Introduction to PAS 97 2021.pdf

PAS 97:2021Mail screening and security Specifi cationIntroductionPAS 97:2021 is a specification for mail screening and security within your organization.It contains everything you need to help identify and implement appropriate postal security and screening measures that address the risks your organization faces.Even in this electronic age,most businesses and other organizations rely on the ability to receive and send physical items of mail.As an essential part of normal operations,mail presents various potentially significant vulnerabilities.Mail streams into and within an organization provide a vector for malicious attacks and scope for other security incidents,all of which can endanger life and adversely affect the day-to-day business of the organization,as well as its reputation.PAS 97 specifies measures to assist businesses and other organizations in identifying and minimizing the impact of items of mail that represent a threat,or could otherwise cause concern or disruption.It also addresses broader postal security measures aimed at ensuring all incoming,outgoing and internal mail streams are managed so as to minimize the risk of loss or theft of valuable or sensitive items or information.The focus is on letters and small parcels entering the organization from any external source,including public/commercial postal services,by hand or by courier delivery.PAS 97:2021 was sponsored by the Centre for the Protection of National Infrastructure(CPNI).Its production was facilitated by the British Standards Institution(BSI)with input from a panel of industry experts.This booklet provides an introduction to PAS 97.The full version is available to order from http:/ is it for?PAS 97 specifies requirements and gives recommendations for mail screening,set in the broader context of postal security.It is intended for use by those responsible for planning,delivering or procuring mail handling and screening services within organizations,as well as commercial providers of such services.Summary of PAS 97 process Understand the postal threat Understand the ways in which items of mail may cause concern,disruption,or harm Assess the extent to which the organization is a target Understand the organizations mail streams General postal security measures Management and responsibility Internal provision vs.outsourcing Operating procedures and emergency procedures Mail room location,design,layout and construction Screening methods and equipment Human factors Health and safety Decision to consider developing and implementing mail screening and security measuresSelect Screening Levels commensurate with the riskIdentify suitable location for screening facility and appropriate Physical Protective MeasuresFormally record the organizations requirements for mail screening and securityReview regularly,and in response to postal security incidents and significant internal or external changesImplement mail screening and security measuresAssess the risk to the organization from postal threatsA key component of PAS 97 is a series of screening levels.Generally,the greater the commitment of resource and effort to mail screening,the greater the protection that is likely to be achieved.It is,however,important that the organization achieves an appropriate level of screening,balancing the threat it faces with the need for operational efficiency,whilst having the flexibility to adapt screening in response to changes to the threat or the requirements of the organizations business.It might be appropriate to apply different levels of screening to different mail streams,to reflect the different risks associated with the various streams.Screening levelsWhat are discrete threat objects and“white powders”?From a screening perspective,it is helpful to consider hazardous items and materials as falling into two categories:1.discrete threat objects and bulk materials;2.“white powders”.Discrete threat objects and bulk materials covers items and bulk quantities of hazardous materials whose presence should be clearly discernible when mail is X-rayed,even if a large volume of mail is X-rayed at once.This category includes:explosive and incendiary devices(improvised or of commercial or military origin);firearms and ammunition;knives;blades and other sharp items,(e.g.syringe needles,broken glass);offensive material(e.g.faeces,urine);bulk chemicals toxic,corrosive or otherwise harmful,including narcotics;bulk biological materials;bulk radiological(radioactive)materials.People often refer to“white powders”in the context of postal threats.These can include hazardous chemical(including explosive or narcotic),biological or radiological materials,as well as benign materials.Such materials may not be“white”and may not be“powders”;materials may be crystalline(e.g.sugar),oily or waxy residues,or liquids,and might be present in sufficiently small quantities as to be undetectable by typical X-ray-based screening processes.PAS 97:2021 The British Standards Institution 2021Table 1 Screening levels LevelScreening methodProtection afforded againstMeasures common to all screening levelsDiscrete threat objects and bulk materials“White powders”(0)No screening,other than general staff awareness of postal threatsLowVery lowThe chosen screening level(s)shall be implemented in combination with physical protective measures appropriate for each activity being conducted(see Clause 6).Staff shall be suitably trained and shall be deemed competent to carry out the screening activities.Emergency procedures shall be initiated if at any point during screening an item is considered suspicious.1 External visual inspection of every item.X-ray anything of concern,especially larger items(packets,parcels,etc.).ModerateLow2 External visual inspection of every item.X-ray all items in bulk/large batches initially.X-ray again individually or in smaller batches if anything anomalous is observed.Very good to excellentLow3Level 2 followed by:For each item,tap to encourage any powders or similar materials to move to one edge/corner,and feel for presence of any such anomalies.For any items identified as anomalous,open side of envelope or packaging by cutting,and without removing,examine contents visually;remove contents if satisfied safe to do so;inspect outer wrapping and contents for any further evidence of powders and other anomalous items or materials.