Paget From: ‘200 Pauson Tos Inman, Use Mace ce Vales, Maton Date: 2018160106 912 AM Subject: Final_swear to Goa Attachments: comma to see beau docx 00001Final Friday March, 2015 Standing Committee on Public Safety and National Security (SECU) Friday, March 6, 2015, 1100 Topie: Release of Zehaf-Bibeau Video OPENING STATEMENT Good morning, Mr. Chair and Members of the Committee. I appear before you this morning in response to your request to release the video related to the attack of Oct 22, 2014. We seized this video as evidence from the cellphone recovered from the car which was driven by Michael ZEHAF BIBEAU after he murdered Cpl Cirillo and then stormed the grounds of this parliament armed with a rifle. Of course we all know he was killed by our brave RCMP and Parliamentary security personnel including the Sgt-at-Arms who actively pursued him inside. I would also like to update Parliament and through you — Canadians - on the state of our investigative response to this unprecedented attack on our Parliament. 00002Final eiday March , 2015, Firstly, permit me to say clearly that the RCMP is engaged in an active criminal investigation to either establish or refute whether anyone aided, abetted, facilitated - counselled or conspired with ZEHAF BIBEAU to commit the crimes he did. Let me also say that if ZEHAF BIBEAU had not been killed but rather taken into custody we would have charged him with terrorist offences. The Criminal Code provides the definition for terrorist activity at Section 83.01 (1) (b). The RCMP believes on the evidence that ZEHAF BIBEAU was a terrorist. Anyone who aided him, abetted him, counselled him, facilitated his crimes or conspired with him is also in our view a terrorist and where the the evidence exists we will charge them with terrorist offences. It’s not relevant to us or our investigation what kind of a terrorist ZEHAF BIBEAU was, or if he was a particularly intelligent, sophisticated, influential or personally disciplined terrorist. To us it all turns on 00003Final Friday aren 5, 2015 the evidence we collect which we compare against the statute. What was he doing and why was he doing it? The RCMP is not, nor should we be in the habit of publicly discussing evidence or evidence collection during an active investigation. The RCMP asserts and zealously defends its operational independence in the conduct of its affairs. | am departing slightly from that practice in this case having regard for the enormous public interest attached to this case and this committee’s request of me. A bit about this video now and what accounts for the delay between Oct 2014 and today? I first learned about the video when | was briefed on its discovery during the forensic examination of the cellphone seized from the suspect’s vehicle. It was the Sunday following the attack. I directed that a press release be issued that day. My thinking was that announcing the existence of the video would - while we were examining and assessing it - insure 00008‘Mare 5, 2085 against any subsequent criticism that we were concealing the existence of this evidence. What followed were dynamic discussions within the RCMP about the evidentiary value and the operational utility of the video. We had also to carefully consider what impact its public release could have - not only on this investigation - but what impact it might have on others. We weighed the video’s release against the knowledge that it could serve to further radicalize, and ultimately incite more violence. We considered that the video will be used by terrorist elements and sympathizers to facilitate recruitment, financing and action. On this point, we remain concerned but frankly speaking: that’s not our place and not our role. But as one of my officer’s put to me: “if not us then who? We have the video.” It’s a fair question. This video is plainly evidence, of that there is no question. But just what criminality it is evidence of, can only ultimately be decided by a court having 4 00008Final Friday March 5, 2015, jurisdiction to weigh and assess it. We aren’t there yet and so we in the RCMP have to ask ourselves how we can maximize its utility and probity at bringing forward a criminal case, if ever we do. Initially I was inclined to release the video in its entirety but I was persuaded by the operational decision makers in the investigation not to do so. Even today, as I show you the video I must point out that it is not the entire video. There are a total of 18 seconds edited from the beginning and the end of the video. 13 and 5 respectively. 1 am satisfied that there are reasonable and sound operational reasons for these edits and you will no doubt want to understand these reasons too. Unfortunately, for the very same reasons we have edited the video, I cannot explain to you at this point why we have done so. It is not lost on me either that the Government is bringing forward new laws to strengthen the fight against terrorism. The release of this video at this time could be seen as seeking to influence that 5 00008Final day Moreh 5, 2005 process. I assure you I have no such motive. The video speaks for itself. It is what it is. You must understand that I have teams of dedicated, professional investigators and specialists working tirelessly to pursue this very case to its conclusion and it is in everyone’s interest to let them do what they do best. INVESTIGATE. Through our INSET structure the RCMP has over 130 full time investigators and staff presently working on this case. We’ve interviewed over 400 individuals: from the people he associated with in British Columbia to the people he rode the greyhound bus with to the people who saw him at the shelter in Ottawa. We know now: that ZEHAF BIBEAU became increasingly aligned with terrorist ideology in the last years of his life while living in the Lower Mainland of British Columbia and, for a short period, in Alberta. We know that in August 2014, he applied for a Canadian passport at a Vancouver location where he 6 00007Fina doy march, 2005 was later informed that a passport would not immediately be forthcoming and that his application was subject to further review. Beginning on September 23rd and continuing to October 2nd, ZEHAF BIBEAU made his way to Ottawa, by hitchhiking and