
First responders, performing homeland security or law enforcement activities on behalf of a state, local, tribal, or territorial government, can access unclassified CT information through US Government Internet portals. These websites contain intelligence products designed to enhance awareness of terrorism threats, tactics, techniques and procedures intended to help protect yourselves and your jurisdictions against potential terrorist attacks. For more information on how to access NCTC’s unclassified/for official use only CT products, please contact This email address is being protected from spambots. You need JavaScript enabled to view it..
Counterterrorism Guide for Public Safety Personnel
Public safety personnel are often positioned to identify suspicious activity potentially related to terrorism, and in some cases, first responders who have reported this information have helped to disrupt terrorist plans or attacks in the US.
JCAT'S COUNTERTERRORISM GUIDE FOR PUBLIC SAFETY PERSONNEL is designed to assist first responders in:
• RECOGNIZING and REPORTING suspicious activity that may be linked to terrorism, consistent with the Nationwide Suspicious Activity Reporting (SAR) Initiative;
• SPOTTING indicators of mobilization to violence; and,
• RESPONDING and MITIGATING terrorist attacks.
Intelligence Guide for First Responders
The Intelligence Guide for First Responders was produced by JCAT to improve information sharing among state, local, tribal, and territorial jurisdictions and the federal government.
This guide:
• Highlights your role and responsibility as a consumer of intelligence information.
• Demonstrates how to handle this information and why it must be protected
• Shows you where to find this information and how to gain access to Internet-based U.S. Government systems.
• Helps you understand and participate in the Nationwide Suspicious Activity Reporting Initiative.
• Provides an overview of the Intelligence Community, the intelligence cycle, and the products available to you.
• Identifies existing federal, state, local, tribal, and territorial partnerships that you can use to carry out your duties and responsibilities.
Counterterrorism Digest
An UNCLASSIFIED compendium of international and domestic news focusing on CT information. It is produced by NCTC in collaboration with JCAT every Wednesday, and it includes relevant commentary on issues related to terrorism and CT. It is available on Internet-based, US Government information sharing systems.
Counterterrorism Weekly
A FOR OFFICIAL USE ONLY periodical produced by NCTC in coordination with JCAT that focuses on international terrorism compiled from open source information with relevant commentary. It is posted to Internet-based, US Government information sharing systems.
First Responder Toolbox is an ad hoc, Unclassified//For Official Use Only, reference aid intended to promote counterterrorism coordination among federal, state, local, tribal, and territorial government authorities and partnerships with private sector officials in deterring, preventing, disrupting, and responding to terrorist attacks. First Responder Toolboxes are available on DHS’ HSIN.gov, FBI’s LEO.gov, and the Domestic Security Alliance Council’s DSAC.gov.
Homeland Security Information Network (HSIN)
A national, secure, and trusted web-based portal for information sharing and collaboration among federal, state, local, tribal, territorial, and private-sector partners engaged in the homeland security mission.
• JCAT products are accessible in both the Emergency Services and Intelligence Communities of Interest on HSIN.
Law Enforcement Enterprise Portal (LEEP)
The Law Enforcement Enterprise Portal (LEEP) is a secure platform for law enforcement agencies, intelligence groups, and criminal justice entities. LEEP provides web-based investigative tools, analytical resources, and networking support allowing users to strengthen case development, collaborate with internal and external agencies, and securely share sensitive documents.
• JCAT products are accessible via JusticeConnect, National Counterterrorism Center (NCTC) – Joint Counterterrorism Assessment Team (JCAT) Community on LEEP.
Regional Information Sharing Systems (RISS) Officer Safety Website
A secure, information-sharing website for law enforcement, dedicated to providing timely officer safety information and resources.
Technical Resource For Incident Prevention (TRIPWIRE)
An information-sharing network designed to increase awareness of evolving improvised explosive device tactics, techniques, and procedures.

First Responder Toolbox is an ad hoc, Unclassified//For Official Use Only, reference aid intended to promote counterterrorism coordination among federal, state, local, tribal, and territorial government authorities and partnerships with private sector officials in deterring, preventing, disrupting, and responding to terrorist attacks.
Click here for the JCAT Catalog Overview from December 2013 to December 2021.
