Skip to content

Counter-Terrorism Awareness

ACT reporting, hostile reconnaissance signs, JTAC/MI5 threat levels, marauding attack response (Run Hide Tell / Locate Contain Evacuate), the HOT protocol for suspicious packages, the Prevent duty and Channel programme, and Schedule 7 port powers — an officer quick-reference.

Unofficial independent resource — always verify with official sources (College of Policing, your force, PFEW).

Last reviewed: 26 August 2026 · Next review due: 26 February 2027

Reviewed by BlueLineHub Editorial

What is the operational and legal framework for counter-terrorism awareness, from reporting hostile reconnaissance to Schedule 7 port powers?

Report suspicious activity via the Anti-Terrorism Hotline (0800 789 321, gov.uk/ACT) — signs of hostile reconnaissance include photographing security measures, testing response times, sketching layouts, repeated visits with no purpose, and cover stories that don't check out. The current JTAC/MI5 threat levels are LOW (an attack is highly unlikely), MODERATE (an attack is possible, but not likely), SUBSTANTIAL (an attack is likely), SEVERE (an attack is highly likely), and CRITICAL (an attack is highly likely in the near future). Public advice in a marauding attack is Run Hide Tell; the police response is Locate, Contain, Evacuate. A suspicious package is assessed with the HOT protocol (Hidden / Obviously suspicious / Typical) — don't touch, evacuate, cordon 100m+, call control.

The Prevent duty (Counter-Terrorism and Security Act 2015 s.26) is a statutory duty on 'specified authorities' listed in Schedule 6 — for policing, the chief officer of police and the police and crime commissioner (also MOPAC, British Transport Police, and the Civil Nuclear Police Authority) — to have due regard to preventing people being drawn into terrorism; it is not a direct duty on individual constables, but cascades to officers through force policy and training. The Channel programme (s.36) is the multi-agency panel that assesses and supports people identified as vulnerable to radicalisation. Schedule 7 of the Terrorism Act 2000 lets an examining officer stop and question anyone at a port, airport, or international rail station without reasonable suspicion; an examination can last up to 6 hours, but questioning beyond the first hour requires the person to be detained (Sch 7 para 6A). Fingerprints and non-intimate DNA samples from a person detained under Schedule 7 are taken under Schedule 8 para 10 TA 2000, not Schedule 7 itself. The National Security Act 2023 introduced a separate state-threats regime but did not change the Prevent duty or Schedule 7 port powers.

All operational references

A reference to counter-terrorism awareness: the ACT reporting route, signs of hostile reconnaissance, the current JTAC/MI5 threat levels, the public and police response to a marauding attack, the HOT protocol for a suspicious package, the Prevent duty and Channel programme, and Schedule 7 port powers. It is educational reference, not tactical guidance — follow your force's CT policy, training and current law.

Hostile Reconnaissance Signs

Behaviour that may indicate planning for an attack.

  • Photographing or filming security measures
  • Testing response times
  • Making sketches or notes of layouts
  • Multiple visits with no apparent purpose
  • Using cover stories that don't check out
  • Showing interest in security personnel
  • Timing of routine activities

Threat Levels (JTAC / MI5)

Set by the Joint Terrorism Analysis Centre (JTAC) and MI5. Current level published on the MI5 website.

LevelMeaning
LOWAn attack is highly unlikely.
MODERATEAn attack is possible, but not likely.
SUBSTANTIALAn attack is likely.
SEVEREAn attack is highly likely.
CRITICALAn attack is highly likely in the near future.

Marauding Attack Response — Public advice: Run Hide Tell

RUN

Escape if possible.

HIDE

Find cover, silence phone.

TELL

Call 999.

Marauding Attack Response — Police response: Locate, Contain, Evacuate

LOCATE

Find the threat.

CONTAIN

Secure the area.

EVACUATE

Remove casualties.

Suspicious Packages — HOT Protocol

If the answer is YES to any of these, don't touch it.

HHidden

Has it been hidden?

OObviously suspicious

Is it obviously suspicious?

TTypical

Is it typical for this location?

