Proposal

for Threat Assessment And Conceptual Design Submitted To:

Apivatana Chandracherd Project Coordinator THAI Security System Suvarnabhumi Airport Project

Submitted By: Aanko Technologies Inc. 419 Mason Street, Suite 207 Vacaville, CA 95688 (707) 448-8456 www.aanko.com Date of Submission: August 25, 2004

Suvarnabhumi Airport Threat Assessment and Security Design

Project Abstract
The project consists of conducting a Front-End Analysis, comprised of a Threat Assessment and a Security Design Plan for security upgrades at the Suvarnabhumi Airport. This analysis will provide a set of practical tools designed for Airport security improvements for its economic viability. This Statement of Work addresses security issues of the airport service area. This Statement of Work adopts the following goals to ensure the Airport will continue to fulfill its role in the national transportation system, and expand its role as a center for economic growth for businesses seeking to relocate or expand their operations. This Statement of Work will: Produce a feasible security plan consistent with the Suvarnabhumi Airport Master Plan to accommodate future commercial and general aviation needs, and corporate business expansion in a safe, efficient, and secure manner Assure public trust and private investment in the airport is protected and enhanced Maximize compatibility between the airport and its economic environment, addressing both business convenience and security environment sensitivities Assure advantages of new security technology are available to airport users and that enhanced security services are provided to them Stay consistent with the Airport Master Plan priority allocation of available resources, including financial, land uses, and existing facilities, while meeting the airports security needs

Three main tasks (objectives), each with integrated subtasks, will assist in meeting these goals. The timeline for completion of these tasks is 40 business days from project initiation.

Aanko Technologies Inc.

Suvarnabhumi Airport Threat Assessment and Security Design

Table of Contents
Project Abstract...........................................................................................................................................2 Project Overview.........................................................................................................................................4 Project Tasks...............................................................................................................................................4

Task 1 Project Formulation & Coordination........................................................................5 Task 2 Threat Assessment....................................................................................................5

Project Deliverables ....................................................................................................................................9 Project Timeline and Investment.................................................................................................................9 Organization and Credentials.......................................................................................................................9

Key Aanko Project Team Members.......................................................................................11

Referenced Projects:..................................................................................................................................12

Aanko Technologies Inc.

Suvarnabhumi Airport Threat Assessment and Security Design

Project Overview
The overall goals of the Threat Assessment and Security Design are to provide a set of practical security management tools and processes, designed for Suvarnabhumi Airport to improve the security and economic viability of the airport, consistent with its defined roles. While these measures must be accomplished, Aanko Technologies Inc. recognizes that improved security measures must be achieved and still maintain a reasonable level of service and convenience for the Suvarnabhumi Airport customer. The project will assess the security of the Airports infrastructure. This will be accomplished in the following order: 1. Identify and prioritize infrastructure (facilities and systems) in terms of their functions and strategic significance; 2. Assess vulnerabilities of these assets to natural events (earthquakes, tornadoes, floods, etc.), technical events (power interruption, failure or malfunction) and human/terrorist events (criminal action, bombings, release of chemical or biological agents, or cyber-sabotage); 3. Determine the likely direct and indirect consequences of such events as well as crossover effects on other infrastructure systems; 4. Examine interdependencies of the infrastructure with other systems such as electrical, emergency, energy, and intermodal systems, and; 5. Design a risk management system, in the form of a report, that outlines the policies, procedures and countermeasures measures needed to reduce the likelihood or consequences of natural, technical or human/terrorist events. The resulting report will include physical security enhancement recommendations the airport can use to strategically implement their capital improvement programs, and a process for integrating standard management tools such as minimum operating standards, rules and regulations, and a rate setting mechanism. This report will include security enhancements for the terminal area. To ensure the safety and security of Suvarnabhumi Airport facilities, the project team will know and comply with construction safety guidelines. They will also know and comply with airport safety checklists, procedures, and guidelines, and obtain safety briefings from the airport manager prior to performance.