traveling on a Greyhound bus. During at least one leg of the bus trip, he told other passengers that his purpose for travelling to Ottawa was to secure a passport. We now know that within two hours of arriving in Ottawa, ZEHAF BIBEAU went to the Libyan Embassy to renew his then-expired Libyan passport. He was a dual national. He was told that his application would have to be sent to Libya due to discrepancies in his identification documents. This process was expected to take 3-4 weeks to resolve. Two days later, on October 4th, surveillance cameras on Parliament Hill captured ZEHAF BIBEAU on the grounds as he took a guided tour of Centre Block. From our review of the video, and speaking to people on the Hill that day, there was nothing remarkable about his participation in that 1 00008Final Friday March 5, 2085 tour that ought to have led either RCMP members deployed on the Hill or other security personnel to be suspicious of his presence. Throughout his time in Ottawa, ZEHAF BIBEAU. used publicly-available internet and payphones in various locations across the city. We now know that he used this as a means to stay in contact with individuals both in the Ottawa region and in British Columbia. We have been able to identify some of these individuals and we continue to pursue this avenue. We have a full understanding of his finances and the disbursements he made prior to the attack. On the days leading up to October 22nd, ZEHAF BIBEAU made arrangements to buy a car. On October 21st he finalized the deal and used cash to purchase the vehicle. Upon taking possession, he drove to Mont Tremblant to visit a relative where he was seen with a long knife. 00000Final Friday March 5, 2015, Very early the following morning - October 22nd - he was observed by witnesses placing a rifle in the trunk of his car. Hours later he shot and killed Corporal CIRILLO, got back in his car and then stormed Parliament. I've shared with you his approach to the building. We have not been able to confirm the origins of the gun. We are releasing a photo of the gun which seems unique in the hopes that someone might recognize it. I can confirm that he had a long knife tied to his wrist when he was killed. We did not find any other guns or weapons in his car, among his possessions, or at any of the other locations we now know he visited in the hours leading up to the attack. I have been advised that he was shot many many times, (Exactly how many times I can't say because I don’t know). We await the detailed findings of the OPP who were engaged to independently conduct 9 00010Fina doy March 5, 2005 the police involved shooting inside parliament. The video from inside the building forms part of that line of inquiry and is with the OPP. I can confirm that the autopsy toxicology screen on ZEHAF BIBEAU’s remains, was negative for drugs and alcohol. Neither did we uncover any evidence of drug or alcohol use by him in the period leading up to his attack. It was during the search of his vehicle following the attack that we found ZEHAF BIBEAU’s mobile phone. Our forensic analysis, which began immediately and progressed quickly, revealed the video. We have been able to determine, with exact precision, the time and location where ZEHAF BIBEAU made this video. As you will see in a moment, ZEHAF BIBEAU filmed himself in his car, with the phone, immediately prior to the attack at the National War Memorial. We have established that he did this while parked in a lot near 464 Metcalfe St. 10 00011Final Friday March 5, 2015 He looks directly into the camera, appears very purposeful and lucid, and talks about his motivations for the attack to come. The audio is not great, it is sufficient though to understand what he says. Here is a transcript in both languages of what he says. I’m at your disposal to answer any questions I can having regard for the ongoing nature of this case. Here is the video. 00042Friday, March 6", 2015 Commissioner Paulson Centre Block - Room 237COpening Statement Q&A's ‘Communications Approach Media Statement oooo1sPARTIAL TRANSCRIPTION OF THE VIDEO OF ZEHAB BIBEAU. Ocrosen22, 2014 To those who are involved and listen to this movie, this sin retaliation for Afghanistan and because Harper wants to send his troops to Iraq So we are retaliating the Mujahedin of this world, Canada’s officially become one of our enemies by fighting and bombing us and creating a lot of terror in our countries and killing us and killing our innocents. So, just aiming to hit some soldiers just to show that you're not even safe in your own land, and you gotta be careful! oD So, may Allah accept from us. I's a disgrace you guys have forgotten God and hove oul very ndcany ana thing rarer nd We dn we do 80 for this. We are good people, righteous people believers of God and believing his law and his Prophets peace be upon them all That my message toll of you in this, inshallah, we'll not cease until you guys decide to be a peaceful country and stay to your own and 1-, and stop going to other countries and stop occupying and king the righteous of us who are tying to bring back eeligious aw in our countries Thank you. 0001sStanding Committee on Public Safety and National Security (SECU) Friday, Mareh 6, 2015, 11h00 ‘Topic: Release of Zehaf-Bibeau Video OPENING STATEMENT READING VERSION Good morning, Mr. Chair and Members of the Committee. | appear before you this morning in response to your request to release the video related to the attack of Oct 22, 2014. We seized this video as evidence from the cellphone recovered from the car which was driven by Michael ZEHAF BIBEAU after he murdered Cpl Cirillo and then stormed the grounds of this parliament armed with a rifle. Of course we all know he was killed by our brave RCMP and Parliamentary security personnel including the Sgt-at-Arms who actively pursued him inside. I would also like to update Parliament and through you — Canadians - on the state of our investigative response to this unprecedented attack on our Parliament. 