Chapter 3

Fighting Back:

The State's Operational Response



Henri Boshoff

Published in Monograph No 63, July 2001
Fear in the City, Urban Terrorism in South Africa


Introduction


It was the much-published death of Rashaad Staggie on 4 August 1996 that brought the existence of urban terrorism in the Western Cape to the attention of South Africa and the world. Since that incident, various other incidents of urban terrorism have occurred, many of them involving the organisation known as ‘People Against Gangsterism and Drugs’ (Pagad), as well as a number of gangs. In many of these incidents, the South African security forces were called in to respond, or were themselves directly targeted.

The acts of urban terrorism since the Staggie incident include petrol bomb attacks, pipe bomb attacks, drive-by shootings and bomb explosions aimed at gangs, and later aimed at both the security forces and the public at large, as in the cases of the Planet Hollywood and Camps Bay explosions.

After August 1996, these acts of terror had taken on such large proportions that they could no longer be dealt with by normal police action. At the beginning of 1996, the South African Police Service (SAPS) and the South African National Defence Force (SANDF) jointly responded through the National Operational Co-ordinating Mechanism (NOCOC) to execute special counter-terrorism operations.1

This chapter will detail the actions taken by the security forces in response to urban terrorism in the Western Cape during an almost four-year period from October 1997 to July 2000. This chapter will also discuss the common-sense strategy adopted by the security forces to prevent urban terrorism.

The security forces’ response

The response of the security forces (SAPS/SANDF) can best be discussed against the background of a timeline indicating acts of urban terrorism and the security force action taken to counter them. The timeline clearly shows four distinct operations launched by the security forces, including, inter alia, Operations Recoil, Saladin, Good Hope and Crackdown (Figure 3). The statistics of Operation Crackdown (1 April 2000) reflect the change in strategy that was initiated during Operation Good Hope, to act against the increasing tendency of crime such as urban terrorism.

Operation Recoil

On 16 October 1997, a meeting took place between president Mandela and several cabinet ministers, as well as the national commissioner of the SAPS and the chief of the SANDF. The meeting focused its attention on the security and crime situation in the Western Cape, specifically the Cape Flats. The National Operational Co-ordinating Committee (NOCOC) and the Provincial Operational Co-ordinating Committee (POCOC) of the Western Cape subsequently held a planning session on 17 October 1997, to give effect to the directions emanating from the presidential meeting.

Operation Recoil was launched on 23 October 1997, to counter growing insecurity among the people of the Western Cape, who were also influenced by media-driven speculation about a war of gangs against Pagad. Pagad attacks for the period January to August 1997 accounted for 111 incidents, whereas gang-on-gang violence accounted for 75. Prior to the launch of Operation Recoil, the POCOC (Western Cape) had sought to integrate a number of measures into a co-ordinated operation. These measures included the efforts of normal visible policing, the intelligence process, and high-density deployment, in addition to specific investigations focused on both Pagad and gang-related criminality. The POCOC-driven effort had managed to contain both gang-on-gang violence and Pagad-related violence, to a statistical average of 7.3 and 9.9 attacks per month respectively, for the period January to July 1997.

Operational concept

The operational concept that was decided upon during the joint NOCOC/POCOC Western Cape2 planning meeting included the following: an intelligence-driven factor; a high-density crime prevention factor; investigating task groups, and co-ordination and visible force levels.

Intelligence-driven factor of Operation Recoil

The operation was intelligence-driven, and comprised the following intelligence focus areas:

Figure 3: Timeline: The operational response of the state



  • crime patterns to determine ‘hot spots’ for high-density3 and crime-prevention4 operations;

  • tactical intelligence for the purpose of high-density and crime-prevention operations;

  • intelligence for the purpose of court-directed investigations; and

  • intelligence provided by specialised investigation units that could be utilised for any of the above purposes.

High-density crime prevention factor of Operation Recoil

The high-density crime prevention and visibility operations were conducted by:
  • a crime prevention task team (crime prevention and visibility);
  • a visible gang unit (crime prevention);
  • public order policing (high-density operations); and
  • the South African army (high-density operations).

Investigating task groups of Operation Recoil

The investigations of the operation were conducted by:
  • a gang investigation task group (concentrating on inter-gang conflict);

  • a Pagad investigation task group (concentrating on Pagad activities); and

  • specialised investigation units (concentrating on areas emanating from gang activities, conflict between Pagad, gangs, and so on).

