pipe capped at both ends.
A fuse may extend from one end. Do not touch a pipe bomb discovered at a fire.
• Bottle bomb. A bottle bomb is also called a Molotov cocktail, named after a Russian
government official. A bottle filled with gasoline and sulfuric acid is capped and wrapped in
a sock soaked with potassium chlorate and sugar. When thrown, the bottle breaks and the
mixing of the sulfuric acid and potassium chlorate causes the explosion and resulting fire.
• Vehicle bomb. A vehicle bomb creates a large powerful explosion.
• Satchel (bag) bomb. Several sticks of dynamite placed in a shoulder-strap bag with one
or two small liquid propane cylinders can create a tremendous explosion and fire. This
type of bomb is more powerful than a pipe bomb and it can be thrown. It can also be
packed with antipersonnel material such as nail, bolts, and screws to inflict fragment
casualties. Could be found hanging on a hook inside a restroom stall or inside a locker in
a train or bus station. The Centennial Park terrorist explosive incident in Atlanta was a
satchel type bomb.

6. Suspect Bomb Found in Office

09 Oct 06 RESTRICTED DISTRIBUTION – INTERNAL UN USE ONLY Page 3 of 6

 UNITED NATIONS – INDONESIA STANDARD OPERATING PROCEDURES

Staffs do not need to be an expert in explosive devices. They can look for anything in the office:

• That should not be there.

• That cannot be accounted for.
• That is out of place.

On discovery of an item that is suspected to contain a bomb.

• Do not further disturb or move suspect device.

• Immediately inform the ASFP and Post guard or staff member to ensure device is not
disturbed.
• Open windows in the immediate vicinity of device.
• Request assistance from police or other authorities.
• All staff, except for the guards, evacuate to the Alternate Assembly Point and check to
make sure all members have evacuated.
• Radio transmissions from the compound to cease immediately - radio signals can trigger
explosions.
• Guards also withdraw but remain in visual contact with the compound until the last
possible moment to ensure no looting or suspicious entry into compound.
• Coordinate with building management and other tenants (if applicable) and notify residents
of neighboring compounds.
• Secure elevators and turn off gas and water service to office.
• Do NOT switch off electrical power to lights and appliances.
• Facilitate entry to office by police or explosive ordnance personnel.
• Notify ASC/FSCO/DSA/CSA/DO.
• Anticipate media inquiries.
• Someone nominated to maintain a written account of staff movements, resources
available and subsequent events. A copy of this is to be given to the compound/building
OIC and a copy should also be passed on as soon as possible to the
ASC/FSCO/DSA/CSA/DO for follow up investigative action.
• Consider whether to release staff.
o Based on the advice of the Police or Bomb Disposal Squad and a decision by the
DO/ASC a select few people to enter the compound to begin a check before other
staffs are permitted back into the compound and their offices eg section heads.
Buildings should be searched one at a time to minimize the numbers in the
compound at any one time.
o Consider a return to work after removal or safe rendering of device.
o Begin investigation of how device was introduced to office.
o Prepare after-action report with lessons learned from event.
o Review inspection procedures for staff and visitors to building.

7. Vehicle Searches for Bombs

In many countries, car bombs are a weapon of choice which may be placed in a United Nations
official vehicle or one belonging to a staff member. In order to minimize risks from this type of
explosive, vehicles should be searched thoroughly and systematically. The checks described below
take about two minutes. These two minutes could save lives. By routinely checking your vehicle, you
are more likely to notice anything that has been attached to or placed in it. If at any time you see
anything arousing your suspicions, do not touch the item or the vehicle. Call for the police
immediately.

An external search of a vehicle should include the following:

• Look around and underneath the vehicle as you approach.

• Check the silhouette and road for any unusual objects or loose wires.

09 Oct 06 RESTRICTED DISTRIBUTION – INTERNAL UN USE ONLY Page 4 of 6

 UNITED NATIONS – INDONESIA STANDARD OPERATING PROCEDURES

• Do not touch the vehicle.

• Walk around the vehicle and look under each wheel arch and bumper for any unusual
objects or loose wires.
• Examine the underside of the vehicle thoroughly.
• Always start your search in the same place, and pay particular attention to the driver and
front passenger areas, recessed areas, the exhaust pipe area and the fuel tank area. An
under-car search mirror can assist you in this task.
• At night or on overcast days you will need a flashlight (torch). This should not be kept in
the car. A carrier bag or a newspaper will help you keep clean on dirty or wet ground.
• Finally, before touching the vehicle, look for signs that it may have been broken into. Look
for scratch marks around the door locks or the trunk (boot) and hood (bonnet). Window
glass may also be scratched.

