Templates for guidance on what to do if employees spot suspicious activity, possibly indicative of terrorist planning, can be found at:
http://www.nationalterroralert.com/suspicious-activity/
and
http://cms.met.police.uk/news/publicity_campaigns/new_campaign_urges_londoners_to_report_suspicious_activity