The first situation occurrence.

• Terrorists who attempt to carry out a terrorist attack are discovered.

The first discoverer informs others of the situation.

• Report the case to the Chief Counterterrorism Officer. If a terrorist attack is not reported to the Chief Counterterrorism Officer within a few minutes, the discoverer must immediately report it to the Chief Facility Manager and other counterterrorism officers or directors. If the discoverer cannot contact the senior-ranking officers within a few minutes, he/she must take the necessary measures immediately under his own discretion.
• Report the case to the National Intelligence Service (111), Police Office (112), or Fire Station (119).
(Do not activate a fire alarm as this may increase confusion.)

Initial response of the Chief Counterterrorism Officer to the case (A branch manager or branch director)

• Determine the type of terrorist attack.
• Apply a response measure according to the type of terrorist attack.
• Inform the others inside the facility about the situation. (Notify the nearest facility officer if necessary.)
• Operate the emergency contact network.
• Mobilize the terrorist attack response team.
• Report to the Chief Sales Facility Manager. If the Chief Sales Facility Manager cannot be reached within a few minutes, the discoverer needs to take action under his/her own discretion according to the principle of “Action First, Report Later.”
• Consult the officials of the responsible authorities, such as the police and firefighters. Seek advice on the evacuation plan, self-suppression of terrorists, and carrying out independent rescue activities.
• Determine the necessity of carrying out emergency evacuation outside or within the facility.

Respond to the terrorist attack regarding the situation before the responsible authorities arrive.

• The Chief Counterterrorism Officer shall take overall command, and if he/she is not present or cannot take command, a senior-ranking officer among the counterterrorism officers must take over the job.

The situation ends after the arrival of the responsible authorities.

• Carry out response measures/duties under the instructions of the responsible authorities until the situation is resolved.
• Carry out activities, such as recovering facilities and resuming business, after the situation is resolved.