Active Shooter and Emergency Preparedness Training at Work

The emergency action plan is the real regulatory anchor

The honest regulatory hook here is 29 CFR 1910.38, the OSHA rule on emergency action plans. It requires covered employers to have a plan and to address certain elements, including evacuation procedures, procedures for employees who remain to operate critical operations, a way to account for employees after evacuation, reporting procedures and the names of people to contact for further information.

Most emergency action plans were written for fire. That is where the discipline came from, and it shows. Fire plans move everyone out through the nearest exit toward a muster point, which is a sound instruction for smoke and a poor one when the hazard is a person. A plan that only knows one response has a gap in it.

The practical fix is a review of the existing plan against a different hazard, asking what changes when the threat is mobile and already inside the building. Read the plan you have. Then find out who reviewed it last and when. Plans that have not been touched in years rarely survive contact with a real event.

Run, hide, fight, and why the order matters

The widely taught response hierarchy is run, hide, fight. It is an order of preference rather than a menu. Getting away from the area is the option with the best outcomes, so it comes first. Concealment and barricade come second, when leaving is not possible. Physical resistance comes last, when you are out of other options and contact is imminent.

The order matters because people default to the wrong end of it under stress. Some freeze, some move toward the noise to see what it is, and some shelter in place when a clear exit was available. Training the sequence in advance gives people a decision they have already made once, which is much easier than making it new.

Running well means knowing more than one exit from every room you work in, leaving belongings behind, and keeping hands visible as you move. Hiding well means getting out of sight lines, locking or barricading, and silencing phones rather than switching them off. Fighting, if it comes to that, means committing fully with whatever is available.

The decision belongs to the person present

No central authority can make this call. Whoever is in the room has information that a security office three floors away or a manager working remotely does not have, and the window for deciding is short. A plan that routes decisions through a chain of approval will produce people standing still and waiting for permission that arrives too late.

Say this explicitly in the plan and in training. Employees are authorized to leave without waiting for instruction, to lock a door without asking, and to move others with them. Written authorisation matters more than it sounds, because staff hesitate when they think they will be blamed for abandoning a post or a till.

Managers should understand their role as enabling rather than directing. If you can see an exit that others cannot, say so and move. Otherwise, do not attempt to run a floor by shouting instructions across it. Accountability comes afterwards, at the assembly point, and that is where the manager's real job actually begins.

Lockdown as a physical reality, and accounting for people

Walk your building and check which doors actually lock, and from which side. A surprising number of interior doors in offices and clinics cannot be locked from inside, or need a key nobody carries, or open outward so they cannot be barricaded. This is a facilities question with a cheap answer, and it is worth raising before it is tested.

Look at glass too. A door that locks beside a full-height glass panel provides delay rather than protection, though delay still has value. Note which rooms have hard walls, no exterior windows and a lockable door, and make sure staff know where those rooms are. Practical detail like this beats any amount of general awareness content.

Accounting for people is required in an emergency action plan, and it is the part that fails in practice. Assembly points designed for fire may be unusable. Decide in advance how a manager reports who is present and who is unaccounted for, and how that reaches responders. Have a method that works when a supervisor is one of the missing.

When responders arrive, and what happens afterwards

The first officers through the door are looking for the threat, not for casualties, and they will move past injured people to do that. Occupants should keep hands open and visible, avoid sudden movement, avoid pointing, and follow instructions immediately. Do not expect to be helped or evacuated by the first team, and do not obstruct them by asking questions.

Expect to be treated as unidentified until things are sorted out. People may be searched, held, moved to a controlled area and interviewed before release. It feels excessive and it is normal. Tell staff this in advance, because a workforce that expects it copes far better than one that experiences it as a second shock.

The aftermath is the longest phase and the least planned. Reunification of staff with families needs a location, a communications channel and someone running it. Psychological support should be offered early, offered again later, and made available to people who were not physically present. Business continuity decisions can wait a day. Reunification cannot wait at all.

Warning signs and reporting concerns

The part of this that prevents rather than responds is reporting. Concerning behavior is usually visible to somebody beforehand, and it is usually discussed informally without ever reaching anyone who could act on it. Noticing is common in workplaces. Having somewhere to send the observation is what most of them lack, and that gap is fixable.

Give people a named route and a low threshold. Reports should be accepted without the reporter having to be certain, and they should be routed to someone with the authority and training to assess them rather than to the nearest manager. A threat assessment approach, where concerns are evaluated by a small trained group, works better than ad hoc judgment.

Be careful about what you teach as a warning sign. Lists of personality traits produce false alarms and unfair treatment of people who are simply unwell or unpopular. Behavior that is specific, directed at identifiable people, escalating, or that involves acquiring means is a different matter. Train that distinction, or you will get noise and lose trust.

Who should take this course

Everyone in the building benefits, but the priority order is worth thinking about. Reception and front-desk staff sit closest to the entrance and are the most likely to see something first. Managers with floor responsibility need the accountability procedures. Anyone who works alone or after hours needs the lockdown detail more than the average employee does.

Schools, clinics, retail sites, houses of worship and offices with public access all have a reasonable case for training everyone. Employers with an emergency action plan under 29 CFR 1910.38 already have a training obligation attached to that plan, and this material sits naturally alongside it rather than arriving as a separate initiative.

At $49 it is usually rolled out to a whole site. If budget forces a choice, train the people who open and close the building, the people who cover reception, and the managers who would have to account for everyone. Then extend it, because the person who needs it will not be the person you predicted.

What online training covers, and what it cannot

Online training is good at the parts people need to know before anything happens. It explains what an emergency action plan must address, the response hierarchy and why the order is what it is, how to behave when responders arrive, and what the reporting route is for. That is a lot of value for a course you hope nobody ever uses.

It cannot walk your building. Only a physical review tells you which doors lock, where the hard-walled rooms are, whether your assembly point is exposed, and how long it takes to move people from the far end of the floor. Pair the course with a walkthrough, and give someone the job of writing down what needs fixing.

It also cannot replace a drill. Reading a procedure and performing it under time pressure are different skills, and the gaps show up only when people move. A short, announced, calm drill is enough to find most problems. Announced drills are appropriate here, because unannounced ones on this topic cause harm without teaching much more.

Frequently asked questions