Desk References and Brochures:
- JCAT Brochure
- Terrorism Prevention Brochure/Trifold
- Threat Assessment and Threat Management (TATM) Brochure/Trifold
- US Violent Extremism Mobilation Indicators 2021 - Desk Reference
- Terrorism Prevention Spectrum
First Responder Toolbox:
- ACID ATTACKS: Potential Opportunistic Threat and Rapid Treatment Awareness
- Animal Cruelty- A Possible Warning Behavior for Terrorism - survey
- Awareness of Illicit Cryptomining-Related Activities May Improve Detection
- Awareness of Violent Extremist Tactics To Defeat Physical Security Can Improve Response
- Best Practices for Vehicle Screening Against Terrorist Tactics (interactive)
- Best Practices for Vehicle Screening Against Terrorist Tactics (print) - survey
- Bus Attacks Highlight Potential Tactics and Mitigation Efforts
- Bystanders Are Key To Countering Terrorism - survey
- Chemical and Biological Threats to Food Retailers
- Chemical and Biological Threats to Food Retailers - graphic - survey
- Complex Operating Environment - Airport
- Complex Operating Environment - Educational Facilities: Primary and Secondary Schools
- Complex Operating Environment - Educational Facilities: Post-Secondary Institutions
- Complex Operating Environment - Electric Grid
- Complex Operating Environment – Ferry Systems - New!
- Complex Operating Environment – Food and Agriculture
- Complex Operation Environment – Healthcare Facilities
- Complex Operating Environment - High-Rise Hotel
- Complex Operating Environment - Oil and Gas Refineries
- Complex Operating Environment - Oil and Gas Pipeline - Survey
- Complex Operating Environment - Shopping Malls
- Complex Operating Environment – Special and Other Significant Events
- Complex Operating Environment -- Special and Other Significant Events - Print
- Considerations for Responding to an Improvised Explosive Device (IED) Attack
- Counterterrorism Considerations for Waterfront Locations
- Counterterrorism (CT) Program Consideration for Public Safety
- Emerging Technologies and Possible Malign Uses by Terrorists - New!
- Emerging Technologies May Heighten Terrorist Threats
- Engaging the LGBTQIA+ Community To Counter Violent Extremist Threats - New!
- Female Violent Extremists
- Hexamethylene Triperoxide Diamine (HMTD)-survey
- Hospitality Industry: Enhanced Suspicious Activity Awareness Assists in Terrorism Prevention
- Identifying and Preventing Illicit Use of Cryptocurrency by Terrorists
- Identifying and Preventing Terrorist and Other Illicit Financing
- Identifying Terrorist Trade-Based Money Laundering - New!
- IED Manufacturing Components
- IED Manufacture Indicators
- Intervention Options for Minors Vulnerable to Violent Extremism Activity
- Involvement of Minors in Terrorist Plots and Attacks Likely To Endure
- International Partnerships Among Health, Private Sector, and Law Enforcement Necessary to Mitigate ISIS’s Organ Harvesting for Terrorist Funding
- Knockdown Gases: Dangers, Indicators, and Response
- Malicious Modification of UAS
- Mental Health Considerations in Threat Management of Terrorism Investigative Subjects-survey
- Mitigating the Threat of Terrorist-Initiated Arson Attacks on Wildland-Urban Interface Areas
- Mixing Ideologies Requires Multipronged Terrorism Prevention Efforts
- Multilayered Approach Can Help Mitigate Challenges Posed by Common HME Precursors and IED Components
- National Historical Landmarks and Monuments - Survey
- Natural Gas and Propane Terrorist Tactics - Survey
- OUTREACH OPPORTUNITY: Western-Based Friends and Family May be Forced to Pay Ransom for African Migrants to Criminal Entities With Possible Terrorist Ties
- Persistent Threat of Terrorist Ambush Attacks on First Responders
- Personal Security of First Responders in the Digital Age - Survey
- Planning and Preparedness Can Promote an Effective Response to a Terrorist Attack at Open-Access Events
- Plant-derived Toxins-survey
- Possible Indicators of Criminal Offenders Mobilizing to Violent Extremist
- Post 9-11 Response Evolution to an Enduring Threat
- Postal and Shipping - Identification and Mitigation of Suspicious Mail and Packages-survey
- Postal and Shipping- Suspicious Package Response Card
- Potential for Terrorists to Exploit Challenges Associated with COVID-19
- Programmable Microcontrollers - Potential for Illicit Use-survey
- Protection Considerations for Violent Extremist Threats to Public Officials
- Radiological Threat Awareness
- Recognizing Arson With a Nexus to Terrorism
- Recognizing Possible Terrorist 911 Calls: Indicators and Considerations for an Effective Response
- Reporting Suspicious Activity - Critical for Terrorism Prevention
- Reentry Service Partnerships Important in Terrorism Prevention
- Response Considerations for Increased Threat Reporting to US Telecommunications Infrastructure
- Responses to Overseas Conflicts May Impact Public Safety Agencies in the Homeland
- Special Events Working Aid
- Taxi Cab and Ride-Sharing Service Partnerships – Potential Public Safety Force Multiplier
- Taxi Cab and Ride-Sharing Service Potential Counterterrorism Force Multiplier-Visor Card
- Terrorism Planning and Incident Response Consideration for Bridges-survey
- Terrorism Prevention – A Form of Violence Reduction
- Terrorism Prevention - Addressing Early Risk Factors to Build Resilience Against Violent Extremism
- Terrorism Prevention Spectrum - New!
