"From the standpoint of those who did it, (the attack) was successful. Although there weren't a lot of deaths, it was very disruptive," Sullivan said.
Sullivan also cautions against making assumptions about what kinds of businesses could be the target of biological attacks. Media organizations would not have been high on most risk managers' lists before Sept. 11.
"It may not be mailings in New York and Washington, DC to media and government offices (next time); it might be an effort to contaminate the emergency rooms in hospitals. You just don't know which way they are going to go."
R. Douglass Nunes, a security consultant and former postal inspector in San Francisco, cautions that as the war with Iraq continues, American businesses must acknowledge the growing risk of bioterrorism. Pre-crisis management is critical, and the first step is for businesses to assess their own worth as targets, he said.
"It should be based on the demographics of the company, whether they are an international company, or in an area that might be vulnerable to more risk than another company," Nunes said. "If we're at war and you're an oil company, you are a greater risk than companies that make milk."
To protect against bio-terror attacks that utilize mail or private carriers such as United Parcel Service or Federal Express, Nunes and Sullivan recommend plenty of advanced planning that includes a risk assessment audit of mailroom procedures.
The audit should result in a written set of procedures that describe exactly what should be done if a suspicious letter or package is received, including the specific authorities in your area that should be called. The mailroom should be stocked with masks and gloves to protect employees who handle mail, and plenty of large plastic bags that can be used to isolate suspicious items. Nunes also recommends having procedures in place to trigger the shutdown of ventilation systems in the area if possible.
"With the threats over the past year, some mail rooms are now being redesigned so they have a separate exhaust system and heating system so they can control these things more easily," says Nunes.
Businesses should be thinking about more than anthrax, however. Other dangerous things that could be mailed include smallpox, bubonic plague, Ricin - even live animals.
"Spiders and snakes have been sent in the mail. If somebody's holding a box and something moves inside, that can be kind of creepy," Nunes said.
Because biohazards can sometimes come from unlikely sources such as disgruntled employees and customers, it is essential all departments be included in the risk assessment process and follow-up training.
"If (Human Resources) identifies an employee who is disgruntled and has made threats, the mail room should know about that person. The people in the mail room should know that occurred and be looking for something unusual," Nunes said.
Click here for Assessment, Planning, and Survival guidelines.