First Responder Toolbox is an ad hoc, Unclassified//For Official Use Only, reference aid intended to promote counterterrorism coordination among federal, state, local, tribal, and territorial government authorities and partnerships with private sector officials in deterring, preventing, disrupting, and responding to terrorist attacks.
Click here for the JCAT Catalog Overview from December 2013 to December 2021.
Desk References and Brochures:
- JCAT Brochure
- Terrorism Prevention Brochure/Trifold
- Threat Assessment and Threat Management (TATM) Brochure/Trifold
- US Violent Extremism Mobilation Indicators 2021 - Desk Reference
- Terrorism Prevention Spectrum
First Responder Toolbox:
- ACID ATTACKS: Potential Opportunistic Threat and Rapid Treatment Awareness
- Animal Cruelty- A Possible Warning Behavior for Terrorism - survey
- Awareness of Illicit Cryptomining-Related Activities May Improve Detection
- Awareness of Violent Extremist Tactics To Defeat Physical Security Can Improve Response
- Best Practices for Vehicle Screening Against Terrorist Tactics (interactive)
- Best Practices for Vehicle Screening Against Terrorist Tactics (print) - survey
- Bus Attacks Highlight Potential Tactics and Mitigation Efforts
- Bystanders Are Key To Countering Terrorism - survey
- Chemical and Biological Threats to Food Retailers
- Chemical and Biological Threats to Food Retailers - graphic - survey
- Complex Operating Environment - Airport
- Complex Operating Environment - Educational Facilities: Primary and Secondary Schools
- Complex Operating Environment - Educational Facilities: Post-Secondary Institutions
- Complex Operating Environment - Electric Grid
- Complex Operating Environment – Ferry Systems - New!
- Complex Operating Environment – Food and Agriculture
- Complex Operation Environment – Healthcare Facilities
- Complex Operating Environment - High-Rise Hotel
- Complex Operating Environment - Oil and Gas Refineries
- Complex Operating Environment - Oil and Gas Pipeline - Survey
- Complex Operating Environment - Shopping Malls
- Complex Operating Environment – Special and Other Significant Events
- Complex Operating Environment -- Special and Other Significant Events - Print
- Considerations for Responding to an Improvised Explosive Device (IED) Attack
- Counterterrorism Considerations for Waterfront Locations
- Counterterrorism (CT) Program Consideration for Public Safety
- Emerging Technologies and Possible Malign Uses by Terrorists - New!
- Emerging Technologies May Heighten Terrorist Threats
- Engaging the LGBTQIA+ Community To Counter Violent Extremist Threats - New!
- Female Violent Extremists
- Hexamethylene Triperoxide Diamine (HMTD)-survey
- Hospitality Industry: Enhanced Suspicious Activity Awareness Assists in Terrorism Prevention
- Identifying and Preventing Illicit Use of Cryptocurrency by Terrorists
- Identifying and Preventing Terrorist and Other Illicit Financing
- Identifying Terrorist Trade-Based Money Laundering - New!
- IED Manufacturing Components
- IED Manufacture Indicators
- Intervention Options for Minors Vulnerable to Violent Extremism Activity
- Involvement of Minors in Terrorist Plots and Attacks Likely To Endure
- International Partnerships Among Health, Private Sector, and Law Enforcement Necessary to Mitigate ISIS’s Organ Harvesting for Terrorist Funding
- Knockdown Gases: Dangers, Indicators, and Response
- Malicious Modification of UAS
- Mental Health Considerations in Threat Management of Terrorism Investigative Subjects-survey
- Mitigating the Threat of Terrorist-Initiated Arson Attacks on Wildland-Urban Interface Areas
- Mixing Ideologies Requires Multipronged Terrorism Prevention Efforts
- Multilayered Approach Can Help Mitigate Challenges Posed by Common HME Precursors and IED Components
- National Historical Landmarks and Monuments - Survey
- Natural Gas and Propane Terrorist Tactics - Survey
- OUTREACH OPPORTUNITY: Western-Based Friends and Family May be Forced to Pay Ransom for African Migrants to Criminal Entities With Possible Terrorist Ties
- Persistent Threat of Terrorist Ambush Attacks on First Responders
- Personal Security of First Responders in the Digital Age - Survey
- Planning and Preparedness Can Promote an Effective Response to a Terrorist Attack at Open-Access Events
- Plant-derived Toxins-survey
- Possible Indicators of Criminal Offenders Mobilizing to Violent Extremist
- Post 9-11 Response Evolution to an Enduring Threat
- Postal and Shipping - Identification and Mitigation of Suspicious Mail and Packages-survey
- Postal and Shipping- Suspicious Package Response Card
- Potential for Terrorists to Exploit Challenges Associated with COVID-19
- Programmable Microcontrollers - Potential for Illicit Use-survey
- Protection Considerations for Violent Extremist Threats to Public Officials
- Radiological Threat Awareness
- Recognizing Arson With a Nexus to Terrorism
- Recognizing Possible Terrorist 911 Calls: Indicators and Considerations for an Effective Response
- Reporting Suspicious Activity - Critical for Terrorism Prevention
- Reentry Service Partnerships Important in Terrorism Prevention
- Response Considerations for Increased Threat Reporting to US Telecommunications Infrastructure
- Responses to Overseas Conflicts May Impact Public Safety Agencies in the Homeland
- Special Events Working Aid
- Taxi Cab and Ride-Sharing Service Partnerships – Potential Public Safety Force Multiplier
- Taxi Cab and Ride-Sharing Service Potential Counterterrorism Force Multiplier-Visor Card
- Terrorism Planning and Incident Response Consideration for Bridges-survey
- Terrorism Prevention – A Form of Violence Reduction
- Terrorism Prevention - Addressing Early Risk Factors to Build Resilience Against Violent Extremism
- Terrorism Prevention Spectrum - New!
