6.3 Active Threat Response & Critical Incident Tactics

Key Takeaways

  • Tactics evolved post-Columbine from establishing perimeters and waiting for SWAT to immediate, rapid deployment by first responding patrol officers.
  • The primary goal in an active threat situation is to stop the killing immediately; neutralizing the threat supersedes treating the wounded.
  • Contact teams utilize formations like the Diamond, Wedge, or T-Formation to provide 360-degree security while moving rapidly toward the threat.
  • Solo officer entry is increasingly recognized as necessary when waiting for backup allows the killing to continue.
  • The Incident Command System (ICS) is crucial for managing the post-neutralization phase, coordinating rescue, medical, and investigation efforts.
Last updated: July 2026

An active threat (frequently referred to as an active shooter) incident is defined as an individual actively engaged in killing or attempting to kill people in a confined and populated area. These situations are dynamic, chaotic, exceptionally violent, and require a highly specialized, aggressive response protocol that differs significantly from traditional law enforcement tactics used for barricaded suspects or hostage situations.

The Evolution of Active Threat Tactics

Law enforcement response to active shooters has undergone a massive, painful paradigm shift over the past few decades, primarily driven by tragic historical failures and the lessons learned from mass casualty events.

  • Pre-Columbine Doctrine (Contain and Wait for SWAT): Prior to 1999, the standard police response protocol for a barricaded gunman was to arrive on the scene, establish an outer perimeter to contain the suspect, and wait for specialized tactical units (SWAT) to arrive, formulate a plan, and make entry. This model proved disastrously inadequate during the Columbine High School massacre. The delayed entry allowed the shooters to continue murdering students unhindered for an extended period, while dozens of patrol officers stood by on the perimeter waiting for SWAT.
  • Post-Columbine Doctrine (Rapid Deployment/Contact Teams): Following Columbine, law enforcement across the nation fundamentally changed its doctrine to "Rapid Deployment." First responding patrol officers were trained to wait briefly to form small "Contact Teams" (typically 4-5 officers), immediately enter the structure, bypass wounded victims, and aggressively hunt down the shooter to stop the threat. The goal was to force the shooter to engage the police rather than defenseless civilians.
  • Modern Doctrine / Post-Uvalde (Solo Entry if Necessary): Recent events, notably the tragedy in Uvalde, Texas, have further accelerated response expectations. While team entry remains tactically superior and is preferred, the modern, unwavering standard dictates that if an officer arrives on scene and hears active gunfire or screaming (active driving stimulus), they must immediately enter and engage the threat, even if they are a solo officer. Waiting in a hallway for backup while children or citizens are actively being murdered is unacceptable. Time is the most critical factor; every second delayed costs lives.

The Priority of Life Scale

In all active threat situations, decision-making is strictly governed by the Priority of Life scale, which dictates whose safety is paramount:

  1. Innocent Civilians / Victims / Hostages: Their lives are the absolute highest priority.
  2. First Responders: Law Enforcement, Fire, and EMS personnel.
  3. The Suspect / Active Threat: Their safety is the lowest priority.

The Cardinal Rule: The singular, overriding priority is to stop the killing. Officers must harden their hearts and physically move past injured, bleeding, or dying victims to eliminate the threat. Stopping to apply a tourniquet while the shooter is still actively killing down the hall allows more people to die. Only after the threat is fully neutralized or firmly contained in a barricade does the focus shift to the secondary priority: treating the wounded (Stop the Dying).

Contact Team Formations and Movement

When multiple officers arrive nearly simultaneously and have a brief moment to organize before entry, they form a "Contact Team." The primary objective of the contact team is to locate and stop the shooter.

Principles of Tactical Movement

  • Speed and Deliberation: Move as rapidly as possible to the sound of gunfire, but maintain enough control to accurately identify targets, avoid friendly fire, and not bypass hidden threats.
  • 360-Degree Security: The team must maintain security from all angles (front, rear, flanks, and overhead/balconies) at all times.
  • Communication: Clear, concise, and loud communication within the team is vital. (e.g., "Covering Left!", "Moving!", "Doorway Right!").

