Internal TigerSwan Situation Report 2017-05-04

1 TigerSwan . Solutlons to Uncertamty? DAPL SITREP 233 May 4, 2017 John Porter ENERGY TRANSFE ChiefSecurity Officer INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE. DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS.

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS The Highlights Tomorrows SITREP will be void of valve details as that will be sent along with the SITREP as separate document. Our concentrated focus is the massing of intelligence (digital and ground) to find, fix and eliminate one person from the “detachment” who will lead us to the arrest and conviction to the remainder of these terrorists. . The Details 1. NORTH DAKOTA A. Intel Update 1) Protesters remain primarily absent from Cheyenne River Camp during the camp shutdown; only 3 5 vehicles observed today as opposed to 4 – 7 observed yesterday. 2) Protesters continue to post social media surrounding the Climate Marches around the country as well as fund raising efforts for camps and protests around the country. 3) The Social Media focus on Flint, MI continues today. 4) Female promoter for the upcoming Myron Dewey film event in Cannonball, ND was identified as Christina Iron Eyes. https://www.facebook.com/christina.ironeyes.5 B. Past 24 Hours 1) upcoming Myron Dewey film event in Cannonball, ND was identified as Christina Iron Eyes. a. https://www.facebook.com/christina.ironeyes.5 C. Past 24 Hours 1) Maintained security at valves ND 280 to ND 430 using roving patrols. 2) Maintained security at valves SD 160 to ND 340 3) Valve sites inspections: ND 320 Roller wheel on vehicle gate identified as being off the track. Sunoco notified and contacting site workers to correct. ND 350 TigerSwan Prepared for Energy Transfer Partners 1

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS Middle strand of barbed wire on valve fence is missing some clips to hold it in place. Sunoco notified and contacting site workers to correct. 4) Valve site risk assessments: a. Based on what has been taking place in Iowa with the same valve site being vandalized twice, my assessment of the North Dakota valves at risk of similar attacks and vandalism are as follows: ND Valve 290 This valve is located off Hwy 94 with very little visibility at night. It can easily be targeted and the assailant can easily escape on HWY I 94 going East or West on the highway. ND Valve 300 The valve is located on a main road with relatively busy local traffic. Based on the proximity of this valve to ND Valve 290, a protester with advanced knowledge of the area would be able to conduct multiple attacks within a short period of time. ND Valve 350 This valve is easily accessible from HWY 6. This valve site has been previously vandalized on two separate occasions by protesters. Given the current tactics of protesters returning to the same valve in Iowa in conjunction with its ease of access, this valve is assessed to be the highest threat of attack in North Dakota. HWY 6 has historically been a prime target for protester direct actions, making it a familiar target which would in turn amplify the impact of publicity from attacks/damage. ND Valve 370 Given the location of the valve off HWY 1806, the road is frequently used by ranchers and their visitors. It is common to see vehicles on CR 135 at any time of day. There have been two previous occasions TS security has chased vehicles out of the area. Protesters were observed taking pictures of the valve during construction, making it a more familiar target for attacks/damage. ND Valve 380 This valve is located off Hwy 1806 at HDD West, which has been the primary target of protesters during the construction of the pipeline. Given its vicinity to Lake Oahe/Missouri River and the surrounding U.S. Army Corps of Engineer’s property (public property), the valve can be easily targeted/accessed for vandalism by protesters. ND Valve 390 Based on this valve’s location off HWY 1804 and its proximity to Lake Oahe/Missouri River, the valve is at constant risk of protesters day or night dependent on the manning of security at the valve. TigerSwan Prepared for Energy Transfer Partners 2