- Terrorist Attacks against Bars, Restaurants, Nightclubs Worldwide Highlight Importance of Public and Private Sector Partnerships in the Homeland
- Terrorist Arson
- Terrorist Commemorative Messaging Encourages Attacks - Survey
- Terrorist Disinformation
- Terrorist Exploitation of Online Gaming Platforms
- Terrorist Insider Threat
- Terrorist Messaging Urges Use of Edged Weapons - Survey
- Threat Assessment and Threat Managment (TATM)
- Threat Assessment and Threat Management - A Model Critical to Terrorism Prevention (1 of 3)
- Threat Assessment and Threat Management - Multidisciplinary Teams (2 of 3)
- Threat Assessment and Threat Management - Assessment and Management (3 of 3)
- Threats Against Houses of Worship Highlight the Importance of Religious Community Outreach (2022)
- Threats Against Religious Facilities and Adherents Highlight Importance of Religious Community Outreach (2019)
- Threat of Terrorism and Hate Crimes Against Jewish Communities in US - survey
- Triacetone Triperoxide (TATP): Indicators of Acquisition and Manufacture, and Considerations for Response
- Understanding and Mitigating Violent Extremism Among Offenders
- Urea Hydrogen Peroxide
- Use of Memes by Violent Extremists
- Vehicle Borne Attacks - Tactics and Mitigation-survey
- Vehicle Borne Improvised Explosive Device (VBIED): Preparedness, Recognition, And Response
- Vehicle Rental/Leasing Industry Partnerships: A Force Multiplier
- Violent Extremists and Terrorists Exploit Civil Unrest and Public Assemblies in the United States - survey
- Violent Extremists’ Use of Generative Artificial Intelligence - New!
JCAT First Responder Toolbox -- Terrorism Prevention Brochure/Trifold
This is a specially developed brochure that can be printed and folded as a trifold brochure.
In order for this to work, please use these printer settings:
- Select “Print on both sides of the paper”
- Select “Flip on short edge”
Threat Assessment and Threat Management (TATM) Brochure/Trifold
This is a specially developed brochure that can be printed and folded as a trifold brochure.
In order for this to work, please use these printer settings:
- Select “Print on both sides of the paper”
- Select “Flip on short edge”
Download the "Threat Assessment and Threat Management (TATM) Brochure/Trifold"
Who We Are
The Joint Counterterrorism Assessment Team (JCAT) at the National Counterterrorism Center (NCTC) is where public safety professionals – in law enforcement, emergency medical services, fire service, intelligence, homeland security, emergency management, and public health – are making a difference in the counterterrorism (CT) community by improving information sharing among federal, state, local, tribal, and territorial government agencies and the private sector. JCAT fellows work side-by-side with intelligence analysts from NCTC, the Department of Homeland Security (DHS), and the Federal Bureau of Investigation (FBI) to develop products, conduct outreach and education, and support CT exercises and training.
How Does JCAT Carry Out Its Mission?
JCAT’s mission1 is to improve information sharing and enhance public safety for federal, state, local, tribal, territorial, and private sector (FSLTTP) partners. This is accomplished through three lines of effort:
• Intelligence Production – JCAT reviews CT intelligence and information to facilitate collaborative PRODUCTION on topics intended to address FSLTTP partners’ intelligence needs and requirements; incorporating FSLTTP experience and expertise, to the greatest extent possible, to ensure JCAT products are relevant and useful to counterterrorism partners.
• Outreach and Education – JCAT performs OUTREACH and EDUCATION to build and strengthen FSLTTP partnerships; promote awareness and understanding of partner capabilities and resources; improve information sharing; and recruit JCAT fellows.
• Support – JCAT provides SUPPORT to counterterrorism partners in the planning, delivery, and evaluation of exercises; and the facilitation of training.
1 JCAT’s mission relates to threats from international terrorists and U.S.-based violent extremists directed, enabled, or inspired by, or otherwise affiliating or collaborating with international terrorists, or that concern terrorist tactics, techniques, and procedures that could be employed by such actors. JCAT does not engage in activities addressing threats without an identified foreign nexus.
