Republic of the Philippines NATIONAL POLICE COMMISSION PHILIPPINE NATIONAL POLICE POLICE REGIONAL OFFICE 13 Camp Col Rafael C Rodriguez, Butuan City ROD(L}- 23105-8649 COMMAND MEMORANDUM CIRCULAR No.: 58/2023 “S.A.F.E. Caraga RED TEAMING OPERATIONS” SUBJECT Institutionalizing of Red Teaming Operations TO : See Distribution DATE October 5, 2023 —_— 1. REFERENCES: a. Command Memorandum Circular No. 44/2023 entitled, “S.AF.E. Caraga’ dated August 23, 2023; b. PRO13 IMPLAN to PNP Memorandum Circular No. 2022-112 entitled, “PNP KASIMBAYANAN (Kapulisan, Simbahan, at Pamayanan)" dated ‘September 29, 2022; and c. Revised PNP Operational Procedures Series of 2021 2. RATIONALE: This Command Memorandum Circular sets forth the operational guidelines and procedures to be undertaken by PRO13 in the conduct of performance audit on the capacity of all subordinate units to ensure peace and order, public safety, and emergency preparedness and response during security coverage of major events and related police operations. 3. SITUATION: Over the years, the Philippines has been the venue of various international, national, and local events. In every major event held across the country, the PNP, in coordination with the National Organizing Committee of the government and other concerned agencies, plays a vital role in providing full security coverage in realizing the “Zero Incident” policy of the government in managing major events, In Caraga region, the National and International Surfing Competition in General Luna, and the International and National Game Fishing Competition in Pilar, both in Siargao Island, Surigao del Norte are being hosted yearly by the region. Moreover, Provincial and Regional Athletic Meets and festivals are also conducted in the region that require airtight security from the PNP and its counterparts. Page 1 of 10Ref. No: ROD(L)-231006-884 For organizing and managing similar major events in the region like the National and Local Elections, year-round observance of holidays, festivals, fiestas, and other related celebrations, safe and orderly conduct of local and international meetingsiconferences, presidential visits, and peaceful conduct of mass actions and/or demonstrations, the Red Teaming Operation shall be institutionalized to ensure effective security management of major/special events and related police operations. 4, PURPOSE: Red teaming activities vary in purpose, scope, and process depending on the context and the product under consideration. In particular, Red Teaming Operations is established to: a. Challenge assertions and assumptions, and identify faulty logic or flawed analysis; b. Assess the strength of the evidence-based on the quality of the information; c. Identify alternative options or outcomes and/or explore the consequences of a specific course of action; d. Test a system, plan, or perspective through the eyes of an adversary, outsider or competitor; e. Understand the options available to adversaries and other factors; f. Understand the perspectives and likely actions of partners, locals, and other influential actors; g. Provide the end user with an independent capability to critically consider concepts, projects, plans, and operational designs thereby leading to improved decision-making; h. Have a broader understanding of the operational environment; i. Fill gaps in understanding and identifying vulnerabilities, opportunities, risks, and threats; j. Reveal how external influences, adversaries or competitors could affect plans, concepts, and capabilities; k. Identify second and third-order effects and unforeseen consequences; |. Identify further or improve measures of effectiveness; m, Identify the need for contingency plans; and n, Have a more focused intelligence collection and improved information requirements. Page 2 of 10Ret. No: ROD(L)- 231005-884 5. DEFINITIONS OF TERMS: a. Red Team - Subject Matter Experts (SMEs) of various appropriate disciplinary backgrounds who provide an independent peer review of plans and processes; act as the adversary’s advocate; and knowledgeably role-play the adversary, using a controlled, realistic, interactive process during operations planning, training, and exercising. ‘An independent group that challenges an organization to improve its effectiveness; b. Red Teaming Operations — it is a procedure which includes role- playing the adversary, conducting a vulnerability assessment, or using analytical techniques to improve intelligence estimates. It is also the practice of viewing a problem from an adversary or competitor's perspective by exposing flaws and gaps in our ideas, strategies, concepts, and other new