Common Formations

FormationStructure and RolesBest Tactical Application
DiamondFour officers. The Point officer covers the front/direction of travel; two Flank officers cover left and right; the Rear Guard walks backwards to cover the team's six o'clock.Moving through open areas, large hallways, cafeterias, or navigating complex intersections. Provides excellent, balanced 360-degree coverage.
T-FormationThree to four officers. Point and flankers align abreast in a line to push forward aggressively, while a rear guard trails behind.Moving down narrow hallways. Maximizes forward-facing firepower while still maintaining essential rear security.
WedgeV-shape formation with the point officer leading at the apex, and flankers angled back and out to the sides.Moving across open exterior terrain or large, wide-open rooms where spreading out provides better sightlines and overlapping fields of fire.

Solo Officer Breach and Threshold Evaluation

When waiting for a team is not an option due to active killing, a solo officer must make entry. This is the most dangerous maneuver in law enforcement and requires strict adherence to tactical principles to maximize survivability.

Solo Entry Decision-Making

  • Active Stimulus: Is there an active driving stimulus indicating someone is currently being harmed (e.g., ongoing gunfire, screaming, visible violence)? If yes, immediate, aggressive entry is mandatory to stop the killing.
  • No Stimulus: If the scene is quiet upon arrival, and there are no immediate signs of active killing, the solo officer may choose to hold a position of tactical advantage (cover), gather intelligence, lock down exit routes, and wait briefly for backup to form a contact team.

Threshold Evaluation ("Slicing the Pie")

Doors and entryways are known as "fatal funnels" because they constrain movement and focus the suspect's attention. Before rushing blindly through a doorway into an uncleared room, an officer must evaluate the room from the safety of the hallway.

  • Slicing the Pie: The officer stands back from the door frame (using the wall for cover) and moves laterally in a deliberate, semicircular path. As the officer moves, their angle of view into the room widens. This systematically reveals "slices" of the room to the officer while keeping the vast majority of their body behind cover.
  • The goal is to visually clear as much of the room as possible, potentially identifying the suspect or victims, from the outside before committing to stepping through the fatal funnel.

Transitioning to the Incident Command System (ICS)

Once the active threat has been neutralized (shot, arrested, or self-inflicted wound), the situation abruptly transitions from a tactical hunt to a massive, complex rescue and investigation operation. Chaos will reign if structure is not immediately imposed.

  • Establish Command: The highest-ranking officer on scene, or the most capable officer if supervisors are delayed, must formally establish Incident Command. This involves declaring command over the radio, moving to a secure location (Command Post), and beginning to manage resources rather than running into the hot zone to act as an individual operator.
  • Rescue Task Forces (RTF): Once the building is relatively secure from the active shooter (creating a "warm zone"), the priority shifts to saving lives. Law enforcement officers form Rescue Task Forces to provide armed escorts for Fire and EMS personnel directly into the building to triage and treat patients rapidly. The medical focus is on immediate life-saving interventions, primarily hemorrhage control (tourniquets) and rapid extraction to ambulances, bypassing minor injuries.
  • Perimeter and Staging: The Incident Commander must quickly establish inner perimeters to protect the vast crime scene, outer perimeters for traffic control, and a designated staging area to organize the massive influx of responding mutual aid units, fire trucks, and ambulances.
Loading diagram...
Active Threat Response Flowchart
Test Your Knowledge

What is the primary driving principle behind the modern tactical response to an active shooter event?

A
B
C
D
Test Your Knowledge

When utilizing the 'Priority of Life' scale during an active threat incident, whose safety is given the absolute highest priority?

A
B
C
D
Test Your Knowledge

When moving down a long, relatively narrow hallway, which tactical formation is generally most effective for a team of four officers?

A
B
C
D