Prevent Duty

The Prevent duty (Counter-Terrorism and Security Act 2015 s.26) is a statutory duty on ‘specified authorities’ to have due regard to the need to prevent people being drawn into terrorism — it is not a direct duty on individual constables.

The specified authorities for policing, listed in Schedule 6 CTSA 2015, are the chief officer of police, the police and crime commissioner (and, in London, the Mayor's Office for Policing and Crime), the British Transport Police, and the Civil Nuclear Police Authority. The duty cascades to individual officers operationally through force policy and training, not through s.26 itself.

Signs of Radicalisation

  • Expressing extremist views
  • Accessing extremist material online
  • Changes in behaviour or appearance
  • Isolation from family and friends

Schedule 7 Powers — Terrorism Act 2000

Ports, airports, and international rail.

AspectDetail
PowerAn examining officer — a constable, or a designated immigration or customs officer — may stop and question any person at a port, airport, or international rail station to determine whether they appear to be someone concerned in the commission, preparation, or instigation of acts of terrorism. Schedule 7 also allows examination of the person's property and goods.
No reasonable suspicion requiredUnlike most police powers, Schedule 7 does not require reasonable suspicion (para 2(4)). The power exists to allow screening at border controls.
Time limits & scopeAn examination may last up to 6 hours in total. Questioning beyond the first hour requires the person to be detained (Sch 7 para 6A, inserted by the Anti-social Behaviour, Crime and Policing Act 2014). Fingerprints and non-intimate DNA samples from a person detained under Schedule 7 are taken under Schedule 8 para 10 TA 2000 — not under Schedule 7 itself. A constable may act as an examining officer without separate designation; immigration and customs officers must be designated by the Secretary of State. All examining officers must be accredited and trained under the Schedule 7 Code of Practice.

Related reading

Primary sources

BlueLineHub is independent and unofficial. Always verify with the authoritative source below.

  • Counter-Terrorism and Security Act 2015, section 26 — general duty on specified authorities

    The Prevent duty: a duty on specified authorities to have due regard to the need to prevent people being drawn into terrorism.

    Last checked: August 2026
    Verify on official source
  • Counter-Terrorism and Security Act 2015, Schedule 6 — specified authorities

    The list of bodies bound by the s.26 Prevent duty, including (for policing) the chief officer of police, the PCC, MOPAC, British Transport Police, and the Civil Nuclear Police Authority.

    Last checked: August 2026
    Verify on official source
  • Counter-Terrorism and Security Act 2015, section 36 — assessment and support: local panels

    The Channel programme: multi-agency local panels assessing and supporting individuals vulnerable to being drawn into terrorism.

    Last checked: August 2026
    Verify on official source
  • Terrorism Act 2000, Schedule 7 — port and border controls

    The power to stop, question, and examine a person and their property at a port, airport, or international rail station without reasonable suspicion, and the associated time limits.

    Last checked: August 2026
    Verify on official source
  • Terrorism Act 2000, Schedule 8 — detention

    Paragraph 10: the power to take fingerprints and non-intimate DNA samples from a person detained under Schedule 7.

    Last checked: August 2026
    Verify on official source
  • Terrorism threat levels — gov.uk / MI5

    The current JTAC/MI5 threat-level definitions (LOW to CRITICAL) and the current published national threat level.

    Last checked: August 2026
    Verify on official source

Frequently asked

Who does the Prevent duty under CTSA 2015 s.26 actually bind?
It binds the 'specified authorities' listed in Schedule 6 CTSA 2015 — for policing, the chief officer of police and the police and crime commissioner (also MOPAC, British Transport Police, and the Civil Nuclear Police Authority) — not individual constables directly. It cascades to officers operationally through force policy and training.
Can Schedule 7 be used without reasonable suspicion, and for how long?
Yes — Schedule 7 TA 2000 does not require reasonable suspicion (para 2(4)). An examination may last up to 6 hours, but questioning beyond the first hour requires the person to be detained under Sch 7 para 6A (inserted by the Anti-social Behaviour, Crime and Policing Act 2014).
Under which power are fingerprints and DNA taken from a person examined under Schedule 7?
Under Schedule 8 para 10 TA 2000, from a person detained under Schedule 7 — not under Schedule 7 itself.