Skip to main content

Active School Shooter Situations: Resources for K-12 Staff

Emergency calls can involve actual or future threats of physical violence. This violence might be directed not only in or at the school building, students, staff, and campus but also at nearby buildings on or off school grounds. 

“Active shooter situations” are defined as those where an individual is “actively engaged in killing or attempting to kill people in a confined and populated area.” Unfortunately, schools face active shooter situations as well. 

The better first responders and school personnel are able to discern these threats and react swiftly, the more lives can be saved. This is particularly true in an active shooter situation at a school where law enforcement responds to a 911 call of shots fired. Many young and innocent lives are at risk in such a concentrated space. This is why it is critical that schools work with first responders, emergency management staff, and all community partners to identify, prepare, prevent, and effectively respond to an active shooter situation in a coordinated fashion. 

Active shooter situations are unpredictable and evolve quickly. Because of this, individuals must be prepared to deal with an active shooter situation before law enforcement officers arrive on the scene. 

Planning 

As with any threat or hazard that is included in a school’s EOP, the planning team will establish goals, objectives, and courses of action for an annex. These plans will be impacted by the assessments conducted at the outset of the planning process and updated as ongoing assessments occur. As courses of action are developed, the planning team should consider a number of issues, including, but not limited to: 

  • How to evacuate or lock down students, staff, and visitors, including those who are not with staff or in a classroom (e.g., in the hall, bathroom, break room). Personnel involved in such planning should pay attention to disability-related accessibility concerns when advising on shelter sites and evacuation routes. 
  • How to evacuate when the primary evacuation route is unusable. 
  • How to select effective shelter-in-place locations (optimal locations have thick walls, solid doors with locks, minimal interior windows, first-aid emergency kits, communication devices and duress alarms). 
  • How the school community will be notified that there is an active shooter on school grounds. This could be done through the use of familiar terms, sounds, lights, and electronic communications such as text messages. Include in the courses of action how to communicate with those who have language barriers or need other accommodations, such as visual signals or alarms to advise deaf students, staff, and parents about what is occurring. School wide “reverse 911-style” text messages sent to predetermined group distribution lists can be very helpful in this regard. Posting this protocol near locations where an all-school announcement can be broadcast (e.g., by the microphone used for the public announcement system) may save lives by preventing students and staff from stepping into harm’s way. 
  • How students and staff will know when the building is safe. 

The planning team may want to include functions in the Active Shooter annex that are also addressed in other functional annexes. For example, evacuation will be different during an active shooter situation than it would be for a fire. 

Additional considerations include “Responding to an Active Shooter” and “After an Active Shooter Incident”  

Sharing Information With First Responders 

The planning process is not complete until the school EOP is shared with first responders. The planning process must include preparing and making available to first responders an up-to-date and well-documented site assessment as well as any other information that would assist them. These materials should include building schematics and photos of both the inside and the outside, and include information about door and window locations, and locks and access controls. Emergency responders should also have advance information on where students, staff, and others with disabilities as well as those with access and functional needs are likely to be sheltering or escaping, generally in physically accessible locations, along accessible routes, or in specific classrooms. Building strong partnerships with law enforcement officers, fire officials, and EMS technician includes ensuring they also know the location of available public address systems, two-way communications systems, security cameras, and alarm controls. Equally important is information on access to utility controls, medical supplies, and fire extinguishers. 

Providing the detailed information listed above to first responders allows them to rapidly move through a school during an emergency, to ensure areas are safe, and to tend people in need. It is critically important to share this information with law enforcement and other first responders before an emergency occurs. Law enforcement agencies have secure websites where this information is stored for many schools, businesses, public venues, and other locations. All of these can be provided to first responders and viewed in drills, exercises, and walk-throughs. 

Technology and tools with the same information (e.g., a portable USB drive that is compatible with computers used by first responders) should be maintained at the front of the school, in a lock box, or other secured location from which school officials can immediately provide it to responding officials or first responders can directly access it. The location of these materials at the school should be known by and accessible to a number of individuals to ensure ready access in an emergency. Every building should have more than one individual charged with meeting first responders to provide them with the school site assessment, the school EOP and any other details about school safety and the facility. All parties should know who these key contacts are. 

