4.3 Active Shooter & Hostile Intruders

An active shooter is officially defined by law enforcement as an individual actively engaged in killing or attempting to kill people in a confined and populated area, typically through the use of firearms. Active shooter situations are incredibly unpredictable, evolve at a terrifyingly rapid pace, and are often over within 10 to 15 minutes—frequently concluding before heavily armed law enforcement arrives on the scene. Because of this harsh reality, as a security guard, your immediate response and the decisive guidance you provide to panicked building occupants can literally mean the difference between life and death. To standardize response and maximize survival, the Department of Homeland Security (DHS) endorses the universally recognized response protocol: Run, Hide, Fight. It is crucial to understand that this protocol is not necessarily sequential; individuals must dynamically assess the situation and decide which action is most appropriate based on their immediate physical proximity to the threat and the rapidly evolving circumstances.

The first, best, and preferred option is to RUN (Evacuate). If there is an accessible and relatively safe escape path, you must attempt to evacuate the premises immediately. Leave your personal belongings behind—do not waste precious seconds gathering purses, laptops, or coats. Help others escape if possible, but do not stay behind if others paralyze with fear and refuse to leave; your survival is paramount. As you evacuate, physically warn other individuals not to enter an area where the active shooter may be. A critical component of running is how you interact with responding law enforcement. When evacuating, keep your hands empty, open, and raised visibly at all times so responding law enforcement officers do not mistake you for the threat. Once you are safe, prevent others from entering the danger zone and call 911 immediately to provide intelligence.

If evacuation is absolutely not possible because the shooter is blocking the exit path, the next viable option is to HIDE (Barricade). Find a location where the active shooter is less likely to find you. The hiding place should be completely out of the shooter's visual line of sight, provide physical ballistic protection if shots are fired in your direction (such as an office with a thick, closed, and locked solid wood or metal door), and not trap you or restrict your options for movement if you need to transition to running or fighting. Lock the door immediately and heavily blockade it with heavy furniture, such as heavy desks, filing cabinets, or sturdy chairs. Silence your cell phone entirely—turning off the vibrate mode as well, since the buzzing sound in a quiet room can give away your position. Turn off all lights, turn off any sources of noise (e.g., radios, televisions), hide behind large items out of the direct line of the doorway, and remain completely quiet. Your psychological goal is to make the room appear entirely unoccupied and physically impenetrable, prompting the shooter to move on to easier targets.

As an absolute last resort, and only when your life is in imminent and unavoidable danger, you must FIGHT (Take Action). This means attempting to aggressively disrupt and/or physically incapacitate the active shooter. Act with extreme physical aggression, throw items (e.g., fire extinguishers, heavy books, chairs, hot coffee) directly at the shooter's face and head to disorient them, and use any available improvised weapons. Commit to your actions entirely—hesitation in this phase can be fatal. If you are with others, communicate quickly and work as a team to swarm the shooter simultaneously, attacking high and low to take them to the ground and aggressively control their weapon.

The DHS Standard Response: Run, Hide, Fight

Notification procedures are a critical professional responsibility for security guards. When it is safe to do so, call 911 or your central dispatch center. Provide precise, rapid-fire details to the dispatcher: the exact location of the active shooter (building name, floor, specific room number, compass direction of movement), a detailed physical description of the shooter (clothing, height, weight, body armor), the number and specific type of weapons held by the shooter (e.g., handgun, long rifle, shotgun, visible explosives), and the estimated number of potential victims at the location.

When tactical teams (such as MPD Emergency Response Teams, federal police, or SWAT) arrive, their sole, overriding initial objective is to locate and stop the shooter. They will not stop to help injured persons or evacuate civilians until the threat is completely neutralized. Cooperation with arriving law enforcement is essential and requires strict discipline. Keep your hands highly visible and empty, follow all shouted instructions explicitly, avoid pointing at officers, screaming, or yelling, and do not make any sudden movements toward them. Understand that officers, operating under extreme adrenaline and stress, may aggressively push individuals to the ground for their own safety or to clear lines of sight. After the primary threat is eliminated, medical teams and specialized rescue task forces will enter to aggressively triage and treat the injured and facilitate a safe, orderly evacuation.