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS ND Valve 430 This valve is in a semi remote area; if protesters were to vandalize this valve the reaction time would be slow. Based on the location, protesters can access, attack, and depart without being seen. LR 2 This valve is in a semi remote area; if protesters were to vandalize this valve the reaction time would be slow. Based on the location, protesters can access, attack, and depart without being seen. D. Next 24 Hours 1) Continue monitoring of Open Source information, ISR feeds, and other sources of information to provide accurate assessments of protester activities/migration which may impact DAPL operations. 2) DAPL security will continue to rove the valve sites in North Dakota. 3) Michel’s continues restoration efforts at the HDDs. Approximately 1 week of work remaining 2. IOWA A. Intel Update 1) 3 May ~1850: At IA 580, it appears someone attempted to break the lock of the gate. This is currently assessed to be the same arsonist (s). The area of IA 580 is close to a safe and familiar zone for Jessica Reznicek and Ruby Montoya because of former Mississippi Stand protests. It is assessed they are currently in the area. 2) In response to recent anti protester videos posted on FB, Little Creek Camp is calling for as many people as possible to share their FB page and come visit the camp to prove they are non violent. 3) Several Bold Iowa members were scheduled to have court tomorrow, but it was pushed back again. Heather Pearson’s trial is currently scheduled for 24 May. 4) WeAreIowa.com published an article on Vern Johnson, a farmer from Boone County, expressing his dissatisfaction with DAPL. He is one of the eminent domain lawsuit landowners and this article will likely highlight the case. 5) http://www.weareiowa.com/news/local news/land owner says pipeline construction harmful to farm/705093825 B. Past 24 Hours 1) Iowa DAPL Security patrolled the ROW, assessed the condition and upgrades, and interacted with the DAPL security force. 2) Adjusted security posture to account for recent attacks. 3) Several sites remain flooded due to heavy rains. Most sites have large gaps in fencing and burnable material left on site. 4) Captured additional drone footage of Little Creek Camp. TigerSwan Prepared for Energy Transfer Partners 3

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS 5) Valve Site Inspections: IA LR1: Gaps from bottom of the fence to the ground ranging from 0 10.” Gate not locked in most secure manner. There is a mobile generator and trailer inside the fence. IA LR2: Temporary fence back up with additional temp fence to cover large gaps. Site has a large stack of tires and wood piles on site. Heavy equipment parked on site. IA LR3: There is free space under the fencing from 1 to 6 inches. The gates were left open by construction crews 3 May. IA LR4: Permanent fence is installed with gaps, needs painting. Crews on site. IA 11: Main gate is not hinged correctly. IA 20: The main gate is not on its hinges correctly. There is more than a foot of free space under the back drive through gate. Crew on site doing electric. IA 30: Gaps of 4 12 inches under gates. Back gate off hinges. Gates are not locked in most secure manner. IA 31: 4 7 inch gaps under gates. Both gates are off their hinges. Gates are not locked in most secure manner. There is a pallet to the right of the gate. IA 40: The main gate and the back gate are not on their hinges correctly. IA 80: The gates are not hinged properly. Temporary fencing stacked in driveway. IA 90: The gates are not hinged correctly. There is cardboard tubing to the right of the main entrance. IA 100: Gaps under the gates vary from 3 inches to approximately 1 foot with the back gate having the biggest gap. There's a single strand of barbed wire under the back drive through gate. Plywood also on site. IA 110: TigerSwan Prepared for Energy Transfer Partners 4

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS IA IA IA IA 1 foot gap under back gate. There is a single strand of barbed wire under the back gate. 120: Temporary fence. 4X4 wire fencing has been added outside the temporary fencing. The panel being used as the back gate is not secure. Timbers from roadway are on site. 130: Temporary fencing with very little Barbed wire on top. Not every gate panel has a stand supporting/securing them. There is additional 4"x4" square wire fencing, which is about 4' tall outside the temporary fencing. Site has a gaping hole in the fence. The opening is a little over one foot but can easily be opened to three feet 140: Temporary fence, no locks or chains to secure it. There is an area of free space under the fence that is approx. 18" deep and covers a span of 10'. There is additional 4x4 square wire fencing outside the temporary fencing. There is a pallet and a large pile of scrap wood on this site. There are 10 15 tires on site. 150: Temporary gate panels have no lock or chain and many panels are not secured together. Duct tape on valve. Meter and meter box are outside temp fencing. Only 1 tire and some plywood still on site. IA 160: Temporary fence, no lock securing panels. IA 170: There is a temporary fence, not secured with zip ties or wire. There is wire fencing outside of the temporary fencing. There are tires and plywood across the road from the VS. Heavy equipment also on site. IA 180: Temporary fencing. There is a secondary wire fence outside the temp fence. Very muddy/flooded. 10 15 tires and several pieces of wood on site. IA 190: Temporary fencing. There is a secondary wire 4x4 fence around the temp fencing. Very muddy, valve site holding a lot of water. Two pallets on site, one appears to be concealing spools of wire. Additional debris and materials on site including full and partially full fuel cans. Flooded. IA 200: TigerSwan Prepared for Energy Transfer Partners 5

