12.1 Active Shooter (Run-Hide-Fight) & Gang Awareness
Key Takeaways
- An active (mass) shooter is an individual actively engaged in killing or attempting to kill people in a confined and populated area, usually with a firearm — Class D officers manage awareness and evacuation, not SWAT entry
- DHS/CISA Run, Hide, Fight is the civilian response model: escape if safe, shelter and silence devices if not, fight only as a last resort to incapacitate the shooter
- When law enforcement arrives, keep hands visible, drop items, follow instructions, and do not run toward officers or point and yell
- Gangs are organized groups that use intimidation, violence, or criminal activity — report indicators to supervisors and police; do not confront or attempt undercover infiltration
- Special populations (persons with disabilities, emotionally distressed people, elderly, juveniles, street people/trespassers, and people impaired by controlled substances) require calm, respectful, safety-first contact and clear documentation
Active Shooter (Run-Hide-Fight) & Gang Awareness
Quick Answer: On Florida's Class D exam, Special Security Problems (often called Special Issues) is a heavy 17-question subject. Know what an active/mass shooter situation is, apply DHS/CISA Run, Hide, Fight at an awareness level, understand that a Class D officer is not a SWAT team, recognize gang indicators and report them, and handle special populations — people with disabilities, emotionally distressed persons, elderly individuals, juveniles, street people/trespassers, and people affected by controlled substances — with calm professionalism and documentation.
Why Special Issues Matters on the Exam
The Security Officer Training Curriculum Guide, FDACS-P-01878, treats special security problems as a major classroom and testing topic. On the 170-question Class D exam, Special Security Problems / Special Issues accounts for 17 questions — tied with Observation and Incident Reporting and behind only Legal Aspects (26) and Medical Emergencies (19). That weight means this chapter is not optional review; missing these concepts can cost more points than several low-weight subjects combined.
What Is an Active (Mass) Shooter?
Federal preparedness materials describe an active shooter as an individual actively engaged in killing or attempting to kill people in a confined and populated area, typically with firearms. Training often uses "mass shooter" language for the same type of sudden, ongoing attack. The defining features for a security officer are operational, not legalistic: the attack is in progress, people are in immediate danger, and the priority is life safety and law-enforcement response, not a private investigation or a tactical room-clearing operation.
At awareness level, remember a few recurring patterns from after-action teaching (not detailed case studies you must memorize):
- Attacks often unfold quickly and end when the shooter flees, is stopped by bystanders/police, or dies by suicide
- Soft targets — workplaces, schools, houses of worship, shopping centers, and event venues — are common settings where Class D officers work
- Early recognition of pre-attack indicators (unusual interest in security gaps, rehearsal behavior, threats, or abandoned bags in sensitive areas) matters, but officers must report through the chain of command rather than improvising a solo investigation
DHS/CISA Run, Hide, Fight
The U.S. Department of Homeland Security and CISA teach civilians and private security a three-option response commonly summarized as Run, Hide, Fight. These are options to consider based on the situation, not a rigid checklist that must be completed in order every time — but exam questions usually expect the standard sequence and purpose of each step.
| Option | Core actions | Goal |
|---|---|---|
| Run | Identify the threat location; escape via doors, stairs, or windows; leave belongings behind; help others only if you can do so safely | Get yourself and others out of the danger area |
| Hide | Get out of the shooter's view; lock/barricade the entry; silence phones and other devices; stay quiet | Deny the shooter access and detection until help arrives |
| Fight | Last resort only; commit to decisive, aggressive action aimed at incapacitating the shooter until the threat is neutralized | Survive when escape and hiding are not possible |
Supporting actions that appear repeatedly in official pocket cards and posters:
- Call or text 9-1-1 when you can do so safely
- Note the two nearest exits in facilities you visit regularly
- Report suspicious activity before an attack when possible
- If you are already in a secure location, stay there until law enforcement enters and clears the area
When Law Enforcement Arrives
First responders cannot instantly tell who the shooter is. Standard guidance for civilians and security officers includes:
- Remain calm and follow instructions
- Put down bags, jackets, or other items in your hands
- Keep hands visible at all times
- Avoid quick movements toward officers, grabbing them, pointing, screaming, or yelling
- Follow responders' instructions when evacuating
Your job is to become a clear, non-threatening source of information (location of the shooter, description if known, number of injured) — not a second tactical team.
