Counter-Terrorism Awareness
ACT reporting, hostile reconnaissance signs, JTAC/MI5 threat levels, marauding attack response (Run Hide Tell / Locate Contain Evacuate), the HOT protocol for suspicious packages, the Prevent duty and Channel programme, and Schedule 7 port powers — an officer quick-reference.
Unofficial independent resource — always verify with official sources (College of Policing, your force, PFEW).
Reviewed by BlueLineHub Editorial
What is the operational and legal framework for counter-terrorism awareness, from reporting hostile reconnaissance to Schedule 7 port powers?
Report suspicious activity via the Anti-Terrorism Hotline (0800 789 321, gov.uk/ACT) — signs of hostile reconnaissance include photographing security measures, testing response times, sketching layouts, repeated visits with no purpose, and cover stories that don't check out. The current JTAC/MI5 threat levels are LOW (an attack is highly unlikely), MODERATE (an attack is possible, but not likely), SUBSTANTIAL (an attack is likely), SEVERE (an attack is highly likely), and CRITICAL (an attack is highly likely in the near future). Public advice in a marauding attack is Run Hide Tell; the police response is Locate, Contain, Evacuate. A suspicious package is assessed with the HOT protocol (Hidden / Obviously suspicious / Typical) — don't touch, evacuate, cordon 100m+, call control.
The Prevent duty (Counter-Terrorism and Security Act 2015 s.26) is a statutory duty on 'specified authorities' listed in Schedule 6 — for policing, the chief officer of police and the police and crime commissioner (also MOPAC, British Transport Police, and the Civil Nuclear Police Authority) — to have due regard to preventing people being drawn into terrorism; it is not a direct duty on individual constables, but cascades to officers through force policy and training. The Channel programme (s.36) is the multi-agency panel that assesses and supports people identified as vulnerable to radicalisation. Schedule 7 of the Terrorism Act 2000 lets an examining officer stop and question anyone at a port, airport, or international rail station without reasonable suspicion; an examination can last up to 6 hours, but questioning beyond the first hour requires the person to be detained (Sch 7 para 6A). Fingerprints and non-intimate DNA samples from a person detained under Schedule 7 are taken under Schedule 8 para 10 TA 2000, not Schedule 7 itself. The National Security Act 2023 introduced a separate state-threats regime but did not change the Prevent duty or Schedule 7 port powers.
A reference to counter-terrorism awareness: the ACT reporting route, signs of hostile reconnaissance, the current JTAC/MI5 threat levels, the public and police response to a marauding attack, the HOT protocol for a suspicious package, the Prevent duty and Channel programme, and Schedule 7 port powers. It is educational reference, not tactical guidance — follow your force's CT policy, training and current law.
Hostile Reconnaissance Signs
Behaviour that may indicate planning for an attack.
- Photographing or filming security measures
- Testing response times
- Making sketches or notes of layouts
- Multiple visits with no apparent purpose
- Using cover stories that don't check out
- Showing interest in security personnel
- Timing of routine activities
Threat Levels (JTAC / MI5)
Set by the Joint Terrorism Analysis Centre (JTAC) and MI5. Current level published on the MI5 website.
| Level | Meaning |
|---|---|
| LOW | An attack is highly unlikely. |
| MODERATE | An attack is possible, but not likely. |
| SUBSTANTIAL | An attack is likely. |
| SEVERE | An attack is highly likely. |
| CRITICAL | An attack is highly likely in the near future. |
Marauding Attack Response — Public advice: Run Hide Tell
RUN
Escape if possible.
HIDE
Find cover, silence phone.
TELL
Call 999.
Marauding Attack Response — Police response: Locate, Contain, Evacuate
LOCATE
Find the threat.
CONTAIN
Secure the area.
EVACUATE
Remove casualties.
Suspicious Packages — HOT Protocol
If the answer is YES to any of these, don't touch it.
- HHidden
Has it been hidden?
- OObviously suspicious
Is it obviously suspicious?
- TTypical
Is it typical for this location?
