6.4 Active Shooter Incidents & Workplace Violence

6.4 Active Shooter Incidents & Workplace Violence

Tactical Reality of Active Threats: Active shooter incidents evolve with extreme speed; DHS guidance notes they are often over within 10 to 15 minutes, before police arrive. The survival priority follows the federally endorsed sequence: RUN if safe evacuation is possible; HIDE and heavily barricade if escape is cut off; and FIGHT with total physical aggression only as an absolute last resort when life is in imminent lethal danger.

Active shooter events and severe workplace violence represent the most dangerous tactical scenarios private security officers may encounter. Security officers must master personal survival techniques, know how to guide terrified civilian occupants, identify early behavioral precursors on the pathway to violence, and coordinate seamlessly with arriving tactical law enforcement units.

---

1. The Nature and Dynamics of Active Shooter Incidents

The United States Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI) define an active shooter as an individual actively engaged in killing or attempting to kill people in a confined and populated area. DHS notes that in most cases active shooters use firearms and there is no pattern or method to their selection of victims.

The Compressed Operational Timeline

Criminological data and tactical post-incident reviews reveal that active shooter incidents are characterized by extreme velocity. DHS's active shooter guidance notes that these incidents are often over within 10 to 15 minutes, before law enforcement arrives. Because sworn police officers require transit and tactical deployment time, civilian occupants and on-site security personnel are forced to make life-or-death decisions in the opening seconds of the encounter.

The Security Officer's Role

Private security officers occupy an exceptional position. Unarmed security officers have no legal duty to engage an active shooter in armed hand-to-hand combat, nor should they attempt heroic frontal charges against armed assailants. An officer's primary responsibilities are:

1. Ensuring personal survival so they can provide critical intelligence to 911 dispatch.
2. Directing civilian occupants into immediate evacuation routes or secure barricaded rooms.
3. Relaying vital tactical information to responding law enforcement contact teams.

---

2. The Run-Hide-Fight Protocol: Detailed Operational Mechanics

The Run-Hide-Fight methodology, developed by the City of Houston and officially adopted by DHS, the FBI, and New Jersey law enforcement agencies, establishes three clear operational priorities:

Phase 1: RUN (Evacuate)  -->  Phase 2: HIDE (Barricade)  -->  Phase 3: FIGHT (Incapacitate)

Phase 1: RUN (Evacuation as the Primary Action)

Evacuation is always the first and best option whenever an accessible and safe escape path exists.

• Maintain Situational Awareness: Officers must know all facility exits, emergency fire stairs, loading dock doors, and secondary service egress corridors. Never rely solely on main lobby glass doors that may be targeted by the shooter.
• Leave Belongings Behind: Flee immediately. Do not waste critical seconds collecting laptops, briefcases, coats, or personal belongings.
• Lead and Direct Others: Encourage coworkers, visitors, and students to flee with you. However, if individuals hesitate, freeze in panic, or argue, continue your evacuation without allowing their delay to compromise your safety.
• Deny Inbound Entry: As you clear the building, warn pedestrians, delivery drivers, and approaching employees to prevent them from entering the danger zone.
• Keep Hands Visible: As you emerge into outdoor areas, keep your hands elevated, open, and visible so armed police do not mistake you for a fleeing assailant.
• Call 911: Contact 911 only after you have reached a safe, sheltered exterior location.

Phase 2: HIDE (Barricade and Concealment)

If gunfire blocks escape hallways or an accessible evacuation route does not exist, immediately transition to HIDE.

• Concealment vs. Cover: Security officers must understand the critical difference between concealment and cover:
  • Concealment hides an individual from the shooter's visual line of sight (e.g., standard drywall, office cubicle fabric walls, wooden doors, window blinds), but provides zero protection against penetrating firearm bullets.
  • Cover physically stops bullets (e.g., reinforced poured-concrete walls, steel support I-beams, brick columns, commercial refrigerator units, heavy engine blocks). Always seek cover inside a concealed space.
• Fortifying the Entryway (Barricading): Lock the door immediately. If the door does not have a lock, use heavy office furniture—large conference tables, multi-drawer metal filing cabinets, heavy desks, and bookcases—to heavily obstruct the door. Wedge rubber door stops or belts under the door threshold to bind the door handle.
• Environmental Blackout: Turn off all overhead room lights. Close all window blinds and curtains. Shut down computer screens and television monitors to eliminate backlight silhouettes.
• Absolute Sound Discipline (TURN OFF VIBRATE): Silence all cellular phones, two-way radios, and pagers. CRITICAL WARNING: Turning a phone to "vibrate" is NOT sufficient. In a dead-silent, darkened room, a phone vibrating against a desk or hard tile floor produces an audible acoustic buzz that armed attackers listen for in quiet hallways. Phones must be placed on complete silent mode or powered off entirely.
• Room Dispersion: Do not huddle together in a concentrated cluster or cower directly in front of the door. Disperse across the room, crouch low to the floor behind solid cover, and stay out of the direct line of sight through door windows or keyholes.

