Documents

TigerSwan Complaint

Jun. 29 2017 — 12:09a.m.

/66
1/66

STATE OF NORTH DAKOTA IN DISTRICT COURT COUNTY OF BURLEIGH SOUTH CENTRAL JUDICIAL DISTRICT North Dakota Private Investigative and Case No. Security Board, Plaintiff, SUMMON V. TigerSwan, LLC and James Patrick Reese, Defendants. [111] THE STATE OF NORTH DAKOTA TO THE DEFENDANTS: YOU ARE HEREBY SUMMONED and required to appear and defend against the Complaint in this action, a copy of which is herewith served upon you, by serving upon the undersigned an Answer, or other proper response, within twenty-one (21) days after the service of this Summons upon you, exclusive of the day of service. If you fail to do so, judgment by default will be taken against you for the relief demanded in the Complaint.

Dated this pg day of June, 2017. BY: State Of North Dakota Wayne Stenehjem Attorney General pcial Assist Att rney General Justin J. Hagel (#07470) Special Assistant Attorney General US Bank Building 200 North 3rd Street, Suite 201 PO Box 2097 Bismarck, ND 5 8502-2097 Telephone: 701.258.7899 Email: [email protected] [email protected] ATTORNEYS FOR THE NORTH DAKOTA PRIVATE INVESTIGATIVE AND SECURITY BOARD Mo I/Rafg by ?gsozsv)

STATE OF NORTH DAKOTA IN DISTRICT COURT COUNTY OF BURLEIGH SOUTH CENTRAL JUDICIAL DISTRICT North Dakota Private Investigative and Case No. Security Beard, Plaintiff, VERIFIED COMPLAINT AND v. REQUEST FOR INJUNCTION TigerSwan, LLC and James Patrick Reese, Defendants. [111] COMES NOW, Plaintiff North Dakota Private Investigative and Security Board and for its Complaint against Defendants TigerSwan, LLC (?TigerSwan?) and James Patrick Reese (?James Reese?), states and alleges as follows. PARTIES [112] NDPISB is an administrative agency organized under Chapter 43?30, N.D.C.C., responsible for establishing by rule. the quali?cations and procedures for classifying, qualifying, licensing, bonding, and regulating persons providing private investigative and security services, including armed security personnel, within the State of North Dakota. TigerSwan is a limited liability company organized under the laws of the State of North Carolina with its principal place of business located in Apex, North Carolina, and is registered as a foreign limited liability company with the State of North Dakota providing ?security services.? TigerSwan holds itself out as providing ?full?spectrum, asymmetric solutions to allow [businesses] to operate safely in today?s global environment and provide [businesses] a

strategic advantage a global presence.? TigerSwan provides ?safety and security? services, utilizing claimed trademarked methodologies (F3EAR and NIFE) to identify and mitigate risks through the corporate operating environment. These services include providing in? depth analyses of cyber, workforce, facility, electronic and environmental security threats. TigerSwan also provides protection services, including its ?Guardian Angel? corporate travel security service. Examples of these claimed services are found on TigerSwan?s website and attached to this Complaint as Exhibit A. [115] James Reese is the founder, President, and Chairman of Tigervaan. On information and belief, James Reese is a resident of North Carolina. [116] Jurisdiction in this venue is proper as the allegations in this Complaint concern TigerSwan providing private investigative and security services Within North Dakota, and its continued operation providing these services without any license from the NDPISB. FACTUAL BACKGROUND [117] Since as late as September, 2016, TigerSwan was under contract with Energy Transfer Partners to provide security and private investigative services for af?liated companies and contractors working on the Dakota Access Pipeline construction project. [118] During this same time, construction of the Dakota Access Pipeline had been halted as a result of active protests against construction of the pipeline. On information and belief, these protests resulted in the hiring of TigerSwan. [119] As part of TigerSwan?s regular operations, it created and distributed Situation Reports summarizing TigerSwan?s observations and recommendations to Energy Transfer Partners and others related to the ongoing protests over the Dakota Access Pipeline construction project.

[ii 10] TigerSwan?s Situation Reports summarize the scope of work TigerSwan provided for Energy Transfer Partners. A copy of samples of these reports are attached to this Complaint as Exhibit B, and include but are not limited to the following activities: 1. As part of its regular duties, TigerSwan provided intelligence to Energy Transfer Partners in the form of ?yover photography of the construction site protest site; Tigervaan provided regular summaries of protester arrests, including intelligence on protester activity on the construction site locations, protester numbers, alleged criminal actions, and equipment. TigerSwan provided projections on future protester activity, including surveillance of social media accounts related to the ongoing protests against the pipeline and the activities of the Standing Rock Sioux Tribe and its members. TigerSwan provided private security services to Energy Transfer Partners concerning the pipeline, and coordinated with other security providers and local law enforcement in carrying out these services. . TigerSwan maintained a Joint Operations Command Center to coordinate security and intelligence gathering services, and organized a Quick Reaction Force to reSpond to protest activities and provide security services to the construction site as well as photograph and record protesters and their vehicles located in the area. TigerSwan investigated alleged cybercrirne activity on behalf of Energy Transfer Partners and others related to the hacking group ?Anonymous? and its threats against Energy Transfer Partners and its executives. TigerSwan placed or attempted to place undercover private security agents within the protest group to carry out investigative and surveillance activities against these groups on behalf of Energy Transfer Partners and others. . TigerSwan monitored protestor vehicles operating within North Dakota, including on North Dakota Highway 1806, and reported its observations to Energy Transfer Partners, local law enforcement, and others. TigerSwan gathered intelligence on the Red Warrior Tribal security force believed to be providing and training and other services to protesters. 10. TigerSwan coordinated and provided private security for the resumption of construction in ?contested? areas bordering the protest camps after the expiration of a court ordered restraining order.

ll. TigerSwan provided security updates to Energy Transfer Partners and others related to documents discovered at a protest camp on October 27, 2016 on protestor activities, training, and coordination. 12. TigerSwan monitored protest camp winterization and construction, protestor arrivals to the camp, and planned protest locations and times [1111] As part of TigerSwan?s activities in North Dakota, it created and distributed Security Operations Overviews summarizing TigerSwan?s security and investigative activity throughout North Dakota connected to the Dakota Access Pipeline construction project. A copy of a sample of these Security Operations Overviews are attached to this Complaint as Exhibit C. [?l12] The Security Operations Overviews state that Security Team conducts static and mobile security operations in support of the pipeline construction throughout North Dakota.? These operations extend in scope to ?protect the contractors of DAPL, protect the machinery of DAPL, protect the material of DAPL, protect the reputation of DAPL and [its] individual sub?contractor companies.? igerSwan maintained security personnel in ?around the clock protection for and included as its duties ?observe[ing] violations of the ROW/equipment integrity, deter[ing] and warn[ing] those who_threat[en] the integrity of DAPL premises or property while observing and preserving the rights of those legitimate protesters.? [1114] TigerSwan oversaw ?xed site security at construction yards and terminals, provided temporary site security on access roads and work sites, mobile security in a Quick Reaction Force to reinforce static and temporary security sites, operated an airborne unit providing reconnaissance and logistical support, and it maintained operation posts providing surveillance.

[1115] TigerSwan?s Security Operations Overview states ?[a]ll elements are engaged to provide security support to ?Reconnaissance and Surveillance will be conducted overtly by all security personnel of any/all potential or actual protesters.? [1116] On or before September 23, 2016, NDPISB was noti?ed that TigerSwan was illegally providing security services Within North Dakota, and it sent TigerSwan a letter notifying TigerSwan that it did not have a proper license from the NDPISB to act as a security provider. NDPISB requested TigerSwan?s response as to its current status, Operations, and licensure. TigerSwan responded in a letter dated October 4, 2016 and alleged ?TigerSwan is not conducting ?private security services? in North Dakota.? TigerSwan?s letter speci?cally references N.D.C.C. 43-30-01(6) which de?nes ?Private Security Service? as furnishing for hire security officers or other persons to: Protect persons or property; Prevent or detect theft or the unlawful taking of goods, wares, or merchandise, or to prevent the misapprOpriation or concealment of goods, wares, merchandise, money, bonds, stocks, chooses in action, notes, or other valuable documents or papers; (0) Control, regulate, or direct the ?ow of or movements of the public, whether by vehicle or otherwise, to assure protection of private property, Prevent or detect intrusion, unauthorized entry or activity, vandalism, or trespass on private property; Perform the service of a security of?cer or other person for any of these purposes; or Transport money or negotiable securities to or from a ?nancial institution or between business locations on a regular or daily basis, except for mail delivery.

[1118] Along with TigerSwan?s denial of providing security services, the October 4, 2016 letter submitted an application to be licensed as a private security ?rm within North Dakota ?should such services, which are not present at the time, be required from TigerSwan.? [1119] On October 5, 2016, NDPISB sent TigerSwan the guidelines for licensure as a private security provider Within North Dakota including the requisite fees, documentation, proof of training hours, proof of classroom instruction, identi?cation materials, business registration, background check, and proof of insurance. In addition, the letter outlined the requirement for licensure of an ?Agency? to require a part owner, member, or partner of the company apply as a ?decision maker.? [1120] On or about November 16, 2016, TigerSwan submitted an agency application made on behalf of James Reese, President and Chairman of TigerSwan. [1121] On December 16, 2016, NDPISB met to consider TigerSwan?s application and denied the application. [1122] On December 19, 2016, the NDPISB communicated its denial of TigerSwan?s application for licensure as a private security firm to James Reese on the grounds that TigerSwan had failed to meet the following quali?cations: (1) Positive criminal history for one or more disqualifying offense; (2) Failure to disclose on the application form all arrests and/or adjudications of guilt; (3) Failure to provide suf?cient information for the Board to determine whether a reported offense or adjudication has a direct bearing on Reese?s ?tness to serve the public. [123] NDPISB received a letter from James Reese dated December 27, 2016 requesting an administrative review of the application. The December 27 letter claims James Reese had never been convicted of any ?criminal crime? [sic] in his life, that the failure to disclose any

applicable arrest was an oversight, and included copies of his claimed dismissal records for arrests, the check for the required fee, and a claimed explanation for his prior arrest. [1124] On January 6, 2017, the NDPISB met in a special meeting to consider James Reese?s and TigerSwan?s application. The NDPISB denied the application on the grounds that the application was incomplete, and the appeal would be denied until the requested information was provided to the Board as to the nature and details of the security and/or investigative activities conducted by TigerSwan in the State of North Dakota. [125] On January 10, 2017, NDPISB sent a letter to James Reese denying his application to become a licensed Private Security Provider and Agency in North Dakota on the grounds that James Reese failed to respond to the Board?s request for additional information as to TigerSwan?s and James Reese?s activities within the State of North Dakota prior to the application for licensure. [1126] TigerSwan and/or James Reese have illegally continued to conduct private investigative and/or private security services in North Dakota following the denial of their application for licensure. [1127] TigerSwan employees continue to conduct private security on behalf of Energy Transfer Partners and its successor in interest that is new owner of the pipeline within North Dakota. These services include maintenance of a twenty-four (24) hour post at locations along the pipeline west and east of the Missouri River. [1128] TigerSwan maintains roving security teams to monitor pipeline locations within North Dakota, including valve sites located both east and west of the Missouri River. [1129] TigerSwan personnel acting as security personnel are armed with semiautomatic ri?es and sidearms while engaging in security services.