An internal search should be carried out as follows:

• Look inside the vehicle through the window and look for anything unusual eg wires,
packages, etc. Check that no unfamiliar objects are in the vehicle and that none of your
belongings have been disturbed.
• Slowly open the vehicle door, checking that no wires have been attached to the inside of
the door.
• Do not touch anything inside.
• First, recheck the inside of the vehicle for things out of place or disturbed; in particular,
check underneath the driver's seat, the passenger's seat and in the back area.
• Check all storage areas, pockets and glove compartment for signs of tampering or loose
wires before opening them to look inside.
• Slowly open the hood (bonnet) and trunk (boot), checking to make sure that there are no
wires attached to them. Look for any unexpected components, boxes or unusual wiring. If
your car is kept tidy, it will make this check a lot easier.
•
You can now start up and drive off.

7.1 Vehicle Bomb Delivery Indicators

Studies of previous incidents have revealed several types of suspicious behavior, which if observed,
may indicate a possible vehicle bomb delivery. All security personnel assigned to high threat
environments should be trained to recognize the following delivery indicators:

• The driver manipulates something near the driver's seat before exiting the vehicle.
In most vehicle bomb deliveries (when suicide is not part of the plan), the device is armed
only after the vehicle is parked and the driver is ready to escape the area. To facilitate this
quickly, the activating assembly or an arming switch is often located near the driver's seat.
The driver may be viewed manipulating this before exiting the vehicle. As the driver exits
the vehicle, notice if the driver seems hurried, nervous, or looking around to see if he/she
is being observed.

• The driver temporarily opens the trunk or back of a suspect vehicle before leaving
the area. As previously stated, the device will usually be armed immediately after the
vehicle is parked. If the activating components or arming assembly is located with the
main charge, the driver may be observed opening the trunk or the rear of the vehicle to
arm the device. In most legitimate situations, a driver opening the trunk of a car or back of
a truck will be removing something or putting something inside. Watch carefully to see if
the driver opens the back, manipulates something, and closes the door without removing
anything.

• A second person exiting the back of a suspect van or truck. In some situations, a
second person will be located in the back of the suspect van or truck. This individual will

09 Oct 06 RESTRICTED DISTRIBUTION – INTERNAL UN USE ONLY Page 5 of 6

 UNITED NATIONS – INDONESIA STANDARD OPERATING PROCEDURES

arm the device after the driver signals that the vehicle is in place and will immediately exit
the back of the van or truck. This is most likely to be observed if the vehicle cab is
separate from the cargo area or trailer.

• The driver parking the suspect vehicle and departing the area in a second car.
Watch where the driver goes immediately after parking the vehicle. In many cases, a
second vehicle will be used for a quick escape after the bomb delivery. This vehicle may
be parked nearby, visible within the area of observation. In other situations, the suspect
vehicle may be followed to the delivery site by a second escape car. This car may park or
stop temporarily as the bomb is delivered. The driver will then get into the escape car and
depart the area.

8. Bomb Explosion

8.1 Explosion Outside Office Compound.

All staff must be taught to not run to the windows on hearing an explosion. Section Heads
should exercise their staff to respond to nearby explosions by first lying down behind
protective cover (i.e., a desk or couch) and then when safe, move to the Alternate Assembly
Point.

8.2 Explosion Inside Office Compound.

• Render emergency medical assistance at scene as soon as possible.

• Search building and account for staff.
• Concentrate injured to facilitate evacuation by ambulance.
• Evacuate staff to alternate concentration point, but consider security of evacuees while
outside.
• Consider possibility of second explosive device.
• Alert police and other authorities for assistance (guards should do it automatically).
• Notify ASC/FSCO/DSA/CSA/DO and request she/he notify other agencies starting with the
closest.
• Post guard/staff member at site of explosion until authorities arrive and keep crowds away.
• Notify headquarters and follow up with an incident report when time permits.
• Facilitate search of area by authorities for secondary explosive device.
• Ensure that sensitive documents are secured if office is safe to enter.
• Do not permit removal of property or debris until authorized to do so.
• Consider outside help to manage situation.
• Anticipate media attention and inquiries.
• Begin investigation of incident.
• Submit an after-action report with lessons learned.

09 Oct 06 RESTRICTED DISTRIBUTION – INTERNAL UN USE ONLY Page 6 of 6