Project Tasks
In aid in this project, the following is required upon team arrival: 1. A list and 2 sets of buildings and facilities maps within airport areas of responsibility 2. Two copies of any safety and/or security plans for current and all out years
Aanko Technologies Inc. 4

Suvarnabhumi Airport Threat Assessment and Security Design

3. Two copies of the Airport Master Plan 4. Access to all areas of responsibility The following three tasks provide the Statement of Work envisioned to achieve the two overarching goals of the project. Task 1 Project Formulation & Coordination Pre-Assessment. This consultation will develop the scope of the Front End Analysis, consisting of the Threat Assessment and the Business Impact Assessment for the airport, and then develop objectives with staff to implement the project Statement of Work. Task 2 Threat Assessment Task 2 includes the services necessary to develop a comprehensive Threat Assessment in conjunction with Airport staff. Task 2 is broken down into five subtasks: Subtask 2.1Asset Identification Identify the airports important missions/functions to be assessed within the AOA, Landside, Tenant Security Areas, and corporate park areas, Identify the undesirable events that could affect the missions/functions, Determine assets needing protection to minimize impacts of undesirable events, and; Determine malevolent acts that could reasonably cause these events.

Subtask 2.2 Definitive Threat Assessment 2.2.1. Prioritize Adverse Events/Consequences. We will prioritize adverse events/consequences affecting the Airports footprint including: Loss of critical function and/or major service disruption, Intentional attack on public safety via airport assets, or other criminal and terrorist attack, and; Loss of public confidence. 2.2.2. Scenario Definition. We will define scenarios of how malevolent acts might be conducted (including developing attributes of insider and outsider threats), such as: Physical damage, Chemical, biological and radiological contamination, Criminal theft of airport assets and, Interdependency disruptions (e.g., electrical, transportation, etc.)

Aanko Technologies Inc.

Suvarnabhumi Airport Threat Assessment and Security Design

2.2. 3. Risk Likelihood. We will assess the likelihood (qualitative probability) of such malevolent acts from defined threat sources (terrorist, insider, determined vandal, casual vandal, criminal, etc). Subtask 2.3 Vulnerability Characterization 2.3.1. Data Collection. We will systematically characterize the airport infrastructure, to include the collection of performance data on: The vulnerability of important facilities, processes, and assets to identified threats (coordinated with national security assessments of the threat), Physical protection system features of deterrence, detection, delay, and response, Cyber protection system features, Security policies and procedures and compliance with same

Our characterization will be accomplished through identification and review of the following system components: a. Physical Infrastructure Perimeter Systems Entry/Access Control Systems Surveillance Measures Vehicle Control Materials Delivery Controls Control Of Hazardous Materials Systems Security (Manholes, Tributaries, Joint-Jurisdiction Use, Etc.) Controls (Manual And Computer)

b. People Processes Human Resource Policies Employee Identification and Welfare Strategic Planning and Training (tenant and district employees)

c. Knowledge Base Day-To-Day And Contingency Planning (Prevention, Response & Recovery) Key Management Documents (MOUs, Operational Guides, Etc.) Records (Accounting, Customer Lists, And System Maps) Emergency Plans

d. Information Technology And Communications

Aanko Technologies Inc.

Suvarnabhumi Airport Threat Assessment and Security Design

1. 2. 3. 4. 5.

Internal Policies And Data Planning Information Protection Emergency Communications Internet/Intranet Community Communication Process (Interruptions, Risk, Media, Etc.)

e. Interdependencies Electric power Substations Transmission lines Transformers Standby generators Transportation Vehicles (including construction equipment) Supplies, spare parts, and fuel Roadway infrastructure Other infrastructure