Co-ordination and visible force levels of Operational Recoil

The co-ordination of Operation Recoil was handled in the following way:
  • co-ordination of the operation was conducted through the NOCOC (national level) and POCOC (provincial level);

  • intelligence co-ordination was implemented by a Provincial Intelligence Co-ordinating Committee (PICOC) to co-ordinate with the POCOC structure; and

  • members from NOCOC visited the POCOC for joint planning and evaluation sessions on a regular basis.
In addition, NOCOC provided the national commissioner of the SAPS and the chief of the SANDF with feedback on a weekly basis. The national commissioners of the SAPS and the SANDF would then provide feedback to the National Crime Prevention Strategy (NCPS) ministers’ committee, during monthly meetings or as required.

The visible force levels required by the launching of Operation Recoil led to an integrated operational capacity that was expanded to include more than 1 000 members of:
  • the South African National Defence Force;
  • public order police;
  • Pagad visible task team members;
  • visible gang unit members;
  • gang investigation unit members; and
  • Pagad involvement team members.

The successes of Operation Recoil — visible high-density operations

The concept of Operation Recoil was built on the principle of flooding flashpoint areas with high-density security force deployment by way of mobile visible patrols as well as cordon and search operations, in order to flush out criminals at such flashpoint areas. This strategy also improved the SAPS’s ability to synchronise and focus high-density deployment in flashpoint areas, as determined by weekly crime pattern analyses submitted by crime information managers at SAPS station and area levels, as well as strategic crime tendency analyses conducted by the intelligence co-ordinating structures. Daily crime information reports also guided operational planning on a day-to-day basis, between weekly POCOC meetings.

From 23 October 1997 to 22 January 1998, the visible high-density contingent of Operation Recoil netted a total of 7 437 arrests, inclusive of certain serious crime categories (Table 3).

Table 3: Arrests made in serious crime categories, October 1997 — January 1998

Murder 175
Robbery 269
Possession of illegal firearms 181
Hijacking of vehicles 9
Theft of motor vehicles 298
Drug-related offences 555
Housebreaking (residential and business) 623
Malicious injury to property 127
Arson 11
Crimes against women and children 1 521
Total cases of serious crime 3 769

Operation Saladin

By early January 1998, it seemed that the specific focus of Pagad had changed and that pipe bomb attacks and drive-by shootings aimed at the police, drug dealers and Muslim businessmen were on the increase. The response of the state necessitated a more intelligence-driven operation, Operation Saladin, which was formed within Operation Recoil, and was aimed at detecting and monitoring the perpetrators of acts of urban terrorism in both gangs and Pagad.

Operation Saladin was activated on 12 January 1998, to ensure a decrease in incidents of urban terrorism in the Western Cape. The operation involved both operational and intelligence members from the SAPS, SANDF and NIA (National Intelligence Agency).

Operational concept

Operation Saladin was executed as a POCOC Western Cape operation, comprising a detection and monitoring element made up mainly of SAPS intelligence field workers, as well as SANDF observation teams. The aim was to monitor suspects and, once a movement indicating a possible attack was detected, to inform the Joint Operational Centre (JOC) Cape Town, which would in turn manoeuvre the deployed forces available in the area concerned. A quick reaction force would also be directed to intercept suspected potential perpetrators before they reached their target or, if that was not possible, to then intercept the perpetrators on the return from their target. A further element of the operation entailed the deployment of high-density forces of Operation Recoil in the proximity of the intended target, to act as an additional deterrent to would-be perpetrators. That is, to frustrate them, to hamper their access to intended targets, and by doing so, also deny them the opportunity of going about their illegal activity unhindered. Central to the whole concept was the JOC. The reasoning was that by centralising all the factual information at the JOC, senior officers in the JOC would be able, at any given moment, to manoeuvre available forces to try to apprehend the would-be perpetrators (Figure 4).

Objectives

The objectives of Operation Saladin were:
  • to detect and monitor perpetrators of acts of urban terrorism in both gangs and Pagad;

  • to provide early warning, on-the-spot operational intelligence, visible policing, and to assist with POCOC operations;

  • to frustrate the access of perpetrators of urban terrorism to their intended targets; and

  • to ensure the effective interception of perpetrators of acts of terrorism both before and after attacks.

