How would you respond to a major security incident at an airport?

• A. Post on social media that nothing happened.
• B. Delay communication and wait for orders from airline CEOs.
• C. Shut down only the terminal where incident occurs and ignore other areas.
• D. Activate ERP, notify authorities, secure area, preserve evidence, communicate with public, and recover operations.

Answer: (D)

Responding to a major security incident at an airport starts with activating the Emergency Response Plan (ERP). This ensures an organized, coordinated response with clearly defined roles, predefined actions, and rapid mobilization of the right people and resources. It sets the incident command structure in motion so everyone knows who leads, who communicates, and what the immediate priorities are.

Next, authorities must be notified so law enforcement and other relevant agencies can take the appropriate protective, investigative, and coordinating actions. Their involvement brings specialized expertise, legal authority, and the broader resources needed to manage a complex airport incident.

Securing the area is essential to keep people safe and to prevent cross-contamination of evidence. Establishing a perimeter, controlling access, and guiding responders ensures responders can work effectively while minimizing risk to travelers and staff.

Preserving evidence is crucial for the investigation and future prevention. This means avoiding tampering, documenting actions, and protecting both physical traces and digital records (like CCTV footage and logbooks) so investigators have a clear, defensible trail.

Communicating with the public helps prevent confusion and panic, provides accurate information, and maintains trust. A designated spokesperson using official channels keeps travelers, employees, and media informed with timely updates, while avoiding speculation.

Recovering operations focuses on restoring essential airport functions, resuming safe transportation, and implementing lessons learned to improve future response. This includes evaluating what worked, tightening gaps, and ensuring services return to normal as quickly and safely as possible.

The other options miss critical elements of a coherent, safety-first incident response—ranging from spreading misinformation to delaying action or addressing only parts of the facility. The comprehensive ERP-based approach covers containment, safety, evidence, communication, and recovery, making it the best course of action.