Exercises 

Most schools practice evacuation drills for fires and protective measures for tornadoes, but far fewer schools practice for active shooter situations. To be prepared for an active shooter incident, schools should train their staff, students, and families, as appropriate, in what to expect and how to react. If students are involved, to select the appropriate exercise the school should consider the ages of the students. In a study of 84 active shooter events that occurred between 2000 and 2010, 34 percent involved schools. 

Good planning includes conducting drills which must include first responders and school resource officers (where applicable). Exercises with these valuable partners are one of the most effective and efficient ways to ensure that everyone knows not only his or her roles, but also the roles of others at the scene. These exercises should include walks through school buildings to allow law enforcement to provide input on shelter sites as well as familiarize first responders with the location. 

Each person carries a threefold responsibility:

  • First: Learn the signs of a potentially volatile situation and ways to prevent an incident. 
  • Second: Learn the best steps for survival when faced with an active shooter situation. 
  • Third: Be prepared to work with law enforcement during the response. 

Warning Signs 

No profile exists for an active shooter; however, research indicates there may be signs or indicators. Schools should learn the signs of a potentially volatile situation that may develop into an active shooter situation and proactively seek ways to prevent an incident with internal resources, or additional external assistance. 

In 2002, the Safe School Initiative (SSI) was completed by the U.S. Department of Education and the U.S. Secret Service, examining 41 K–12 student attackers involving 37 incidents in the United States from 1973 through May 2000. The research results, though focused on targeted school violence and not on active shooter situations, remain highly useful as a guide for law enforcement officials, educators, and mental health practitioners. 

The study identified 10 key findings for the development of strategies to address targeted school violence: 

  • There is no accurate or useful profile of students who have engaged in targeted school violence. 
  • Incidents of targeted violence at school are rarely sudden, impulsive acts. 
  • Prior to most incidents, other people knew about the attacker’s idea and/or the plan to attack. 
  • Most attackers did not threaten their targets directly prior to advancing the attack. 
  • Most attackers engaged in some behavior prior to the incident that caused others concern or indicated a need for help. 
  • Most attackers had difficulty coping with significant loss or personal failures. Moreover, many had considered or attempted suicide. 
  • Many attackers felt bullied, persecuted, or injured by others prior to the attack. 
  • Most attackers had access to and had used weapons prior to the attack. 
  • In many cases, other students were involved in some capacity. 
  • Despite prompt law enforcement officer responses, most shooting incidents were stopped by means other than law enforcement intervention. 

By highlighting common pre-attack behaviors displayed by past offenders, federal researchers have sought to enhance the detection and prevention of tragic attacks of violence, including active shooting incidents. Several agencies within the federal government continue to explore incidents of targeted violence in the effort to identify these potential “warning signs.” In 2002, the FBI published a monograph on workplace violence, including problematic behaviors of concern that may telegraph violent ideations and plans. In 2007, the U.S. Secret Service, U.S. Department of Education, and the FBI collaborated to produce the report Campus Attacks, Targeted Violence Affecting Institutions of Higher Learning, which examined lethal or attempted lethal attacks at U.S. universities and colleges from 1900 to 2008. The report was published in 2010, and featured several key observations related to pre-attack behaviors, including the following: 

  • In only 13 percent of the cases did subjects make verbal and/or written threats to cause harm to the target. These threats were both veiled and direct, and were conveyed to the target or to a third party about the target. 
  • In 19 percent of the cases, stalking or harassing behavior was reported prior to the attack. These behaviors occurred within the context of a current or former romantic relationship, or in academic and other non-romantic settings. They took on various forms, including written communications (conventional and electronic), telephonic contact, and harassment of the target and/or the target’s friends and/or family. Subjects also followed, visited, or damaged property belonging to target(s) or their families prior to the attack. 
  • In only 10 percent of the cases did the subject engage in physically aggressive acts toward the targets. These behaviors took the form of physical assaults, menacing actions with weapons, or repeated physical violence to intimate partners. 
  • Concerning behaviors were observed by friends, family, associates, professors, or law enforcement officers in 31 percent of the cases. These behaviors included, but were not limited to paranoid ideas, delusional statements, changes in personality or performance, disciplinary problems on campus, depressed mood, suicidal ideation, non-specific threats of violence, increased isolation, “odd” or “bizarre” behavior, and interest in or acquisition of weapons.