00018J'aimerais aussi faire une mise a jour au Parlement et, par votre entremise, a l'ensemble des Canadiens, concernant notre enquéte sur cet attentat sans précédent contre le Parlement. Firstly, permit me to say clearly that the RCMP is engaged in an active criminal investigation to either establish or refute whether anyone aided, abetted, facilitated - counselled or conspired with ZEHAF BIBEAU to commit the crimes he did. Let me also say that if ZEHAF BIBEAU had not been killed but rather taken into custody we would have charged him with terrorist offences. The Criminal Code provides the definition for terrorist activity at Section 83.01 (1) (b). The RCMP believes on the evidence that ZEHAF BIBEAU was a terrorist. Anyone who aided him, abetted him, counselled him, facilitated his crimes or conspired with him is also in our view a terrorist and where the the evidence exists we will charge them with terrorist offences. 00017Quiconque I’a aidé, conseillé ou encouragé a perpétrer ses crimes ou a comploté avec lui a cette fin est aussi, & notre avis, un terroriste et si des preuves existent en ce sens, la GRC portera des accusations de terrorisme contre ces personnes. It’s not relevant to us or our investigation what kind of a terrorist ZEHAF BIBEAU was, or if he was a particularly intelligent, sophisticated, influential or personally disciplined terrorist. To us it all turns on the evidence we collect which we compare against the statute. What was he doing and why was he doing it? The RCMP is not, nor should we be in the habit of publicly discussing evidence or evidence collection during an active investigation. The RCMP asserts and zealously defends its operational independence in the conduct of its affairs, I am departing slightly from that practice in this case having regard for the enormous public interest attached to this case and this committee’s request of me. 00018A bit about this video now and what accounts for the delay between Oct 2014 and today? I first learned about the video when I was briefed on its discovery during the forensic examination of the cellphone seized from the suspect’s vehicle. It was the Sunday following the attack. I directed that a press release be issued that day. My thinking was that announcing the existence of the video would - while we were examining and assessing it - insure against any subsequent criticism that we were concealing the existence of this evidence. What followed were dynamic discussions within the RCMP about the evidentiary value and the operational utility of the video. We had also to carefully consider what impact its public release could have - not only on this investigation - but what impact it might have on others. We weighed the video’s release against the knowledge that it could serve to further radicalize, and ultimately incite more violence. 00019We considered that the video will be used by terrorist elements and sympathizers to facilitate recruitment, financing and action. On this point, we remain concerned but frankly speaking: that’s not our place and not our role. But as one of my officer’s put to me: “if not us then who? We have the video.” It’s a fair question. This video is plainly evidence, of that there is no question. But just what criminality it is evidence of, can only ultimately be decided by a court having jurisdiction to weigh and assess it. We aren’t there yet and so we in the RCMP have to ask ourselves how we can maximize its utility and probity at bringing forward a criminal case, if ever we do. Initially I was inclined to release the video in its entirety but I was persuaded by the operational decision makers in the investigation not to do so. Even today, as I show you the video I must point out that it is not the entire video. There are a total of 18 seconds edited from the beginning and the end of the video. 13 and 5 respectively. 00020Tam satisfied that there are reasonable and sound operational reasons for these edits and you will no doubt want to understand these reasons too. Unfortunately, for the very same reasons we have edited the video, I cannot explain to you at this point why we have done so. It is not lost on me either that the Government is bringing forward new laws to strengthen the fight against terrorism. The release of this video at this time could be seen as seeking to influence that process. I assure you I have no such motive. The video speaks for itself. It is what it is. Je sais aussi pertinemment que le gouvernement présente de nouvelles dispositions législatives pour renforcer la lutte contre le terrorisme. La diffusion de cette vidéo pourrait apparaitre comme une tentative d’influencer cette démarche. Je tiens a vous assurer que ce n'est nullement mon intention. La vidéo parle d'elle-méme. You must understand that I have teams of dedicated, professional investigators and specialists working tirelessly to pursue this very case to its conclusion 6 00021and it is in everyone’s interest to let them do what they do best. INVESTIGATE. Through our INSET structure the RCMP has over 130 full time investigators and staff presently working on this case. We’ve interviewed over 400 individuals: from the people he associated with in British Columbia to the people he rode the greyhound bus with to the people who saw him at the shelter in Ottawa. We know now: that ZEHAF BIBEAU became increasingly aligned with terrorist ideology in the last years of his life while living in the Lower Mainland of British Columbia and, for a short period, in Alberta. We know that in August 2014, he applied for a Canadian passport at a Vancouver location where he was later informed that a passport would not immediately be forthcoming and that his application was subject to further review. Beginning on September 23rd and continuing to October 2nd, ZEHAF BIBEAU made his way to 00022Ottawa, by hitchhiking and traveling ona Greyhound bus. During at least one leg of the bus trip, he told other passengers that his purpose for travelling to Ottawa was to secure a passport. We now know that within two hours of arriving in Ottawa, ZEHAF BIBEAU went to the Libyan Embassy to renew his then-expired Libyan passport. He was a dual national. He was told that his application would have to be sent to Libya due to discrepancies in his identification documents. This process was expected to take 3-4 weeks to resolve. Two days later, on October 4th, surveillance cameras on Parliament Hill captured ZEHAF BIBEAU on the grounds as he took a guided tour of Centre Block. From our review of the video, and speaking to people on the Hill that day, there was nothing remarkable about his participation in that tour that ought to have led either RCMP members deployed on the Hill or other security personnel to be suspicious of his presence. 