Exercise Grey Heron · Blue Turn 1 briefing

1. COBR briefing: threat level raised to HEIGHTENED

At 0800 today the Cabinet Office notified all Strategic Co-ordination Groups that the national threat level has been raised from MODERATE to HEIGHTENED. COBR has not met in full; the notification was issued on the advice of JTAC following review of three incidents in the last week of September.

The notification states that:

• The raise reflects an assessed increase in the likelihood of state-linked hostile activity against UK infrastructure, communities and democratic processes over the coming weeks.
• No attribution has been made. HMG is not, at this stage, naming any state as responsible for recent incidents, and SCGs should avoid speculation in public communications.
• No powers under the Defence Readiness Act have been activated, and none are expected during this period. The Civil Contingencies Act 2004 remains the framework for local response. Under the 2027 amendment, the LRF has the statutory duty to plan resilience efforts, reporting to the Mayor.
• LRFs are asked to review their plans against a sustained, low-level campaign rather than a single major event: multiple small incidents, designed to strain services, test responses and erode public confidence.
• Government communications will emphasise calm and continuity. LRFs should align local messaging with national lines and route any request for central support through the Resilience Directorate.

The Home Secretary has made a separate statement on the firebombing of a mosque in Bradford, condemning the attack and confirming that counter-terrorism policing is leading the investigation.

2. Regional counter-terrorism assessment

The Vallen counter-terrorism unit has briefed the Chief Constable, who has shared the following with SCG members on a need-to-know basis. This assessment is not for public release.

The September incidents. Intelligence indicates likely Russian or Iranian involvement in all three incidents:

The pattern — three separate incidents in a single week, each deniable, each in a different domain — is consistent with the hybrid playbook seen during the Ukraine conflict: physical sabotage, infrastructure probing and incitement of community tension, carried out at arm's length through proxies.

Forward assessment. The CT unit assesses that hybrid activity against the UK is likely to rise during Turn 1, coinciding with Russian diplomatic and information pressure in the final weeks of the US presidential campaign. The working judgement is that Moscow aims to:

• Reinforce its narrative that NATO is dead and Article 5 is defunct, by showing that European states cannot protect their own homelands.
• Widen social divisions in Western societies, particularly around migration, religion and the cost of rearmament.
• Damage confidence in the US Democratic Party, which is campaigning on restoring an active US role in NATO.

Vallen is assessed as a plausible target because of its concentration of defence assets (RAF Newcombe, RNB Lydd, Lydmouth Defence Communications HQ, Greybarrow Training Area), its subsea cable landfalls, and its sharp political divisions between town and country.

3. Informed commentary

National press commentary over the past fortnight has focused on the US election's implications for European security. The prevailing analysis, echoed by defence correspondents and think tanks, is that the transition period is the danger.

If Ossoff wins on 7 November, there will be roughly ten weeks before his inauguration on 20 January 2029. During that window, the outgoing administration will have little authority and the incoming one no levers. Several commentators have argued that Russia could use this window of uncertainty to alter facts on the ground in Europe — whether through pressure on the Baltic states, a move in the Arctic, or a sharp escalation of hybrid activity — presenting the new administration with a fait accompli before it takes office.

At a briefing for the MSA last week, academics from Dunmere Tech University Security Institute made the same case in regional terms. They noted that:

• Russian doctrine treats ambiguity and transition as moments of opportunity, not caution.
• Hybrid campaigns typically intensify before any military move, to fix attention at home and test the resilience of target societies.
• Coastal regions with defence infrastructure, subsea cables and divided communities — a description that fits Vallen — are where such pressure is most likely to be felt first.

They cautioned that this is a scenario, not a forecast. But they urged the LRF to plan on the assumption that the coming three months will be the most testing since the Ukraine truce.

4. Global situation

• Russia and NATO. The Ukraine truce has held since February 2028, with a formal ceasefire, monitors and frozen front lines. Donbas is ecologically devastated. UK and European reconstruction support is flowing. Russia's war economy cannot demobilise without threatening the regime, and Putin is escalating his rhetoric around the December 2021 draft treaty demands. Russia is hardening defences opposite the Baltic states and in the Arctic. A Kremlin reformist, Melnichenko, now sits inside the administration as minister for technological modernisation.
• NATO's response has been led by the Joint Expeditionary Force nations, which Poland has joined in 2027. The UK has just completed a carrier deployment to the High North.
• United States. President Trump is a lame duck. The Rubio/Colby ticket faces Ossoff/Whitmer on 07.11.2028; Ossoff leads by four points and looks capable of maintaning control of the House and Senate. The Democrats are strongly committed to restoring an active US role in NATO — making them an obvious target for Russian disinformation.
• China and Taiwan. China declared a blockade of Taiwan in July 2028. It has built slowly, with few incidents, and appears more declaratory than real. Washington has responded only with tighter trade sanctions. Semiconductor disruption is hitting the US AI industry more than the UK.
• Energy and markets. Supplies have normalised since the Gulf crisis ended. Russia is selling some oil and gas to Western buyers, including the US. There has been no AI market crash. AI diffusion and adoption is happening rapidly, leading to fears of catastrophic cyber, bioweapon or disinformation attacks.
• Europe. The far-right surge has largely been contained; most governments are centre-left or centre-right.
• Other CRINK states. Iran is quiet. North Korea backs China rhetorically but is taking no action.