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS IA IA IA IA There is secondary wire fencing around the permanent fencing. The free space under the fence is over one foot. The free space under the drive through gates ranges from 1' to 1'6." West side of fence has barbed wire. 210: There is secondary wire fencing outside of the permanent fencing. The free space under the fence ranges from 6" 1'. The free space under the drive through gates ranges from 1' to 1'6" 220: There is secondary wire fencing outside the permanent fencing. The free space under the fence ranges from 6" 1'. The free space under the drive through gates ranges from 1' to 1'6". Equipment on site. 230: Secondary wire fencing has been removed. The free space under the fence is over 1'. The free space under the drive through gates ranges from 1'6" 2'. Equipment left on site. 240: Plywood is to the left of the entrance near the road. IA 250: Site has a trash pile to the left of the entrance next to the road. There is a small amount of wood and cardboard within that pile. IA 260: There is secondary wire fencing outside the permanent fencing. The free space under the fence ranges from 6" 1'. The free space under the drive through gates ranges from 1' to 1'6". There are pallets and other materials inside the VS, and a dump outside filled with burnable materials. IA 270 Burnable materials in ditch by site. IA 300: Gaps under the fence ranging from a few inches over 1 foot. Gaps under the drive through gates is approximately 1 foot. IA 310: Temp fence covering gaps along fence. IA 320 Gaps along the fence to the ground, temp fence covering. 8 10” around back gate. IA 330: TigerSwan Prepared for Energy Transfer Partners 6

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS IA IA IA IA IA IA IA IA IA IA IA IA IA TigerSwan No permanent power. Temp fence around the perm fence to cover the large gaps. Gap at front gate is approx. 30." Back gate approx. 20 24" gap. Needs gravel and grading, gravel on site. Construction materials inside fence. 340: Temp fence around the perm fence to cover the 1’ gaps around fence and gates. Foreclosed house right next to site approx. 50 m. 350: Temp fence in place to cover 1.5’ gaps in the gates. Pallets and construction equipment on site. 360 Large 2.5’ gaps in the fence and gates, with a temp fence to cover the gaps. 370: Large gaps in the perm fence and gates, with a temp fence in place to cover the gaps. 380: Large fence/gate gaps 8"+, walking gate unlocked, largest fence gap is in SW corner. Materials inside fence and nearby dumpster. 390: Needs replacement yellow warning sign for back side exterior post. 400: CorrPro materials inside fence, needs gravel work by RTU, 12" gaps at back gate, excess of 6" gaps around the perm fence. 410: Perm fence with 2 4" gaps around the perimeter, 8 12" gaps at the front gate, 4 6" gaps rear gate. Mini loader and GA buggy inside fence. 420: Perm fence with gaps ranging from 2 12" front and rear gates have gaps in excess of 12" 430: 4 6" gaps in the perm fence, 4 6" gaps at the front gate, gaps are in excess of 12" at the rear gate. 440: Gaps in excess of 6", front and back gates in excess have gaps in excess of 12." 450: About 1 ft gaps under the gates. 1 pallet of material inside fence, 1 roll of black mat left outside of fence 460 Prepared for Energy Transfer Partners 7