00023Throughout his time in Ottawa, ZEHAF BIBEAU used publicly-available internet and payphones in various locations across the city. We now know that he used this as a means to stay in contact with individuals both in the Ottawa region and in British Columbia. We have been able to identify some of these individuals and we continue to pursue this avenue. We have a full understanding of his finances and the disbursements he made prior to the attack. On the days leading up to October 22nd, ZEHAF BIBEAU made arrangements to buy a car. On October 21st he finalized the deal and used cash to purchase the vehicle. Upon taking possession, he drove to Mont Tremblant to visit a relative where he was seen with a long knife. Very early the following morning - October 22nd - he was observed by witnesses placing a rifle in the trunk of his car. Hours later he shot and killed 9 ooo02sCorporal CIRILLO, got back in his car and then stormed Parliament. I’ve shared with you his approach to the building. We have not been able to confirm the origins of the gun. We are releasing a photo of the gun which seems unique in the hopes that someone might recognize it. I can confirm that he had a long knife tied to his wrist when he was killed. We did not find any other guns or weapons in his car, among his possessions, or at any of the other locations we now know he visited in the hours leading up to the attack. Ihave been advised that he was shot many many times, (Exactly how many times I cant say because I don’t know). We await the detailed findings of the OPP who were engaged to independently conduct the police involved shooting inside parliament. The video from inside the building forms part of that line of inquiry and is with the OPP. 0002sI can confirm that the autopsy toxicology screen on ZEHAF BIBEAU’s remains, was negative for drugs and alcohol. Neither did we uncover any evidence of drug or alcohol use by him in the period leading up to his attack. It was during the search of his vehicle following the attack that we found ZEHAF BIBEAU’s mobile phone. Our forensic analysis, which began immediately and progressed quickly, revealed the video. We have been able to determine, with exact precision, the time and location where ZEHAF BIBEAU made this video. As you will see in a moment, ZEHAF BIBEAU filmed himself in his car, with the phone, immediately prior to the attack at the National War Memorial. We have established that he did this while parked in a lot near 464 Metcalfe St. He looks directly into the camera, appears very purposeful and lucid, and talks about his motivations for the attack to come. 00028The audio is not great, it is sufficient though to understand what he says. Here is a transcript in both languages of what he says. I’m at your disposal to answer any questions I can having regard for the ongoing nature of this case. Je suis a votre disposition pour répondre a vos questions, mais compte tenu de l’enquéte qui est toujours en cours, il y a certaines informations que je ne pourrai pas divulguer. Here is the video. 0002Questions and Answers Parliamentary Standing Committe on Public Safety and National Security (SECU) ‘Release of ZEHAF-BIBEAU Video March 6, 2015 ‘Timing of Release hy didi take so ong for you to release the video? {A I: It was always our hope to rclease the video as soon as was permissible fom an investigative standpoint. Atthis point inthe investigation, iis now possible to release the majority of the ideo to you today. {100k this Committe’s invitation to show the video at the moment it was possible todo so and inthe best interest of the public. This was the only determination tht we had inthe timing ofthe video's release. 0.2: Why are you not releasing the ful video? What i in the missing segments ofthe video? ‘A: Weare releasing as much of the vdeo as possible at his time, while maintaining the integrity of our ongoing investigation. The majority of the video has been released. At this ime, ‘the unaired portions still hold investigative value, and cannot yet be released in any fashion (i.e, audio, transcript). At this point, its premature to pronounce whether or not the video willbe released in its entirety. Our priority, as always, ison ensuring te integrity and success ~of the investigation, 0.3: I/you are concerned that this vdeo could be used by others in radicalization material, why then are you releasing it? [A3: It is possible that this video could be use for such purposes, and we remain concerned about this point. As I have alluded to his was not an easy decision, Once we determined tht the release ofthe video would not negatively impact the investigation, we certainly weighed the risks associated with the release ofthe video from a radicalization and incitement perspective However, ths weighed agains our obligation to inform the public and the RCMP's commitment to be as transparent as possible to Parliamentarians snd Canadians, Tis brings us to the release today Investigation 04: Do we know where the video was flmed and when? ‘4: ZEHAP-BIBEAU filed the video using his mobile phone in his vehicle. The video was made in Ottawa shorty before the atackon the Cenotaph and Parliament Hil Q'S: What did you ultimately learn from the video? 'AS: As the investigation is ongoing, ! am notin a position to disclose anything futher. 