Prefix: sar
Source: PM Information Sharing Environment (ISE); Publication: SE-FS-200-version-1.5 Suspicious Activity Reporting (SAR); Version: 1.5; Date: 25 Aug 2009; http://niem.gtri.gatech.edu/niemtools/iepdt/display/container.iepd?ref=ntsXeIX7M6Q%3D
| Type | Definition | Code Count | 
|---|---|---|
| SuspiciousActivityCodeSimpleType | A data type for the broad categorization of Suspicious Activity. | 16 | 
| TargetSectorCodeSimpleType | A data type for the broad categorization of infrastructure type. | 34 | 
| TipClassCodeSimpleType | A data type for a kind of threat to which the tip or lead pertains. | 18 | 
| TipDomainCodeSimpleType | A data type for a broad category of threat to which the tip or lead pertains. | 8 | 
A data type for the broad categorization of Suspicious Activity.
| Code | Definition | 
|---|---|
| AVIATION | AVIATION ACTIVITY | 
| CYBER | CYBER ATTACK | 
| ELICIT | ELICITING INFORMATION | 
| EXPERT | ACQUISITION OF EXPERTISE | 
| INTRSN | BREACH/ATTEMPTED INSTRUSION | 
| MATRLS | MATERIALS/ACQUISITION/STORAGE | 
| MISREP | MISREPRESENTATION | 
| PHOTO | PHOTOGRAPHY | 
| RECRUT | RECRUITING | 
| SABOT | SABOTAGE/TAMPERING/VANDALISM | 
| SECTOR | SECTOR-SPECIFIC INCIDENT | 
| SURVL | OBSERVATION/SURVEILLANCE | 
| TESTSEC | TESTING OR PROBING OF SECURITY | 
| THEFT | THEFT/LOSS/DIVERSION | 
| THREAT | EXPRESSED OR IMPLIED THREAT | 
| WPNS | WEAPONS DISCOVERY | 
A data type for the broad categorization of infrastructure type.
| Code | Definition | 
|---|---|
| AGRI | Food, Agriculture, Livestock | 
| CHEM | Chemical | 
| COMM | Commercial Assets | 
| CORR | Correctional Location | 
| CSTL | Coastal Facilities | 
| CULTR | Cultural/Religious/Ethnical | 
| DAMS | Dams | 
| DFNSE | Defense Industrial Base | 
| EDU | Education | 
| EMRG | Emergency Services | 
| ENRG | Energy, Utilities | 
| ENTMT | Entertainment Venue | 
| FIN | Banking, Finance | 
| GVTBLDG | Government Facilities | 
| HAZMAT | Chemical, Hazardous Material | 
| HLTH | Healthcare, Public Health | 
| IT | Information Technology | 
| LIVSTK | Livestock | 
| Postal, Shipping | |
| MASS | Mass Gathering Location | 
| MFG | Manufacturing | 
| MNMT | National Monument, Icon | 
| NATRL | Natural Threats | 
| NCLR | Nuclear Facilities | 
| OTHR | Other | 
| POP | Population | 
| PRSN | Person | 
| RETL | Retail | 
| SPCFXN | Special Function | 
| TACTCP | Tactical Command Post | 
| TELCM | Telecommunications | 
| TRANS | Transportation | 
| UTL | Utilities | 
| WATR | Water | 
A data type for a kind of threat to which the tip or lead pertains.
| Code | Definition | 
|---|---|
| BIO | Biological | 
| CHEM | Chemical | 
| CNTFTG | Counterfitting | 
| CTMN | Contaimination | 
| CYBER | Cyberstalking | 
| EXPL | Explosives | 
| FRAUD | Fraud | 
| FUND | Terrorism Funding | 
| HATE | Hate Crime | 
| INCEND | Incendiary | 
| INFRA | Critical Infrastructure | 
| LAUND | Money Laundering | 
| NCLR | Nuclear/Radiological | 
| SPCSA | Suspicious Activity | 
| SPCSP | Suspicious Person | 
| SPCSSBST | Suspicious Substance | 
| THRTPUB | Threat Against Public Figure | 
| VRUS | Virus/Worm | 
A data type for a broad category of threat to which the tip or lead pertains.
| Code | Definition | 
|---|---|
| A | Criminal Incident | 
| B | Critical Infrastructure | 
| C | Cyber Crime | 
| D | Financial Incident | 
| E | Intelligence | 
| F | Security Issue | 
| G | Suspicious Incident | 
| H | Threats/Crimes Against Persons |