Figure 4: Operational concept: Operation Saladin

The successes of Operation Saladin

The successes of Operation Saladin were that while it acted as a deterrent to prevent acts of urban terrorism and gang-related violence, it also led to the arrest of people involved in acts of terrorism.

However, during December 1998 and January 1999, the nature of the threat of urban terrorism changed in emphasis and target. The new hazard was accompanied by threats from Pagad spokespersons against members of both the security and intelligence forces. The increasing selectivity of the perpetrators of urban terrorism became evident in a number of attacks aimed specifically at the security forces and at businesses; the pipe bomb attacks at the V & A Waterfront and the Cape Town police station being cases in point.

The shift in emphasis by perpetrators of urban terrorism to target both the security forces and the public at large was met with a change in emphasis by the security forces. The rapid response by the security forces to this new threat resulted in a modification of the operational concept, and was achieved by combining operations Recoil and Saladin into one operation, namely Operation Good Hope.

Operation Good Hope

The attacks during December 1998 and January 1999 aimed at the SAPS and also at civilians in the Western Cape resulted in a change of strategy to counter urban terrorism. Operation Good Hope was launched on 23 January 1999.

Operational concept — an integrated approach

Operation Good Hope required an immediate increase in security force levels that were extended to include more than 1 200 members, inclusive of SAPS/SANDF members but excluding the local station police in Cape Town.

The new operational concept that was decided upon during the joint NOCOC/POCOC Western Cape planning session on 20 January 1999 was planned to be: intelligence-driven in specifically focused areas; investigative; protective of specific targets; in liaison with communities, and co-ordinated by NOCOC/POCOC Western Cape (Figure 5).

Figure 5: Operational concept: Operation Good Hope

Intelligence-driven aspect of Operation Good Hope

The intelligence-driven aspect of the operation focused on both tactical intelligence gathering, and dedicated court-directed intelligence gathering. The operation, based on this intelligence, would be executed by focusing on:
  • stabilising operations regarding urban terrorism;
  • tactical intervention regarding urban terrorism and crowd management; and
  • high-risk actions/operations regarding urban terrorism.

Investigative aspect of Operation Good Hope

Investigations focused on:
  • urban terrorism (pipe bombs, drive-by shootings, etc.);
  • actions resulting from crowd management; and
  • other cases regarding identified suspects.

Protection and liaison-related aspects of Operation Good Hope

Protection tasks for political and other targets (investigators, politicians and so on) were co-ordinated by the national and provincial protection services. Community liaison stemming from information gatherers within each community would initially be supported by the facilities provided by existing intelligence-gathering structures. To bolster the effectiveness of this aspect of Operation Good Hope, the national commissioner of the SAPS requested the minister of safety and security to organise a summit involving community role players in order to plan community projects with the aim of assisting security forces in gathering intelligence.

The co-ordination of Operation Good Hope was conducted through the National Operational Co-ordinating Mechanism (NOCOC/POCOC).

Successes of Operation Good Hope

It is clear from the operational concept that the new strategy was focused on tactical intelligence gathering and dedicated court-directed intelligence gathering.

This strategy subsequently resulted in a major decline in acts of urban terrorism in the Western Cape and the arrest of individuals involved in such acts. During the period January 1999 to January 2000, the forces involved in Operation Good Hope executed several operations (Table 4).

Table 4: Operations carried out by Operation Good Hope

Vehicle patrols 8 262
Foot patrols 2 561
Cordon & search 114
Road blocks 2 197
Persons searched 131 140
Buildings searched 4 551
Vehicles searched 42 063

During these operations numerous successes were achieved.

Table 5: Successes achieved by Operation Good Hope

Arrests for various crimes* 4 014
Firearms recovered 489
Vehicles recovered 327
Ammunition recoverred 5 803
*Operation Good Hope was an operation focused on urban terrorism, not ‘crime-prevention’ per se, which explains the lower figure of arrests made.

The effect of Operation Good Hope since it started in January 1999 can be seen in Figure 6. There is a remarkable decline in acts of urban terrorism, as well as gang-related incidents, comparing 1998 with 1999, and with 2000, and also during 1999, after the start of Operation Good Hope. There was, however, again in 2000, an increase in specifically gang-related violence. In 2000, there were 437 incidents of gang violence in which 160 people were arrested. Pagad-related incidents were the lowest during 2000, with 22 incidents and 15 arrests. It is thus clear that the state’s response to curb urban terrorism was successful.