The Class D Role: Awareness and Support, Not SWAT
A Class D unarmed security officer is a private person with observation, access-control, evacuation-support, and reporting duties. You are not law enforcement and you are not a SWAT operator. Exam traps often try to push candidates into heroic but unauthorized responses:
- Do not invent a "clear the building with your own assault plan" answer
- Do not treat Run-Hide-Fight as permission to carry a firearm on a Class D-only post
- Do follow site emergency plans, notify dispatch/supervisors, assist evacuation when safe, lock down areas as directed, and hand the scene to arriving police
- Medical aid, if you are trained and it is safe, follows your employer's protocols and first-aid limits from the medical curriculum — never at the expense of becoming a new victim in the kill zone
Gang Awareness and Reporting
A gang, for security-awareness purposes, is an organized group of people who associate for a shared identity and engage in intimidation, violence, or other criminal activity. Types discussed in security training typically include street gangs, prison-influenced gangs, and sometimes outlaw motorcycle gangs or local sets that claim turf around businesses, apartments, schools, or transit hubs. Exact names and colors vary by region; the exam cares more about recognition and response than memorizing every clique.
Common awareness indicators (none alone proves membership):
- Repeated loitering or turf claims near a client property
- Coordinated intimidation of staff, tenants, or customers
- Graffiti "tagging," crossed-out rival tags, or recruitment pressure on juveniles
- Group confrontations, drug activity, or weapon displays
Correct Class D response: observe, document (who/what/when/where), notify your supervisor and, when appropriate, local law enforcement. Do not try to "infiltrate," challenge a gang for respect, or hold a group alone. Trespass and disorder issues follow your post orders and Florida trespass law; gang affiliation may raise the risk level but does not create police powers for a private officer.
Special Populations: Weave These Into Every Contact
Older curriculum themes still appear on Special Issues questions. Treat each group as requiring patience, clear communication, and safety-first judgment:
- Persons with disabilities — Speak to the person, not only to a companion; allow service animals and mobility aids; do not assume inability to understand; offer assistance without forcing it; during evacuations, plan accessible routes and wait points for responders
- Emotionally distressed persons — Keep distance and an exit path; use a calm voice; avoid arguing about delusions or escalating tone; call for supervisory or clinical/police help when danger appears imminent
- Elderly persons — Allow extra time; watch for confusion, fall risk, exploitation by others, and heat/cold vulnerability; verify identity gently at access points rather than rushing or humiliating someone
- Juveniles — Use age-appropriate language; avoid unnecessary physical contact; involve parents/guardians or school/site authorities per post orders; remember juveniles can still commit serious crimes — document facts without lecturing
- Street people / trespassers — Distinguish loitering from criminal activity; follow posted trespass warnings and owner authorization; offer directions to services only if your employer authorizes it; never use force as a first tool for unwanted presence alone
- Controlled-substances awareness — Recognize that intoxication or withdrawal can look like medical emergency, mental crisis, or aggression; prioritize scene safety, request medical/police support, and document observable behavior rather than diagnosing addiction
Documentation and Exam Traps
Special Issues answers almost always reward observe → report → support responders over confront → chase → improvise tactics. Write incident reports with specific facts, quotes, and times. On multiple-choice items, eliminate any option that turns a Class D officer into a SWAT team, a gang investigator, or a clinician making a medical diagnosis on the spot.
According to DHS/CISA active-shooter guidance, when is 'Fight' the appropriate option?
What best describes a Class D security officer's role during an active-shooter incident?
A group repeatedly claims turf outside a client property, intimidates tenants, and paints rival graffiti. What is the most appropriate Class D response?
When contacting a person who appears emotionally distressed on post, which approach best matches Special Issues training?