[1130] TigerSwan continues to provide private investigative services on behalf of its employer including monitoring of persons af?liated with the DAPL protests. COUNT I ILLEGALLY PROVIDING SECURITY SERVICES [1131] NDPISB restates and realleges paragraphs 1 through 30 and incorporates them by reference. [1132] Pursuant to N.D.C.C. 43-30-04, the NDPISB has the authority to establish by rule the quali?cations and procedures for classifying, qualifying, licensing, bonding, and regulating persons providing private investigative and security services, including armed security personnel. [1133] Pursuant to N.D.C.C. 4330-05, a person may not provide private investigative or security services Without a license issued by the NDPISB. TigerSwan and James Reese have provided and continue to provide private security services within the State of North Dakota. TigerSwan?s and James Reese?s services include providing: protection to persons or property; the prevention and detection of theft or the unlawful taking of goods, wares, or merchandise; the prevention or detecting an intrusion of unauthorized entry or activity, vandalism, or trespass on private property, and; performance of the services of a security of?cer or other person for any of the above purposes. [1136] TigerSwan and James Reese have not received a license from the NDPISB to provide private security services within the State of North Dakota. TigerSwan and James Reese are illegally providing private security services within the State of North Dakota as prohibited under North Dakota law.

[1[38] TigerSwan and James Reese have violated Chapter 43-30, N.D.C.C., which constitutes a Class misdemeanor under N.D.C.C. 43-3040. COUNT II ILLEGALLY PROVIDING PRIVATE INVESTIGATIVE SERVICES [139] NDPISB restates and realleges paragraphs 1 through 38 and incorporates them by reference. [140] Pursuant to N.D.C.C. 43?30?04, the NDPISB has the authority to establish by rule the quali?cations and procedures for classifying, qualifying, licensing, bonding, and regulating persons providing private investigative and security services, including armed security personnel. [141] Pursuant to N.D.C.C. 43-30-05, a person may not provide private investigative or security services without a license issued by the NDPISB. [1142] Tigervaan and James Reese have provided and continue to provide private investigative services within the State of North Dakota. [143] TigerSwan?s and James Reese?s services include: investigating the identity, habits, conduct, movements, whereabouts, transactions, reputation, or character of any person or organization; investigating the credibility of persons; investigating the location or recovery of lost or stolen property, missing persons, owners of abandoned property; investigating the origin of and responsibility for libels, losses, accidents, or damage or injuries to persons or property; investigating the af?liation, connection, or relationship of any person, form, or corporation with any organization, society, or association, or with any official, representative, or member thereof; investigating the conduct, honesty, ef?ciency, loyalty, or activities of employees, persons seeking employment, agents, or contractors and subcontractors; investigating or obtaining

evidence to be used before any authorized investigating committee, board of award, board of arbitration, administrative body, or of?cer or in preparation for trial of criminal or civil cases, or; investigating the identity or location of persons suspected of crimes or wrongdoing. [1144] TigerSwan and James Reese have not received a license from the NDPISB to provide private investigative services within the State of North Dakota. TigerSwan and James Reese are illegally providing private investigative services within the State of North Dakota as prohibited under North Dakota law. TigerSwan and James Reese have violated Chapter 43-30, N.D.C.C., which constitutes a Class misdemeanor under N.D.C.C. 43-30-40. COUNT ISSUANCE OF INJUNCTION PROHIBITING FURTHER VIOLATIONS OF CHAPTER 43-30, N.D.C.C. NDPISB restates and realleges paragraphs 1 through 46 and incorporates them by reference. [1148] TigerSwan and James Reese continue to provide private security and investigative services within the State of North Dakota. [11-49] NDPISB seeks and is entitled to an injunction to restrain and enjoin TigerSwan and James Reese from any further violations of Chapter 43-30, N.D.C.C., as permitted under N.D.C.C. 43-3040. [1150] NDPISB is entitled to recover from TigerSwan and James Reese the costs for reimbursement of expenses for obtaining an injunction, including attorney?s fees, and an administrative fee consistent with N.D.C.C. 43-30-101. 10

PRAYER FOR RELIEF WHEREFORE, NDPISB prays for judgment against the Defendants as follows: 1. Finding TigerSwan and James Reese are in violation of Chapter 43?30, N.D.C.C., for providing both private investigative and security services Without a license issued by the NDPISB. For an injunction against TigerSwan and James Reese?s further Violation of Chapter 43?30, N.D.C.C. For an award of an administrative ?ne as permitted under N.D.C.C. 43-30-101 for each violation committed by TigerSwan and James Reese. For its costs, disbursements and reasonable attorney fees incurred herein as allowed by law; and For such other and further relief as this Court deems just and equitable. Dated this 3; day of June, 2017. State Of North Dakota Wayne Stenehjem Attorney General BY: Monte/i. Rogne?y?gm Special Assistant Attorney eneral Justin J. Hagel (#07470) Special Assistant Attorney General US Bank Building 200 North 3rd Street, Suite 201 PO Box 2097 Bismarck, ND 58502~2097 Telephone: 701.258.7899 Email: [email protected] [email protected] ATTORNEYS FOR THE NORTH DAKOTA PRIVATE INVESTIGATIVE AND SECURITY BOARD ll

Services I I Asset Tracking . - Whether an a truck, in a warehouse, or at a port, your shipments are vulnerable to theft. Safety 3, Security -- TigerSwan?s GuardianAnget service reduces that risk and keeps your valuable cargo safe. was Safety anti Tracking Security Solutions . -- -. Our GuardianAngei platform is capable ct integrating and tracking virtually any kind of sensor. - Individuals - This includes, but is not limiter} to. GSM beacon. Iridium Trackers. cell phone apps, vehicle trackers sensors. sensors. tight sensors. tamper sensors, temperature sensors and more. Being technology agnostic allows TigerSwan to develop customizable solutions for each Bectronios .- . ciient irrelevant of the requirements. In addition, we have globe: vessel and aircraft tracking capability to ensure your assets are never out of reach. Facilities Environmental Sue'Diligen a" I I I (ionstructron I secure Executive Housing and Life Support Monitoring. 8: Response Admsoty Sam-cos Our three 24f7/365 Opera?ons Centers are manned by former mititary and law enforcement Service integration and personnel trained in crisis management. Continuous monitoring along with ore-set anomaly ?2113953732"!- (SEAM3 detection rates allow YigerSwan to not only detect theft. but to immediatety initiate response - 7 - protocols. in the USA TigerSwan is a Public Service Answering 530m! (PSAP) licensee and we have access to the NENA 911 Database. Our Operations Centers can dispatch the nearest emergency responders based on the cilent or asset location that is derived from ourtracln'ng .

Housing and Life Support Advisary Services - .. Service: integratEn-n and Manama-nan; ti? J?i?iim? nm'smsz" anisms 1K . Monitoring 81 Response Our three 24i7i365 Operations Centers are manned by former militazy and law enforcement personnel trained in crisis management. Continuous menizoring along with pre-sez anomaly detection rules allow Tige{Swan to not oniy deteci theft, but to immediately initiate response protocois. in the USA TigerSwan is a Public Service Answering Point licensee and we have access to the NENA 911 Database. Our Opes?ations Centeis can dispatch the nearest emergency based on the client er asset location that is deemed from our tracking devices. Globally. ?f?lgerSwan can provide security and respense anywhere in the world except for locations embaigoed by the United States Gavemment. TigerSwan continuously monitors meieoroioglcal and political conditions mmughout the wand. Keeping clients infomed in real-time about acts of terrorism, crimes. civil unrest, natural disasters and weather helgs sueamiine shipping pincednres. reduce delays, and avoid potential loss of cargo. Centact us for more informazion about our Asset Tracking and Response capabilities. as? Agex: {igniiumy?p? 2756?;

Sewi-cesi' Safety 8: Security TigerSwan reduces your assets' exposure through security g, - - . assessments and a variety of critical security services Safoty and . - .. We do not envy me job of a business owner, CEO. or public safety director. Your fob Security Solutions - - 3 . is tough you must protect your organization's assars and eliminate exposure against all Bismark . .I I conceivable threats. Meanwhile attackers are working to find, exploit, and leverage weakness in individuais 7-: . your organization. TigerSwan?s safety and securlry consultants collaborate with you to understand your security environment and develop a program that ?ts your needs and eiiminatos liareats. Facilities Electronics Security Assessmerras .IEnuirorlmemal I 'f'igerSwan?s safety and security consultants use our proprietary (Neiwork, individuals, Facilities. Electronics/Environment) service soiutions to advise and implement safety Duo Diligenco

. . . . TigerSwan's safety and security consultants use our proprietary NIFELE (Network. individuals. Due I - Facilities. service solutions to advise and implement safety . (incarnation . . requtrements {or our clients. We improve your total safety and security program across the . . .. - -- - spectrum of living and working environments. inctuding: mobile, static. international. aviation. Secure Btecutrve -- maritime. multicultural and high-threat. Housmg and Life Support Security Services Advisory Sartrices - - - . - . -- TigerSwan provides a variety of security services and personnel throughout the globe Our critical safety and security services inciude: - 3' - -- -- Mobile and fixedSite Security K9 Security Support Secure Executive Lodging (Iraq. Afghanistan, Nigeria, Libya) Technical Security Counter Measures 080M) Oil Field Safety and Security Aviation Security Penetrations and Assessments We are availabie around the clock and around the giebe to provide a hoiisttc and asymmetric network of capabilities and services for our clients, Peace of Mind. Exampies of Past Work Click the titles below to see a sample of TigerSwazi's past safety and security projects.