Prevent Duty
The Prevent duty (Counter-Terrorism and Security Act 2015 s.26) is a statutory duty on ‘specified authorities’ to have due regard to the need to prevent people being drawn into terrorism — it is not a direct duty on individual constables.
The specified authorities for policing, listed in Schedule 6 CTSA 2015, are the chief officer of police, the police and crime commissioner (and, in London, the Mayor's Office for Policing and Crime), the British Transport Police, and the Civil Nuclear Police Authority. The duty cascades to individual officers operationally through force policy and training, not through s.26 itself.
Signs of Radicalisation
- Expressing extremist views
- Accessing extremist material online
- Changes in behaviour or appearance
- Isolation from family and friends
Schedule 7 Powers — Terrorism Act 2000
Ports, airports, and international rail.
| Aspect | Detail |
|---|---|
| Power | An examining officer — a constable, or a designated immigration or customs officer — may stop and question any person at a port, airport, or international rail station to determine whether they appear to be someone concerned in the commission, preparation, or instigation of acts of terrorism. Schedule 7 also allows examination of the person's property and goods. |
| No reasonable suspicion required | Unlike most police powers, Schedule 7 does not require reasonable suspicion (para 2(4)). The power exists to allow screening at border controls. |
| Time limits & scope | An examination may last up to 6 hours in total. Questioning beyond the first hour requires the person to be detained (Sch 7 para 6A, inserted by the Anti-social Behaviour, Crime and Policing Act 2014). Fingerprints and non-intimate DNA samples from a person detained under Schedule 7 are taken under Schedule 8 para 10 TA 2000 — not under Schedule 7 itself. A constable may act as an examining officer without separate designation; immigration and customs officers must be designated by the Secretary of State. All examining officers must be accredited and trained under the Schedule 7 Code of Practice. |
Related reading
Primary sources
BlueLineHub is independent and unofficial. Always verify with the authoritative source below.
- Verify on official source
Counter-Terrorism and Security Act 2015, section 26 — general duty on specified authorities
The Prevent duty: a duty on specified authorities to have due regard to the need to prevent people being drawn into terrorism.
Last checked: August 2026 - Verify on official source
Counter-Terrorism and Security Act 2015, Schedule 6 — specified authorities
The list of bodies bound by the s.26 Prevent duty, including (for policing) the chief officer of police, the PCC, MOPAC, British Transport Police, and the Civil Nuclear Police Authority.
Last checked: August 2026 - Verify on official source
Counter-Terrorism and Security Act 2015, section 36 — assessment and support: local panels
The Channel programme: multi-agency local panels assessing and supporting individuals vulnerable to being drawn into terrorism.
Last checked: August 2026 - Verify on official source
Terrorism Act 2000, Schedule 7 — port and border controls
The power to stop, question, and examine a person and their property at a port, airport, or international rail station without reasonable suspicion, and the associated time limits.
Last checked: August 2026 - Verify on official source
Terrorism Act 2000, Schedule 8 — detention
Paragraph 10: the power to take fingerprints and non-intimate DNA samples from a person detained under Schedule 7.
Last checked: August 2026 - Verify on official source
Terrorism threat levels — gov.uk / MI5
The current JTAC/MI5 threat-level definitions (LOW to CRITICAL) and the current published national threat level.
Last checked: August 2026
Frequently asked
- Who does the Prevent duty under CTSA 2015 s.26 actually bind?
- It binds the 'specified authorities' listed in Schedule 6 CTSA 2015 — for policing, the chief officer of police and the police and crime commissioner (also MOPAC, British Transport Police, and the Civil Nuclear Police Authority) — not individual constables directly. It cascades to officers operationally through force policy and training.
- Can Schedule 7 be used without reasonable suspicion, and for how long?
- Yes — Schedule 7 TA 2000 does not require reasonable suspicion (para 2(4)). An examination may last up to 6 hours, but questioning beyond the first hour requires the person to be detained under Sch 7 para 6A (inserted by the Anti-social Behaviour, Crime and Policing Act 2014).
- Under which power are fingerprints and DNA taken from a person examined under Schedule 7?
- Under Schedule 8 para 10 TA 2000, from a person detained under Schedule 7 — not under Schedule 7 itself.