5. National situation

• Government. The Burnham government must face an election by May 2029. Polling: Labour 35, Reform 19, Conservative 19, Liberal Democrat 10, Green 6, others 11. There is speculation that Labour will campaign on rejoining the EU.
• Defence Readiness Act. In force, but none of its powers has been used. In war, it would allow the government to take control of critical national infrastructure through a CNI superministry set out in the War Book, direct the defence industry, mobilise the strategic reserve and the civil service, and — controversially — direct university research.
• War Book. Drafted but never exercised. Its contents are known only to a small group of ministers, officials, police chiefs and military commanders.
• Devolved nations. Pro-independence governments hold office in Scotland, Wales and Northern Ireland. Support for Scottish independence stands at 42%. The far right has been exploiting sectarian tensions on Clydeside.
• Disinformation. Alongside the September incidents, there has been a marked rise in online campaigns against the government, alleging that it is militarising education, preparing conscription, and planning to join Schengen if the UK rejoins the Single Market.

6. Vallen at the start of Turn 1

Governance and services

Vallen is governed by a Mayoral Strategic Authority. Police, fire, ambulance and coastguard services are coterminous with the MSA, and a single LRF covers the region's 2.65 million people across two counties and the port city of Torshaven (870,000).

The emergency services enter Turn 1 under strain:

Trained police, fire and coastguard drone units are active across the region.

Defence footprint

• RNB Lydd hosts a small joint NATO training task force of British, German and Portuguese frigates.
• RAF Newcombe is home to a detachment of Poseidon maritime patrol aircraft.
• Greybarrow Training Area sees company-level training daily.
• There have been no drone incidents at Vallen's defence sites so far.

Infrastructure

The subsea data cable damaged in late September lies within Vallen's waters. The outage was brief and the cable has been repaired. No public statement has described the damage as deliberate. Vallen's wider critical infrastructure — the Kestrel Point and Nancaster power stations, Dingle Hydro, the region's three reservoirs, Elyn Airport, the Torshaven and Lydmouth ports, and the HMG data centre — is operating normally. Routine infrastructure hardening has been carried out following the National Risk Register upgrades of 2026 and 2027.

Politics and communities

Vallen mirrors the UK's political geography. Torshaven and the other cities vote Labour or Green, with a handful of Muslim independents on Torshaven's council. The old market towns vote Conservative or Libdem. The ex-industrial towns vote Reform or Restore. The Muslim population is small. There is no regional separatist movement. See the Public Mood board for greater detail on demographics.

Information environment

Vallen's mainstream news comes from BBC and ITV regional bulletins and the Vallen Express. Local Facebook and Instagram pages reflect a wide divergence of attitude between town and country, and are the main channel through which three disinformation narratives are circulating:

1. Anti-migrant and anti-Muslim content, amplified after the Bradford firebombing.
2. "Secret conscription" — the claim that the Defence Readiness Act contains a hidden clause allowing conscription.
3. "NATO is the aggressor" — the claim that, with peace in Ukraine, NATO's forward presence on the eastern flank is a deliberate provocation, and that Vallen's bases make the region a target.

Public opinion across the region is shown on the Public Mood board, which will be updated at the end of each turn.

7. Your task this turn

The Strategic Co-ordination Group is meeting to plan Vallen's response for the next month, following the move to HEIGHTENED.

Each cell should submit a course of action setting out:

• What you intend to achieve by 7 November, and the end state you are aiming for.
• Up to three actions, in priority order, with your reasoning.
• Any request for information to COBR.
• Whether you would request the Civil Contingencies Act to be invoked in the region, or prosecution under the National Security Act 2023.

Bear in mind that the turn ends on US election day. Whatever happens in Vallen over the next five weeks will be read — at home and abroad — as a test of whether European societies can hold together without American guarantees.