proposals; c. Major Event - defined as an event of national or international significance, where the overall responsibility for security and safety rests with the host nation/office; and d. Checkpoint-a place where the police check vehicular/pedestrian traffic in order to enforce circulation control measures and other laws, orders, and regulations. The establishment of checkpoints must always be authorized by the Head of Office of the territorial PNP Unit and manned by uniformed PNP personnel. Other units directly involved in an operation may establish mobile checkpoints in coordination with the Unit Commander in the area. 6. GUIDELINES: a. General Guidelines - PRO13 shall adhere to the following operational guidelines on Red Teaming Operations during the conduct of various ‘special events and other related PNP operations: 14) There shall be a dedicated Red Team to be organized at the Regional and Provincial level to challenge, verify, and validate the security and contingency plans at the Strategic, Operational, and Tactical levels of authority/command; 2) The Red Team shall come from selected personnel of the Regional and Provincial Quad Staff (Operations, Intelligence, Investigation, and Police Community Relations) preferably with experience in managing previous major/special events in the country. The inclusion of personnel from the other PNP Offices/Units shall be at the discretion of the Commanders depending on the peculiarity of major events/special events in their respective AORs; 3) The Red Team shall be supported by a staff composed of a photographer/videographer, security, and administrative assistant; Page 3 of 10Ref. No: ROD(L)-231005-884 4) The Secretariat of the Red Team shall come from the Operations Division who shall document the activities and meetings of the Red Team. He/she shall be responsible for the maintenance of communications between the Red Team Commander and Members; and 5) Other experts from government agencies and private sectors may be invited to form part of the Red Team to ensure a multi- disciplinary approach in the conduct of the Red Teaming Operations. Responsibilities - Hereunder are the tasks of PRO13’s Offices/Units to ensure the institutionalization of Red Teaming Operations in all police operations: 1) DRDO a) Designated as Regional Red Team Commander; b) Provide strategic direction and supervision in all operations covered by the Red Teams; and c) Overall supervisor in the implementation of this CMC. 2) ROD a) Designated as Assistant Regional Red Team Commander; b) Organize a pool of dedicated Red Team to be composed of selected personnel from Quad Staff (Operations, Investigation, Intelligence, and Police Community Relations) preferably with experience in managing previous major/special events in the region; ©) Designate C, SOS as Head Secretariat to perform as hub for coordination with other R-Staff, PNP Offices/Units and other concerned agencies; 4) Monitor, follow up, and evaluate the implementation of this CMC by all tasked Offices/Units; e) Record best practices, lessons leamed, and innovations implemented in the security coverage of major/special events and police operations; and f) Perform other tasks as directed. 3) RPRMD a) Issue and update appropriate orders for the pool of Red Team in coordination with ROD and PPOs/CPO; and b) Perform other tasks as directed. Page 4 of 10Ret. No: ROD(L)-281006-884 4) RLDDD a) Develop training programs for the pool of Red Team in coordination with ROD and PPOs/CPO; and b) Perform other tasks as directed. 5) RID, RIDMD, and RCADD a) OIC, RID, OIC, RIDMD, and C, RCADD are designated as Members of the Regional Red Team; b) Provide strategic directions and support for the implementation of this CMC; c) Ensure that the Quad Concept of Red Teaming Operations shall be applied in all police operations and in managing major/special events in the region; d) Furnish the Secretariat a copy of security/deployment plans, intelligence estimates, and threat/risk assessments for review of Red Team especially during the security coverage of major/special events and police operations; e) Provide investigative, intelligence, and information operations to support the members of the Red Team; and f) Perform other tasks as directed. 6) RCD a) Provide fund support for the organization of Red Team and their activities; and b) Perform other tasks as directed. 7) NSUs a) Provide operationaltechnical support in the implementation of this CMC; and b) Perform other tasks as directed. 