merriomm swans formic: Servic?s - '2 NEFECHD Safety and Security Solutions Tracking TigerSwan is the only company that provides Department of Defense compllant, military-grade S'afgty g, Secu?'ty - 'j data and human intelligence that analyzes your Network, ladhridualp. Facilities and - - Electronics/Environmental to manage risks associated with infonmtlon secority, global operations, excess cash. third-party partnerships. homan capital. and cost-reduction measures. indiyiriuals The graph?c below provides a visual image of our holistic processes. For more information on Facilities I I 3 - - how TigorSwan?s solutions can protect your business. please click She found to your I Ee?. - Eleotromcs Environmental Tiger?wan . . - - - -- RIPE Vulnerability Management (Wmamm) Due Diligence Tame! lndividuais

wan . WWBW wa?i??v. age}; I 'y??sgyg'WSQ Advisory entices Service integration and Management (SIAM) It} saunas; 3m - n. Supper! ngam?j 3~ Secur? Housi Exam Target Individuats ?ue Diligence Azwm} management I Environmental

we; Semis; 5am Gees ?553? it) 1mm

I. pluiia?on 1 . . .E?mm?y3m: Med?a Geespa?af Analysis mgr; \fifz was 5. WW5 . z? Amy; was. 3.,

SETREP 5? September 2916 On arrivat met with- Project Managaf for Iowa- Gvewiew 9f pipeline prefect Expected completian date (if pipeline is amt af 2316 (fut: opemtians} Not sure: haw realistic this target date is however the date shoutd mt extend much beyond the and 0f the year. Overview of how the pipeiihe preject is broken down with regard to Met with Siivertch lntemationai - Lead is - - has 5 personnei on the graund as hf today, wit! he persanhei by end at the weak. Siivertah i-htematianai is by Energy Transfer Farm-33's The Siivertah Statement of Werk is basically ?make the chem: happy? absewed- - have not interacted with at this point, ?with Security Resume Camatian (58C). mesa personnet are basicaliy the standard of Mali Caps. They aha unarmed, unifamed, and sub-stan?ard. These guys are making- a-n average 51mm pins time and. half {war 40 hours. Working an 84 hour week 125}. per diem at Wlday puss hetet. Leightan Righter: is NOT a licensed mum}! empathy in. law, they have a business license. What Leightm is doing is basicaiiy cmrdinating with multiple {aw enforcement ageacies ta pmvide- af?duty law enfmemt persannei through the variaus departments, There are 22 being cave-red during primariiy evening and me daytight posts. There are appreximatety 175 LEGS [mating these posts based at: avaiiabitity of pemmet. Leighten was originatty contracted by Fred-Sim Pipelihe (they guys actaaity laying the pipe} ta provide nighttime ave: watch of the pipeline iaydown, staging and field sites. Leighteh has subsequahtly been by Energy Transfer Partners - and his guys} ta. prairide- armed security by mobite, raving patmis in spread 3A and the Hamley Pump statim (spread 3 .. static) Under iowa {avg LEGS wark fer a private saturity company, they can wark tiff duty? Stilt gathering detaiis or: haw that werks. ?were are a limited amber hf personnel within iowa who are avaitabiefintemsted in waking armed security, heme the Leighton sample working. the hff~duty cmrdihation wit. The eff duty LEGS are a bit pretentiws arid are net piaying well regaming their reporting of twaitons, times, etc. This witi need to he rained in in erder ta estabiish WSA-R. Le

Gpei'atimal Gbservatims and Recommendations: Gbsewations: 1. There needs to be a clear 50W from/for all companies working mder this project. right now there is not and a lot of verbal direction (scope creep). The Comerate Managemeit (Joey) needs to designate a single eitity to act similar to a CGRIKO so that all semeity compania are leader a unified command structure. Liability aspects need to be addressed: a. melee for the Use of Force for ALL security eleneits with legal reii-ew. b. Licensing and Credentialing of all eemri-ty personnel. c. Reporting structure. from a tactical perspective are inadequate. a. Need to use Whatsapp going forward immediately (sewre) in. Need to establish a reporting chain, cmrei-tly SRC has this resporeibility but it is fragmented and not concise. Need to get the platferm up and running and get all contracted security persomel on an App d. Use of" iridium devices might be required based on sketchy caveage, cwrent cell coverage is heat accomplished by Lee of Verision. e. Use of platform will allow will for instant tactical and seategie infometion sharing for decision making. including adding dieit distro lists for notifications. f. Need to clarify and solidify a Buty Log Liability Maeagement. Needs to be both a tactical and strategic meesaging fforn the client that drives the message that we are the good gays, tell the real stery and address the negative messaging with good counter messaging. Need a Social Engagement Plan that dovetails with the FAQ messaging; what is. OPAL doing to impreve the social, ecoemnic, political environment in the affeded areas. The Chain ef Managemeit needs to be consolidated as mentiened earlier. Clear lines of and management will make this flow much smoother. meledge Management needs to be addressed for both lessons learned and collection of" documentation fer liability management after the fact.

9. Need to establish the nw'nber of TOCS that we have to establish: a. Need a main TGC at Carp in Houston b. Need 21 Jump TOC in Des Moines c. Need a Jump TOC in Bismark d. As wark is ample-ted either of these can displace as required. 1'0. Need t0 estabiisl'n with Silverton International and the Client what'the information coitectian effart is: a. PR5 "-25 c. OiRs 11. Review of totai :1wa 0f sub-cmtractars under DPAL: a. fowa i. SRC . ii. Per Mar iv. Silverton Internationai b. Dakota i. 10 Code 1i. Leighton

INFWMATION CQNTAINED IN THJS REPGRT is PROPRIETARY AND D0 NOT RELEASE OUTSSDE 0F AND APPROVED DAPL SITREP 001 11 September 2016 (99601. Update) ii a. Sigm?ca. 1: Events - Last 12 Hours 1. ND - Gpslintei Fusion CTR 3. NSTR ii. IA - Ops/intel Fusion CTR 1. <3er {3f 50 permanei gathered at Pilot Mound Cmnity Center. The center is near yesterday?s protest [mama at the ?es mints River in Boone County, where Precisian Pipeiine is under the river. SRC md Home County Sheriff wera alerted but they dispersed after meeti?g. - Opslintei Fusion CTR 1. NSTR Iv. TX - Ops/intel Fusion CTR 2. NSTR b. Anticipated Signi?cant. Evenis Next 12 Hours i. N9 - Ops! intel Fusion CTR 1. NSTR ii.- iA Gpslintei Fusim CT 1-. - cps/intel Fasian CTR 1. NSTR Iv. TX Ops/Intel Fusian CTR 1. NSTR c. Intelligence Update i. NSTR d. Gperatians Update i. IA TigerSwan {Jamaal are meeting with the Mason City Police Chief an Mmday, September 12'h ta discuss mesday?s weaning protests. Silvertan persennd will travel ta Sioux Fails, SD in order to stage for a pmtest an Mondays September ii. ND Shawn Sweeney is {asking for a place to retacate the To TX - I have V2 of the Alert 8: Notificatian Pian, and this is our initiai Sitrep iv.

CONTAINED 1N THIS REPW iS AND SENSITIVE DO NOT RELEASE 0033le OF AUTHORIZED AND APPROVED e. Scheduled Internal Brie?ngs i. NSTR f. Scheduled Internal Meetings i. NSTR g. Scheduled Visitcrs i. NSTR 2. Public Ralations a. No Comment 3- a. Pmnnel Status i. Planned Leadership Travel 1. ii. Arriving Praject Personnel 1. iject Pasannel b. Medical 1-. NSTR 4. iject Communism-inns a. None b. Requirements - None 5. a. Requirments i. Nana b. Anticipated {Deliveries i. EOWA- Laptops, televisisns, and phmes are expected to arrive at ops center by Monday, September 12*? in arder ta fully standmp. 6. Pragam Managrs Camments and Recammendatians EOWA- Renaming Silva'ton persunnel will be tasked wt ever the next 24-heurs by TigerSwan in order 110 conduct intelligence gathering on intmded protest locations on Tuesday, September

INFORMATION IN 'leS REPORT IS SENSITIVE DO NOT RELEASE OUTSWE OF AUTHONZED AND: APPROVED REGIMENTS Note: These are projected Protests Mississippi River Vigil against pipeline Septemba' 13 2016, 3230 Riley Creek Rest Area, Casper St (Rt ?36) Nauvaa, lL 62354 Solidarity-Vote by mail party September 13 2016, 1700 hr Waiting Room Lounge 6212 Maple St Omaha, NE 68104 Sclidarity RallyaStanding with Standing Rock September 13, 2016, 3200 Simon Estes Amphitheater 75 Lecust St Des Mamas, 1A 56309 Day af September 13, 2016, 1509 MY Home

CONTAINED SN REPGRT IS PROPRIETARY AND DO NOT RELEASE OUTSIDE OF AUTHORIZED AND RECMENTS DAPL SITREP 002 12 September 2016 (1960 Update) 1. Situatianal Ugdate a. Signi?cant Events Lasi 12 chr5 NB - Ops/intei Fusion CT 1. NSTR ii. IA - Ops/Mei Fusion CTR 1. Four vehicles made multiple passes by Starm Lake canstruction site. License plates- recarded and sent to Hons-tan. ll Ops/intei Fusion CT 1. Four protesters at Carlinviile iv. TX - 1. NSTR b. Anticipated Signi?cant. Events - Next 12 Haws i. NB - Ops/intel Fusion CTR 1. Recovery cf Equipment East 01? 1- $6 ii. EA Opslin?cel Fusion CTR 1. Six. Siwerzon persunnel traveiing tn faliawing pmtest sites: Des Mines, IA 12mm Nwm, ti. - 12mm Mason City, ~150011r 2. Twa Siiverten pemnnel are in Siam Fails, SD gati'rering intel?gence an 1% pretest. it - Ops/Intet Fusian CTR 1. NSTR iv. 'fX' Upsilntel Fusion 1. NSTR c. InteE?gence Update 1. NSTR d. epemtians Update 1. .. 1. Ops Center organized, waiting far a?ditionai equipmnt. 11. ND 1. Guard with locai LEJGC (Law Enfarcemni; Joint aperationai Center) 2. (Zoom Mating Wark Call far 13 Septerrmr 3. Remvery 91' Pipe Bending equimiant back to Mmdam yam and tecl'micai inspection 0! damage! equipment. Mtivities were over~watched by a predator on loan to the JEJGC from akiahoma. 4. Est?ished a LNG within the LEJUIC

CONTAINED 1N THIS is AND 09 NOT RELEASE OUTSIDE 0F AUTHQRIZEB AME APPRWED 5. Met with Sheriff Deminger. Agreed t0 staring ef information IL - 1. 1 (JP) spent and haul" with? discussing his sites in Illinois iv TX - 1. Final alert ft notification plan tomow 2. Tourer! building in prapa?ation for to-mrraw planned prutest. Scheduled Internal Brie?ngs i. NET Scheduled lntemall?eetings i. MEIR g. Sd?ieduled Visitars i. NSTR 2. Public Relatiens a. Na Camment a. mnei Sta us i. Planned Leadership Travel 1. NSTR ii. Arriving Wcject Personnel 1. NSTR Departing Project Personnel 1. NSTR b. Medical i. NSTR 4.. Progect Cammunica?cns a. Requiremer?s 1. Des Men-?nes, lA- NSTR 5. Project Lagistics a. Remireme?ts 3. Des Moines, IA - NSTR

1N THIS REPGRT iS PROPRIETARY AND 00 NOT RELEASE OF AUTHWZEB AND b. Anticipated De?ve?es i. Des Moines, IA - NSTR a. Des Moines, i. Decision requested on whemer raving security vehicies get ism?202?s our part trackers. ii. Need clarity an pays for security rental vehicles.