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS IA IA IA IA IA IA IA Permanent fence. Large gaps at the front and back drive thru gates between 12’ 18”. Gaps 6 8” around fence. 470: Large gaps between the fence and ground, no temp fence to cover the gaps. Gaps in excess of 12" in areas. 480 Wooden materials including pallets left inside fence. 530: 1’ gaps under gates. Rain washed away gravel from under fence. 540: 1’ gaps under gates 550 Corrpro materials and equipment left inside fence. 570 Fencing around the front gate is not secure on post/bar. Can be pushed through. 580: 12” inch gap under roll gates. 3 May: Appears someone attempted to break open lock on gate. C. Next 24 Hours 1) Continue monitoring of Open Source information, ISR feeds, and other sources of information to provide accurate assessments of protester activities/migration which may impact DAPL operations. 2) DAPL security will continue to rove the valve sites in Iowa. Continue to have the field managers patrol the ROW, access security and validate ROW upgrades conducted. Assist and mentor DAPL security personnel as required D. Next 24 Hours 1) Continue monitoring of Open Source information, ISR feeds, and other sources of information to provide accurate assessments of protester activities/migration which may impact DAPL operations. 2) DAPL security will continue to rove the valve sites in Iowa. Continue to have the field managers patrol the ROW, access security and validate ROW upgrades conducted. Assist and mentor DAPL security personnel as required 3. SOUTH DAKOTA A. Intel Update 1) NSTR TigerSwan Prepared for Energy Transfer Partners 8

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS B. Past 24 Hours 1) DAPL valve inspectors conducted oversight on SD valves throughout the state, varying routes to sites, and checking valves for any damages or discrepancies. 2) Maintained oversight on DAPL security and roving personnel to ensure standards are being met. Valve Site Inspections: SD-10: Lock mechanism for front and pedestrian gate unfinished SD-20: No Trail Cam, Drill crew on site doing pipe anti-corrosive treatment SD-30: Dirt that was excavated needs leveling SD-40: Dirt that was excavated needs leveling SD-50: Dirt that was excavated needs leveling, Fence crew on site SD-LR1: Needs “No Trespassing” signs, Electric crew on site SD-55: No Trail Cam, Dirt that was excavated needs leveling SD-60: Large gaps in Pedestrian and Rear gates, Fence crew on site SD-65: No trail cam SD-80: No trail cam SD-90: No trail cam SD-95: No trail cam SD-100: No trail cam SD-110: No trail cam SD-120: No trail cam SD-130: TigerSwan Prepared for Energy Transfer Partners 9

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS No trail cam SD-135: Needs fill dirt and gravel. SD-140: No trail cam, needs gravel, Opening in fence 50m west side of cattle gate SD-150: No trail cam SD-170: No trail cam SD-180: No trail cam SD-185: No trail cam, Gravel delivered SD-190: No trail cam, Fill dirt installed SD-200: No trail cam, Dirt graded, Pending gravel SD-210: No trail cam SD-220: Needs gravel, Pedestrian gate needs latch SD-230: Pedestrian gate needs latch SD-270: Needs gravel SD-280: Needs gravel SD-290: No trail cam SD-300: No trail cam SD-305: No trail cam, VALVE NOT COATED** C. Next 24 Hours 1) Continue to ensure that all security protocols are met and followed by all security personnel that are inspecting in roving valve sites in South Dakota A/O. 2) Continue to visually inspect all valve sites, reporting updates on construction and notifying any discrepancies, damages, or debris on sites. TigerSwan Prepared for Energy Transfer Partners 10

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS 3) DAPL security will continue to vary routes to valve sites when doing inspections, making it more difficult for potential threats to valves. 4. ILLINOIS A. Intel Update 1) Chicago continues to foster a continuance of the Narrative of Standing Rock. The schools in the suburbs are now providing students with indoctrination of the same Standing Rock Narrative that the Native Americans are all being systematically repressed and discriminated against. The article continues the vilification of the oil industry and applauds the actions of the activists at Standing Rock as heroic. Chicago continues to be a center for the progressive narrative. This post was posted by a known Chicago anti pipeline activist and recently a vocal anarchist. 2) Link to the actual publication: http://magazines.scholastic.com/news/2016/12/A Victory for Native Americans 3) The best assessment based on the known facts is that the attack was most likely conducted by Iowa activists; Jessica Reznicek and Ruby Montoya. Jessica Reznicek is a long time activist throughout the world using mostly peaceful protest. In 2016 that changed when Reznicek attacked a Northrop Grumman office, smashing the windows in an attempt to make public information that she claimed was in the TigerSwan Prepared for Energy Transfer Partners 11

