Active shooter safety planning is an organization’s documented process for preventing violence, preparing people and facilities, responding to an armed attack, and recovering afterward. A sound plan assigns authority, defines evacuation and shelter decisions, provides redundant communications, coordinates with responders, and trains people to act without waiting for a single administrator or system.
Key Facts at a Glance
- The FBI defines an active shooter as one or more people actively engaged in killing or attempting to kill people in a populated area.
- An emergency action plan should integrate prevention, reporting, protective actions, emergency communication, accountability, medical care, and recovery.
- Run, Hide, Fight is the FBI and Department of Homeland Security public framework; ALICE is a separate, proactive training model.
- No universal incident duration or police response time can establish a safe “first five minutes” rule for every facility.
- Typical planning costs range from staff time and free government templates to $5,000-$25,000 or more for professional assessment and rollout.
- Plans require review after construction, staffing, access-control, occupancy, or threat changes, not merely once per calendar year.
What Does Active Shooter Safety Planning Include?
Active shooter safety planning combines risk reduction, emergency action procedures, protective technology, training, response coordination, and post-incident care. The plan must work during a power outage, network failure, staff absence, blocked corridor, unfamiliar visitor, or simultaneous emergency such as fire or hazardous-material release.
The FBI definition describes an active shooter event by behavior, not by weapon type alone. The term generally refers to an individual actively attempting to kill people in a populated area, while “active assailant” can be a broader and more operationally neutral term for planning purposes.
A plan is not a binder stored in the security office. It is a system of decisions that ordinary employees, students, patients, visitors, supervisors, dispatchers, and first responders can understand under stress. The U.S. Department of Homeland Security’s public guidance states, “When an active shooter is in your vicinity, you must quickly determine the most reasonable way to protect your own life.” That principle places immediate personal safety ahead of waiting for perfect instructions.
Which outcomes should the plan control?
A usable plan should answer six operational questions:
- How can people report concerning behavior before violence occurs?
- Who can activate an alert, and what happens if that person is unavailable?
- How do occupants choose evacuation, sheltering, or last-resort resistance?
- How do leaders account for employees, visitors, contractors, and vulnerable occupants?
- How will police, fire, emergency medical services, and building management receive information?
- How will the organization provide medical, psychological, legal, financial, and operational recovery?
Prevention does not mean predicting who will become violent. It means establishing reporting channels, threat-assessment procedures, workplace-violence controls, and access rules that reduce opportunities for harm without profiling protected groups.
How Do You Build an Active Shooter Safety Plan?
A practical plan develops through five connected stages: assess vulnerabilities, write protocols, reduce physical exposure, train occupants, and audit performance. Small organizations can create a first version in 10-20 staff hours using OSHA, FEMA, DHS, and FBI resources, while larger or complex facilities often need 2-3 months for assessment, consultation, approval, and rollout.
Step 1: Assess the Facility and Its People
Start with a documented walkthrough during normal operations, shift changes, deliveries, events, and reduced staffing. Record entrances, exits, locked doors, reception areas, stairwells, elevators, windows, interior rooms, parking areas, outdoor assembly points, alarm devices, camera views, radio dead zones, and locations where sound cannot be heard.
The assessment should examine line-of-sight exposure, unsecured doors, propped-open access points, visitor movement, employee density, mobility barriers, language needs, and areas occupied by people who cannot move independently. Include contractors, temporary workers, custodial staff, remote workers visiting the site, and neighboring tenants.
A threat assessment team should also review concerning behavior reports, domestic-violence spillover risks, terminated-employee procedures, restraining orders, conflict escalation, and credible threats. Privacy and employment law matter. Store sensitive reports with restricted access, use objective behavior descriptions, and obtain legal and law-enforcement advice before imposing restrictions.
You will know the assessment is usable when a person unfamiliar with the building can identify every public entrance, alternate exit, shelter-capable room, alert method, assembly area, and emergency contact from the resulting map.
Common mistake: assessing only the main office during business hours.
Fix: repeat the walkthrough at night, during peak occupancy, and during a realistic delivery or visitor scenario.
Step 2: Write Clear Protective-Action Protocols
Write procedures in plain language with action verbs. The emergency action plan should define alert activation, evacuation, sheltering, accountability, emergency calls, medical response, reunification, media handling, and authority transfer to police or fire commanders.
Use primary and backup methods for every time-sensitive function:
| Function | Primary method | Backup method | Required owner |
|---|---|---|---|
| Emergency alert | PA announcement and SMS | Desktop alert, radios, runner | Incident coordinator |
| Police notification | 911 call from reception | Any employee calls 911 | First person with safe information |
| Door security | Electronic lockdown | Manual lock or barricade | Occupants and facilities team |
| Accountability | Digital roster | Printed roster at assembly point | Supervisors |
| Family information | Webpage and hotline | Recorded phone message | Communications lead |
| Staff coordination | Radio channel 1 | Cellular voice and text | Operations lead |
The plan should never require people to wait for an all-clear before making a life-safety decision. Occupants may not hear the alert, may receive conflicting information, or may be closer to danger than the person issuing instructions.