Tige-rSWan Soi?ons to Uncertainty? - DAPL ITREP 003 September 262% ENERGY TRANSFE John Porter Chief Security affirm? INFORMAHON CONTMNED IN THIS REPGRT IS AND DO NOT RELEASE GUTSEDE OF AND AFRO-W19 REGWERTS

IN TiilS lS PROPRIETARY AND SENSITWE 50 NOT RELEASE 0F AUTHOREZED AND AWRGVED RECIPIENTS 1 . SITUATIONAL UPQATE a. Signi?cant Events - Last 12 Hours i. ND Gpsl?intel Fusien CF 1. Operation led by Shawn Sweeney to remove equipment (13 Pieces} tram HDD drill site. All equipment was szmcessfelly recovered and relacated te Mandan yard. Flyover and phdtas of HUD drill site 19 pretesters arrested at Pilot Mound pmtests At least 2 protesters lddtedlcuffed themselves to construction equipment 10 masked p-rdtestdm spetted near Hwy 94 (mile marker 106.5) protect earlier in the day Protests at Access Road 99 and 96 a. Approximately 50 protesters total b. Approximateiy 7 protester vehicles 22 Arrests d. Equipmmt TI to be campleted 99:59!? ii. EA - Ops/intel Fusion CTR. 1. Pretests in Mason City and Des Moines. Considered to be more of a fundraiser rather than protest according tn the 2 Silverton FAX in attendance. 2. Des Maines, ill Protest- Silverton pax gathered intelligence an future pretests, ta include paw wows at the Meskwaki settlement. 40 persemel were estimated to have attended. 3. Heaven, IL Protest~ 2 Silverten pax gathered intelligence from a gathering at arrest stop near where the pipeline creases the Mississippi. 20 personnel attended with no meaningful intelligence gathered?es Memes, Protest 2 Silverton par: gathered intelligence an future protests, 133 include pew wows at the Meskwaki settlement. 40 permmd were estimated to have attended. it Ops/inte'l Fusion CTR iv. TX Ops/intel 1. Protest outside ETP Uffice. 30-35 pretestors attended b. Anticipated Signi?cant Events Next 12 Hours i. ND - ?ssion CTR Steady state operations will continue in unaffected Horth Pipe-line areas eutside the 29 mile held. 2. Continuing eperatiom support for static security operation TigerSwan Prepared for Energy Transfer Partners 1

IN RENEW 15 PRONETARY AND D0 NET RELEASE OUTSIDE OF A249 APPROVED ii. IA - Fusim CTR 1. Protest planned at amphitheater in downtown Des Maine's. at 14th. Location is secluded and wt of site frem any majer traffic. A march is planned the awhitheater to the tensity wurtheuse to submit mtivBAPi. petition with roughly 313,009 signatures. Silverton gersomel will net paticipate directly aid will maintain an ebservational role. ll - Ops/intel Fusion CT iv. TX Ops! intel Fusion c. Intelligence Update 2. Twitter feed: 3. Video: Pretestar weech while locked to eauipmerit 4. Standing Rack Sieux ?i?ribe Eacebeek 9e, ge 1. Pested today for their press release, and new ?Call to Actien? with updated number {if tribes, cities and organizations supperting their cause. 5. Press Release in respense to Kelcy Warren?s CEO) statement Beaming article, ?Security Firm Geardine ?akom ingress Pieeline Alec: Used Warfare Tactics far 1. So what? Clearly bath and journalists are trying their best ta identify the i?dividual private security firms that are employed far this project (see last paragraph ?Spies for Hire? Under investigatian). 6. Bakken Pineline Resistame Facebeak page 1. Pested the Sewing article (abeve) and Littie Village articie detailing teday?s pretests arrests ii. NB - ND - Silver Kit Sol is a vehicle of interest 12:} LEO this vehicle is carrying the persomei who are primarily responsible fer training in protest and resistance training. 1. b. Operatives Update i. it 1. Meeting had today with the head {if Per Mar security. Logistics were ?nalized to hire a minimum of 59 personnel to be implemented immediately fer pipeline security Additienal persomei may be hired ta replace existing persemel failing to meet the standard. ii. Ni) a. grim? ward with lecal (Law Enfarcement Joint Operational nter b. (Zoom Meeting Writ Call for ongoing operatims scheduled for 14 Sep with- $16 Shawn 5. IL 1. NSTR iv. TX TigerSwan Prepared for Energy Transfer Partners

was lS AND DO HGT RELEASE OUTSME 0F AUTHORIZED ANS AFPROVED REGPIENTS 1. Created separate Situations in platform ta organize General lntel for Baketa and lcwa (MD General Intel and General fatal) 6. Scheduled lntemalarie?ngs i. Scheduled Internal Meetings i. g. Scheduled Visitas's i. ND 1. BC: @531 lbs: AM to collect evidence 2. RD naming here to assist in tech set Up a. Social Media Updates. 'figerSwan for Energy Transfer Farms 3

INFORMAHON CONTAINED IN THIS REPGRT iS PRO-PRETARY AND SENSWE BO NOT RELEASE OUTSIDE OF AUTHORJZEQ AND APPRWED 99:98 pal-mm or! the pipe is Seated on private iami and orgy 1,991; feet is incataeci ander farm-?3?1 property asseciate? with 1.53% (Jake. TigerSwan Wepared for Energy Transfer Partners 4

1N REPORT 15 PROPRIETARY AND SENSWWE 90 RELEASE GUTSIDE 0F AND APPROVED REGWENTS 3 PROJECT ADMINISTRATIGN 3.. Personnel Status i. Planned Leadership Travel 1. Jcey Mahmcud?s trip t0 Dallas cancelled ii. Arriving. Project Personnel 1. ?5mm? - (Intel Analyst) arriving in Homtm Friday19116) Departing Prcject Persunnel ill arrive at 0730 on September 14th tn take over as ops 4.PROJECT COMMUNICATION .PROJECT a. Requiremants 1. IA Ba: Mcines, 1A - VGIP pfmnes expected to be delivered tomorrow, September 6 .TSI PROGRAM MANAGERS COMMENTS ANB RECOMME a. MD Excellent. mammals from lead LEGS today regarding piamzing and commimti?n from our manual Havlng the LNG in the 106 (LED) has hm a huge impmvancnt. b. Reincatwd the Fusion cell to Mandan Municipal Airpart ??gerSwan Prepared fer Energy Transfer Partners 5

I TigerSwan Seiutmns to Unce?aint? - I DAPL SITREP 004 Mi: September 2016 RGY TRANSFE Jahn Porter Chief Secmrity Qf?cer INFORMAWOR CONTMNEB 3'4 THIS REFGRT is PROMETARY AND 90 NOT RELEASE GUTSIBE 0F AUTHWIZED AND RECIPIENTS

CWTAINED IN THIS REPORT 15 PROPRIETARY AND SENSITWE DO HGT RELEASE OUTSIDE OF AND APPROVED 1 . UPDATE a. Signi?cant EVersts - Last 12 Hours i. ND OpsfFusion CTR ?gaSwan 1. 2. 10. 3830: Mere pmtestors stuffing themselves to censtruction emipment. 1227: Flywer mission fer pipeline Right ef Way (ROW) imagery, spanning frem Hwy 6 to Hwy 1806. Completed mission at 1-339 (1 hr 12 min tetal) Pretest Size: 9 Pretesters Activlty: Disruptian Wotests Lecatien: Access Read 91 Time: 8800 14 September 2016 Gr: 14 September 203 6 at 0800 hrs, (hours) the Jam: Operations and (JGC) was notified that Protesters were rimming from the en foot to the Access Read 91 Wick Reamer! Force Helicepter and Local Law Enfercement were notified and were immediately dispatched. QRF 1~2 responded and insured all workers were safe and then dispatched vehiclee to ?nd/photngraph all protesters and vehicles in the area. Officers arrived approximatdy 0830- and began arresting protesters on site. Baring the aperatidn, the efficers arrested 8 Prutesters and impounded a van that contained 3 Sleeping Dragon devices. Afte' Protesters were arrested and removed, mmtruction cmti?nued. Prepared for Energy Transfer Partners

INFORMATION CONTAINEB 1N REPW lS AND ENSHWE DO NOT RELEASE OUTSIDE AUTHORIZED AND AWROVED ii. 1A - Ops/Fusim CTR 1. Discovered a nrier videe Anenwneus (posted Sept. 20) threatening executives. 3. Claims that Amriymous pessesses sensitive about ETP executives, werkers and ethers. Tireatens ta release new persenel information for Execs each day that Obama refeses tn shut down the BAPL project entirely. in. The fact that the video was pasted 4 days ago, and no further infermation has been released (tn the [35005 best knowledge), tells us that this is likely an empty tieeat. c. Persen witnessed walking amend VAve site in Boone County d. Suspected te be? Ed Fallen' 5 legal representative e. Brave silver Toyota Fries with ?Ne Bakken? painted on windows Secwity added to site until workers move to new location 2. March took place at iO?Dhr a. Ddivmed petition containing 30,000 signatures b. March beginning and destination was Simon Estes Amphitheater to Pelk camty courthowe - (2. Was amp-lewd without incident d. Estimated that 30-46 persomel attended march e. He persemel present at the request of Silverton persemel in erder te maintain weer stories i. IL - Ops/Fume CTR NSTR(Netl1ing Substantial to report) ii. Hduston 850C 1. Sept. 13 2920: Received intel identifying and lacating a: meat threatening Executive and his (Executive?s) family. Suspect is a white male named 2. 1130: Updated Critical Meme list with matrix for infennation flow threugh E'l'i3 b. Anticipated Signi?cant Events - Next 12 Hears i. ND Fusinn CTR i. Platferm training 2. Steady state operatiens will continue in maffected Nerth Pipeiine areas outside the 20 mite hold. 3. Continuing operations sterner: fer static security cpaatiens 4. Dieslacement of 12 FAX (People) and 3 VEi-i (Vehicles) from Mandan tn Williston (RGT) TigeSwan Prepared for Energy Transfer Partners

ENFORMATION CONTAJNED 3N THIS REPORT [5 PROPRIETARY AND SENSITW DO NOT RELEASE 011T SIDE OF AUTHORJZEB AND APPROVED ii. lA - Ops/intel Fusion CTR i. Boene comty cwrmome stand-in at GB30hrs a. 3G peepie anticipated t0 attend b. Standing in support of those who have been arrested protesting pipeline c. Sheriffs department notified and aware d. 2 Silverton personnel attending stand-in lL Ops/intel Fusien CT iv. Newton 050': intelligence Update i. Ongoing lntel Seurces 3. Twitter feed: 4. Standing Rack Sioux Tribe Facebdek gage 5. Bakken Pigeline Residence Faceboek page NB Meeting with N9 BCI regarding video and still photo evidence collected fei' pmsecution. Next 24 - Centinue building Persen of interest folders an cenrdination with LEO intelligence 6. Operatiens Update i. M. 1. Per Mar finalized cuntract vii-d1 129 hire additimal guards. 2. Met with Urbandale petite captain Kent Knopf 3. Biscussed canrdinatim process if events arise in Urbandale 4. Added Urbandele PD tn the lewa Fusion distro list ii. ND 1. Centime coerd with lecal LEJOC (Law Enforcement Joint Gperational Center) 2. Cenducted word Meeting for ongoing operatidns scheduled for 14 Sep with- and Shawn S. and LED 1. NSTR iv. Heustm DSOC i. Establidwed new precess fer handling Guardian Angel (GA) alerts, until N9 and in Fusian Centers are fully manned. a. 0WD 170.0: Heastm 050:: will answer all GA alerts and cedrdinate respense as needed. b. 1700 - 0760: 650C will answer all GA alerts and coordinate response as needed. '?gerSwan Prepared for Energy Transfer Partners 3

INFORMAHON CONYMNED 3N RESET EROPRIETARY SENSWE DB NOT RELEASE 6F ABTHORJZED AWRGVED e. Scheduled Internal Brie?ngs i. WA f. Scheduled internal Meetings i. NM 3. Scheduled Visitors 1. NIA RELATIONS a. Sedal Media Updates 4.PROJECT ADMINISTRATION a. Personnel Status i. Planned Leadership Travel ii. Arriving. Project Persennel 1. (Intel Analyst) arriving in Heusten Friday (9/16) Departing Project Persemel iv. EA 1. IA ?es Memes, 1A - interning Ops Manager arrived at G730hr vi. ND 1, Bryce arrived ta assist in tech set up b. Aledical 5-. PRGJECT CGMUNICATIGN a. ND NSTR b. lA - Coerdinatien with secmty and contractor cemparzies mntimes to improve and increase efficiency and effectivenees Incoming ops manager undeer area familie?zatien IL NSTR Housten 950C er: 6 . PROJECT LOGISTICS- a. Requirements MANAGERS COMMENTS ANB RECOMMEN a. N9 Excellent comments from lead LEUS (Law Enforcement foicers) today regarding plaming and communication our personnel. ?gerSwan Prepared for Energy Transfer Partners

INFORMATION THIS REPGRT iS PRO-PRSETARY AND SENSWIVE DO NET RELEASE OUTSIBEE OF AND APPROVED Having the LNO (Liaison Of?cer) in the JOC (Joint Operatims Center} (LEO) has been a huge imprevement. b. Excellent camments on coardinatim and secwity smaport from Canstructizm Supervisors at all levels taday. Asked for a repeat of the operatian tomorrow. 950C We have a couple of solutions tn improve our capability to distm data in a timelier manna: TigerSwan Prepared for Energy Yransfer Farms

TigerSwan Sohztions t0 Uncertainty? DAPL SITREP 011# gam?mbw 2am I . . . w. . Parter AN 5 mm Swarm? {E?ffimf CGNTAINED IN THIS REPORTJS PROPRIETARYANB SENSITIVE. DO NOT RELEASE OF APPRO VED RECIPIENTS.

