Internal TigerSwan Situation Report 2017-03-18

DAPL SITREP 187 March 18, 2016 John Porter Chief Security Officer INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE. DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS.

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS The Highlights Pipe pull commenced and should be complete at some-time tomorrow. IA stands ready at all valves, L/Rs and Pump-house. Tawasi (Valve Supsect) has fled to Springfield, Oregon. FBI has been notified and will visit with him shortly. . The Details 1. NORTH DAKOTA A. Intel Update 1) To date there is no evidence the few protesters remaining in the Standing Rock vicinity intend to renew protest activity during the pipeline pull. We have not observed any gathering of protesters south of the Cannonball River, nor any movement in the areas previously occupied by the Rosebud and Oceti Sakowin camps. The only movement observed in Sacred Stone appears to involve clean-up activities. Additionally, no vehicles have yet attempted to stop while being escorted on Highway 1806. 2) We believe protesters have likely long-anticipated the completion of the DAPL project and the commencement of the flow of oil, and, though angry, are resigned to it and are moving on to the other projects. 3) We will closely observe any impact on the anti-DAPL movement as prominent protesters, such as Myron Dewey and Michael Fasig, return to Morton County for their court dates over the coming days and weeks. B. Past 24 Hours 1) At approximately 0417 19 March, DAPL pipe began to be pulled under the Missouri River. 2) An unidentified individual, took a photo of the pipe pull operation (cover slide) early morning. It was sent it to an individual who posted it to a private Facebook account administered by Defend Bisman. Defend Bisman eventually took the photo and post down after several hours. 3) Leftist media personae Johnny Dangers and Meko Haze, founder and editor of anti-DAPL blog The Daily Haze, posted to their respective Facebook accounts articles saying oil could be flowing through DAPL by Monday, 20 March (http://www.telesurtv.net/english/news/Oil-Could-Flow-in-Dakota-Access-Pipeline-as-Earlyas-Monday-20170319-0002.html, http://thedailyhaze.com/dakota-access-pipeline-oilflow/). C. Next 24 Hours TigerSwan Prepared for Energy Transfer Partners 1

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS 1) Continued monitoring of Open Source information, ISR feeds, and other sources of information to provide accurate assessments of protester activities/migration which may impact DAPL operations. 2) Cleanup efforts continue 2. IOWA A. Intel Update 1) Christine Nobiss and Thomas Touches Lightning voiced their support and asked for others help for the members of the 100 Grannies association going to court in May for their antiDAPL protesting. Nobiss went on to explain 30% of pipeline goes through Iowa, (14) fourteen landowners, and the Sierra Club are suing the Iowa Utilities Board for authorizing the abuse of eminent domain. 2) Dave Whiting’s camper is being used in the Little Creek camp. It provides electricity and shelter for those who remain overnight at the camp in addition to the tents and teepees. 3) Christine Nobiss also called out for protestors to voice their opinion on Representative Steven King who Nobiss identified as a white supremacist and racist in legislature. 4) REF: https://www.facebook.com/14830117/videos/10104663053171009/ B. Past 24 Hours 1) 2) ISAT conducted valve site assessments of the northwestern region of the state. At approximately 0911CST, ISAT was notified Valve IA-240 was reported to be damaged by a blowtorch in Boone County. FBI agent Thomas Reinwart and ISAT were contacted and on scene to continue the ongoing investigation. 3) All Iowa counties that contain any portion of the DAPL pipeline had their respective law enforcement departments contacted. Sioux, Cherokee, Buena Vista, Boone, and Mahaska County have instructed their Deputies to increase patrolling at the valve site areas as well as provide surveillance at the sites between calls. The other counties stated they were “shortstaffed” and did have the manpower to assist with guarding the pipeline. 4) Met with the Law Enforcement representative of the International Brotherhood of Teamsters, which represents 90 of the 235 law enforcement agencies in Iowa, about staffing on the valve sites with off duty law enforcement officers. explained that within a 50-mile radius of Des Moines, law enforcement agencies have over 200 vacancies for the area. And, that the Iowa State Patrol has a 150-trooper vacancy statewide. Also, in rural Iowa counties where the pipeline is located, the county may be 5700 square miles in size, and only have a small Sheriff Department staff of officers. A good example of this is in Cherokee County, Iowa where MLV-IA-100 was vandalized. Cherokee county has a Sheriff, Sergeant, 4 Deputies and 1 Civil Deputy for a total staff of 7 officers to cover 577 square miles 5) To date, 115 Tigerswan guards in IA, with 14 more on the way. We cover every valve in the state to include L/Rs and the Pump-house. LE has done nothing but pushback in regards to actual hire for off duty. The shortage of Highway Patrol officers is at 150 across the state TigerSwan Prepared for Energy Transfer Partners 2

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS and over 200 in the Des Moines area alone. All guards have direct contact with the LE in their counties C. Next 24 Hours 1) Continue valve sites assessment 2) b. ISAT tracking POI IRT Valve attacks in Iowa and South Dakota 3. ILLINOIS A. Intel Update 1) Unable to conduct Intel search due internet issues NSTR B. Past 24 Hours 1) 2) 3) 4) Conducted physical security check of pipeline infrastructure Continued to support SUNOCO personnel with operations across the Illinois ROW Conducted open source monitoring of activist groups Inspect the ILV 245,200, and 160 area where drilling is taking place C. Next 24 Hours 1) Continue to support Sunoco personnel with operations as needed 2) Conduct open source monitoring of activist groups 4. SOUTH DAKOTA A. Intel Update 1) 2) The damage to SD Valve 305, in a similar technique found in Iowa, is of major concern. Increasing the threat to sites in SD is not only their remoteness, but lack of physical security measures at. As the weather improves, the roads to the remote sites will become more passable and directly correlate to the sites threat of sabotage TigerSwan Prepared for Energy Transfer Partners 3

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS 3) 3) Snow melt revealed 6 to 12 inch gaps on the bottom of the chain link fence (inner perimeter) at SD Valves 10, 20, and 30. This gap, added with the soft ground, affords other avenues of access to the valves B. Past 24 Hours 1) Confirmed damage to SD Valve 305. Damage is comparable to the identified sites in Iowa. Investigation is ongoing. 2) Cleared SD valves, LR sites, and pump station with no other identified damage to a valve or the pipeline. C. Next 24 Hours 1) Continual updating of the SD Sites Product to allow the most recent information to be disseminated. 2) Monitor Open Source and other sources of information to identify indicators of potential threats to valve sites. 3) Maintain flexibility and mobility to observe potential threats to valves and other DAPL sites TigerSwan Prepared for Energy Transfer Partners 4