2.3.3. Consequence Assessment We will develop a generic consequence table to rank identified critical assets. Subtask 3-Security System Effectiveness and Risk Reduction 2.4.1. Physical Protection System Description. Using the information gathered in Subtask 2, we will describe the physical protection system needed. 2.4.3. Protection System Effectiveness and Vulnerabilities. We will apply the adversary attack scenarios (subtask 2.2.2.) to the documented protection system to estimate system effectiveness and identify system vulnerabilities. A quantified risk analysis will be developed and used. 2.4.4. Improvements. We will identify appropriate means to prevent the undesired events, reduce the consequences, or deter the adversary. A revised risk analysis will be conducted to assess the results of the proposed changes. In addition to looking at the entire airport for enhancements, improvements will also be looked at for the following areas: PHYSICAL SECURITY AND ACCESS CONTROL FACILITY PERIMETER The perimeter of the airport facility in some cases, especially where baggage, cargo and storage facilities are located, can be protected with a variety of technologies, including physical barriers, fencing, and video surveillance, all of which could be enhanced by personnel patrols. In other instances reinforcement of a fence line with a ditch or other obstruction may enhance the physical perimeter and protect both transportation modes

Aanko Technologies Inc.

Suvarnabhumi Airport Threat Assessment and Security Design

and personnel from unauthorized access. In addition, CCTV surveillance and alarms complement the security of a reinforced fence line to establish a system of monitoring and denying access to unauthorized personnel. It is especially important in airport facilities located in or near urban areas to have a secure perimeter barrier, which can be enhanced by security technology.

PARKING
Control of access to employee and passenger parking areas is important to maximize viewing of unauthorized personnel. Parking areas can utilize CCTV surveillance, electronic access control, and in some cases biometric identification technologies.

ACCESS POINTS AND GATES

Gates will be looked at to see if they are critical to the access of the facility how they are reinforced and secured. All access points maybe enhanced with CCTV surveillance and gate alarms.

LIGHTING
To prevent unauthorized access, controlled adequate lighting should be provided to enable clear illumination for all airport facility areas, including perimeter fence lines, entrances/exits, and gates. This illumination is to ensure proper visibility, either by security personnel or electronic surveillance of approaching persons or vehicles.

BUILDINGS, WAREHOUSES, AND TERMINALS

For security purposes, areas adjacent to warehouses, sheds, baggage and cargo, and passenger terminals will be recommended for a buffer zone around the entire building. All obstructions that would prevent the viewing of the building entrances by security personnel will be recommended for removal and all doors and windows will be analyzed for equipping them with high security locking devices. Consideration will be given to alarm system installations, CCTV surveillance cameras, and electronic access control devices to secure computers, airport facility electrical and critical infrastructure, as well as confidential storage areas.

BAGGAGE AND CARGO DELIVERY AREA AND GATE RECEPTION AREA

In order to prevent terrorists from gaining access to a facility and utilizing the transportation mode as a weapon of mass destruction, as well as preventing unauthorized access to baggage and cargo areas, we will look at procedural issues for obtaining authorized delivery clearance for any carrier entering the facility. Limited access to authorized personnel, sealed container cargo areas from unauthorized access, and inspection of cargo containers will be looked at to be undertaken on a regular basis. Drivers Access will be reviewed. The baggage and cargo delivery and gate reception areas may be enhanced by CCTV surveillance cameras and electronic access control devices.

SECURITY OF EMPLOYEES, PASSENGERS, AND CREW

Employee assess will be analyzed for wearing distinctive identification cards to act as
Aanko Technologies Inc. 8

Suvarnabhumi Airport Threat Assessment and Security Design

authorization for accessing restricted areas. Use of electronic access control and biometric identification technologies will be reviewed for applicability for this purpose. Subtask 4-Report Preparation. We will provide a prioritized plan for security upgrades, capital upgrades to Suvarnabhumi Airport facilities, modifications of operational procedures, and/or policy changes to mitigate identified risks to critical assets. The plan will include a cost-benefit basis for improvements. The plan for upgrades will include physical and operational components, address the geographical locations where security surveillance, alarms, and/or electronic equipment status should be monitored, and the operational approach to responding to abnormal or alarm conditions. The plan will provide for integration of new security information with other agency information technology (i.e., national security enhancements, etc.). The plan will provide the Suvarnabhumi Airport with general specifications, and conceptual details to enable them to proceed with physical and information technology improvements as recommended. Security technology use will be promoted with the intent of increasing security and reducing the chance of terrorist acts. The Plan will specify how security technology will: Increase the effectiveness and safety of airport and airline operations and enforcement;

Decrease the facility and personnel vulnerabilities to terrorist and criminal activities; Serve as a force multiplier for airport and airline operators and enforcement agencies; Enable new technological capabilities for airport and airliner security and control; Facilitate rapid responses for law enforcement, military, and other mobilizations to meet terrorist threats.