INFORMATION CONTAINED IN THIS REPO RT IS ANS SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND RECIPIENTS The Highlights The Details 1. UPDATE A. Significant Events .. Last 24 Hours . I. TigerSwan North Dakota (ND) Fusian Center 0- Candu cred Archnological survey of tap soiled area from 51.: 51: west pf Hwy 18-06 wet fer approximately 2 miles (Operation Paint Break 4) 38 total SHPG, Staff Archeologist, LEO, Security, and SAM. personnel moved tn, conducted survey and recpvered withnut incident, accident or emergency. Conducted over ?ight of same area with SH PO Archeologist (1), Staff Archeologist (I), and security cameraman Williston area (spread 9) security remains in place - NSTR Mandan/ Bismarck arna (spreads 6, 7) daily operations along the ROW supported. SiTtiA?i?lG? Vehicles from the Standing Ruck Spirit Camp continue to patmi HWY 180-6 at high rates of speed, actively searching for DAPL employees. Beginning 19 ianu ary social media tapered off; nurrentiy informatinn within the camp remains limited. On 20 September 2016, at approximately 1500 hours, a demonstration was held at the Mandan City Hall. The protest was attended by 159 persannel, tn inclu tie members of the Standing Red: ripe, Red Warrior S-ecu rity Elements 9f the Pine Ridge Sioux, American lrxciian Movement (MM), F'olynesian and Palestinian protesters. The protest provided DAPL security anti lccal law enforcement an opportunity to identify several individuals and vehicies being used by'the protestors. 21 September Scout vehicles for the Standing Rock Sioux Tribe are actively patrolling HWY 1806 at speeds in excess of 180 miles per hon rt 0 21 September Eiss-entinn among protesters within the Spirit Camp is increasing. {tonmvetted sources state that protesters are net included in the planning of future protests and are often only notified hours. befare departure of locatipn and time. Planning and execution of protests is primarily cantrolled by the Red Warrior Sernrity Elements of the Pine Ridge Siaux and facilitated by Cody Hall. Prepared for Energy Transfer Partners: 1

INFORMATIGN IN l5 AND DO NOT RELEASE 0F TlgerSwan 21 September Rad Warricr tribal security cantlnued t0 ccndact training events in preparation far security mentions. 21 September w- active MM member, was extradited back tn hiebraska ta fate federal charges.- was being held in the M?ft?fi Cami jail awaiting extraditian, and was the subject the prams: at the Mandala City ?ail on 29 Segtember fram 3.560 t0 1709 hours. 21 September - A handful of protesters interrupted the all industry meeting in What, Neath Dakota. Fin-lice asserted pretestors of? site; no arrests were made. 20 September Pratestars departed Standing Rock Shim: Camp at approximately 1445 halt-rs in a canvas: of mughly 40 vehicles. An additional Gamay of 29 halal-ties departed from the Standihg Rack Resewatian nearly Sim-u kaheously. 26 Segtamber Tm Red Warriar security apparatus m-ntml-ied aver 260 gratestors as they maved from the Mortar: County Jail to the Manda-n City Hall. 'l?ha used, ?uch as three tier security, use of maaled fathers, and crawd whim: suggests military Cl!" law enfwcement training. Currently there are mveral f?m?f military parsannel residing within the camp. The extent sf the Red Warriar training or providas the ewe?i?se far the training mama: is currently h-ewevar, a new vetted scarce, with first-hand knawiedge stated that: Carly Hail? leads the gammy faith training events from within the Reel Warwiar (Iamp. 20 September - Haitham Ei?Zahs?i a F'alastlhian activist from Math}, ?ix, attendad the gratest in Mandala with three additinnal Palestinians from Califamia wha are allegedly 3550:53th with the Palestinian Yeuth Movement. Summary . Shela! media ca?times til} give little indiaa?an or warning cf planned pyatests er locatlans. The protester security is actively par-trailing local highways and yipellm wark areas in march 0f DAPE. am-ployees. Yesterday?s pretest in support the MM member incarcarated in the Marten Emmy Jail, was went. The security for the protesters was prewlded by the Rad Warrior Willa-l security forces, demanstrated military and law enfurcement tactics. As the protesmr gammy gains ad?i?aml 0f security tactics and cheratlans, the ability ts gather Enfomatim about plan ned pratests will diminish. infarmatiah watml witmn the camp, despite naming dissentian, makes? my interim! warm dif?mlt ta acquire. Furtharmare, the hresenm 9f additima?l Palastinians in the camp, and the mavement?s invalvament whim Islamic individuals is a dyhamic that requires further examination. Currently there is no information to Prepared for Energy Transfer ?artners 2

CONTAINED IN REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OF AUTHORIZED AND APFROVED RECIPIENTS .. II. iv. suggest terrorist type tactics or operations; however, with the current limitation on information flow out ofthe camp, it cannot be ruled out. Iowa (IA) Fusion Center Actions yesterday, by Ed Fallon (Founder of 3033 and his entourage are assessed to be reconnaissance for potential avenues of approach and target selection of DAPL work sites. Ed Fallon posted photos, video and a write-up on his action on his site, Fallonforum.com. He describes the actions as a new tactic he is calling or Bold Action Teams. The goal of the BATS is for small teams to stop work when ever anci wherever they can. Mr. Fallon sees yesterday?s events as a suceess and will likely continue this new tactic Webster, Boone and Story counties. Boone County Sheriff?s office was noti?ed about Fallon ?5 post. Boone County Sheriff's office said that they would iwestigatejr and ii legal action was possible, they would take it because of the undue burden Fallon and his members have put on the sh ei'iff?s office due to the fact that they have to continue to respond to our calls of his harassing the customer?s pipeline workers. illinois (IL) Fusion Center NSTR Houston DSOC NSTR Anticipated Significant Events-~Next 24 Hours E. North Dakota (ND) Fusion Center 'l?igerSwan a ll. 0 Working on the administrative requirements regarding manning and accountability for both security and construction, expect to have that completed and fully operational by end of the week. Freparations to begin constru ction operations in the "contested? area as soon as the TRO is lifted. Planning for re?entry/eonstruction iowa (lA) Fusion Center Protesters staging 1.26 miles almost doe ofthe drill site. All points are marked on the TS platform. All three sites (to include the protest training site) start with CG and Sold Alliance continue to post information pertaining to the protest on 22 SEP 2616 in Boone County (Midwest Mobilization). Weather may affect the outcome and participation metrics due to a 60 percent or higher eh ence of rainfall in Boone County. Expect to see more social media activity regarding ?ie anticipated protest in the next 24 hours prior to the demonstration. ?es Moines Catholic Workers is assessed to be a major nexus of support for operations. A number of Bold lowa and moved into camping/staging areas around i?ilot Mound as of 1300 CST 21 September. Detective 1 has identi?ed at least three of these individuals by Prepared for Energy Transfer Partners 3

EN 31135 lS AME SENSWWE DO NOT RELEASE OUTSIDE OF AUTHDRIZED AND name. Meskwaki anti Saskatonn triba! members have been reported at these camps, however this is mt vat con?rmed Illinois Fusian Center a NSTR iv. lnte?igence Updata 1. Currently working development of :0 campaign with Apex late-I team and Herbert Rice, 2. Continue seeking cut pasitive, pro-{mm pmpaganda and media mare inclined to enwurage othar pro-tasters ta ca-mmit sabotage than it himseif. ?ngering Saunas 1. Twitterfeed: min-DAM. #9395. 2. Standing Rock Sioux T?be (5857') Fagebaak gag: 3 Bakken Pi?efine Resistance}: {:96ster gage: Twitter: @Na?akken 4 . CC: F??eb??k @iawacci 5. 301d Iowa 199493959993: gage, Water: @8916 fawn 6 Veterans for Fancy: Fambmk a. v. Operatians Updates i. Ram} Daknta (NB) Fuaion Center 0 MSTR ii. iowa Fusion Canter iawa Fusicm Ce? wili be mltecting infarmation at the yrstest tomorrcw by having members 330th in. the protest and absewing from a static 13-05mm that was rewmi?ered tadav. ?29me to foH-ow if agpiicabie. minds Fusion Center 0 iv. Houston DSOC NSTR 2. PUBLIC RELATIONS A. Negative i. Article: ?Briefi?g: ?aksta Accass Q?-peiine?a Masaive Gwemmeni Smbaidies? a. Cla?miag ETP and Enbridge avaided paying (we: $550 million in taxes in 2815 in add?ian tn athar subsidies ii. Artiste: "Anaivsis: Cam?anv Behimi Canimwraiai ?akata mamas 3 Claims 57-? i5 respansible far 29 pipeline safety incidents since 2966 in which 9 555 barreis of hazardous tiquids were ieaked TigerSwan Prapared for Energy Transfer Partners 4

ED THIS REPS RT #5 PROPRIETARY ANS SENSITIVE DO NOT RELEASE GUTSEBE OF AND APPROVED RECIPIENTS b. References US {301? Safety Administratian {fats B. Pasitive i. ?Even the Demacratic {?ndi?ate? for Gwen: or of Marti} Dakata Says Prategters Haw Lust Cre?ibi?w? 3. PROJECT i. begin handover with current PM Shawn Sweeney ii. arrived Nurth Daketa Fusion Center an Thursday (9/21/2616) - en-beard this Thurs (9/22/2016) Going straight to ND to get a fee! for ground operations 4. OTHER (Lemmas, RECOMMENDATIONS, COMMENTS) ~?gerSwan Prepared for Energy Transfer Partners

1? TigerSwan Soimens t0 SITREP O34 253%- John Porter EN ERGY TRANSFE INFORMATION CONTAINEQ IN 11m REPORT 15 SENSITIVE. DO NOT RELEASE 0F AWORIZEB AND APPROVED RECIPIENTS.