Include a short emergency message template with the location, known danger, time, protective action, and instruction to avoid the affected area. Do not broadcast unverified descriptions such as race, clothing, or motive as facts. False detail can direct people toward danger and burden police dispatch.
You will know the protocol works when supervisors can explain who may activate alerts, where occupants go, how visitors are counted, and who communicates with responders without opening the full plan.
Common mistake: relying on one administrator, mobile app, or PA system.
Fix: maintain at least two independent alert paths and test them during power, internet, and staffing failures.
Step 3: Apply Layered Physical Security
Physical security should delay unauthorized access, improve detection, protect occupants from exposure, and preserve safe exits. No single product makes a facility secure, and a locked door that traps occupants or violates fire code can create a new hazard.
Prioritize controls according to the assessment rather than purchasing the most visible technology. Typical commercial ranges vary by building, jurisdiction, labor, and specification:
| Control | Typical planning range | Main benefit | Limitation |
|---|---|---|---|
| Electronic access reader | $1,000-$4,000 per door installed | Identity-based entry records | Requires power and administration |
| Commercial mechanical lock | $150-$600 per door installed | Simple room security | Does not manage visitor identity |
| Panic or duress button | $300-$1,500 per station | Rapid internal notification | Needs monitored response |
| Security glazing film | $25-$50 per square foot | Slows glass penetration | Does not stop every projectile |
| Camera installation | $500-$2,500 per camera | Detection and investigation | Cameras do not prevent entry alone |
| Mass-notification platform | $1,000-$10,000 annually | Multi-channel alerts | Requires current contact data |
Select doors that occupants can lock from the safe side where building and fire codes permit. Confirm that locks do not obstruct emergency egress, create accessibility barriers, or prevent responders from entering after a threat is contained.
Reception redesign, visitor badges, delivery scheduling, exterior lighting, landscaping that preserves sightlines, anti-propping controls, and separate public and staff circulation often produce more practical risk reduction than expensive perimeter equipment. Security cameras are useful for verification and investigation, but they are not a substitute for trained people or reliable reporting.
Practitioner rule: test every security control from the occupant’s perspective. A device that works in a facilities demonstration may fail when a substitute teacher, patient transporter, or night cleaner must operate it quickly.
Step 4: Train and Exercise Without Creating New Risk
Training should teach recognition, decision-making, communication, bleeding control, responder interaction, and recovery procedures. Run, Hide, Fight gives the public a memorable sequence: evacuate when a safe route exists, hide and barricade when evacuation is unsafe, and fight only as a last resort when life is in immediate danger.
ALICE, meaning Alert, Lockdown, Inform, Counter, Evacuate, presents a more flexible model that emphasizes information and individual decisions. ALICE is not a federal standard, and “counter” should never be taught as a general duty to confront an attacker. Organizations should obtain qualified instruction, involve counsel and insurers, and adapt the language to their population.
Training formats should progress from low-stress orientation to discussion-based tabletop exercises and controlled functional drills. Avoid surprise simulations involving replica weapons, simulated gunfire, blocked exits, or role-played injuries unless qualified professionals, leadership, mental-health support, accessibility planning, and informed safeguards are in place.
Measure training with observable outcomes:
- Employees can identify two exits from their work area.
- Staff can report an emergency location without guessing.
- Supervisors can account for visitors and absent employees.
- Employees know how to avoid interfering with arriving officers.
- Participants can identify how the plan accommodates mobility, sensory, language, and medical needs.
Common mistake: measuring success by attendance rather than behavior.
Fix: use a five-question knowledge check, timed notification test, map exercise, and after-action review with assigned corrective actions.
Step 5: Audit, Correct, and Recover
Review the plan at least annually and after a relocation, renovation, access-system change, leadership change, major staffing change, new population, serious threat report, or exercise finding. OSHA’s emergency action plan guidance emphasizes procedures for reporting emergencies, evacuation, accounting for employees, rescue or medical duties, and responsible contacts; organizations should integrate those elements with local fire and police requirements.
An audit should sample real conditions rather than inspect paperwork only. Check whether doors close, alert rosters are current, radios reach every area, emergency lighting works, maps match construction, assembly points remain available, and supervisors understand their limits.
Recovery begins immediately after the danger ends. Establish a reunification site away from the incident area, a family-information process, employee assistance and trauma referrals, medical follow-up, evidence preservation, paid-leave guidance, business-continuity priorities, and a process for communicating verified facts.
