8.3 Critical Incidents, Active Shooter & HAZMAT Awareness
Key Takeaways
- The federally and state-endorsed active shooter protocol is 'Run, Hide, Fight'—evacuate if a safe path exists, hide/barricade if escape is cut off, and fight aggressively only as an absolute last resort in imminent peril.
- When armed law enforcement contact teams arrive during an active threat, occupants and security guards must keep hands empty, raised above the head with fingers spread, avoid sudden movements or pointing, and obey all tactical commands.
- Two-way radios and cellular phones must NEVER be transmitted within 300 feet of a suspected explosive device due to Radio Frequency (RF) energy risks that can trigger electronic detonators.
- Safe standoff evacuation distances for explosive threats require a minimum of 300+ feet for small pipe bombs, 450+ feet for backpacks/briefcases, and 1,000+ feet for vehicle-borne improvised explosive devices (VBIEDs).
- The NFPA 704 standard uses a color-coded diamond (Blue: Health, Red: Flammability, Yellow: Instability/Reactivity, White: Special Hazards on a 0–4 severity scale); security personnel must stage uphill, upwind, and upstream from hazardous materials.
8.3 Critical Incidents, Active Shooter & HAZMAT Awareness
Quick Answer: In an active shooter incident, follow the "Run, Hide, Fight" protocol: Run if a clear escape path exists; Hide and barricade doors if trapped; Fight aggressively as a last resort in imminent danger. When police arrive, display empty raised hands with spread fingers. For bomb threats, document all caller details, enforce minimum standoff distances (300+ ft for pipe bombs, 1,000+ ft for vehicles), and strictly prohibit radio/cell transmissions within 300 feet. For HAZMAT incidents, interpret the NFPA 704 diamond (Blue=Health, Red=Fire, Yellow=Instability, White=Special) and stage uphill, upwind, and upstream.
Active Shooter Emergency Response: The "Run, Hide, Fight" Protocol
An active shooter is defined by the Department of Homeland Security (DHS) and federal law enforcement as an individual actively engaged in killing or attempting to kill people in a populated area, typically employing firearms with no predictable pattern or selection of victims.
Security officers, whether armed under PA Act 235 or unarmed, must understand the nationally standardized Run, Hide, Fight response framework:
ACTIVE SHOOTER PROTOCOL
┌─────────────────────────────────────────────────────────────────────────────┐
│ 1. RUN (Evacuate) │
│ • Primary, preferred course of action if an accessible escape path exists│
│ • Leave personal belongings and bags behind │
│ • Encourage others to escape, but do not let their indecision slow you │
│ • Keep hands visible and call 911 only when safe from the threat │
├─────────────────────────────────────────────────────────────────────────────┤
│ 2. HIDE (Shelter-in-Place & Barricade) │
│ • If evacuation is impossible or blocked by the shooter's location │
│ • Lock interior doors and barricade entryways with heavy furniture │
│ • Turn off room lights, close window blinds, and silence mobile phones │
│ • Stay low to the floor, away from door windows and interior sightlines │
├─────────────────────────────────────────────────────────────────────────────┤
│ 3. FIGHT (Disrupt & Incapacitate) │
│ • Absolute LAST RESORT, only when life is in immediate, imminent peril │
│ • Commit 100% to aggressive, lethal physical action to neutralize threat │
│ • Improvise weapons (fire extinguishers, heavy chairs, metal scissors) │
│ • Swarm the shooter, control the weapon muzzle, and incapacitate attacker│
└─────────────────────────────────────────────────────────────────────────────┘
Detailed Protocol Components
1. RUN (Evacuate)
- If there is an accessible escape route, evacuate the premises immediately.
- Do not stop to gather personal property, jackets, or laptops.
- Warn individuals you encounter, but do not allow hesitant occupants to delay your egress.
- Prevent others from entering the danger area.
- Call 911 only once you have reached a secure, hard-cover location.
2. HIDE (Barricade)
- If escape routes are exposed to gunfire, seek a secure room that can be locked.
- Barricade: Wedge heavy desks, file cabinets, and tables against all inward-opening doors. Secure outward-opening door handles using heavy belts, computer cables, or door wedges.