INFORMATIGN CONTAINED IN THIS REPQRT IS PROPRIETARY AND SENSITIVE E30 NOT RELEASE OUTSIDE OF AUTHORIZED ANS APPROVED RECIPIENTS The Highlights North Dakota 3 Large convoys consisting of 225 protester vehicles attempted to access work sites using three separate routes. Convoys were stopped by law enforcement iowa 2 of the previously-departed leaders - and- of the Mississippi Stand movement have returned to camp. I Protester bail in Lee County has increased to $2,606, which will hopefully impede protestors from risking arrest due to the increased cost. I 4 pieces of BAH construction equipment (3 bulldozers and 1 trackhoe) were burned in Jasper County. lnitiai reports indicate that this arson was very simiiar to the last attack in early August. I BATS obstructed work at 5 work sites, resulting in 3 arrests: Ed Fallong? and an unidenti?ed third person. I Calhoun, Boone and Webster county law enforcement are not supportive of DAPL Security?s mission Their reluctance to arrest or cite trespassing individuals has signaled to protesters that their actions wiil result in few?if anywconsequences. The Details 1. UPDATES A. North Dakota i. Intei Update a. NSTR ii. Past 24 Hours a. Protester attached himseif to equipment at A3125. is. 3 Large convoys consisting of 225 protester vehicles attempted to access work sites using three separate routes. 1. Convoys were stopped by law enforcement 2. Workers evacuated when law enforcement said they may not be able to hoid 3. Protestors began activities very eariy in the morning. 4. Protestors walked in cross country to get to work site. 5. Land owner and son patrolling their iaod near access road 125 armed with M4 style rifles. c. Law Enforcement continues to have static checkpoints in place 1. Law enforcement aisle to set up roadblocks to block all convoys 2. 14 Arrests made by law enforcement 3. Workers returned to sites as soon as possible Next 24 Hours 3. Continue to so poort at worksites along NEW and static DAPL sites off the ROW. ??gerSwan Prepared for Energy Transfer Partners 1

B. lnwa ii. TigerSwan CONTAINED IN THIS REPORT lS AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS Continue planning with iew enforcement for su rvey crews to so may from 80 to HBD by Wednesday 19 Octnber 16. Intel Update a. - and? back at Mississippi River Work Site 1. - enci- ere reportedly back at the Mississippi Stand camp site. Signi?cant because the leaders ef the Mississippi Stand movement have returned to the camp and will likely start planning more direct actions. - was also seen photographing the barbed wire around the HDD site mast like surveilling for future direct actiens. b. Protestor?s wish list includes security hats and vests. 1. Pratestors may be attempting to obtain security guard uniferm cemponents to pose as security guards and gain access to sites. c. Bail money in Lee County has increased to $2,000 1. Significant because this may impede protesters from risking arrest due to the high cost to be released {rem bail. {in their iegai funding page, the movement does not have neariy enough money to pay fer muitipie $2,000 hails. d. Bold iowa people of interest:? and-. Both decumented the Bold Iowa Bold Action Teams throughout the day heaviiy on social media, speci?cally twitter. 1. We can now follow these individuals? seciei media pages for infermatinn about upcoming events. a. is helping can street hock boxes or sieeping dragons for Mississippi Stand? and states he urinating in fuel tanks. 1. This ties Bold iowa with Mississippi Stand. In addition,? may be willing tn do: future equipment sabetege like putting sugar/sand in fuel tanks. Past 24 Hours a. DAPL Construction Equipment burned in .iasper Ceunty, vicinity Reesnor 1. WHO - Unknown at this time although a white sedan described as appearing to be a Ferd Focus (unknewn plates) was sighted near a nearby weiding sh ask {approximateiy i5 mile frern the site the fire} which was guarded by Leighten Security. 2. WHAT - Four pieces ef equipment tetai have been bu med, 3 bulidezers and 1 trackhoe lnitiai reports indicate that this arson was very similar to the last attack in early August in that the equipment fuel filters were used to start the ?res. So far, repeating indicates that this is the exact same MO (Method of Operation) as the early August attack. 3. WHEN -- initial reperts received at in Security Fusion cell at approximately midnight on 15 ectoher 2&6. Prepared for Energy Transfer Partners 2

INFORMATION CONTAINED IN THIS REPORT i5 PROPRIETARY AND DO NOT RELEASE OUTSIDE OF AUTHORIZED APPROVED RSCIPIENTS 4. WHERE - lnitial reports place it approximately mile from a welding shack on spread. 2 near Reasnor. 5. WHY ?We will continue to update as information becomes available. 6. Currently the scene is locked down by the Jasper County Sheriff and wiil likely remain so until the ?re marshal examines the site. We will have two personnel travel to the site early in the morning (departing Des Moines area ?0600 16 DCT 3.6) to attempt exploitation of the site when given access. I). Keokuk Stands with Mississippi Stand Rally 1. Appeared to be about 40 people at event but was used to gain motivation and spread word of movement. i. 1119 Vehicle stopped by security and looked as though he was going to get out to confront. One middle aged man in a blue truck with EA license plate? This is most likely a landowner. ii. 1415- and Aaron Jorgenson-Briggs seen taking pictures of pumps at Mississippi HDB work site. 1600 One driver taking pictures of pipelines at zoom and 520th Ave. lie was told to leave and then complied. iv. Approx. 1700- Bold Iowa Bold Action Teams (BATS) in Calhoun, Boone, and Webster Counties. b. BATS obstructed work at 5 work sites total, after a main protest on Red Oak Ave in Calhoun County. Three arrested: Ed Halon,- and unidenti?ed third person. Story Board to Follow. Work Sites obstructed: 1. 280th and Xenia 320th and Dakota Ave Norridge Ave 290th and York Ave 396th and 169th i. 1726- Middle aged couple in silver SUV seen observing and pointing at construction site in Boone County. In. license plates. ii. 1?43~Mississippi Stand Hi3!) site had an attempted stop and hook up of a truck. it was stopped before protester could hook up due to an effective escort team. 175$ Protesters detained at Mississippi Stand for attempting hook up, including Aaron lorgensen?Briggs, and one additional unidentified fernele~ passed off to Lee County Sheriffs. c. Boid Iowa?s BAT tactic was unfortunately successful today. Work was stopped at several sites and used up a lot of our resources. LE was not supportive of our mission for the most part and did not want to arrest or cite those wh 0 were trespassing. Calhoun County LE ?nally arrested individuals when they laid down in front of the pipe truck. The issue here is that protesters are learning there is little LE will do to impede them. We need to work closer with Calhoun, Boone, and Webster county LE to ensure future protesters will at least be ?ned, if not TigerSwan Prepared for Energy Transfer Partners 3

ED lN THIS REPORT [5 PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSISE 0F AND RECIPEENTS arrested. Alternatively, we could request Lee County LE speak to other counties about tactics that are working in Lee County such as threatening to tow all vehicles an (1/02? in creasing bail for protester directions to $2,000. if the lock down tactics of Mississippi Stand and the SAT tactics of Bold lowa were to join forces, it would severely impact our mission Next 24 Hours a. Protesters do not have a scheduled event for the next 24 hours. However, Mississippi Stand may attempt a direct action tonight 15 Get or early tomorrow morning 16 Oct. C. Illinois i. into! Update a. A search of social media sites revealed nothing of new intelligence value related directly to the project in b. There was not enough localized support to hold any protest activity in the Carliooille, lL area. ii. Past 24 Hours a. Want to the Carlinville, lL, no protest activity was observed as earlier discussed on a social media site. The Han-cock County Sheriff?s request is being address-ed by ETP management. Leighton Security, wili be procuring a UTV for use around the Kaskaskia. HDD locations for access to remote trails that access the location. Next 24 Hours a. Monitoring news sources and social media sites for protest reiated events and activity will he conducted daily. 3. South Dakota i. into! Update a. The schedule for Pheasant sh noting hoo rs are noon to su nset for the ?rst week, and 10:00am to sunset thereafter. Signi?cant becau so this provides 5 hours of daylight before each day?s hunt begin s~ellowing the roving patrols freedom of maneuver for a ionger period than expected. Safety briefs have continued with the Silverton Security Element so as to mitigate the associated risks. b. Positive interaction with the Silvertoo Guard Force after they have been in sector for a number of days. Local patterns have been observed and are starting to be understood as "normal activities" which makes it significantly easier to identify abnormal activities. The main hindrance is the presence of hunters who don"t fit either bill. ii. Past 24 Hours a. Travel from the new Hotels to the Spreads is enhanced from the new hotel locations. The close proximity of the hotels allowed Roving Patrols more time in sector and therefore better coverage of the facilities. TigerSwan Prepared for Energy Transfer Partners 4

INFORMATION CONTAINED IN i5 PROPRIETARY AND SENSITIVE DO NUT RELEASE OUTSIDE 0F AUTHORIZED AND RECIPIENTS b. the Silverten PM, delivered funds fer gasoline porch ases to the team in Aberdeen and the team in Be Smet. He wili deliver the funds to the team in Sioux Falls either tomorrew 0r Monday. Si} PM conducted persenel inspections of static guard? pesitions and 1 raving guard petrol in the nerthem sector of the pipeline, Vic the Launch and Recovery site in Rescue, Si}. 6. Silverton Security Team conducted raving patrol eperatiens across all three Spreads within the Smith Dakota sector; personnel security eperations on sites with electricians, the Sioux Falls 9AM. of?ce and the Rerifieid Pump Station. e. Talked 1'20? Michels? Spread 5 Foreman, this morning as tn the status ef fencing operations on valve positions. He stated that none were ready, the scatter report stated that 65, 70, 74, T6 are ready fer fencing. ?iscussed with him and 19hr: Porter the QRT teams that are going ta be installing 1-PH Active-tars from 5133.0 to SD 110. This is a part that needs to: be replaced for some de?ciency, It is occurring sporadically along the line and it takes about an hear on site te accomplish. It is my estimate currently, that they do not need dedicated fuli time guards. Next 24 Hours 3. SD PM will cpnduct the move to MP1. 156 ha wordinate Roving Patrols and the ii To Company marking on the valve sites.-, the Spread 5 Feremen reperted? that although Miohels? empinyees do not work on Sundays, these teams wiil be out duing their specialty work. This is important for the sake of ensuring that. our Roving Patrols do not suspect them to be saboteurs. The Silverten leadership. has been riirectedi te inform everyene in the security element that the 34 Turn Company will be in secter. Their engagement efihese workers is important so as t0 maintain positive persen al relations and the preveetion of escalatien of farce unnecessarily. E. Housten 950C i. Centinuecl support (if Fusien centers and intei requests ii. Updated Pattern Analysis to maintain awareness of pretestor trends across all states ?gerSwan Prepared for Energy Transfer Partners 5

A TigerSwan . ism} Solutions to Uncertamty? DAPL SITREP 054 5; 2&5 Jothorter ENERGY TRANSFER {Ef?gy INFORMATION CONTAINED IN WIS REPORT I5 PROPRIETARY AND SENSHIVE. DO NOT RELEASE OUTSIDE OF AUTHORIZED AND RECIPIENTS.