Phase 3: FIGHT (Incapacitate the Shooter as an Absolute Last Resort)

Confronting the shooter is authorized only as an absolute measure of last resort when evacuation and hiding are impossible and your life is in imminent lethal danger (such as when an armed assailant forces entry into your barricaded room).

• Total Physical Commitment: If forced to fight, there can be no half-measures or hesitation. Act with maximum physical aggression, lethal force, and complete tactical commitment to neutralize the threat.
• Improvised Weaponry: Mobilize everyday objects as tactical weapons:
  • ABC Dry Chemical Fire Extinguishers: Discharge the chemical powder stream directly into the shooter's eyes, nose, and mouth to blind, disorient, and choke the attacker. Immediately follow the chemical spray by swinging the heavy steel cylinder as an impact striking tool against the shooter's head or weapon arm.
  • Distraction Projectiles: Throw heavy objects (hardcover books, computer monitors, metal coffee pots, ceramic mugs, heavy chairs) rapidly at the shooter's face to disrupt their aim.
  • Blunt and Edged Tools: Scissors, letter openers, tactical pens, or metal flagpoles.
• Coordinated Swarm Tactics: If multiple adults are present, position individuals on both sides of the doorway out of sight. When the shooter crosses the threshold, attack simultaneously: one person drives low into the shooter's legs to take them down, while others seize the firearm, direct the muzzle away from people, and pin the shooter's limbs to the floor with full body weight until police arrive.

---

3. The Workplace Violence Continuum: Types 1 Through 4

The Occupational Safety and Health Administration (OSHA) and the National Institute for Occupational Safety and Health (NIOSH) use a widely cited four-type classification of workplace violence:

Workplace Violence Typology

1. Type 1: Criminal Intent:
   • Relationship: The perpetrator has no legitimate relationship to the business establishment or its employees.
   • Nature: Violence is typically committed in conjunction with an acquisitive crime such as armed robbery, burglary, or defiant trespass.
   • Common Settings: Late-night retail convenience stores, gas stations, pharmacies, commercial parking garages, and financial check-cashing counters.
2. Type 2: Customer / Client / Patient:
   • Relationship: The perpetrator has a legitimate relationship with the business as a customer, client, patient, passenger, or student.
   • Nature: The perpetrator becomes violent while services are being rendered, often driven by frustration, psychiatric distress, or intoxication.
   • Common Settings: Hospital emergency departments, psychiatric clinics, social service welfare offices, airline gates, and retail customer service desks.
3. Type 3: Worker-on-Worker:
   • Relationship: The perpetrator is a current or former employee, temporary worker, independent contractor, or vendor.
   • Nature: Violence is directed against coworkers, supervisors, managers, or company property, frequently motivated by workplace grievances, disciplinary reprimands, interpersonal disputes, or recent termination.
   • Common Settings: Corporate office complexes, industrial manufacturing facilities, warehouses, and distribution centers.
4. Type 4: Personal Relationship / Domestic Violence:
   • Relationship: The perpetrator has a personal relationship with an employee outside the workplace (such as an estranged spouse, former romantic partner, relative, or stalker).
   • Nature: Domestic violence or interpersonal stalking spills into the workplace when the perpetrator enters the facility to confront or harm the specific employee, placing coworkers and security officers at risk.
   • Common Settings: Any public or private workplace where an employee's work schedule and physical location are predictable.