(Negligible further benefit)Low to moderate4Level 2 followed by:For each item,remove a corner of the envelope/packaging by cutting;tap gently to encourage any powders or other materials and small items to move to that corner,and inspect visually for presence of any such anomalies.For any items identified as anomalous,open side of envelope or packaging by cutting,and without removing,examine contents visually;remove contents if satisfied safe to do so;inspect outer wrapping and contents for any further evidence of powders and other anomalous items or materials.(Negligible further benefit)Moderate to good5Level 2 followed by:For each item,open side of envelope or packaging by cutting,and without removing,examine contents visually;remove contents if satisfied safe to do so;inspect outer wrapping and contents for any further evidence of powders and other anomalous items or materials.(Negligible further benefit)Very goodNOTE 4 The larger the volume of mail X-rayed at once,the harder it is to find smaller threat objects.Mail should therefore be screened in batches,sized so as to provide clear images allowing unambiguous interpretation by the operator.NOTE 5 It is also important to ensure that the volume of material placed in the X-ray machine does not exceed the volume that the system can image;this particularly applies to cabinet X-ray systems.NOTE 6 Consider whether,where and how to cut an envelope/packaging based on the type and size of packaging present,for example,cutting the corner at an acute angle so as to minimize damage to the contents.NOTE 7 Following tapping,it might be appropriate to feel across the whole surface of the item for anomalies in case powders do not move to an edge/corner as might be expected.NOTE 8 Recommended actions upon discovery of any suspicious delivered item are given in Annex B.Protective measuresOnce the different mail streams within the organization have been identified and assessed,and the appropriate screening levels assigned,the next step is to specify and implement the necessary screening and security measures and facilities.Several classes of physical protection measures are detailed in PAS 97;these predominantly relate to the design,construction(including ventilation)and layout of the mail room,but also include personal protective measures.Included in PAS 97Description of physical protection classesRecommended minimum physical protection classes for each screening levelExample schematic layouts for mailroom designImplementationOnce the organizations requirements for mail security and screening capability have been formally stated,the various aspects of implementation can be addressed.Many of the strands will be inter-related so it is important not to consider them in isolation.Included in PAS 97General postal security measures Management and responsibility Operating procedures(including emergency procedures)Mail room/screening facility location,design,layout and construction Screening methods and equipment Human factorsHealth and safety considerationsRecording the organizations requirementsIt is important for the organization to formally record its requirements for mail screening and security in sufficient detail to enable unambiguous implementation either by its own staff,or by a contractor.The information to be recorded includes:a summary of the organizations mail streams,including volumes and timing constraints;a summary of the threats the organization faces;the required level of screening for each mail stream;the physical protective measures associated with the mail handling and screening processes;the location of the mail screening activity;other general postal security measures.It is also important that organizations consider postal security as an integral part of the wider security measures.Action upon discovery of any suspicious delivered item from www.cpni.gov.uk You could discover a suspicious item in a mail room,or anywhere else in the building ensure you have appropriate emergency response plans in place.Avoid unnecessary handling and X-raying If you are holding the item,put it down on a cleared flat surface.Keep it separate so it is easily identifiable.Do not move it,even to X-ray it.If it is in an X-ray facility,leave it there.Move away immediately Clear immediate area and each adjacent room,including rooms above and below.If there is any suggestion of CBR materials,move those directly affected to a safe location close to the incident keep these individuals separate from those not involved.Prevent others approaching or accessing the cleared areas.Do not use mobile phones or two-way radios in the cleared area or within 15 metres of the suspect package.Communicate regularly with staff,visitors and the public.Notify police If the item has been opened,or partially opened prior to being deemed suspicious,it is vital that this is communicated to the police.Ensure informants and witnesses remain available to brief the police,and that the accuracy of their observations is preserved:encourage witnesses immediately to record their observations in writing,and discourage them from discussing the incident or their observations with others prior to the arrival of the police.Further information provided in PAS 97 PAS 97 includes annexes as follows:Annex A Possible indicators that a delivered item may be of concernAnnex B Action upon discovery of any suspicious delivered item Annex C Mail facility layout and construction to minimize the effects of an explosive device or“white powder”Annex D Additional information on X-ray machines for mail screeningAnnex E Mail screening process schematicBibliography BSI 389 Chiswick High Road London W4 4AL United KPAS 97 provides a comprehensive framework to help organizations identify and implement effective postal security measures to reduce their vulnerability to postal threats.AcknowledgementPAS 97 was commissioned by the Centre for the Protection of National Infrastructure(CPNI),who provided the initial draft for development.Its production was facilitated by the British Standards Institution(BSI).In addition we would like to thank the following contributing organizations:Bank of America BBC British Transport Police Canary Wharf Management Counter Terrorism Policing South East Centre for the Protection of National Infrastructure Credit Suisse UK Deutsche Bank Eastern Region Special Operations Unit Counter Terrorism Policing PosteRoute Ltd Royal Mail Group Swiss Post Solutions Scottish Parliament Vodafone Ltd West Midlands Police Acknowledgement is also given to the members of a wider review panel who were consulted in the development of PAS 97.How to order a copyCopies of PAS 97 can be accessed from http:/