8) PPOs, BCPO, and RMFB13 a) OPR in all activities with respective AORs; b) Organize a dedicated Red Team that will conduct regular Red Teaming Operations and post After Red Teaming Operations Report with pictures and videos to S.AF.E. Caraga Red Teaming Operations Viber Account, and consolidate and submit the same to ROD (Attn: SOS) immediately after the operation reflecting the noted defects and the actions taken; Page 5 of 10Ref, No: ROD(L)-231005-884 ©) Shall also lead the conduct of Red Teaming Operations and/or Inspection thrice a day (one in the morning, one in the afternoon, and one in the evening) to all scheduled activities/operations (Inspection during the Foot/Mobile Patrol Operations, SIMEX on Camp Defense Plan and CSRS, Rehearsal on ISO Readiness of Mobile Forces, COMMEX, CEREX, etc) and post After. Red Teaming Operations/Inspection Report with pictures and videos to S.AF.E. Caraga Red Teaming Operations Viber Account, and submit the same to ROD (Attn: SOS) immediately after the operation reflecting the noted defects and the actions taken; d) The COPs/StaComs., and FC, MFs to conduct an inspection of all deployed personnel and post After Inspection Report with pictures and videos to S.AF.E. Caraga Red Teaming Operations Viber Account, and consolidate and submit the same to ROD (Attn: SOS) immediately after the operation reflecting the noted defects and the actions taken; e) Ensure that Quad Concept of Red Teaming Operations shall be applied in all police operations and in managing major/special events in the province; f) Coordinate with other government agencies and counterparts for technical support in the deployment of Red Teams in your respective AORs; ) Submit Weekly Monitoring Report on Red Teaming Operations every Monday to ROD (Attn: SOS) NLT 8:00 AM; and h) Perform other tasks as directed. 7. COORDINATING INSTRUCTIONS: a. Include checkpoint in Red Teaming Operations; b. Respect for Human Rights shall be strictly observed; ©. Revised PNP Operational Procedures must be observed at all times; d. All tasked Offices/Units shall submit the updated list of respective Red ‘Team upon approval; and e. Lateral coordination is encouraged. Page 6 of 10Ref, No: ROD(L)-231005-884 8. EFFECTIVITY: This CMC shall take effect upon approval. KIRBY JOHN BRION KRAFT Police Brigadier General | irector Distribution: PD, PPOs cD, BCPO OIC, RMFB13 Copy Furnished: PRO13 Command Group Attachments: ANNEX “A” ANNEX °B" PRO13 Red Team Task Organization PRO13 Red Team Organizational Structure Page 7 of 10Ret, No: ROD(L)-231005-8849 ANNEX “A” PRO13 CMC NO. 58/2023 “S.A.F.E. Caraga RED TEAMING OPERATIONS” TASK ORGANIZATION Red Team Commander - PCOL MICHEAL F LEBANAN Assistant Red Team Commander = - PCOL JAMES T GOFORTH MEMBERS: Intelligence - PLTCOL ROMEO A VILLALOBOS, JR Operations - PCOL JAMES T GOFORTH Police Community Relation -PCOL RINGO C ZARZOSO Investigation - PCOL DENNIS A SIRUNO SECRETARIAT: - PMAJ AGUSTIN M NAVARRO - PSMS John Aris S Napuli - PSSg Marlon P Erasga - Pat KriezI May O Plaza - Pat Alvin D Alampayan SUPPORT UNITS ADNPPO - PCOL FILEMON O PACIOS ADSPPO - PCOL JOVITO C CANLAPAN SDNPPO - PCOL LAUDEMER M LAUDE SDSPPO. -PCOL HARRY B DOMINGO DIPPO - PCOL RUBEN B DELOS SANTOS BCPO - PCOL MARCO B ARCHINUE RMFB13 - PLTCOL RICHIE M YATAR NSUs ~ Regional Chiefs OFFICIAL: Page 8 of 10ANNEX Ret, No, : ROD(L)-231005-8848 PRO13 CMC NO. 58/2023 “S.A.F.E. CARAGA RED TEAMING OPERATIONS” ORGANIZATIONAL STRUCTURE DRDO Red Team Commander ROD Assistant Red Team Commander SECRETARIAT MEMBERS [ I I 1 INTELLIGENCE OPERATIONS COMMUNITY AFFAIRS INVESTIGATION AND DEVELOPPMENT t ‘SUPPORT|UNITS ‘ADNPPO ‘ADSPPO. SDNPPO. SDSPPO DIPPO BCPO RMFB13 NSUs OFFICIAL: a (OFORTH ‘olonel Cc, ROD Page 9 of 10WEEKLY MONITORING ON RED TEAMING OPERATIONS. Period Covered: September 25-October 1, 2023 Ref. No.: ROD(L)-231005-8849 Activities! Date and | Subject Red Team Commander Defects Noted Actions Taken by the RTC and Operations | Time | MPS/Unit (RTC) and Members Members Conduct ed Meta SIMEX on | Sept. 25, | Buenavista | PCOL FILEMON O PACIOS, | - Outdated Camp Defense _|- Reminded the FOLLOWING: Camp Defense | 2023, MPS | PD together with the Quad | Plan - Update the CDP | Plan (CDP) | 2:00 PM Staff - Some personnel didnot |- Know the daily password know the daily password |- Always wear the bandolier - Some personnel forgot to wear the bandolier Checkpoint | Sept. 25, | Nasipit PLTCOL SOLOMON | - Dilapidated Checkpoint | Reminded the Operations | 2023, MPS | ALEMANIA, DPDO together | Signages FOLLOWING: 4:00 PM with the Quad Staff - Some personnel did not know the daily password - Some personnel failed to recite the Miranda and Anti-Torture Warning - Refurnish the signages - Know the daily password - Memorize the Miranda and Anti-Torture Warning Page 10 of 10