---

4. Behavioral Pre-Attack Indicators & The Pathway to Violence

Extensive behavioral threat assessment studies conducted by the FBI and the U.S. Secret Service reveal that active shooters and violent workplace perpetrators rarely "just snap" without warning. Instead, they progress along an observable pathway to violence:

Grievance → Ideation → Planning → Preparation → Breaching → Attack

Critical Behavioral Warning Signs (Red Flags)

• Direct or Veiled Threats: Making overt verbal or written statements threatening physical harm against coworkers, supervisors, or the facility (e.g., "You'll all pay for this," "Nobody will be laughing next week").
• Fixation and Grievance Obsession: Brooding continuously over a real or perceived injustice; intense obsession with a disciplinary reprimand or termination; maintaining a persistent "victim" mindset while blaming management.
• Fascination with Mass Shootings and Tactical Weapons: Unhealthy obsession with past active shooter incidents, mass casualty events, domestic terrorist manifestos, or military firearms; bringing weapons to work or bragging about firearms stockpiles.
• Drastic Personality and Behavioral Deterioration: Sudden, extreme mood swings; explosive verbal outbursts over minor friction; paranoia; withdrawal from coworkers; and severe deterioration in personal hygiene, grooming, or work quality.
• "Leakage": Intentionally or inadvertently communicating violent intent to a third party before an attack, such as posting cryptic countdown timers on social media or showing weapons in vehicle trunks to trusted coworkers.

The Security Officer's Role in Early Intervention

Security officers must never ignore behavioral red flags or dismiss threats as "venting." Officers must document all suspicious statements, policy violations, and aggressive interactions in objective, detailed incident reports. Forward these reports immediately to Human Resources and the facility's Threat Assessment Team so proactive intervention—such as wellness checks, trespass warnings, or law enforcement referrals—can take place before violence erupts.

---

5. Security Officer Actions During Law Enforcement Arrival

When police arrive at an active shooter scene, the environment is intensely chaotic, dangerous, and loud. Tactical officers must make split-second decisions to distinguish between innocent victims and the armed perpetrator.

The Mindset and Mission of Arriving Police

• Rapid Deployment Contact Teams: Arriving municipal police officers, county sheriff's deputies, and NJSP troopers will immediately form small contact teams (typically 2 to 4 officers) and enter the building directly.
• Sole Mission — Neutralize the Threat: The primary, unyielding objective of the contact team is to locate, engage, and neutralize the shooter immediately. Contact teams will NOT stop to help injured victims, administer first aid, or carry people out. Medical treatment is provided later by secondary Rescue Task Forces (RTFs) composed of paramedics escorted by armed officers once warm zones are established.
• Aggressive Demeanor: Officers will enter with long rifles and shotguns drawn, shout loud commands, push people to the floor for safety, and move rapidly toward the sound of gunfire.

Mandatory Security Officer Protocol on Police Contact

Relaying Critical Tactical Information to Police

As soon as tactical officers make contact, security personnel should provide concise, objective intelligence:

• Shooter Details: Number of shooters, physical description (race, gender, height, build, distinctive clothing, body armor).
• Location & Movement: Exact current location of the shooter and last known direction of travel (e.g., "Third floor, West corridor, moving toward stairwell C").
• Weapons Observed: Types and numbers of firearms (handguns, AR-15 style rifles, shotguns) or visible improvised explosive devices.
• Casualties: Number of injured persons and their approximate locations.
• Access Control Support: Provide master keys, electronic badge cards, and facility floor plans to the tactical command post.

---

6. Comprehensive Reference Table: Incident Phases, Workplace Violence Typologies, and Guard Protocols

---

7. Practical Scenarios & Common Compliance Pitfalls

Scenario: The Fired Employee at the Office Complex

Scenario: On a Friday afternoon, a disgruntled software engineer is terminated for misconduct. Two hours later, an employee runs into the security lobby shouting that the terminated engineer has returned, is in the second-floor accounting department, and has displayed a semi-automatic handgun while screaming threats. Gunfire is heard echoing from the second floor.

Proper Protocol: Security Officer Diaz immediately assesses that the second floor is compromised. She hits the facility emergency mass-notification alarm, instructs lobby occupants to immediately RUN out through the rear loading dock exit doors into the exterior parking lot, and directs arriving pedestrians away from the building. Once outside behind an exterior concrete wall, Officer Diaz calls 911, provides the shooter's identity, physical description, and location, and prepares to meet arriving police with building master keys.

Common Compliance Pitfalls

• Leaving Phones on Vibrate During HIDE: Assuming that switching a mobile phone to vibrate satisfies noise discipline. The mechanical vibration of a phone on a hard surface is easily heard by an active shooter stalking quiet hallways.
• Pulling the Fire Alarm During an Active Shooter Event: Pulling the manual fire alarm pull station. This prompts hundreds of occupants to exit offices and fill hallways and stairwells, directly exposing crowds to the shooter's line of fire.
• Holding a Handgun When Police Enter: An armed security officer running toward arriving police officers with a drawn firearm in hand. Arriving officers under extreme stress may mistake the armed guard for the active shooter and fire.