Figure 6: Gang and urban terror-related incidents, 1998-2000


The biggest problems experienced during the start of Operation Good Hope were the co-ordination of tactical intelligence between the role players, as well as those of the investigation units. Although the strategic concept behind the operation depended on intelligence-driven operations, the initial drive for Operation Good Hope was based on intelligence generated by the operational personnel. As the operation proceeded, the intelligence flow also improved, resulting in positive arrests in connection with urban terrorism and gang-related crime.

The integrated approach used by the security forces from a preventive viewpoint was, and still is, very successful. As successful investigations increased and more arrests were made (of gangs and members of Pagad involved in urban terrorism), incidents of urban terrorism declined drastically, to almost none.

The security forces have learned from the operations executed in the Western Cape since 1997, and have since adopted these concepts in operations where the need is to stabilise areas ridden by high crime — such as taxi violence, bank robberies, cash-in-transit heists, and so on.

Operation Crackdown

In his speech at the opening of parliament on 25 June 1999, President Mbeki stated that "multi-disciplinary" interventions would be introduced in areas of high crime concentrations, including all crimes of violence.

All POCOCs were thereby tasked to execute integrated high-density, intelligence-driven operations in the identified crime-combating zones, from April 2000 to April 2001, in an operation known as Operation Crackdown.

Operational concept

The concept comprised two main strategies. These were the serious and violent crime stabilisation or geographical approach, and the organised-crime strategy, both of which would be supported by multi-disciplinary interventions in the cases of high crime areas.
  • Serious and violent crime/geographical approach: a geographical approach was followed, concentrating on the geographical ‘hot spots’, clustered into crime combating zones.

  • Organised crime approach: a process was implemented to identify syndicates having the highest impact on organised crime. To neutralise such syndicates, organised crime project teams were established.

  • Multi-disciplinary interventions: this approach ensured that the social sector concentrated its socio-economic development and social crime prevention efforts in the same areas as the security forces. Such an integrated approach was planned to lead to the implementation of "multi-disciplinary interventions in areas of high crime concentration".
This operation then, inter alia, also concentrated on urban terrorism and gang violence in the Western Cape, viewing them as acts of violent crime.

The eastern and western metropolitan areas of the Western Cape were identified as two separate ‘crime-combating zones’. For command and control purposes, however, and to address all the crime tendencies in the two police areas, the operation was co-ordinated from one centralised Joint Operational Centre.

The Crime Combating Task Group comprised:
  • the stability component (public order police, crime prevention, air wing, special task force);

  • the intelligence component (crime intelligence with the support of other intelligence agencies);

  • the investigation component (detective services in co-operation with other agencies such as the Scorpions, SARS, and so on);

  • the crime prevention component (crime prevention in partnership with other stakeholders);

  • the communication component (SAPS Communication Services in cooperation with other role players); and

  • the legal component (SAPS Legal Officers).
The operators responsible for Task Group components included intelligence, investigations, stability, reaction, crime-prevention communication, normal policing, monitoring and evaluation. The entire operation was co-ordinated by the National Operational Co-ordinating Mechanism.

Successes of Operation Crackdown

During the first three months of Operation Crackdown, from 1 April 2000 to 23 July 2000, noticeable successes were achieved in the eastern and western metropolitan areas of the Western Cape (Table 6).

Table 6: Successes of Operation Crackdown in the Western Cape

Vehicles recovered 621
Revolvers recovered 365
AK-47 assault rifles recovered 2
R1/R4/R5s recovered 3
Shotguns recovered 11
Ammunition recovered 2 928

The Task Team had to concentrate on taxi and bus violence in the Western Cape, during March and April 2000. Changing the mission from concentrating on gangs and Pagad violence, to taxi and bus violence, was easy. This is one of the advantages the Crime Combating Task Team has in addressing and stabilising any type of violent crime with terrorism-type modus operandi.

A common sense strategy to prevent urban terrorism

On 4 March 1998, cabinet approved the official policy on terrorism and the management of incidents of terrorism.

The policy defines terrorism as follows: "The incident or incidents of violence and the threat thereof against a person, a group of persons or property, not necessarily related to the aim of the incident to coerce a government or civil population or a segment thereof to act or not to act according to certain principles." Incidents of terrorism are by this definition visible in bombings, hi-jacking of aircraft/ships, kidnapping, hostage situations, sabotage, assassinations and indiscriminate shooting of citizens.

