Internal TigerSwan Situation Report 2016-09-14

Ti gerSwan Solutions to Uncertainty? DAPL SITREP 004 i 14 September 2016 EN ERGY TRANSFE John Porter Chief Security Officer CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE. DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS 1. SITUATIONAL UPDATE a. Significant Events - Last 12 Hours i. ND - OpsfFusion CTR TigerSwan 1. 2. 10. 0830: More protestors cuffing themselves to construction equipment. 122?: Flyover mission for pipeline Right of Way (ROW) imagery, spanning from Hwy 6 to Hwy 1806. Completed mission at 1338' (1 hr 12 min total} Protest Size: 9 Protesters Activity: Disruption Protests Location: Access Road 91 Time: 0800 14 September 2016 On 14 September 2018 at 0800 hrs, (hours) the Joint Operations Command (JOC) was notified that Protesters were running from the Cornfield on foot to the Access Road 91 worksite. Quick Reaction Force (CERF), Helicopter and Local Law Enforcement were notified and were immediately dispatched. QRF 1-2 responded and insured all Construction workers were safe and then dispatched vehicles to findii photograph all protesters and vehicles in the area. Officers arrived approximately 0830 and began arresting protesters on site. During the operation, the officers arrested 8 Protesters and impounded a van that contained 3 Sleeping Dragon devices. After Protesters were arrested and removed, construction coanUed. Prepared for Energy Transfer Partners

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS ii. IA - OpsfFusion CTR 1. Discovered a prior video from Anonymous (posted Sept. 10} threatening ETP executives. a. Claims that Anonymous possesses sensitive information about ETP executives, workers and others. Threatens to release new personal information for Execs each day that Obama refuses to shut down the DAPL project entirely. b. The fact that the video was posted 4 days ago, and no further information has been released (to the best knowledge), tells us that this is likely an empty threat. o. Person witnessed walking around VAve site in Boone County d. Suspected to be? Ed Fallon?s legal representative e. Drove silver Toyota Prius with ?No Bakken? painted on windows f. Security added to site until workers move to new location 2. March took place at 1000hr a. Delivered petition containing 30,000 signatures b. March beginning and destination was Simon Estes Amphitheater to Polk county courthouse c. Was completed without incident d. Estimated that 30 -40 personnel attended march e. No personnel present at the request of Silverton personnel in order to maintain cover stories i. IL - OpsfFusion CTR NSTR (Nothing Substantial to report} ii. Houston DSDC 1. Sept. 13 2020: Received intel identifying and locating a suspect threatening ETP Executive and his (Executive?s) family. Suspect is a white male named 2. 1130: Updated Critical Response Comms list with matrix for information flow through ETP b. Anticipated Significant Events - Next 12 Hours i. ND - Fusion CTR 1. Platform training 2. Steady state operations will continue in unaffected North Pipeline areas outside the 20 mile hold. 3. Continuing operations support for static security operations 4. Displacement of 12 PAX (People) and 3 VEH (Vehicles) from Mandan to Williston (RGT) Ti gerSwan Prepared for Energy Transfer Partners

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS ii. IA - Fusion CTR 1. Boone county courthouse stand-in at 0830hrs a. 30 people anticipated to attend b. Standing in support of those who have been arrested protesting pipeline Sheriffs department notified and aware d. 2 Silverton personnel attending stand-in IL - Fusion CTR iv. Houston DSOC c. Intelligence Update i. Sources 3. Twitter feed: 4. Standing Rock Sioux Tribe Facebook page 5. Bakken Pipeline Resistance Facebook page ND - Meeting with N0 BCI regarding video and still photo evidence collected for prosecution. Next 24 - Continue building Person of Interest (POI) folders and coordination with LED intelligence d. Operations Update i. IA 1. Per Mar finalized contract with ETP to hire additional guards 2. Met with Urbandale police captain Kent Knopf Discussed coordination process if events arise in Urbandale 4. Added Urbandale P0 to the Iowa Fusion distro list ii. ND 1. Continue coord with local LEJOC (Law Enforcement Joint Operational Center) 2. Conducted coord Meeting for ongoing operations scheduled for 14 Sep with and Shawn S. and LED 5? IL 1. NSTR iv. Houston DSOC 1. Established new process for handling Guardian Angel alerts, until ND and IA Fusion Centers are fully manned. a. 0?00 1?00: Houston 050C will answer all GA alerts and coordinate response as needed. b. 1700 - 0700: GSOC will answer all GA alerts and coordinate response as needed. Ti gerSwan Prepared for Energy Transfer Partners 3

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS e. Scheduled Internal Briefings i. WA f. Scheduled Internal Meetings i. WA g. Scheduled Visitors i. MIA 3.PUBLIC RELATIONS a. SocialMedia Updates 4. PROJECT ADMINISTRATION a. Personnel Status i. Planned Leadership Travel ii. Arriving Project Personnel 1. (Intel Analvst} arriving in Houston Fridav (Pile) Departing Project Personnel iv. IA 1. IA Des Moines, IA - Incoming Ops Manager arrived at vi. ND 1. Brvce arrived to assist in tech set up b. Medical 5.PROJECT COMMUNICATION REQUIREMENTS a. ND - NSTR b. IA - Coordination with securitv and contractor companies continues to improve and increase efficiency and effectiveness Incoming ops manager undervvent area familiarization c. IL - NSTR d. HoUston DSOC 6 . PROJECT LOGISTICS a. Requirements 7.TSI PROGRAM MANAGERS COMMENTS AND RECOMMEN DATI ONS a. ND - Excellent comments from lead LEOs [Lavv Enforcement Officers} todav regarding planning and communication from our personnel. Tigervaan Prepared for Energv Transfer Partners

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS Having the LNO (Liaison Officer} in the JOC (Joint Operations lCenter) has been a huge improvement. b. Excellent comments on coordination and security support from Construction Supervisors at all levels todav. Asked for a repeat of the operation tomorrow. DSOC We have a couple of solutions to improve our capabilitv to distro data in a timelier manner. Tigervaan Prepared for Energv Transfer Partners