"At NCTC, we sit in the middle of a Counterterrorism and Homeland Security enterprise that includes the federal government and all of our partners in Washington."
—The Hon. Nicholas J. Rasmussen, Director
The documents below are being released to provide information on NCTC’s use of data. Posting these documents online is consistent with our ongoing transparency initiative—which includes the release of documents to the public as well as a series of privacy and civil liberty symposiums—to enhance our outreach and engagement with advocacy and faith-based groups, national security academics, and other members of the public.
Using Counterterrorism Lessons Learned to Address other Transnational Threats
This paper, written by Russell E. Travers of the National Counterterrorism Center in August 2015, was selected as a finalist in the 2015/2016 Galileo Awards Program. The paper lays out a strategic framework for addressing the most tactical of issues, the challenges posed by transnational bad actors. Galileo is an annual Intelligence-wide competition designed to encourage and recognize innovative workforce ideas that address current challenges and help share the future of U.S. Intelligence.
Terrorist Identities Datamart Environment (TIDE) Fact Sheet - Current as of 30 June 2016
This fact sheet, updated annually, provides a primer on TIDE, the knowledge bank that supports the U.S. Government's terrorist screening systems. Through the Intelligence Reform and Terrorism Prevention Act of 2004, Congress mandated that NCTC establish and manage TIDE.
Memorandum of Understanding between FinCEN and NCTC (redacted)
This Memorandum of Understanding (MOU) governs NCTC's access to the Department of the Treasury's Financial Crimes Enforcement Network (FinCEN) data collected pursuant to the reporting authority contained in the Bank Secrecy Act (BSA). The redacted MOU places restrictions on the NCTC's access and provides protections to the data.
Overview of the Baseline Safeguard Protections Under NCTC’s 2012 Attorney General Guidelines
A White Paper that describes how NCTC has implemented its Attorney General Guidelines-mandated baseline safeguards, as well as the compliance checks/audits of NCTC’s adherence to those safeguards.
Enhanced Safeguards Decision Matrix
The decision matrix used by NCTC in assessing each replicated non-terrorism dataset for potential application of additional, Enhanced Safeguards, over and above the baseline safeguards which are applied to all replicated datasets.
NCTC Compliance Incident Procedures Regarding Data Handling (redacted)
Procedures for reporting, assessing, investigating and resolving compliance incidents relating to NCTC’s handling of data accessed pursuant to various authorities, to include Executive Order 12333 and/or Attorney General-approved Guidelines.
Overview of NCTC’s Data Access as Authorized by the 2012 Attorney General Guidelines
A White Paper detailing the categories of data that NCTC replicates under its Attorney General Guidelines, as well as how this data is used by NCTC to fulfill its counterterrorism mission.
NCTC’s Annual Report on the Access, Retention, Use and Dissemination of United States Person Information For the Period March 23, 2012 through March 31, 2013 (redacted)
NCTC’s first annual report to the ODNI General Counsel and Civil Liberties Protection Officer, as well as the IC Inspector General, on NCTC’s access, retention, use and dissemination of non-terrorism datasets, as required under NCTC’s revised 2012 Attorney General Guidelines.
Memorandum of Agreement Between the Department of Homeland Security and the National Counterterrorism Center Regarding Advance Passenger Information System Data (redacted)
The MOA which allows NCTC to gain bulk access to DHS APIS Data, for up to 1 year, which incorporates detailed restrictions on who can access the data and for what purpose, pre-requisite training, processes for ensuring data is up to date, error correction and feedback, independent auditing by DHS, and many other privacy and civil liberties protective provisions.
ODNI White Paper on Civil Liberties and Privacy Protections
A White Paper issued by the ODNI’s Civil Liberties and Privacy Office explaining the civil liberties and privacy protections incorporated into NCTC’s 2012 Attorney General Guidelines.
NCTC Guidelines – Mission Justification Fact Sheet
A short paper explaining NCTC’s counterterrorism mission, as well as the factors that led to revision of NCTC’s Attorney General Guidelines in March 2012.
Historical Reference Documentation
NCTC Attorney General Guidelines
Executive Order 13354 National Counterterrorism Center
Intelligence Reform and Terrorism Prevention Act of 2004
"The center provides a unique environment to optimize the U.S. government's collective knowledge and formidable capabilities to identify and counter the terrorist threat to the nation."
NCTC comprises employees from partner organizations that include: Central Intelligence Agency; Department of Justice/Federal Bureau of Investigation; Departments of State, Defense, and Homeland Security; and other entities that provide unique expertise such as the Departments of Energy, Treasury, Agriculture, Transportation, and Health and Human Services; Nuclear Regulatory Commission; and the U.S. Capitol Police.
The NCTC also maintains productive relationships with foreign partners. It is the diversity of backgrounds and disciplines fused together in an integrated environment that enriches the NCTC analysis, provides alternative perspectives, and breaks down cultural and physical barriers.