The plan should identify who preserves camera footage, access logs, messages, witness notes, and maintenance records. Preserve evidence under law-enforcement direction, not through informal employee investigation.
Which Response Framework Fits the Facility?
Run, Hide, Fight is the simplest baseline for most public-facing organizations, while ALICE may suit organizations that want more detailed, non-linear decision training and can support regular instruction. Neither framework replaces a site-specific emergency action plan, police coordination, fire-code review, accessibility analysis, or professional threat assessment.
| Decision factor | Run, Hide, Fight | ALICE | Practical implication |
|---|---|---|---|
| Core sequence | Evacuate, shelter, last-resort fight | Alert, lockdown, inform, counter, evacuate | Rigorously define local actions |
| Public recognition | FBI and DHS guidance | ALICE Training Institute model | Avoid confusing visitors |
| Training burden | Lower, often 1-2 hours initially | Higher, often recurring scenario work | Match training capacity |
| Individual choice | Moderate | High | Requires stronger judgment coaching |
| Counter instruction | Last resort only | Last-resort option | Never create a confrontation duty |
| Best initial use | Offices, retail, public venues | Schools and complex campuses | Adapt by population and facility |
| Primary weakness | May be oversimplified | May be misunderstood as confrontation training | Add local examples and limits |
The best approach is usually a common public baseline plus site-specific procedures. For example, a university may teach Run, Hide, Fight to visitors while training residence-life staff on additional communication and accountability procedures.
What should workplaces prioritize?
Workplaces should prioritize credible reporting, visitor controls, supervisor training, redundant mass notification, and door security that preserves egress. A small office should not begin with expensive barriers if employees cannot identify exits, call 911, or receive an alert.
How should schools adapt the plan?
Schools need age-appropriate language, substitute-teacher procedures, reunification planning, controlled visitor entry, student accounting, special-education accommodations, and family communication. Drills should not surprise children or simulate violence; administrators should coordinate with educators, families, behavioral-health staff, and first responders.
How should hospitals protect patients?
Hospitals must plan for patients who cannot run, sedated patients, oxygen-dependent patients, visitors, and staff moving between units. Horizontal relocation behind smoke and fire barriers may be more feasible than vertical evacuation, but clinical leaders must determine movement priorities, medication needs, elevators, security access, and continuity of critical care.
How Much Time and Money Does Planning Require?
A first documented plan can take 10-20 staff hours and little direct cost, while a complex enterprise rollout commonly takes 2-3 months and $5,000-$25,000 or more for outside assessment, drafting, exercises, and implementation. Physical upgrades, notification subscriptions, labor, legal review, and jurisdictional requirements can raise the total substantially.
| Organization profile | Initial planning time | Typical direct planning cost | Likely first priorities |
|---|---|---|---|
| Small office, under 25 people | 10-20 hours | $0-$2,500 | Maps, contacts, locks, reporting |
| Retail site, 25-100 people | 3-6 weeks | $2,500-$10,000 | Visitor flow, alerts, shift training |
| School campus | 2-4 months | $10,000-$50,000 | Reunification, access, drills, radios |
| Hospital or multi-building site | 3-6 months | $25,000-$100,000+ | Patient movement, command, access layers |
These are typical planning ranges, not universal prices. Obtain local quotes, verify fire and accessibility compliance, and separate recurring software and training costs from one-time construction.
What Commonly Fails in an Emergency Plan?
The most damaging failures are usually coordination failures, not a lack of sophisticated equipment. Organizations often have a written plan but no shared vocabulary, outdated rosters, unclear authority, or controls that staff have never tested.
Single-channel communication
A PA outage, cellular congestion, compromised administrator account, or power failure can disable one notification path. Use independent channels, maintain printed procedures, and test contact data at least quarterly.
Overly detailed instructions
People under stress will not interpret a six-page decision tree. Put immediate actions on a one-page quick-reference card, then keep technical annexes for facilities, dispatch, clinical, and leadership teams.
Treating lockdown as universal
Lockdown can expose people to danger when evacuation is safe, and evacuation can expose people when the threat is nearby. Teach decision factors, including threat location, available routes, barriers, fire conditions, and information reliability.
Ignoring visitors and contractors
Visitor badges do not create accountability unless reception, supervisors, and assembly managers can reconcile sign-in records. Include delivery drivers, event attendees, volunteers, and people who arrived after the last roster export.
Unsafe or performative drills
A drill that causes panic, violates fire procedures, or humiliates participants damages trust and can suppress future reporting. Use announced, tiered exercises with accessibility accommodations and a written improvement plan.
Failing to define recovery ownership
Police may secure the scene, but they do not run payroll, employee support, family updates, evidence retention, or business continuity. Assign those duties before an incident.
What Should an Audit Measure?