IN REPORT 8 AND DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED The Highlights it?s suspected that ND protesters will likely attempt to leckdown the access points to the Meyer Property hr: order ta prevent werlt. Further investlga?en into documents found at (Lamp 1 demenstrate that the ND protesters are evolving and showing signs of greater organization Tribal Chairman Archambeult met with yesterday. Still awaiting press of results In re, Jerry Brewermthe landwner that hosted the Mississippi Stand Camp ?anneunced that he will be running for gwemor in hopes at halting the pipeline if he wins. 5 Fear Chicago universities held p-retests yesterday, converging at the USACE affine dewntewn. There were 300+ pratestars in atteml'ance, demonstrating an increase in antl- DAPL sentiment at the-local level. The Details 1. EXECUTIVE SUMMARY A. Narth Dakota 3. Intel Update a. Law enforcement reperted protesters buying chains, pipe, and quikcrete at Lewes this morning. 1. Analyst cemment: Most likely course of action is ta use these items to build Super Boxes to leckdewn en the pipe, en the ROW, er ta leckdewn outside the access paints to the Meyer Property in order to prevent work. h. Law enforcement has individuale whe are trained ta counter this pretester method, 1. They specialize in cutting pretestors out of lockdewn methods safely and ef?ciently. c. Expleitatlon of documents fennel at Camp 1 on 10/27/2016 1. The overall ?ndings demonstrate that these protesters are waiving and showing signs of ergenlzetion. 2. These d'ccuments highlight support networks from within and autside the state of North Dakota. 3. The documents validate a cancentration of leadership and the fact that the protesters are conducting training prier to arriving. to North Dakota, 4. The document mentions tactical formations, rele playing, techniques and procedures as well as logistical requlrements before coming to ND. 5. Of mast cancem were the ?Earth First? magazines found on the camp. These magazines premote and provide for vielenl: activities. ll. Past Hears '?gerSwan Prepared for Energy Transfer Partners 1

CONTAINED iN THIS REPORT IS AND SENSITIVE DO NOT RELEASE OUTSIBE OF AUTHORIZED AND APPROVES RECIPIENTS B. iowa TigerSwen a. b. C. Meeting between Tribal Chairmen Archamhault and U.S.A.C.E. Awaiting press release of results Protesters have acquired a permit to protest at the Morton County LEC at 1300 hrs. tonight Law enforcement issued a Code Red at 1663 hrs. to bring in responding officers to deal with the pianned protest. Protesters continue to winterize Camp 2 More protesters are arriving in the camps A boat was seen arriving at Camp 2 teday Protester probed the wire in place at ARMS 1. Fled the area when DAPL security Helicopter arrived on station Reinforced the HDD site Construct HLZs in the vicinity of the HDD site 695 locations for northern evacuation route Hwy 1806 brioge will remain closed until engineers take core sampies and the bridge passes an inspection Next 24 Hours Protesters pian a prayer on Hwy 180-6 tomorrow morning at (3900 hrs. Sociai media reporting states there will be 189 horse riders present Tensions will remain high as DAPL workers continue e?orts on the ROW East of HWY 1806 Continue static security efforts around Fortress Forward Continue to reinforce wire plan on the north side of the Meyer Property Reclaim used wire along RQW redeploy wire to reinforce wire around HDD site and the perimeter Intel Update a. does interview with Redacted Tonight, 3 YouTube-based news source 1, - reiterates the story that she was arrested ?on her own Ian at" while protesting the pipeline 2. Wiil be a source of propaganda for protesters 3. Gerald (Jerry) Brewer running for governor 1. The lentiowner that hosted the Mississippi Stand Camp on his iand announced he wili be running for governor in hopes that if he wins, he can halt the pipeline and future pipelines in lA Sacred Stone camp has the least amount of Native Americans, likely wh ere MS members will attempt to set up their self-sustaining camp becau se MS leaders have expressed disinterest in working with Native American eiders Prepared for Energy Transfer Partners

INFORMATION CGNTAINED IN THIS REPORT l5 PROPRIETARY AND SENSITIVE DO NGT RELEASE OUTSIDE OF AUTHORIZED APPROVEB d. Bold lowa posts story about the effects of drilling under the ?es Moines River on nearby landowners 1. Landowner Ken Fhipps claims the drilling causes ?vibration {that} literally shakes the walls of our house and is causing frequent headaches.? 2. Phipps also complains of the loud noises from the drill 24/7, that the pipeline may' affect the gas line, and that the boring equipment is not safe to be around 3. Signi?cant because by introducing this propaganda, this further indicates that Bold iowa is refocusing its efforts to the Des Moines River drill site e. - leaves with his ti-Haul of suppiies for Standing Rock tonight.- - accompanies him. Supplies bringing include 1. Cold weather gear, tarps, propane, horse feed and medicine, non- perishable food, goggles, and milk of magnesia (for protection and treatment of pepper spray) f, Jesse Horne traveling to N0 this weekend. ii. Past 24 Hours a. ?nalized security handover at fixed sites throughout IA AOR b. Continued security drawdown- and switch to patrolling format; will be complete by Nov 7 Next 24 Hours a. Continue security drawdown and switch to patrolling format; will be complete by Nov 7' b. Prepare to secure the Des Moines- River HDD site during the upcoming pipe pull on Sunday (delayed multiple timesli The primary security concern during this pull will he ensuring mobility of trucks moving mud and cuttings from the hole to a dump site approximateiy three miles away. (2. iliinois i. Intel Update 3. Continued progress in link anaiysis between anti?BAPL groups in greater Chicago area and Spring?eld A0. A muitifaceted event occurred in Chicago today from (4) four universities? locations which led to a convergence on the Army Corps of Engineers? Of?ce in downtown Chicago. intel reports have discovered as many as 300+ active protesters in attendance. As a result of this protest, intel has found no less than three new arrlzi-i?ii?ii?i~ groups and/or organizations loosely or directly working with Standing Rock anti efforts mostiy impacting North Dakota. b. Analysis of negative PR in greater Chicago area was vaiidated by protests and demonstrated a strong and radicalized aoti-DAPL sentiment in the greater Chicago area that may impact local opinions and project efforts. Mari ifestation of the anti~i3APt sentiment will be continue to be monitored ciosel?y ii. Past 24 Hours TigerSwan Prepared for Energy Transfer Partners 3

INFORMATION CONTAINED lN REPORT lS PROPRIETARY AND 9 DO NOT RELEASE 0F AUTHQRIZED AND APPROVED 3. Op order issued for active protest events in greater Chicago area. intel data mined protesters who con?rmed attendance for Warrior event via Facebook calendar. Security established effective methods for camera placement and image collection database ?ext 24 Hours 3. Follow up with key leadership in attendance of anti-DAPL movements in greater Chicago area and Spring?eld A0 via late! and Security will review so meillan ce package derived from anti?DAPL protests in greater Chicago area which most likely will have an impact and/or dictate the progress of the pipeline project in Illinois. 0. South Dakota l. 'l?igerSwan iota! Update a. On Point Security guards from the Rediield Pu mp Station reported that at approximately 10:38 this morning a Green Chevrolet Suburban, SD plates, -, approached the Red?eld Pump Station from the west at a slow rate of speed. As the vehicle passed by the Pump Station it turned into the east entrance. The guards moved their vehicle from the west side and encountered the Green Suburban as it was stopped inside the west entrance. When informed that they were on priuate property the guards asked what they wanted. The two men stated they were ?in st looking around", they then left and headed back to the west towards High-way US 181. The two men were of medium heightand weight, middle age, with dark completions. One had grey hair and the other was mostly held with a goatee. it is believed they were of American lndian descent, as they were not black, in dian or appear to be Hispanic. Beoau se of the unusual speed at which the ear traveled the road, the fact that it has not been seen before and the attempt to enter the Red?eld- Pump Station, it is believed that this was a reconnaissance of the position and it?s security capacities. The assumption should: be made that personnel know where the pump station is an d? the fact that it is not strongly protected lie with barriers}. The ten to line around the flu mp Station appears to be complete at this time. lt is so ggested that a copy of the Threat Assessment that was made by Silverton personnel be made available to South Dakota security forces so that considerations of the recommendations can be reviewed. . At approximately 11:90 hours today, an On Point Roving guard approached an individual at valve site SD 78, in a white Toyota RAV4, ll. plate- The individual identified himself as Gary Tomlin, a free-ion ce reporter who was following the pipeline. This is the same individual identi?ed in the a few days ago in Iowa and Illinois that he was moving along the entire pipeline. He attempted to interview the guard, but was informed that "i am not authorized to Prepared for Energy Transfer Partners 4

INFORMATION CONTAIN ED iN THIS REPORT IS AND SENSITIVE i! ll. TigerSwan DO NGT RELEASE OUTSIDE OF AND discuss these matters with you?, the guard then provided- contact information to the Si} 0n Point PM. The man then moved off in a northeasterly direction, presumably in the direction of Valve $865. The man tried to call the Si} On Point PM, but as he was on the phone with the guard, the message went to voicemail. When he retrieved the voicemail, the SD PM contacted Tiger Swan Intel assets for an assessment of Gary Tomlin. The Spread 6 Team Leader was informed that the individuai would soon been in his sector. Movement of Spread 6 Team was conducted so as to intercept and/or observe Gary Tomlin?s movement through th South Dakota sector. The Spread 6 team ieader approached Gary Tomiin at SD 50 and asked for identification. He produced a motor vehicle driver?s iicense and it was recorded on camera, the car and the license plate were also photographed. During this interaction the Spread 6 team Leader observed a map that the individual was marking with pipeline information as to vaive locations. He had apparentiy missed the Launch and Receiver site that is close called Gary Tomiin and informed him that he should contact Vicky Granada, The ETP media relations manager. He was thankful for the information and stated that he was interested in interviewing security personnel when he arrived at the camp in North Dakota. It is my beiief that Gary Tomlin is hiding his true intentions and that he has a plethora of information to provide to the protesters. it is estimated that he wiil arrive in North Dakota on the evening of the 4th or morning of the 5th. . The Baily Piainsman newspaper had two articles today on the pipeline. it is entitled, ?If Dakota Access pipeiine were to move, Where wouid it go?? The article starts off stating that President Ohama has raised the possibility of a reroute of the four-state Dakota Access pipeline. It appears to be a fairly balance viewpoint on the subject, but by it sheer mention of the possibility it could very we? be viewed as a ?victory? and open the door to more talk about a reroute. The second articie was entitled, "Ciergy join in Bakota Access pipeline protesters for ceremony?. The articie gives the impression that ?clergy? are joining the cause and therefore it legitimatizes it, hot the oniy ciergy discussed or quoted are from tribal connections. This article is an opportunity for protesters to leverage as legitimacy for their actions. Past 23 i-iours a. On Point Security Team conducted security operations in sector to include: roving patrols of eli three Spreads, security for electrician crews in 4 locations, 24/? security at the Red?eid Pump Station and security at the DAPL of?oe in Sioux Falls. Operations were con-do cted to intercept Gary Tomiin, a reported free-lance reporter in the South Bakota sector. Next 24 Hours a. On Point Security elements will conduct security operations in sector. SD PM anti 0n Point PM will conduct circulation for standards enforcement. Prepared for Energy Transfer Partners 5