As examined in the sequence of events in this chapter, the security forces had experienced urban terrorism in the Western Cape, and were therefore in a position whereby they could implement and fine-tune these strategies and to conceptualise and implement effective anti-terrorism actions.

The planning of anti-terrorism actions can be executed in two phases, these being:
  • pre acts-of-terrorism reduction; and
  • post acts-of-terrorism recovery.

Reduction: Pre acts-of-terrorism phase

The pre acts-of-terrorism phase includes mitigation, prevention and pre-preparedness.

The most important element of the pre acts-of-terrorism phase is prevention. Prevention can be obtained if intelligence is available. Intelligence is the most important tool in the prevention of acts of terrorism. Prevention is ‘targeted’ if intelligence has identified the time and place of the planned attack. The steps of targeted prevention are straightforward: isolate the target from the terrorists (or the terrorists from the target), or sabotage their plans. Then arrest the terrorists as soon as all the possibilities of determining their plans, associates and supplies have been exploited. The crucial ingredient is always intelligence.

The element of mitigation is to ensure a lessening of resources: the terrorists must be denied resources and information — for training, weapons and explosives. This can be done by executing high-density and targeted operations aimed at weapon caches. Terrorists must also be denied the support they need, such as safe houses, money, materials, and so on.

Finally, in order to be prepared, personnel must be trained and willing to use immense investigative resources to investigate any terrorist events targeting South Africans. It is also vital to link prosecutions with investigations, to ensure a high number of successful prosecutions.

Recovery: Post acts-of-terrorism phase

The post acts-of-terrorism phase includes contingency planning for assassinations, shooting incidents, bomb explosions, hostage situations, sabotage and kidnapping. ‘Pre acts-of-terrorism’ refers to those actions executed to prevent terrorism, to mitigate it and to prepare for acts of terrorism. ‘Post acts-of-terrorism’ refers to those actions executed after acts of terrorism have occurred.

A strategy for anti-terrorism acts can visually be explained as follows (Figure 7).

Figure 7: An anti-terrorism strategy


The strategy currently used in South Africa has been operationalised in an anti-terrorism operational concept based on co-ordination and co-operation between the following entities: intelligence, operations, investigations, protection and communication.

The operational concept is co-ordinated within the Joint Operational and Intelligence Structure (Figure 8).

Figure 8: Anti-terrorism operational concept

A proposed anti-terrorism operational concept

A proposed anti-terrorism operational concept is outlined here, based on experiences gained during operations Recoil, Saladin and Good Hope.

The most important principle is to co-ordinate an operation with an integrated approach. This can be done within the National Operational Co-ordinating Mechanism, including all the disciplines of the SAPS, SANDF, NIA and the South African Secret Service (SASS), as well as any other government department that needs to be involved. The intelligence community is responsible for gathering tactical and co-ordinated, court-directed intelligence.

Operations based on intelligence would be executed to: stabilise the focus area; conduct tactical intervention regarding urban terrorism and crowd management; and effectively control high-risk operations.

Investigations must be conducted with the specific intention of ensuring successful prosecutions. It must be stressed again that intelligence is critical in order to operationalise any anti-terrorist courses of action.

Conclusion

Taking into consideration the history of urban terrorism in the Western Cape, and the success of the security forces in counteracting urban terrorism, it is important to manage public expectations.

The message to the public and to the world regarding urban terrorism is this: We can deal with it, we can discourage it, but we cannot end it completely, any more than we can end violence for other purposes.

One of the great dangers that terrorism presents to every democracy is that terrorism itself, and the measures taken to counter it, may lead, as is often intended by the terrorists, to self-destructive actions. We should never react to the limited violence of small groups by launching a crusade in which we destroy our unity as a nation or our trust in the fairness and restraint of the institution of the South African government, which is entrusted to control and exercise legitimate force.

Notes

  1. NOCOC is a mechanism set up to be utilised for joint intelligence co-ordination on national and provincial level. It is known as the National Intelligence Co-ordinating Committee (at the national level) and as the Provincial Intelligence Co-ordinating Committee (at the provincial level).

  2. Western Cape. This refers to the area in which the operation was executed. The area is the eastern and western metropole of Cape Town.

  3. ’High-density’ refers to an operation where an area is flooded by SAPS/SANDF members executing patrols, roadblocks, and cordon and search operations.

  4. ’Crime-prevention’ refers to action executed to prevent crime by means of patrols, roadblocks, and cordon and search operations.