2.6: What kind of analysis have you done of the video? [A 6: We have brought the full rage ofthe RCMP" investigative and forensic expertise to ‘analyze the content of video and the phone 00028(0 7: Do we know if ZEHAF-BIBEAU had the opportunity to upload the video before the attack? ‘A 7: We have determined thatthe video was not uploaded before the stack (Q 8: Did ZEHAF-BIBEAU's reported history of substance abuse problems play a role in the attacks? ‘A: It has een widely reported that ZEHAF-BIBEAU struggled with substance abuse problems throughout his life. However as I mentioned in my comments, toxicology reports requested by the RCMP have determined thet he had no drugs or alcohol in is system atthe time of the attack, (0 9: Was ZEHAF-BIBEAU suffering from mental health concerns at the time of the attack? ‘8.9: Lam not in position to comment on ZEHAF-BIBEAU"S mental status. In viewing the video, what Ihave sen is that ZEHLAF-BIBEAU appears lucid and clear in his purpose, This doesnot however provide us wth actual informaton/evidence about his mental state during that Q 10: You mentioned that ZEHAF-BIBEAU had other associate. Do you know whether these associates conspired with or helped ZEHAF-BIBEAU to carryout the attack? ‘A 10: We are aware that ZEHAF-BIBEAU had remained in contact with associates in British Colombia, and that he was in contact with individuals in Ottawa who we would classify as high- risk ravers. While 2EHAF-BIBEAU was the sole perpetrator of the October 22 attack, we contin to investigate i he had accomplices or if ethers offered any eter typeof support. ‘cannot comment any further on the specifics ofthe investigation, (Q11: What do you know about ZEHAF-BIBEAU’s process of radicalization? [A LI: As mentioned in my opening statement, the investigation has determined that ZEHAF- BIBEAU became inereasinly radicalized inthe last years of his lif. However the exact process, ‘of is radicalization to violence is sill under investigation. We know that ZEHAF-BIBEAU was associated with other high-risk travelers. However, I eannot go into any detail as to what impact they may have had on his violent setions. Q 12: Wa ZEHAP-BIBEAU a member of ISIS or another terorit group? ‘A 12. The investigation i ill ongoing to determine whether ZEHAF-BIBEAU ected alone, was ‘support by others or influenced by ISIS or another terrorist group. 0.13: You are on record as saying that or the attack ~ is this stil the case? ‘A-13: The investigation is ongoing to determine the exact motives forthe attack, and itis likely ‘hat we may never understand fally ZEHLAF-BIBEAU’s motivations. We do kaow that he bad applied fora Canadian passport earlier in August 2014 while living in Vancouver, and he was ‘actively following up with passport officials in October. We also know that he attempted to renew his expired Libyan passport. Obviously, be was determined to get a passport The extent ‘o which this played arole in is violent actions on October 22” is unclear, delay in obtaining a passport was a likely motivation 2 00020(0 14:What was ZEHAF-BIBEAU’s nationality? AA Id: ZEHAF-BIBEAU was a dual national ofboth Canada and Libya, In other words, he had both Canadian and Libyan citizenship. Octo mr QS: At the time of this attack, there were numerous reports of more than one shooter. AS @ ‘result of your investigation, did you uncover additional accomplices or shooters? ‘815: We determined eary into ou investigation of October 22" in Ottawa that ZEHAR- BIBEAU was the sole perpetrator ofthe attack. I think iis safe vo say that the reports of multiple shooters were a result ofthe chaos of hat day. Tat said, law enforcement mast fully investigate cach report to ensure that ther is no threat othe public and to our officers. As such, the RCMP and its pariners in the OPS fully investigated each report, and considered them as valid threats ‘until we determined otherwise. Q 16: Wha lessons have been learned from law enforcement’ response tothe shooting incident? ‘A 16: The RCMP takes every opportunity to eam from such incidents inorder to improve our ‘wn approach and procedures. As suc, we have requested thatthe Ontario Provincial Police (OPP) undertake a ull review of the RCMP’s ations on October 22 Q.17: Why did the RCMP ask the Ontario Provincial Police (OPP) to conduct an investigation review ofits response tothe incident? [A TT: We requested that the Ontario Provincial Police (OPP) underake the investigation because ‘we wanted an independent and extemal law enforcement agency with the necessary expertise and capacity to conduct a fair and impartial review of our response. We ave asked the OPP to review both our response tothe incident, as well as the RCMP's security posture on Pariament Hill. Q 18: When wil he Ontario Provincial Police (OPP) complete its report and willbe made Public? ‘A 18: The Ontario Provincial Police (OPP) is conducting a thorough review and investigation. ‘Given the complexity ofthis incident, this may take some time. However, a8 soon asthe OPP finalizes its report, the OPP will provide it tothe RCMP. Once we have hada chance to review the OPP's report und respond tothe findings, we will then be in a postion to determine whether they willbe released publicly. Q 19: How was ZEHAF-BIBEAU able to bypass security personnel and enter Parliament? [A 19: The attack of October 22, 2014 was sudden and chaotic. Security frees had no advance ‘warning of the attack, and it was mere minutes from the time that ZEHAF-BIBEAU shot and killed Corporal Nathan CIRILLO at the National War Memorial, to when ZEHAF-BIBEAU was Killed by security personnel i te Parliament Buildings 3 00030Parliament Hillis an open site, visited by millions of Canadians and vistors from around the ‘world every year, and itis important thatthe site remain accesible to al. The RCMP ha all ‘complement of officers on the Hill at he time ofthe attack, as we ae responsible fr securing the grounds of Parliament. RCMP officers responded immediately once ZEHAF-BIBEAU_ ‘commandeered an MP's vehicle and rushed tothe entrance of Parliament, ZEHAF-BIBEAU was abl to gain entrance othe building asthe doors to Parliament are not locked, in keeping with the spirit of openness and accessibility ‘We have invited the Ontario Provincial Police (OPP) to conduct review ofthe RCMP’s response tothe Ociober 22,2014 incident. This eview is also covering the responses ofthe House of Commons Protective Service personne! within the buildings, at the request of the Speaker ofthe House (0 20: How has security changed on Parliament Hill ince the attack? 