The plan will provide a graded (tiered) level of protection that will allow a range of cost options/levels of security to be developed and will be scalable to provide flexibility for further improvements if needed.

Project Deliverables
The following deliverables will be provided to the Airport within 60 business days from project initiation: 1. Threat Assessment Report, with recommended security plan (three hard copies and 1 electronic copy on Microsoft Word 2000 and/or Excel 2000). 2. Conceptual Design Plan (three hard copies and 1 electronic copy on Microsoft Word 2000 and/or Excel 2000).

Project Timeline and Investment

The timeline for completion of these tasks is 60 business days from project initiation, at an investment to be determined by the Airport and the USTDA.

Organization and Credentials

Aanko Technologies Inc.

Suvarnabhumi Airport Threat Assessment and Security Design

Aanko Technologies Inc. is a California Certified Minority and Veteran-owned Small Business Enterprise providing antiterrorism, safety and security solutions since the summer of 1997. We are located on the Capitol Corridor, situated between the San Francisco Bay Area and the California State Capitol of Sacramento, with offices in Los Angeles and New York. The Aanko Team comes from a broad multicultural background and is part of antiterrorism, safety and security advisory groups throughout the country, having been involved in all aspects of security assessments including Airport security vulnerability assessments. We have aviation experts, professional engineers, security specialists, Certified Industrial Technologists, Certified Industrial Hygienists and Information & Materials Engineers as part of our multidisciplinary team, including capabilities from a diverse pool of sub consultants. Our Aanko Team has assisted Fortune 500 companies, municipalities, aviation and energy industries healthcare facilities, police agencies, fire departments, universities and Ports through security vulnerability assessments, developing emergency response plans, terrorism countermeasures, injury and illness prevention plans, hazardous materials business plans, employee training programs, and marketing instruments for turning risk into revenue generation. Our assessments have identified the important missions/functions of systems and have helped increase client safety and security while recovering over 50 million dollars in client corporate assets. We assist client efforts in developing and implementing security systems, while enhancing revenue. Aanko team members include specialists in airport facilities, threat analyses and vulnerability assessments, airport security plans, security systems design, detection and biometric technologies, systems integration, and blast-resistant facilities. Our approach focuses on developing cost-effective solutions within a framework that employs technology, facility improvements, and the operating systems to maintain a high level of service within airport service areas. As needed, security requirements on the roadway and parking system, AOA, and landside are addressed, in consult with government staffs. Aanko Technologies Inc. will direct overall operations from a field office in Bangkok. Our corporate office in Loa Angeles will support this project. Aanko Technologies Inc. views its field offices as an extension of its Corporate Office. Aanko Technologies Inc. fully supports all project offices managerially, technically and financially. We carry general liability, workman compensation and auto insurance, as well as errors and omissions insurance. Our Aanko Team employs a systems approach to client vulnerability, which means we work to improve the performance of the entire system, rather than simply optimizing individual security system components. The aviation infrastructure is comprised of many complex components that must work together as an integrated whole. To protect one component of the system and neglect the protection of others will not achieve the objective of improving the security within your infrastructure, or ensure you maintain or expand your client base. This systems approach provides the ability to assess critical interactions between different system components, which are

Aanko Technologies Inc.