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS office. This was her turning point in the escalation of force to continue the protest narrative. Most recently, Reznicek and Montoya participated in a fasting ceremony in order to “gain wisdom in dismantling the DAPL pipeline.” Her most likely course of action is to continue her attacks against the pipeline until she is captured and incarcerated. 4) We believe that she will most likely continue her attacks along the pipeline moving initially south and into northern Illinois. Reznicek made a great deal of contacts in and around the Keokuk area during her protesting with her group Mississippi Stand, a group that prided themselves on direct actions to garner the press’s attention which they would in turn exploit. The group had multiple connections within Iowa but also got support from Illinois, Nauvoo. It was in Nauvoo that the ceremony was held. We believe that it is their intent to strike targets in the north west of Illinoi and south east Iowa in the hopes of garnering enough media coverage that would develop a recruiting a base of direct action prone individuals to conduct additional attacks maintaining a very decentralized structure B. Past 24 Hours 1) Continue to support Sunoco personnel with operations as needed 2) Continue ROW and facility assessment and update running estimate of the security status 3) Conduct open source monitoring of activist groups 4) Conducted coordinated search effort with TS IA in the effort to locate the suspected attackers of the Iowa valve site C. Next 24 Hours 1) Continue to support Sunoco personnel with operations as needed 2) Conduct assessments and photo documentation of the sites across the entire Illinois line 3) Assist in the consolidation of intelligence efforts through instituting a tactical focused fusion cell integrating information from multiple states. 4) Conducted active security in order to deter or apprehend any threats to the DAPL valve facilities. 5) Conduct open source monitoring of activist groups 5. MAIN TERMINALS A. Intel Update 1) Williston PM visited the Trenton Terminal to ensure Security Guard meets standards, understand policies and adheres to Standard Operating Procedures. PM conducted security patrol to MLVs ND100, 120, 170, 180 and 190. Coordinated with Securitas leadership reference the security guard situation. PM met with TigerSwan Prepared for Energy Transfer Partners 12

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS Securitas Williston Lead: discussed new status of guards, manning, standards and “Management by Walking Around Techniques”. Meet with , SXL. Discussed timeline to change in guard status and duties. Duties will focus more on roving patrols then static gate guard duties. B. Past 24 Hours 1) Epping (visited today by Williston PM, visited by Securitas Lead.) Epping Security Guard now on duty 18:00 06:00 and 24/7 on weekends. Client pipeline construction operations create a significant security breech to the Epping Terminal at this time. Gap under fence on south side near client facilities Large gap under client gate on southside. 2) Trenton Light Fixtures NOT emplaced Gaps under fence line in northwest corner. New Signage emplaced IAW DAPL standards. 3) Ramberg Permanent Light Fixtures emplaced. Construction yard continues to be reduced and organized. New Signage emplaced 4) Stanley Client pipeline almost complete. Permanent fencing replaced, but barbed wire on top is missing. Pedestrian gate on water retention pond remains unlocked. It allows access to entire terminal and is in a position that is not visible to security guard. Discussed with Stanley inspector. Permanent light fixtures emplaced, however, they illuminate the tanks and structures but not the perimeter. Thursday, may 4th will be last day for guards at Stanley during daylight shift C. Next 24 Hours 1) Epping There will be a no guard present from 06:00 hrs. to 18:00 hours 2) Tenton Construction work continues 3) Ramberg Wednesday, May 3rd was last day for guard at Ramberg during daylight shift. TigerSwan Prepared for Energy Transfer Partners 13