'A.20: The RCMP has enhanced its security posture since the altacks. We have inereased the ‘numberof officers patrolling the grounds of Parliament Hil, and assigned officers tothe font entrance to Parliament (021: Would any of the measures in the proposed Bill C-SI have allowed the Government of Canada to prevent the tack? ‘A 2: Iti impossible, even in hindsight, co say i anything could have been done by the RCMP ‘and our parnes in the security and intelligence community to have prevented the attacks of ‘October 22,2014, However, there area numberof measures in Bill C-SI that will enhance our ability to disrupt and address the broader terrorist trea, Iwill be returning to speak to this ‘Commitee next Tuesday, where I would be happy to discus Bill C-51, and its impact far the RCMP, in more detail RCMP’s Approach (0.22: How is the RCMP currently responding tothe threat of terrorism? ‘8.22: The five RCMP-led INSETs located in Vancouver, Edmonton\Calgary, Toronto, Onawa, ‘and Montreal ~ and National Security Envoreement Sections in ather divisions have the primary responsibilty for investigating the RCMP's terrorism-related files, along with range of ether national security threats, including tertorst financing, countr-poliferation and espionage ‘Our primary goa isto disrupt threats o public safety and collect sufficient evidence to proceed with criminal charges, which may lead to prosecution and eventual conviction. However, 0 ‘counter this threat, the RCMP draws on its broad peace officer mandate which allows ito ‘prevent crime, or keep the peace. For example, this could include engaging directly with an individual's family a frends to dissuade them from continuing their plans to become involved inriminal activity, including violent behaviour. 00031In late October 2014, the RCMP also formed the National Security Joint Operations Centre (NSIOC) to help coordinate a more rapid response to individuals under criminal investigation for terrorism offences. Several Key partner agencies ae crlocated at the RCMP's National Operations Centre in Otawa to facilitate the real-time exchange of information, and support the coordination of operational responses on a daly basis. This takes place in consultation with RCMP-led INSETs and National Security Enforcement Sections pressed: Notwithstanding the NSIOC’s coordinated approach to operational decision making, ‘tneither replaces nor impedes the member agencies’ prerogative to make independent ‘operational decisions consistent with their respective mandates and applicable laws. 0.23: How does the RCMP collaborate with its partners? ‘A238: The RCMP works in close parnership with counterpart in the law enforcement ‘community in Canada and sbroad. In Canada, the RCMP works side-by-side with municipal and provincial law enforcement, sharing information where possible, seconding personnel to partnet ‘agencies, leveraging each other's tools, collaborating early in an investigation and de-conficting parallel investigations when necessary ‘The complex nature of this threat also necessitates a collaborative approach wit international pariners. As @ result the RCMP works in close partnership wits foreign counterparts to prevent Canadians fom entering thei territory on route to a conflict zone, sharing intelligence and information, and assisting with investigative efforts on Canadians who have travelled abroad for terrorist purposes. (0.24: Was the RCMP, or any other security or law enforcement agency, aware of ZEHAF- BIBEAU and his intentions before the attach? ‘AM: The RCMP and our partners make every effort to share information on possible threats to ‘he security of Canadians tthe earliest possible opportunity. ZEHAP-BIBEAU was known to police. He had criminal record covering a numberof different offences. However, he was ever the subject ofa national security investigation. Ifpressed: Concerns were raised by Passport Canada during his passport application, However, these strands of information in isolation ouside of context would not have been enough to indicate that ZEHAF-BIBEAU posed an imminent threat. 0.25: What isthe RCMP doing to prevent terrorism? ‘A28: The RCMP recognizes that any approach to addressing the challenge of radicalization to violence mast include effors to prevent an individual from becoming radicalized in the frst, place, and that families and communities play a eitical role inthis regard. As such, the RCMP has begun implementing a Terorst Prevention Program (TPP) based on established community policing principles and networks. The TPP isa crtcal element of the RCMP’s overall ‘operational policing response to high-risk travellers and ater individuals posing a risk of terrorism-relted violence. Fiforts at an erly stage ae essential to helping prevent an individual from paricipating in eiminal activities, and potentially violent behaviour. 5 oo0032‘The current focus is on training to enable on-line police officers and communities to have the skills and tots to identity the early signs of radicalization to violence, work with ae-visk individuals and support ongoing investigations. ‘The TPP officers within the INSET identify those individuals who presenta low risk of violence. These files are furher prioritized according to established eiteria allowing TPP officers to use specific tools to assess risk and in some eases inform a diversion plan. Oce the risk evel is determined, the individual may be refered to human service professionals (such 35 ‘mental health practitioners) for additonal intervention setion. As the TPP develops, the officers ‘within he INSETs wll become the provincial leads and work with other policing parners and shuman service professionals, establishing “community hubs", facilitating interventions, and continuing to foster postive community relations onan ongoing bass (Q 26: What did the RCMP know about the roup of individuals who recently left Montreal? 