An audit should measure whether the plan produces reliable actions, not whether the document contains impressive terminology. Use a scorecard with an owner and deadline for each deficiency.
| Audit measure | Minimum test | Review interval | Corrective trigger |
|---|---|---|---|
| Contact accuracy | 95% of sampled numbers reach the intended person | Quarterly | Any failed leadership contact |
| Alert delivery | Primary and backup channels tested in one exercise | Quarterly | One unavailable channel |
| Exit knowledge | 90% of participants identify two routes | Semiannual | Score below 90% |
| Roster accuracy | Visitor and staff records reconcile within 15 minutes | Each exercise | Unresolved person count |
| Door operation | 100% of sampled doors lock and release as designed | Monthly | Any code or egress violation |
| Action closure | Corrective tasks assigned with dates | After every exercise | Open task past deadline |
A post-exercise review should record what happened, why it happened, who owns the fix, the due date, and how the organization will verify completion. Do not record sensitive personal information in a widely distributed after-action report.
What Are the Limits of Published Timing Claims?
There is no defensible universal average incident duration, police response time, or guaranteed survival window for every active shooter event. Incident circumstances, distance, dispatch quality, building design, weapon access, officer tactics, and whether the attacker remains present produce major variation, so organizations should plan for immediate self-protective decisions without promising that help arrives within three to five minutes.
This corrects a common oversimplification in generic planning summaries. The FBI’s active shooter reports describe incidents and casualties, but they do not create a safe countdown applicable to every building. A plan may use local police response information for exercises, yet local averages cannot justify telling occupants to wait, remain in place, or assume an incident will end within a fixed period.
The operational lesson is narrower and more useful: people need enough knowledge to make an immediate decision, communicate location when safe, and avoid moving toward uncertain danger. Timing assumptions belong in scenario planning, not in guarantees.
How Should Organizations Coordinate With Responders?
Invite local law enforcement, fire officials, emergency medical services, emergency management, building owners, and neighboring tenants into planning before an exercise. Provide current floor plans, utility shutoffs, hazardous-material information, access procedures, camera locations, stairwell details, and locations of people needing assisted evacuation, subject to privacy controls.
Employees should know that arriving officers may give urgent commands, bypass injured people initially, or move past hiding occupants while searching for the threat. Occupants should keep hands visible, avoid sudden movements, follow instructions, and avoid approaching officers with questions unless necessary for immediate safety.
Police should not receive a plan that depends on proprietary software they cannot access. Maintain a responder packet in an agreed location and format, and verify who updates it after renovations.
What Is the Bottom Line for Active Shooter Safety Planning?
Active shooter safety planning works when it converts a facility-specific risk assessment into simple decisions, redundant communications, lawful physical controls, realistic training, and assigned recovery duties. Build the plan in five stages, test it with the people who will use it, correct measurable failures, and review active shooter safety planning whenever the building, population, technology, or threat environment changes.
A resilient plan does not promise prevention or survival. It reduces avoidable delay, improves coordination, protects more people from predictable failure points, and gives responders better information when conditions remain uncertain.
Frequently Asked Questions
Is an active shooter plan required by OSHA?
OSHA does not impose one universal federal active shooter plan for every employer, but its emergency action plan and workplace-violence guidance may apply depending on the workplace and hazards. State laws, industry rules, fire codes, insurance conditions, collective agreements, and local requirements can add duties, so obtain jurisdiction-specific legal and safety review.
How often should employees practice the plan?
Provide orientation when people join, refresh key actions at least annually, and test notification, accountability, and communications more often for high-risk or complex sites. Review the plan after every exercise, threat report, renovation, leadership change, or major occupancy change rather than waiting for the annual calendar review.
Should employees carry weapons for self-defense?
An organizational safety plan should not assume employees will carry weapons or confront an attacker. Weapons create training, legal, storage, identification, and responder-confusion risks, and policies differ by jurisdiction. Organizations should obtain legal advice and focus first on reporting, evacuation, sheltering, access control, medical response, and responder coordination.
What should employees do if they cannot safely evacuate?
Employees should move away from the threat when a safe route exists; if evacuation is unsafe, they should enter a room, secure or barricade the entry when feasible, silence devices, remain out of view, and call emergency services when safe. Physical resistance is a last resort when life faces immediate danger.
How should a plan support people with disabilities?
Include mobility, sensory, cognitive, medical, and communication needs during assessment, training, evacuation, sheltering, and reunification. Do not assign untrained coworkers as mandatory rescuers. Develop voluntary assistance arrangements, accessible alerts, evacuation equipment procedures, service-animal considerations, and individualized options with the person and qualified safety staff.
What should happen after an incident?
After responders authorize reentry, preserve evidence, account for people, provide medical and psychological support, communicate verified information, and activate business-continuity procedures. Leadership should establish a family-information channel, protect employee privacy, document decisions, and commission an after-action review that assigns corrective actions rather than seeking premature blame.