CORPORATE SENSITWE DO NOT Electronic Copy Unit; DAPL Securi? Loo: Mangigg, ND 19010133 FRAGO 16.17.16.001 References: MAP: DAPL Pipeline Map (Special) OFORB: DAPL Semrigg Time Zone Used Thmughout the 0rder: UTC ?5 (Central Time (CT I) TASK ORGANIZATION: TigerSwan EL Fusian Lead (7) Phone (70 1) 289-9200 Russell Group of Texas Security (71 FAX) -- Security (26 PAX) Leighmn - Security (26 FAX) IGCode LLC Security (14 FAX) TERRAIN AND WEATHER OBSTACLES: Impmved and unimpmved roads 1) Situation: See attached PowerPoint rm- Updates See attaehed daily summary and Stary Baard (PowerFaiat) 2) Missian: The DAPL Security Team conducts static and mobile security operatians in of the pipeline throughaut North Dakota. DAPL Security Team has 4 primaty fowses; pratect the centracters of DAPL, protact the machinery 0f DAPL, praise: the material of DAPL, protect the repuiation of DAPL and yam: individual mb?wntractor companies. 3) Executiem Director?s intent: Sacurity personnel will provide around the clack protection for BAPL, observe vialatiuns of the ROW/equipmant integrity, deter and wan: those wha thmaten the integrity of DAPL premisas or property? while obscwing and prime-wing the: rights of these legitimate piratestors. a) Cancept at the Operation: i) Contractnr work will continue at AR 118 and teatime on War}; frant 2 and Wart: Frant 3 per the Conn-30m: Work Han. ta depart Max:631: Aero Center at and insert via and await arrival of survey crew (4 individuals). Survey crews will be at Mandan Aero Center at ii) Survey crew will insert via air and link up with RGT Team on the ground to mn?uct their survey NLT 1710360CT16. Fixed site security at contractor yards, tenninals and mat yard-s iv) Temporary site security a1 Access Rcads and Work sites 1. 0f 18 ,3

Zof 18 CORPORATE - DO NOT v) Mobile security as Quick Reaction Force to reinforce static and Temporary Sites vi) Airborne response for video/still capture of violators and Medical QRF (1) Air Unit will be on staadby during reconnaissance mission IQT conduct rapid air evacuation personnel. if require. (2) Air Unit will also be on standby with Medic and 1 Security Of?cer IOT conduct rapid. on scene medical support as well as evacuation by air. vii) Observation Post emplacement East side of the river (vehicle) Observation Post adjusted using Leighton Security East of 1806 to provide early warning of protest vehicle movements. We will accomplish this mission by providing the highest quality security services while demonstrating the opmost professionalism. We will provide constant observation, communication, and protection of all is our charge. Frimary effort Transportation of Equipment from AR 71 at 16 to AR 120. Security of ROW work sites VIC ARIN-120 and AR 114 (HDD Road Bore Site) Other Efforts Continue to provide static security for high risk sites including; Of?ce buildings Terminals Mat Yards Contractor Equipmeat Yards Observation and reporting of trespass violations during the Tertiary effort continue to collect infomation of an evidentiary level in order to further the DAPL Security effort and assist Law Enforcement widt info-motion to aid in prosecution. Mascuver All elements are engaged to provide security support to DAPL. Execution of the scheme of maneuver will be fluid and change based on DAPL requirements throughout the day. Static sites and temporary works sites will be covered based on criticality and threat, other sites and location will be supported. by use of Mobile QRF which will proposition and reposition as required to support pipeline operations. Main effort for 9.27.16 will be the areas occupied by work crews. Secondary effort will be static yard locations Parallel e??ort will. be displacement of SEL PERS from one QRF element from Madden Ops Center to Williston to augment Spread 9 Information collection will be an additional tasking to all subordinate units. (2) Video/Still Photography Support: Air Support (Video/Still) is available on call to support. assets) Priority of Support goes to units engaged by protesters Restrictions on Air Support are weather based only. (3) Recoonaissance and Surveillance will be coaducted overtly by all security personnel of any/all potential or actual protesters. Purpose is to collect evidentiary photographic and video evidence. If in an; engagement, when law enforcement arrives videographer or photographer will immediately identify themselves to the Law Enforcement Incident Commander and provide IMMEDIATE playback to further the LEO investigation. (4) Intelligence:

4) 5) 6) CORPGRATE no NOT Purpose: Collect information that is relative and timely to the tactical situation on the ground and supports the pipeline effort and, support Law Enforcement efforts for prosecution of violations of ROW and Equipment sanctity as well as any assaults on pipeline personnel. Information collected of a strategic value will be assessed and. forwarded to corporate headquarters for analysis and processing. (5) Engineering Not Applicable as this time b) Tasks to Maneuver Units: SEE ATTACHED SCATTER SHEETS- Coordinating Instructions: a) Maiotain current semrity posture b) Maintais current communications tempo 0) Coordinate any wi?idrawals from worksites with foreman on site. (1.) Report units engaged ASAP to TGC e) QRF Units to have C-Wire and No Trespassisg signs- to facilitate rapid deployment of temporary fencing around works sites the: are threatened by deters. Service Support per individual company SOP Command and Signal: a) Command: i) Location of Operation Center is Mandate Air?eld (Greg Allen) ii) Location of higher headquarters is ETC HQ in Houston, TX 13) Signal: i) Primary WhatsApp Messaging ii) Alternate - Cell to Center 701?289-9200 GuardianAngel AppliestionfSOS Beacon iv) COLOR. BE THE DAY v) COLOR OF THE GREEN APPROVED: Allen, UNCLASSIFIED 30f18

CORPORATE DO NOT Elactroaic Copy Unit: DAPL Securig Loo: Mandan ND 16 19001113 FRAGO 10.20.16.001 References: MAP: DAPL Pipeline Map (Special) 01?0an DAPL Securigg' Time 2011s Used Thmughout the Order: UTC --5 (Central Time (CT )1 TASK ORGANIZATION: TigerSwan 0P Fusion Lead (7) Phone (701) 289~9200 Russian Group ofTexas Sammy (7 1 PAX) SRC - Security (26 PAX) Leightaa Sacarity' (25 FAX) LLC Security (14 FAX) TERRAW ANB WEATHER GBSTACLES: Hapmved and unimpmved reads 1) Situatien: See attached i?owerl?oint fer Updates See attached daily summary and Stary Board (l?aweri?aint) 2) Missian: The DAPL Sammy Team conducis 3min and mabile security operations in support of the pipeline construction North Dakota. DAPL Security Team has 4 primary fum?es; pmtect the contractors of DAPL, pratect the machinery of DAPL, prmect the material of DAPL, praise: the reputation of DAPL and yam individual sub-contracts: companies. 3) Execa?an: Diractor?s Intent: Sammy pet-Sound will provide around the ciock protection far DAPL, abserve violations of the ROW/equipment integrity, deter and warn those who threaten the integrity 0f DAPL premises 01' property whiie and. preserving the rights of those ?egitimate pratesters. 3) Concept of the Opem?an: i) Cantractor work win centinue at AR 118 and cantinase an Work Front 2 and Wart: Front 3- per the Work Plan. ii) RGT Security will insert UTWSecuriQr Teams and 0? Teams commencing at t9 support VIP missiun. vicinity 6f AR 127. Rehearsal will (wear 19216900116. Coordination with LE t0 cantinue thmughout missien. Fmed site security at coatmctor yards, terminals and. mat yards iv) Tempurary site security at Access Raads and War}; sites Mobile semrity as Quick. Reaction Force to static and Temporazy Sims UNCLASSIHED Eof 18

CGRPORAT SENSITIVE DO NOT vi) Airborne response for video/still capture of violators and Medical QRF (1) Air Unit will be on standby doting reconnaissance mission IOT conduct rapid sir evacuation of DAPL personnel if require. (2) Air Unit will also be on standby with Medic and 1 Security Officer IOT conduct rapid on scene medical support as well as ev sedation by air. vii)- Observation Post emplsoement East side of the river (vehicle) Observation Post adjusted using Leighton Secmigr East of 1806 to provide early wanting of protest vehicle movements. We will accomplish this mission by providing the highest quality security services while demonstrating the upmost professionalism. We will provide constant observation, communication, and protection of all in our charge. Primary effort Transportation of Equipment from AR 71 at 16 to AR 120. Security of ROW work sites VIC ARIN-120 and AR 114 (HDD Road Bore Site) Other Efforts Continue to provide static security for high risk sites including; Of?ce buildings Terminals Mat Yards Connector Equipment Yards Observation sod reporting of trespass violations during the Tertiary e??ort continue to collect isfoonatioa of an evidentiary level in order to further the DAPL Security effort and assist Law Enforcement with information to aid in prosecution. (1) Maneuver All elements are engaged to provide security support to DAPL. Execution of the scheme of maneuver will be fluid and change based on DAPL requirements throughout the day. Static sites and temporary works sites will be covered based on csitioality and. threat, other sites and locatios will be supported by use of Mobile QRF which will proposition and reposition as required to support pipeline operations. Maia. e?'ott for 9.27.16 will be the areas occupied by work crews. Secondary effort will be static yard locations Parallel effort will be disPlaeeinent of SEL PERS from one QRF element from Msndan st Center to Williston to augment Spread 9 Enthusiasm collection will be so additional tasking to all subordinate units. (2) Video/Still Photography Support: Ais Support (V Moo/Still) is available on call to support (m assets) Priority of Support goes to units engaged by protesters Resttietions on Air Sisyport are weather based only. (3) Reconnaissance and Surveillance will be conducted overtly by all security personnel of any/all potential or actual protesters. Purpose is to collect evidentiary photographic and video evidence. If in an engagement, when law enforcement artistes videographer or photographer will immediately identify themselves to the Law Enforcement Incident Commander and provide IMMEDIATE playback to further the LED investigation. (4) Intelligence: Pmpose: Collect information that is relative and. timely to the tactical situation on the ground and supports the pipeline effort and support Law Enforcement UNCLASSIFIED 2 of 18

4) 6) CORPGRATE SENSITIVE DO NOT efforts for prosewtion 9f violations of ROW and Equipment sanctity as well as any assaults on pipeline personnel. Infamaticn collected of a strategic value will be assessed and, fomarded to carporate headquarters for analysis and pmcessing. (5) Engineering N01: Applicabrle at this time b) Tasks to Maneuver Units: SEE ATTACHED SCATTER SHEETS Ceardinating Instructions: 3.) Maintain current sewrity posmre Maintain current communicatians tempo 3) Coordinate any wimdrawals from worksitas with foreman an site. d) Report units engaged ASAP to TOC e) QRF Units ?3 have C-Wire and No Trespassing signs to facilitate rapid deployment of tempamry fencing atwnd wurks sites that are threatened by ?aters. Service Suppertm per individual company SOP Command. and Signal: 3) Comand: i) Location of Operation Center is Mandaa Airfield (Greg Allen) ii) Location of higher headquarters is ETC HQ in Houston, TX b) Signal: i) Primary - WhatsApp Messaging ii) Alternate - Cell to Center - 761-289?9200 GuardianAngei AppiicationfSOS Beacon iv) COLGR 0F TEE DAY REE v) OF THE GREEN 302?? 18

Filters SVG