826: The RCMP is aware that a total of 8 individuals from the Montreal area let Canada in January 2015 with the inteation of traveling to participate in terrorist activities. Only two ofthese individuals were known to the RCMP prior to their departure. We know that two ofthe eight individuals have since etumed to Canada with the remaining 6 believed tobe in Syria fen, individuals do not share their wavel plans with family and frends as they actively try 19 hide their intentions. Also, some individuals become radicalized to violence quickly and decide ‘to travel for terrorist purposes within a short period of time. Asa result, the RMP isnot always. aware of individuals until after they travel. It would not be appropriate forme o comment any further given tht these individuals are under criminal investigation, (0.27: Will the 6 individuals currently in Syria face criminal charges If and when they return home? ATT: The activities of these 6 individuals are currently under investigation by the RCMP and its partners ~ itis too early to determine whether criminal charges will be laid, What I can tll you is that these types of investigations are complex. Its often a challenge to gather evidence. We continue to work with our domestic and intemational partners to advance our investigation and learn as much as we ean with a view to laying eriminal charges, 0.28: What offences might we be able to charge them with? Do the new so-called "terrorist traveller" offences (as a result ofthe Combatting Terrorism Act) appl)? ‘AW: The investigation is ongoing and it i too early to tll whether criminal charges willbe Iai, Indeed it isa eriminal offence to travel abroad to participate in terorist activity; however, in ‘order to pursue these charges, we must have sufficient evidence to prove that they travelled with, the inent to participate, or ae curently participating in tertorst activity abroad. Since these types of investigations are complex and extend outside of Canada into confit zones, tis often a challenge to determine their exact intentions prior to leaving and what they are exactly doing abroad, 00033(228: How cam the RCMP manage the intelligence it receives from CSIS to use as evidence? ‘A29: The RCMP and CSIS continue to manage intelligence a evidence issues through the ‘One Vision framework, shih provides guidelines forthe RCMP and CSIS in the management of national security files 0.30: What are the RCMP's keytool to counter the terrorism threat? ‘A.30: The RCMP uses every tool at our disposal to investigate these cases and prevent an individual from engaging in foreign travel for extremist purposes. Our primary goa ist collect, sufficient evidence to proceed with eiminal charges, which will hopefully lead to proseeution and eventual conviction. To collect this evidence, we use techniques such as ‘+ Overt investigative actions, including interview of family members, ‘© Outreach and engagement with community groups and religious organizations; ‘Information sharing with domestic partners (eg, Passport Canada, FINTRAC, CBSA and CSIS); ‘+ Production orders to obtain banking and telephone record; ‘Obtaining mutual legal assistance treaties (MLA) to obtain information, including from social media companies; ‘© Physical surveillance; and 4 Juiical authorization to lawfully intercept private communications Ive ate unable to collect sufficient evidence, the RCMP may sil be able to conduct disruption efforts. These effors include techniques such as engaging diredy with an individual's Fily and friends wo dissuade them from continuing ther plans, and working with Passport Canada to revoke/suspend the individual's passport to prevent them from travelling abroad. 0.31: How isthe RCMP-led National Security JOC able to address similar terrorism threats? AM: To enhance existing mechanisms, the RCMP-led National Security Joint Operations Centre (NSJOC) was formed in October 2014 to help coordinate a more rapid response to high- risk travelers and other individuals who pose a tneat of tetorism-telated violence. Parner agencies, including the Canadian Security Intelligence Service, Canada Border Services Agency land Citizenship and migration Canada, are co-located atthe RCMP's National Operations (Centre in Ottawa to facilitate the real-time exchange of information, and support the coordination ‘of operational responses ona daily basis, in consultation with RCMP-led Integrated National Security Enforcement Teams and National Security Enforcement sections. ‘This level of engagement with partners also encourages de-confiction a the field and headquarters level (0.32: You indicated that someone saw ZEHAF-BIBEAU place a gum inthe trunk of his car in ‘Mont Tremblant on the morning of the shooting. Was this the gum he used inthe attack? ‘8.32: I cannot say with any level of certainty that the same gun he was seen placing in the ca is the same one he used 0 shoot and kill Corporal CIRILLO. What I can say is that there were no other guns found in the ear, nor in any locaton that we know ZEHAF-BIBEAU visited leading oo0036up t the shooting. We have not been able to find other witnesses who say that they saw him in possession of other weapons, 0.33: How many high-risk travellers isthe RCMP currently investigating? ‘A.33:[¢svould not be appropriate for me to provide you withthe numberof ongoing RCMP investigations into high-risk travellers as this would present only a snapshot in time, The number ‘of eases constantly fluctuates in light of new information and tps. Most important is that the RCMP is always re-evaluating these files to ensue tat they ate prioritized according 0 sk. ‘ean tll you thatthe number of eases linked to high-risk travellers has increased significantly since 2012 — and even moreso since September 2014 ~and there are no indications that hey will, decrease. We know that these individuals have already travelled o 14 diferent counties including Syria, Afghanistan, Pakistan, Egypt, Algeria, Tunisia, lag, Chechnya, Turkey and Lebanon ~ and many others have intentions of tavelling, 00038DRAFT Communications Approach Public Release of Zehaf-Bibeau Video Issue: ‘on Friday, March 6, the Commissioner wil be appearing before the Standing Committe on National Security and Public Safety to provide an update onthe investigation ito the October 2 terrorist atack in ottawa. He wil also be showing Committee members an edited copy ofthe vdeo produced by ‘Michael Zehat-aieau hours prior ta the attack, The following dacument hasbeen developed to suggest 2 communications approach in support ofthe public release of the video. Objectives: Provide an opportunity forthe Canadian publi to view the video ‘Show the RCMP as a ranspaent law enforcement organization thats accountable othe Canadian Dulbiic by balancing the interests of he publi, mela and Paramentavians wit the investigative aspect Strategic Considerations ‘+ Having some information available on the RCMP website such asthe Commissioner's ‘opening statement wil provide the media and public wth the factual information ‘some were notable to view the SECU appearance. ‘© although the committee hearing will be televised as well as available on Par, the quality ofthe video for television broadcasting purposes may be poor and not suitable, ‘+ The proposed approach below will ensure thatthe objectives are attained and that the attention on the video wil be very high over the weekend but that the issue wil die ‘down early the following-week so thatthe facus canbe onthe Bill -51 hearings. 