Which of the following is NOT generally listed as a Suspicious Activity Report (SAR) behavioral indicator under the Nationwide SAR Initiative?

Explanation

Nationwide SAR Initiative indicators include surveillance, photography of restricted/critical infrastructure with no apparent purpose, eliciting information, testing/probing of security, breach/attempted intrusion, misrepresentation, theft/diversion of materials, acquisition of expertise or supplies, weapons discovery, sector-specific incidents, and expressed/implied threats. Routine employee activity during business hours (d) is normal and not a SAR indicator — SARs require articulable behavioral concerns, not status or appearance. 28 CFR Part 23 governs intelligence-system criminal information standards to prevent unconstitutional reporting.