- Concealment & Silence: Turn off lights, close window blinds, and silence all cell phones and pagers (turn off ringers AND vibration modes).
- Positioning: Sit or lie on the floor behind solid cover (cinderblock walls, heavy metal furniture) outside the direct line of sight from door windows or hallway vision panels.
- Remain Barricaded: Do not open the door for anyone knocking or shouting unless sworn police officers are visually confirmed with credentials.
3. FIGHT (Neutralize)
- Deployed only when your life is in imminent danger and hiding is compromised.
- Act as aggressively as possible: throw objects, yell, create chaotic distraction, and swarm the attacker in coordinated numbers.
- Utilize improvised weapons: discharge a dry chemical fire extinguisher directly into the shooter's face/eyes, strike with heavy fire extinguishers or metal chairs, stab with scissors or pens.
- Commit to Total Action: Do not hesitate or hold back force. When swarming, take the shooter to the ground, pin their limbs, control the weapon's barrel away from people, and maintain physical control until police arrive.
Law Enforcement Arrival Expectations
Arriving municipal, state, or federal tactical contact teams have one sole mission: locate, isolate, and neutralize the shooter immediately. They will bypass injured victims and push directly toward the sound of gunfire.
TACTICAL POLICE ARRIVAL INSTRUCTIONS
┌─────────────────────────────────────────────────────────────────────────────┐
│ [✔] KEEP HANDS VISIBLE: Raise both hands above your head with fingers │
│ spread wide so officers instantly verify you are unarmed. │
│ [✔] DROP ALL OBJECTS: Drop bags, phones, cups, coats, and flashlights. │
│ [✔] REMAIN CALM: Avoid screaming, yelling, or making sudden movements. │
│ [✘] DO NOT POINT: Never point at officers or make quick hand gestures. │
│ [✘] DO NOT RUN AT OFFICERS: Never grab, hug, or approach tactical police. │
│ [✔] PROVIDE INTEL: Inform officers of shooter's location, number of │
│ attackers, weapon types, and physical descriptions if known. │
└─────────────────────────────────────────────────────────────────────────────┘
Act 235 Armed Officer Warning: If you are an armed security officer, holster or ground your firearm immediately upon police entry unless you are actively engaging the lethal threat. Arriving tactical police cannot distinguish an armed private security guard from an active assailant in a dynamic firefight.
Bomb Threats & Suspicious Package Recognition
Explosive devices and improvised explosive devices (IEDs) present severe blast, fragmentation, and structural collapse risks.
1. Indicators of Suspicious Packages / Mail
Security officers inspecting mailrooms, lobbies, or shipping docks must recognize common physical indicators of explosive or CBRN (Chemical, Biological, Radiological, Nuclear) postal devices:
- Excessive Postage: Unusually high postage, multiple stamps of various denominations.
- Address Anomalies: Handwritten or poorly typed addresses, common names misspelled, incorrect professional titles, addressed to title only ("To General Manager") with no name, restrictive markings ("Personal," "Confidential," "Do Not X-Ray").
- Physical Irregularities: Lopsided, uneven, or rigid envelopes; oily or greasy stains; discoloration; chemical odor of bitter almonds, sulfur, or shoe polish.
- Mechanical Protrusions: Visible protruding electrical wires, aluminum foil, heavy inner wrapping, excess masking tape, string, or ticking/buzzing mechanical noises.
- Return Address Issues: Missing return address, unreadable return address, or return address foreign/unrelated to postmark location.
2. Phone Bomb Threat Documentation Protocol
When receiving a bomb threat via telephone, the security officer must remain calm, keep the caller on the line as long as possible, and complete an official Bomb Threat Checklist:
- Record Exact Words: Write down the exact phrases, words, and demands verbatim.
- Critical Investigative Questions to Ask:
- When is the bomb set to explode?
- Where is the bomb located right now (building, floor, room)?
- What does the device look like?
- What kind of bomb is it (explosive type, size)?
- What will cause it to detonate?
- Did you place the bomb? Why?
- What is your name and location?
- Analyze Caller Characteristics: Gender, estimated age, accent, pitch (raspy, high, deep), speech impediments (lisp, stutter), emotional state (calm, angry, intoxicated, laughing).
