Although the chances of a company or agency receiving a mail bomb are minimal, the consequences of such an attack are such that a comprehensive BRP must be in place and tested regularly. Possible sources and motivations for sending mail bombs are foreign terrorism, domestic hate groups, and disgruntled employees. Individuals from management and security should be appointed to develop the BRP. The mail-center manager or a representative should be involved in the planning. The BRP should specify the composition and location of a Command Center, which would have authority to make decisions about how to respond to any given bomb threat, including the evacuation of company facilities. The BRP must also include provisions that ensure nonpostal deliveries (except commercial shipments) are channeled through the mail center, so they can be subjected to the mail-screening protocol. Telephone threats received by receptionists or others should be reported to the security officer and then relayed to the mail-center manager, who should be provided any information that would assist in the mail-screening process. In addition, the BRP should encompass all facilities at the site, including parking lots or garages immediately adjacent to buildings occupied by employees. Since the majority of explosive devices are placed, not mailed, the security plan should include effective controls over access to the facilities and its immediate surroundings. This article also provides guidance on the selection and duties of the mail-center security coordinator, mail screening procedures, response procedures, and establishing an isolation area for suspicious packages.