10

Suvarnabhumi Airport Threat Assessment and Security Design

frequently where failures occur, and then design systems that promote revenue generation; versus adding another cost your bottom line. When we conduct a threat assessment of the system, we also note different modes of operation and conditions of service because of seasonal variation. Our work also includes understanding of your Airport Master Plan information and how the Airport communicates information and warnings about emergency situations, failures in components of the security system, and access restrictions affecting users. We review facility characterization and their physical protection systems, identify existing physical protection technologies and their effectiveness on the system as a whole, and then recommend risk reduction strategies to mitigate vulnerabilities of the system. Key Aanko Project Team Members The Aanko Technologies Inc. project teams are led by CEO Steve Longoria, a Certified Counterterrorism Planner and Certified Project Manager. Mr. Longoria has over 24 years of hands on experience in leading and conducting security vulnerability assessments for Department of Defense Airports and airfields across the world, as well as municipalities and corporate facilities here in the United States. Mr. Longoria has the distinct honor of being the only person in Department of Defense history to be recognized as the top processional in three different career classifications: Antiterrorism, Security, and Safety. Mr. Longoria helped design operational risk management processes for European U.S. Embassies, in addition to leading multinational engineering teams in assessing interdependent critical infrastructures at airports throughout the world. His expertise helped design and build capital improvement projects to mitigate identified vulnerabilities at multiple U.S. Communities located in overseas high threat areas. . Mr. Longoria will be the single point of contact for the project and will be available to the Suvarnabhumi Airport during the entire project upon request. Mr. Longoria will also work alongside each of the various Aanko Team members as well Airport staff to validate security vulnerabilities. Mr. Longoria will establish lines of authority, coordinate assignments, track budgets and schedules, and manage performance of each team member. Mr. Longoria will also ensure that all on-site personnel adhere to Aanko Technologies Inc.s Quality Control and Quality Assurance Program. Mr. Longoria will also coordinate meetings with Airport Staff to promote a proactive environment, early identification and resolution of issues, and a partnering atmosphere. Mr. Longoria earned a Certificate in Industrial Safety Management from the College of Engineering, University of Washington; a Certificate in Hazardous Materials Management from the University of California, Davis, and a Bachelor of Science degree in Education, Training and Development from Southern Illinois University. He has augmented his skills in Energy and Environmental Policy, and has instructed international antiterrorism experts at the worldrenowned International Crime Prevention Institute at the University of Louisville, Louisville, Kentucky. Mr. Longoria completed the FBIs Counterterrorism and Computer Crime Identification Courses, and the Bureau of Alcohol, Tobacco & Firearms/Transportation Security Administration National Seminar on Terrorism & Explosives. Mr. Longoria is a member of the

Aanko Technologies Inc.

11

Suvarnabhumi Airport Threat Assessment and Security Design

American Society for Industrial Security, and the American Society of Safety Engineers. Dharme Rathnayake, PH.D., P.E., Dr. Rathnayake has more than 20 years of experience as a Senior Project Manager/Senior Engineer on a wide array of civil, water resources and environmental engineering projects. His experience includes civil design associated with site development, utility management, civil infrastructure, environmental remediation and water resources management. Some of his recent project experience includes, airport redevelopment at Port of Oakland, and infrastructure engineering support at Oakland Army Base in California. His experience also includes construction management and design/build turnkey projects. Chate Asavonda is a Senior Security Consultant on our Aanko Team. He has Over 20 years of demonstrated management experience leading and supervising people and projects within Law Enforcement and Security. He has extensive knowledge developing hazardous materials, terrorism, cyberthreats and responses to biological threats. He is experienced in leading teams with diverse occupational environments to ensure organizational effectiveness and goal accomplishment. He has worked alongside other law enforcement personnel in conducting threat assessments for the Los Angeles World Airports. Mr. Erik M. Esparza, P.E., is a Senior Security Consultant with over 11 years of experience in civil and environmental engineering, hazardous waste engineering/remediation, and the general engineering construction industry. He has successfully designed and managed various contracting operations ranging in gross contract revenues of $5 to $10 million dollars. Mr. Esparzas engineering and project management experience has included the management and coordination of over 30 major projects including aviation work for the FAA, highway construction, bridge and overpass structural design, and project/construction management, civil engineering design, hazardous waste investigations and cleanups, asbestos and lead abatement, soil and groundwater remediation, drum management, landfill design/construction management, general construction, waste water treatment construction/operation, and new construction projects. Mr. Esparza as a senior civil design engineer has been responsible for design of multiple construction plans including engineering cost estimates and site investigations coordination. He has a B.S. in Civil Engineering from the University of Nevada at Reno.