- Listen for Background Sounds: Street traffic, factory machinery, airport announcements, subway rumble, music, kitchen noises, office chatter.
3. Safe Evacuation Standoff Distances
Based on DHS and ATF explosive blast hazard models, security personnel must enforce the following minimum exterior perimeter evacuation distances:
EXPLOSIVE BLAST STANDOFF DISTANCES
┌─────────────────────────────┬─────────────────────┬────────────────────────┐
│ Threat Description │ Explosive Mass (TNT)│ Min. Evacuation Radius │
├─────────────────────────────┼─────────────────────┼────────────────────────┤
│ Pipe Bomb │ 5 lbs (2.3 kg) │ 300+ Feet (91 m) │
│ Briefcase / Backpack IED │ 50 lbs (23 kg) │ 450+ Feet (137 m) │
│ Compact Sedan / SUV VBIED │ 500 lbs (227 kg) │ 1,000+ Feet (305 m) │
│ Delivery Van / Small Truck │ 1,500 lbs (680 kg) │ 1,500+ Feet (457 m) │
│ Semitrailer / Fuel Tanker │ 10,000+ lbs (4,535k)│ 2,000+ Feet (610 m) │
└─────────────────────────────┴─────────────────────┴────────────────────────┘
4. Strict Radio & Cellular Transmission Prohibition (RF Hazard)
- The Rule: NEVER transmit on two-way radios, walkie-talkies, or mobile cellular phones within 300 feet of a suspected explosive device.
- Radio Frequency (RF) Hazard: Commercial two-way radios emit electromagnetic radio frequency energy. If a radio is keyed within close proximity to an explosive device, the RF field can induce electrical current in electronic blasting cap leg wires or solid-state detonators, triggering premature explosion.
- Alternative Communications: Use hardwired building landlines or dispatch physical runners outside the 300-foot perimeter zone to relay verbal reports.
Hazardous Materials (HAZMAT) Recognition & First Responder Awareness
Security officers frequently control access to chemical plants, medical centers, shipping facilities, and research laboratories where hazardous chemicals are stored and transported.
1. The NFPA 704 Standard Diamond
The NFPA 704 standard provides an immediate visual identification system for emergency responders, utilizing a diamond divided into four color-coded quadrants rated on a numerical severity scale from 0 (Minimal / No Hazard) to 4 (Severe / Extreme Hazard):
THE NFPA 704 DIAMOND
┌─────────────┐
│ RED │
│FLAMMABILITY │
│ (0 - 4) │
┌─────────────┼─────────────┼─────────────┐
│ BLUE │ │ YELLOW │
│ HEALTH │ │ INSTABILITY │
│ (0 - 4) │ │ (0 - 4) │
└─────────────┼─────────────┼─────────────┘
│ WHITE │
│ SPECIAL │
│ (Symbols) │
└─────────────┘
- Blue (Left Quadrant) — Health Hazard:
0: Normal material; no hazard.1: Slightly hazardous; causes irritation.2: Hazardous; temporary incapacitation or possible residual injury.3: Extreme danger; short exposure causes serious temporary or lingering injury.4: Deadly; brief exposure causes death or major residual injury.
- Red (Top Quadrant) — Flammability Hazard:
0: Will not burn.1: Must be preheated before ignition occurs (flash point > 200°F).2: Must be moderately heated before ignition occurs (flash point 100°F–200°F).3: Can ignite under almost all ambient temperature conditions (flash point < 100°F).4: Rapidly or completely vaporizes at normal temp and pressure; highly volatile (flash point < 73°F).
- Yellow (Right Quadrant) — Instability / Reactivity Hazard:
0: Normally stable, even under fire exposure conditions.1: Normally stable, but unstable at elevated temperatures and pressures.2: Violent chemical changes possible at elevated temperatures/pressures.3: Capable of detonation or explosive decomposition with strong initiating source.4: Readily capable of explosive detonation at normal temperature and pressure.
- White (Bottom Quadrant) — Special Hazards:
<s>W</s>(W with horizontal slash): Reacts violently with water; do not use water.OX: Oxidizer; strongly increases combustion and fire intensity.SA: Simple Asphyxiant gas (nitrogen, helium, argon).- (Note: COR for Corrosive, ACID, ALK, and BIO are common non-standard symbols).
