Skip Navigation

  • Home
  • Contact us
  • FAQ
  • Glossary
  • Public key
  • Sitemap
  • Cymraeg
  • What's new
CPNI - Centre for the Protection of National Infastructure

Advanced search

  • About CPNI
  • The threats
  • Security planning
  • Methods of attack
  • Protecting your assets
  • Products and services
    • CSIRTUK advisories
      • Advisories archive
    • General protective security publications
    • InfoSec briefings
    • InfoSec technical notes
    • InfoSec vulnerability disclosures
    • Good practice guidelines
    • Viewpoints
    • Information exchanges
    • Risk Management Delivery Group
  • Research
Home > Products and services > CSIRTUK advisories > Advisories archive > March 2007 > Advice on post room security and procedures

March 2007

Advice on post room security and procedures

ID: 65
Ref: 007/2007
Date: 07 March 2007:17:41:50
Version: 1

Title: Advice on post room security and procedures
Abstract: Although there is no indication to suggest that the recent spate of postal bombs in UK is a threat to national security, the following CPNI advice on post room security and procedures may be helpful.

Although there is no indication to suggest that the recent spate of postal bombs in UK is a threat to national security, the following CPNI advice on post room security and procedures may be helpful.

Post rooms

Delivered items, which include letters, parcels, packages and anything delivered by post or courier, have been a commonly used terrorist device. A properly conducted risk assessment should give you a good idea of the likely threat to your organisation and indicate precautions you need to take.

Delivered items may be explosive or incendiary (the two most likely kinds), or conceivably chemical, biological or radiological. Anyone receiving a suspicious delivery is unlikely to know which type it is, so procedures should cater for every eventuality. A delivered item will probably have received fairly rough handling in the post and so is unlikely to detonate through being moved, but any attempt at opening it may set it off. Unless delivered by courier, it is unlikely to contain a timing device. Delivered items come in a variety of shapes and sizes; a well-made one will look innocuous but there may be tell-tale signs.

Indicators of a suspicious delivered item:

* It is unexpected or of unusual origin or from an unfamiliar sender.

* There is no return address or the address cannot be verified.

* It is poorly or inaccurately addressed, e.g. incorrect title, spelt wrongly,
title but no name or addressed to an individual no longer with the company.
The address has been printed unevenly or in an unusual way, the writing is in
an unfamiliar or unusual style.

* There are unusual postmarks or postage paid marks.

* A Jiffy bag, or similar padded envelope, has been used.

* It seems unusually heavy for its size. Most letters weigh up to about 30g, whereas
most effective letter bombs weigh 50-100g and are 5mm or more thick.

* It has more than the appropriate value of stamps for its size and weight.

* It is marked 'personal' or 'confidential'.

* It is oddly shaped or lopsided.

* The envelope flap is stuck down completely (a normal letter usually has an ungummed
gap of 35mm at the corners).

* There is a pin-sized hole in the envelope or package wrapping.

* There is any unusual smell, including but not restricted to almonds, ammonia or marzipan.

* It has greasy or oily stains on the envelope.

* There is an additional inner envelope and it is tightly taped or tied (however,
in some organisations sensitive material is sent in double envelopes as standard
procedure).

What you can do

Although any suspect item should be treated seriously, remember that the great majority will be false alarms and a few may be hoaxes. Try to ensure that your procedures, while effective, are not needlessly disruptive. Take the following into account in your planning:

* Seek advice from your local police CTSA on the threat and on defensive measures.

* Consider processing all incoming post and deliveries at one point only. This should
ideally be off-site or in a separate building, or at least in an area that can easily
be isolated and in which deliveries can be handled without taking them through other
parts of the building.

* Make sure that all staff who handle post are briefed and trained. Include reception
staff. Encourage regular correspondents to put their return address on each item.

* Ensure that all sources of incoming post (e.g. Royal Mail, couriers, hand delivery)
are included in your screening process.

* Ideally, post rooms should have independent air conditioning and alarm systems,
as well as scanners and x-ray machines. However, while post scanners may detect
devices for spreading chemical, biological and radiological (CBR) materials
(e.g. explosive devices), they will not detect the CBR materials themselves.
A range of commercial CBR detection technology is available. In the first
instance, seek advice from your local police force Counter Terrorism Security
Adviser. Post rooms should also have their own washing and shower facilities,
including soap and detergent.

* Staff need to be aware of the usual pattern of deliveries and to be briefed of
unusual deliveries. Train them to open post with letter openers (and with minimum
movement), to keep hands away from noses and mouths and always to wash their hands
afterwards. Staff should not blow into envelopes or shake them. Packages suspected
of containing CBR material should ideally be placed in a double-sealed bag.

* Consider whether staff handling post need protective equipment such as latex gloves
and face masks (seek advice from a qualified health and safety expert). Keep overalls
and footwear available in case staff need to remove contaminated clothing.

* Make certain that post opening areas can be promptly evacuated. Rehearse evacuation
procedures and route, which should include washing facilities in which contaminated
staff could be isolated and treated.

* Prepare signs for display to staff in the event of a suspected or actual attack.

Reference:
http://www.cpni.gov.uk/ProtectingYourAssets/PhysicalAttacks/postrooms.aspx

_____________________________________________________________________________

CPNI values your feedback.

1. Which of the following most reflects the value of the advisory to you?
(Place an 'X' next to your choice)

Very useful:__ Useful:__ Not useful:__

2. If you did not find it useful, why not?


3. Any other comments? How could we improve our advisories?


Thank you for your contribution.
______________________________________________________________________________


  • Accessibility |
  • Terms and conditions |
  • Privacy statement |
  • Data protection act |
  • Freedom of information |