00038Proposed Approach: ‘+ Post the Commissioner's statement to the RCMP website during his appearance and refer media requests there. ‘+ Commissioner todo a short media scrum immediatly fllowing his appearance. Media Relations Officers will be made available to control the media and ensure that the scrum femains bret (2-3 minutes max) ‘© Outstanding issues that may arise following the appearance willbe addressed with reactive media questions and answers as needed. Prepared by: Stéphanie Dumouln,A/Account Manager, FP Comms ‘Approved by: Jolene Bradley Set Greg Cox Chrtine Pappas {Supt Scot Doran ‘Comm James Malia ‘Mike Cabana, DCFPThe RCMP is engaged in an active criminal investigation to establish or refute whether anyone aided, abetted, facilitated, counselled or conspired with ZEHAF BIBEAU to commit the crimes he did. The RCMP believes on the evidence that he was a terrorist. To date, we have interviewed over 400 people, from British Columbia to Ottawa, who may have come into contact with ZEHAF BIBEAU. We now know that: © ZEHAF BIBEAU became increasingly aligned with terrorist ideology in the last years of his life while living in the Lower Mainland of BC and, for a short time, in Alberta. ‘© He attempted to acquire both Canadian and Libyan passports in August and September 2014, but experienced delays and had not obtained either at the time of the incident. © Between September 23° and October 2”, ZEHAF BIBEAU traveled to Ottawa. © On October 4", ZEHAF BIBEAU took a guided tour of Centre Block. There was nothing remarkable about his participation. © Throughout his time in Ottawa, ZEHAF BIBEAU used publicly-available internet and payphones to stay in contact with individuals in Ottawa and BC. We have identified some of those individuals and continue to pursue that avenue. 00038‘© He bought a vehicle in cash on October 21", and drove to Mont Tremblant. © In Mont Tremblant, he was seen with a long knife or machete, and was observed the morning of the attack placing a rifle in the trunk of his car. © We have not been able to confirm the origins of the gun. We have provided a photo of the gun to the media, and ask the public to contact their local RCMP detachment if they recognize i © When he returned to Ottawa, ZEHAF BIBEAU shot and killed Corporal Cirillo and ran to Parliament Hill, where he was shot multiple times in the Centre Block © The autopsy toxicology screen on ZEHAF BIBEAU’s remains was negative for drugs and alcohol. © During the search of the vehicle following the attack, we found ZEHAF BIBEAU’s mobile phone. ZEHAF BIBEAU filmed himself in his car, with the phone, immediately prior to the attack. He looks directly into the camera, appears very purposeful and lucid, and talks about his motivations for the attack. played the video for the committee today, and media has also been provided with access to the video. There are a total of 18 seconds edited from the beginning and the end of the video, and | am satisfied that there are reasonable and sound operational reasons for these edits. Thank you. 00030COMMENTAIRES AUX MEDIAS «la GRC méne une enquéte criminelle en vue de déterminer si quelqu’un a aidé, conseillé, facilité ou encouragé M. ZEHAF-BIBEAU 4 commettre ses crimes, ou comploté avec lui dans ce but, avant qu’il soit abattu. Selon les preuves recueillies, la GRC estime que M. ZEHAF-BIBEAU était un terroriste. ‘* Nous savons maintenant que : ‘© M. ZEHAF-BIBEAU, dans les derniéres années de sa vie, adhérait toujours plus étroitement & l'idéologie terroriste alors qu'il habitait dans le Lower Mainland en Colombie-Britannique et durant un bref séjour en Alberta. * Ila tenté d’obtenir des passeports canadien et libyen en aoiit et septembre 2014, mais compte-tenu de délais rencontrés, il n’avait pas obtenue aucun des passeports au moment de I'incident * Entre le 23 septembre et le 2 octobre, M. ZEHAF-BIBEAU a voyagé vers Ottawa. * Le 4 octobre, M.ZEHAF-BIBEAU a participé a une visite guidée de I’édifice du Centre. II n'y avait rien de suspect dans sa participation a cette visite. © Tout au long de son séjour dans la capitale nationale, M. ZEHAF-BIBEAU a utilisé des postes Internet et des téléphones publics a divers endroits de la ville pour 1garder contact avec des personnes dans la région d’Ottawa et en Colombie-Britannique. Nous avons pu établir 'identité de certaines de ces personnes et nous poursuivons ce volet de notre enquéte. Le 21 octobre, il a acheté une voiture qu’il a payé en argent comptant, et s’est rendu a Mont-Tremblant A Mont-Tremblant, ou il a été vu avec un long couteau ou une machette, et le matin de I’attaque, des témoins l’ont vu déposant un fusil dans le coffre de sa voiture. Nous n’avons pas encore été en mesure de confirmer les origines du fusil. Nous publions une photo de Varme, qui semble unique, dans T'espoir que quelqu’un la reconnaitra. Quelques heures plus tard, de retour 4 Ottawa, ZEHAF-BIBEAU a abattu le caporal CIRILLO, est entré en courant dans la Cité Parlementaire puis a été atteint de plusieurs balles dans I'édifice du Centre. Le dépistage toxicologique effectué sur le corps de M. ZEHAF-BIBEAU s'est révélé négatif, tant pour la présence de drogue ou d’alcool. Crest durant la perquisition dans sa voiture aprés Vattentat que nous avons découvert le cellulaire de M. ZEHAF-BIBEAU, oo00es© M.ZEHAF-BIBEAU s’est filmé dans sa voiture, avec son cellulaire, immédiatement avant attentat. Il fixe directement la caméra, et semble trés lucide et déterminé; il parle de ses motifs concernant I'attentat a venir. * J'ai présenté la vidéo devant le comité aujourd’hui, est les médias y ont maintenant acces. * Dix-huit secondes au total en ont été retranchées, soit 13 secondes au début et 5 secondes a la fin. Je suis convaincu des motifs opérationnels raisonnables de ces coupures. Merci none