Level 1 Antiterrorism Awareness Training is a mandatory annual requirement for Department of Defense (DoD) military personnel, civilian employees, contractor personnel, and family members traveling overseas. The curriculum teaches participants how to recognize, report, and react to potential terrorist threats before incidents occur.
Understanding the core concepts and expectations of this computer-based training ensures compliance and builds practical situational awareness. The course focuses on threat identification, personal security planning, and the specific reporting protocols required when suspicious activities happen in public or secure workspaces.
Course Overview and Requirements
The primary training module, commonly designated as JS-US007, serves as the foundational standard across military installations and federal agencies. You'll complete the interactive course online through platforms like Joint Knowledge Online (JKO) or military service-specific learning portals.
The curriculum takes approximately one to two hours to finish. It features interactive scenarios, instructional videos, and knowledge checks that culminate in a graded end-of-course test. Passing requires a minimum score of 70% on the final assessment.
- Target Audience: All military members, civilian staff, and contractors affiliated with defense operations.
- Frequency: Annual re-certification is mandatory for all active personnel.
- Format: Self-paced web-based training with modular video segments and knowledge checkpoints.
Core Learning Modules
The training breaks down modern security challenges into digestible categories. You'll study the threat lifecycle, active shooter protocols, and how adversaries gather information about targets.
Terrorist Planning Cycle
Adversaries don't strike at random. They follow a deliberate planning cycle that security professionals call the terrorist operational cycle. Recognizing these steps helps you spot threats during the preparation phase:
- Initial Surveillance: Spotting individuals taking unauthorized photographs, drawing maps, or lingering near gates and infrastructure without a clear purpose.
- Target Selection: Evaluating security measures, response times, and access controls at specific buildings or public events.
- Operational Planning: Gathering logistics, testing security reactions, and planning escape routes.
- Execution: Carrying out the attack or breach.
Recognizing Suspicious Indicators
You need to know what normal behavior looks like in your environment so anomalies stand out. The course highlights several red flags that warrant immediate attention.
- Inappropriate Questions: Strangers asking overly specific questions about shift changes, guard schedules, or security system vulnerabilities.
- Casing and Probing: Individuals testing access control points by tailgating authorized personnel or creating artificial distractions.
- Unattended Items: Luggage, packages, or electronics left abandoned in high-traffic public areas, transit hubs, or near facility entrances.
- Out-of-Place Attire: Wearing heavy coats or bulky garments inappropriate for the current weather conditions, which could conceal improvised explosive devices.
Practical Response Protocols
Knowing what to see is only half the battle. The training outlines precise procedures for responding to threats, protecting yourself, and notifying authorities.
The SALUTE Report
When you observe suspicious behavior, security forces need accurate details. The course teaches the SALUTE acronym to help you structure your observations effectively:
- Size: How many people are involved?
- Activity: What are they doing?
- Location: Where exactly did you see them?
- Unit/Uniform: What do they look like, or what insignia/clothing do they wear?
- Time: Exactly when did the observation occur?
- Equipment: What tools, vehicles, or gear are they using?
Active Shooter Survival
If an active threat materializes inside a facility, your immediate actions dictate your survival. The training reinforces three core survival actions: Run, Hide, Fight.
- Run: If there's an accessible escape path, evacuate immediately. Leave your belongings behind and encourage others to join you.
- Hide: If evacuation isn't possible, find a secure room or office. Lock the door, barricade it with heavy furniture, turn off lights, and silence your mobile phone.
- Fight: As an absolute last resort when your life is in immediate danger, act with physical aggression and improvise weapons using office or household items.
Common Knowledge Test Pitfalls
Many test-takers stumble on specific conceptual questions during the final exam. Reviewing these common areas prevents unnecessary retakes.
- Reporting Channels: You shouldn't investigate suspicious activity yourself. The correct protocol is reporting observations immediately to base security, facility managers, or local law enforcement via CISA.
- Cyber Vigilance: Antiterrorism training extends into digital spaces. Phishing attempts, social engineering, and sharing sensitive operational details on social media are treated as direct security vulnerabilities.
- Unattended Baggage: Never touch, move, or open a suspected explosive device or suspicious package. Establish a safe perimeter and notify authorities immediately.
Frequently Asked Questions
Can I finish the training on a mobile device?
Most learning management systems support mobile browsers, but the training includes interactive modules and videos that work best on a desktop computer or laptop with reliable audio.
What happens if I fail the final exam?
If you don't achieve the passing score of 70%, the system allows you to review the course material and retake the test until you pass. Take notes during your first attempt to track tricky questions.
Does this training apply to civilian contractors?
Yes. Any contractor who requires a Common Access Card (CAC) or unescorted access to federal or military installations must complete Level 1 Antiterrorism Awareness Training annually.
Where can I find official study resources?
Authorized personnel can access the official course catalog and resources directly through the Joint Knowledge Online portal using a CAC or approved federal login.