- Terrorist Attacks against Bars, Restaurants, Nightclubs Worldwide Highlight Importance of Public and Private Sector Partnerships in the Homeland
- Terrorist Arson
- Terrorist Commemorative Messaging Encourages Attacks - Survey
- Terrorist Disinformation
- Terrorist Exploitation of Online Gaming Platforms
- Terrorist Insider Threat
- Terrorist Messaging Urges Use of Edged Weapons - Survey
- Threat Assessment and Threat Managment (TATM)
- Threat Assessment and Threat Management - A Model Critical to Terrorism Prevention (1 of 3)
- Threat Assessment and Threat Management - Multidisciplinary Teams (2 of 3)
- Threat Assessment and Threat Management - Assessment and Management (3 of 3)
- Threats Against Houses of Worship Highlight the Importance of Religious Community Outreach (2022)
- Threats Against Religious Facilities and Adherents Highlight Importance of Religious Community Outreach (2019)
- Threat of Terrorism and Hate Crimes Against Jewish Communities in US - survey
- Triacetone Triperoxide (TATP): Indicators of Acquisition and Manufacture, and Considerations for Response
- Understanding and Mitigating Violent Extremism Among Offenders
- Urea Hydrogen Peroxide
- Use of Memes by Violent Extremists
- Vehicle Borne Attacks - Tactics and Mitigation-survey
- Vehicle Borne Improvised Explosive Device (VBIED): Preparedness, Recognition, And Response
- Vehicle Rental/Leasing Industry Partnerships: A Force Multiplier
- Violent Extremists and Terrorists Exploit Civil Unrest and Public Assemblies in the United States - survey
- Violent Extremists’ Use of Generative Artificial Intelligence - New!
![]()
Special Events Working Aid
Published: June 10, 2016
This resource is designed to assist public safety personnel, security personnel, and other event stakeholders in understanding and implementing protective measures to ensure the safety and security of crowds at open-access events. It covers a range of topics, including risk assessment, emergency planning and response, crowd management strategies, and communication protocols.
JCAT Mission
The Joint Counterterrorism Assessment Team (JCAT) is a collaboration by NCTC, DHS, FBI, state, local, tribal, and territorial government personnel to improve information sharing and enhance public safety. The First Responder's Toolbox is an ad hoc, unclassified reference aid intended to promote counterterrorism coordination among federal, state, local, tribal, and territorial government authorities and partnerships with private sector officials in deterring, preventing, disrupting, and responding to terrorist attacks.

Who We Are
The Joint Counterterrorism Assessment Team (JCAT) at the National Counterterrorism Center (NCTC) is where public safety professionals – in law enforcement, emergency medical services, fire service, intelligence, homeland security, emergency management, and public health – are making a difference in the counterterrorism (CT) community by improving information sharing among federal, state, local, tribal, and territorial government agencies and the private sector. JCAT fellows work side-by-side with intelligence analysts from NCTC, the Department of Homeland Security (DHS), and the Federal Bureau of Investigation (FBI) to develop products, conduct outreach and education, and support CT exercises and training.
How Does JCAT Carry Out Its Mission?
JCAT’s mission1 is to improve information sharing and enhance public safety for federal, state, local, tribal, territorial, and private sector (FSLTTP) partners. This is accomplished through three lines of effort:
• Intelligence Production – JCAT reviews CT intelligence and information to facilitate collaborative PRODUCTION on topics intended to address FSLTTP partners’ intelligence needs and requirements; incorporating FSLTTP experience and expertise, to the greatest extent possible, to ensure JCAT products are relevant and useful to counterterrorism partners.
• Outreach and Education – JCAT performs OUTREACH and EDUCATION to build and strengthen FSLTTP partnerships; promote awareness and understanding of partner capabilities and resources; improve information sharing; and recruit JCAT fellows.
• Support – JCAT provides SUPPORT to counterterrorism partners in the planning, delivery, and evaluation of exercises; and the facilitation of training.
1 JCAT’s mission relates to threats from international terrorists and U.S.-based violent extremists directed, enabled, or inspired by, or otherwise affiliating or collaborating with international terrorists, or that concern terrorist tactics, techniques, and procedures that could be employed by such actors. JCAT does not engage in activities addressing threats without an identified foreign nexus.




