Team:

Holiday preparations have already begun at the Disneyland Resort (DLR). This means the end of summer is quickly

approaching and with that, the last two significant dates of the season. Labor Day, which falls on the first Monday

of September, is an annual tribute to the creation of the labor movement and the contributions of American

workers. This day is usually celebrated with a day off from school or work which tends to produce larger crowds atthe Disneyland Resort. This weekend will be especially busy at the DLR as it hosts the annual Half Marathon.Following this holiday, the Nation will solemnly honor the victims of the 9/11 terrorist attacks in New York,

Washington DC and Pennsylvania on Patriot Day. The significance of this day makes it particularly concerning since

terrorist groups have vowed to strike again on its anniversary.

Our partners from the Department of Homeland Security (DHS), the Federal Bureau of Investigation (FBl), local Law

Enforcement, TWDC Global lntel.and DLR Intel have assessed that there are no specific or credible threats directed

at the Homeland or the Disneyland Resort at this time. This should not take away from the fact that both the U.S.

as well as the DLR remain an ideal target. Recent communications from terrorist groups indicate a continued

interest in attacking American assets nationally and internationally. In addition, the increase of protest activity due

to recent national events is a major concern. Protest activity can now be organized much faster than before with

the use of social media and can potentially disrupt the daily operations of the Resort.

Below are examples that demonstrate the on-going terroi'ist threat against American assets, both in the U.S. and

abroad, as well as the recent national events that sparked protests against police brutality.

AmericaLiournalist killed bv the lslamic State {lS) Militant 6roup: On August 19,20!4, a video was released overthe internet depicting the murder of American journalist james Foley. This was in response to recent airstrikes inlraq against the miiitant group lslamic State (lS), or better known as the lslamic State in lraq and Syria (l5lS). Foiey,

who was kidnapped in November of 20!2 while covering the Syrian uprising, was shown in the video titled "A

Message to America" moments before being decapitated by member of this group. lS is composed of brutal

militants on a mission to establish an lslamic emirate in parts of lraq and Syria. lt emerged from the already

established al-Qaeda in lraq (AQl) who soon disavowed lS for its ruthless tactics, assaults on fellow rebels, and the

abuse of civilian opposition supporters. U.S. Intelligence officials have stated that the group has become such a

potent force in such a short amount of time that traditional counterterrorism tactics aren't enough to eliminate it.

The most dangerous aspect of this group is its widespread reach, having recruits from Europe and the U.S. among

its ranks. lS has even called for these recruits to conduct attacks in the Western countries they have access to. OnAugust 29th, the United Kingdom elevated their national threat level due to the increased threat posed by lSlS. The

DHS and FBI reiterate that there is no known, credible plot at this time, but do believe that lSlS constitutes and

active and serious threat.

DLR Relevsnce: Since its opening, the DLR has been known asthe hoppiest ploce on Earth and is o symbol ofAmericon freedom and success. lts iconic stoture, globol reoch, ond lovoble choracters ottroct thousands of people

from around the warld each day. lJnfortunately these qualities could make the DLR a targetfor a terrorist ottock. lShos urged its members living abroad to attack within Western notions, including the IJ.S. This could very well meon

thqt lS members may be octively looking for or ore ossessing their targets here in the U.S. Due to this elevotedthreat, it is imperative thot oll suspicious octivity be reported immediotely. Things to look for include: suspiciousphotogrophy ond/or video recording, suspicious individuols and/or octivities, suspicious pockoges and/ or

unottended items.

Protest Activitv in Fersuscrn, MO: On August 9,2014, a police officer allegedly shot and killed 18 year old Michael

Brown in Ferguson, Missouri after an altercation. The incident reignited a nationwide outrage against racial

i:-*\ -r 1\L i;_ $. E!_--,:!d-./INTERNAL USE ONLY

profiling and police brutality prompting several protests in the St. Louis suburb. Candlelight vigils were held in thewake of Brown's death, but they quickly turned violent as vandalism and looting erupted. As a result, police in riotgear shot bean bags and used tear gas against the disorderly crowd. Several arrests were made on the days

following the incident and a curfew imposed in an attempt to lessen the chaos.

Two days after Brown's d.eath, a Los Angeles Police Department (LAPD) officer allegedly shot and killed Ezell Ford

causing protests and local community unrest. Fueled by the incidents in Ferguson, people took to social media andmade direct threats against the LAPD. Hundreds gathered in front of LAPD headquarters on August 17th to protest

Ford's death causing LAPD officers to take precautionary measures and travel in pairs.

DLR Relevance: The DLR has experienced protest octivity due to union disputes, onimal rights, and recently due to

the perceived affiliotion to the Anoheim Police Department in conjunction with the officer involved shootings. Thistype of activity hos the potential to disrupt daily Resort operations os well as negatively affect the experiences ofour Guests. ln addition, the use of sociol media con help gather hundreds of peopte to a specific locotion in a quickand discrete manner. During these situations, it is best never to engoge or ontagonize protesters ond report theirqctivities if they become disruptive or violent.

As Cast Members, we must understand our responsibility to uphold the motto of Community Watch to "SeeSomething, Say Somethingl" by reporting suspicious persons or activities. The Resort depends on all CastMembers to help protect the magic. The security of our Guests and Cast is easier to ensure when suspiciousactivity is reported immediately. Even seemingly innocent incidents have the potential of having a detrimentalimpact on our reputation and the success of our brand. A few examples of activities that should be reportedimmediatelv include:

Individuals that appear to be alone and that are exhibiting nervous behavior (tightened hands, excessivesweating, etc.).Individuals that display disruptive and/or distractive behaviors.Multiple sightings of the same person, vehicle, or activity, appearing at different times, distances, orlocations.

Abnormal patterns of group movement, such as individuals quickly converging on one location at thesame time and lingering.Individuals with signs, banners, leaflets, etc. that are gathering together or are otherwise interrupting thevisits of our Guests.

Lastly, Walt Disney once said, "l happen to be kind of on inquisitive guy ond when I see things I don't like, I startthinking, why do they hove to be like this ond how con I improve them." Being inquisitive and observant are great

skills to have especially when it comes to improving the security of the Resort. Like Walt, when seeing things thatjust don't look right, make sure to be proactive and come up with ways to improve these situations. The DLR facesmany threats on a daily basis but with the help of every Cast Member, Walt's legacy can continue to be the"HappiestplaceonEarth." Afterall,itisourjobtoprotectthatmagicandprovideaanenvironmentinwhichGuests and our fellow Cast Members can feel safe.

Thank you for all your hard work and dedication. Have a great holiday.

a

a

Dan Checchi

Area Manager - IntelligenceWendy JohnsonOperations Manager - Security Special Services

INTERNAL USE ONLY