2. DOT Placards & UN 4-Digit Identification Numbers
Commercial chemical transport trucks and railcars display diamond-shaped Department of Transportation (DOT) placards color-coded by hazard class (e.g., Red for flammable liquids Class 3, Orange for explosives Class 1, White/Black for corrosives Class 8). In the center of the placard or on an adjacent orange rectangular panel is a 4-digit United Nations (UN) Number (e.g., UN 1203 for gasoline, UN 1005 for anhydrous ammonia, UN 1075 for propane).
3. Staging & Emergency Response Guidebook (ERG) Protocols
- The ERG Guidebook: The DOT Emergency Response Guidebook is organized into color-coded sections:
- Yellow Pages: Chemical index sorted numerically by 4-digit UN ID number.
- Blue Pages: Chemical index sorted alphabetically by substance name.
- Orange Pages: Primary safety guides detailing fire/explosion hazards, health risks, and public safety evacuation distances.
- Green Pages: Initial isolation distances and protective action tables for toxic inhalation hazard (TIH) gases.
- The Golden Staging Rule: Security officers discovering an uncontained chemical spill, ruptured tank, or gas leak must immediately position themselves and establish a security perimeter UPHILL, UPWIND, and UPSTREAM from the release source.
- No Hot-Zone Entry: Security guards must never enter a contaminated chemical zone ("Hot Zone") to rescue victims without specialized hazardous materials technician certifications and self-contained breathing apparatus (SCBA).
Critical Incident Protocols Summary Matrix
| Critical Incident Type | First Priority Action | Safe Perimeter / Standoff Distance | Strictly Prohibited Actions |
|---|---|---|---|
| Active Shooter | Run (evacuate) if path clear; Hide/barricade if trapped | Isolate structure; direct arriving police | Do not run toward police with items in hands; never point fingers |
| Suspicious Package | Do not touch or move item; isolate room | Min. 300 ft for pipe bomb; 450 ft for bag | NO radio or cell phone transmissions within 300 feet |
| Vehicle Bomb (VBIED) | Immediate building and perimeter evacuation | Min. 1,000+ ft exterior perimeter | Do not use elevators; do not delay for personal property |
| HAZMAT Release | Identify UN number/placard from distance with binoculars | Establish perimeter Uphill, Upwind, Upstream | Never enter vapor plume/hot zone; never use water on <s>W</s> symbols |
Scenario: Suspicious Delivery Package in Corporate Mailroom
Scenario: A mailroom clerk alerts Officer Jenkins to an unexpected cardboard parcel addressed to "Head Director Only" with no return address. The parcel has $45 in excessive stamps, taped seams, oily grease spots along the corner, and a faint odor resembling bitter almonds. Officer Jenkins takes out his two-way portable radio to call his supervisor while standing over the box.
Analysis: Officer Jenkins is committing a fatal procedural error. The package exhibits multiple classic bomb indicators (restrictive addressing, excessive postage, oil stains, chemical scent). Transmitting on a two-way radio directly over the package introduces Radio Frequency (RF) energy that could trigger an electronic detonator. Jenkins must immediately step away from the package, enforce a strict radio silence perimeter of at least 300 feet, evacuate the mailroom and adjacent floors, and use a hardwired landline phone or send a verbal messenger outside the 300-foot perimeter to contact 911 and property management.
Exam Tip: RF Hazard Distance & NFPA 704 White Diamond Special Symbols
- The 300-Foot RF Rule: On state certification exams, remember that two-way radio and cell phone transmissions are strictly forbidden within 300 feet of any suspected explosive device.
- NFPA 704 White Quadrant: Only three special symbols are officially standardized by NFPA 704:
<s>W</s>(reacts violently with water),OX(oxidizer), andSA(simple asphyxiant). Health is always Blue, Flammability is Red, and Instability is Yellow on a 0 to 4 scale.
According to the federally recognized active shooter response protocol, what is the primary and preferred initial action when an accessible escape path is available?
When a security officer discovers a suspected explosive package, why are two-way radio and cellular phone transmissions strictly prohibited within 300 feet of the device?
In the standard NFPA 704 hazard identification diamond, what hazard category is represented by the BLUE quadrant, and what does a rating of 4 signify?