Referenced Projects:
LAX Technical Lead for Los Angeles World Airports providing initial assessment and design for more that more than 1,200 video cameras to be installed throughout the airport complex through a new $26-million initiative. The system will be integrated with existing video resources at LAX and will be administered by Los Angeles Airport Police at a new, centralized monitoring station. In addition, video footage will be recorded digitally and maintained for future use by law enforcement officials. SFO Technical Lead for San Francisco International Airport assessment of access control systems. Provided initial assessment and design providing initial assessment and design for the Access Control System in an airport environment The Access Control System was integrated into overall Airport Security System for all landside to airside entry points within the terminal
Aanko Technologies Inc. 12

Suvarnabhumi Airport Threat Assessment and Security Design

building, at the gatehouses along the perimeter fence, as well as controlled entry into other secure rooms such as telecom and operation rooms. The Access Control System was integrated with the Fire Alarm System to provide emergency egress for staff and passengers, and lifts to provide controlled access to airside floors. The Access Control System will eventually be integrated into the airport Facility Management System. El Paso International Airport, Texas. Provided an Environmental Impact Statement/Airfield Survey/ Security Assessment for the El Paso International Airport as part of a global Department of Defense mission. Provided safety & security protection and mitigation measures to avoid or minimize identified impacts. Worked in partnership with the Federal Aviation Administration and the local El Paso Airfield Management to mitigate environmental, safety & security hazards Travis Air Force Base. Provided threat assessment and logistical support for Travis Air Force Base integration into community operational areas antiterrorism functions. Constructed the module and supporting processes to address the functions of guiding, directing, monitoring, accomplishing and evaluating Bioterrorism vulnerabilities and serving as a ready reference for bioenvironmental team members. The team also created and maintained a reference and resource compendium that describes biothreat sources how assess them, rank them by applicability and utility, and denote those used and for what purpose. The end result was an accurate and highly sought after evaluation with considerations and conclusions on using an AntiTerrorism/Force Protection (AT/FP) foundation on which to build further critical infrastructure protection vulnerability assessments in relation to bioterrorism. Solano County Operational Area Antiterrorism Working Group. Assisted in counterterrorism and biothreat management for emergency first responders, the county public health system, and private sector corporate entities within the region in order for the county to immediately respond and recover from biological, radiological and chemical threats. Aankos assistance included assisting in a comprehensive county-wide operational assessment of environmental (water/air) and infrastructure threats (airports, healthcare agencies, public drinking water and wastewater treatment plants, dams, bridges, and roadways), assist working groups on threat identification and response, assisted in Standardized Emergency Management System and Incident Command System response and recovery planning for community response, and assist in County-Federal-Private Sector coordination by bringing together local leaders from Travis Air Force Base, Private Sector Healthcare, Private Sector Hazmat Companies, and the County Public Health Agency, leading to established and developing mutual support agreements to counter disaster situations. East Bay Municipal Utility District (EBMUD. Provided a cybersecurity assessment of all EBMUD business and financial systems, including Supervisory Control and Data Acquisition systems overseeing their public drinking water and wastewater infrastructure to comply with US EPA guidelines. The project included audit, characterization and inventory of cyber assets, verification of physical infrastructure currently protecting those assets; creation of a prioritized asset inventory; penetration testing of systems; review of security policies and procedures; identification and prioritization recommended risk mitigation options; cost/benefit analysis of

Aanko Technologies Inc.

13

Suvarnabhumi Airport Threat Assessment and Security Design

recommended risk mitigation options, and; coordinated development of technical and managerial reports on cyber security status for presentation to the Board of Directors. NorthBay Healthcare, Fairfield & Vacaville, CA. Conducted a security assessment and prioritized operations into critical, essential and non-essential operations for security design to respond and recover from biological, radiological and chemical threats. The consultation included engineering controls, emergency planning and employee bioterrorism and Hospital Hazmat awareness training, as well as development; and identification of infrastructure improvement opportunities.

Aanko Technologies Inc.

14