Specialized units in the federal government (such as the FBI’s Behavioral Analysis Unit) continue to support behaviorally based operational assessments of persons of concern in a variety of settings (e.g., schools, workplaces, places of worship) who appear be on a trajectory toward a violent act. A review of current research, threat assessment literature, and active shooting incidents, combined with the extensive case experience of the Behavioral Analysis Unit, suggest that there are observable pre-attack behaviors which, if recognized, could lead to the disruption of a planned attack. While checklists of various warning signs are often of limited use in isolation, there are some behavioral indicators that should prompt further exploration and attention from law enforcement officers and/or school safety stakeholders. These behaviors often include:

  • Development of a personal grievance; 
  • Contextually inappropriate and recent acquisitions of multiple weapons; 
  • Contextually inappropriate and recent escalation in target practice and weapons training; 
  • Contextually inappropriate and recent interest in explosives; 
  • Contextually inappropriate and intense interest or fascination with previous shootings or mass attacks; and 
  • Experience of a significant real or perceived personal loss in the weeks and/or months leading up to the attack, such as a death, breakup, divorce or loss of a job. 
  • Few offenders had previous arrests for violent crimes. 

Threat Assessment Teams 

Research shows that perpetrators of targeted acts of violence engage in both covert and overt behaviors preceding their attacks. They consider, plan, prepare, share, and, in some cases, move on to action. One of the most useful tools a school can develop to identify, evaluate, and address these troubling signs is a multidisciplinary school threat assessment team (TAT). A TAT with diverse representation often will operate more efficiently and effectively. TAT members should include school principals, counselors, employees, medical and mental health professionals, law enforcement personnel and school resource officers, where applicable. 

The TAT serves as a central convening body, so that warning signs observed by multiple people are not considered isolated incidents that slip through the cracks, when they actually may represent escalating behavior that is a serious concern. School districts should keep in mind, however, the importance of relying on factual information (including observed behavior) and avoid unfair labeling or stereotyping of students, to remain in compliance with civil rights and other applicable federal and state laws. 

For the purposes of consistency and efficiency, a school TAT should be developed and implemented in coordination with school district policy and practice. In addition, staff already working to identify student needs can be a critical source of information about troubling student behavior for a TAT. 

The TAT reviews troubling or threatening behavior of current or former students, parents, school employees or other persons brought to its attention. The TAT contemplates a holistic assessment and management strategy that considers the many aspects of the person’s life—academic, residential, work, and social. More than focusing on warning signs or threats alone, the TAT assessment involves a unique overall analysis of changing and relevant behaviors. The TAT takes into consideration, as appropriate, information about classroom behaviors, various kinds of communications, not-yet substantiated information, any threats made, security concerns, parenting issues, or relationship problems that might involve a troubled individual. The TAT may also identify any potential victims with whom the individual may interact. Once the TAT identifies an individual that may pose a threat, the team will identify a course of action for addressing the situation. The appropriate course of action—whether law enforcement intervention, counseling, or other actions —will depend on the specifics of the situation. 

Although not as common as in the K–12 environment, TATs are increasingly common in university settings, pushed to the forefront of concern following the 2007 shooting at Virginia Polytechnic Institute and State University in Blacksburg, Va., where 32 individuals were killed. In some cases, state funding mandates that colleges and universities create threat assessment teams. 

Even in a K–12 setting, where a designated TAT may not have been established, area law enforcement officials can help assess reported threats or troubling behavior, and reach out to available federal resources. The FBI’s behavioral experts in its National Center for the Analysis of Violent Crimes (NCAVC) at Quantico, Va., are available on a 24/7 basis to join in any threat assessment analysis and develop threat mitigation strategies for persons of concern. The law enforcement member of the school TAT should contact the local FBI office for this behavioral analysis assistance. 

Each FBI field office has a NCAVC representative available to work with school TATs and coordinate access to the FBI’s Behavioral Analysis Unit (BAU), home to the NCAVC. They focus not on how to respond tactically to an active shooter situation but rather on how to prevent one. Early intervention can prevent a situation from escalating by identifying, assessing, and managing the threat. The TAT should consult with its district and develop a process to seek these additional resources. 

Generally, active shooter situations are not motivated by other criminal-related concerns, such as monetary gain or gang affiliation. Often, situations may be prevented by identifying, assessing, and managing potential threats. Recognizing these pre-attack warning signs and indicators might help disrupt a potentially tragic event. 

Responding to an Active Shooter Situation 

School EOPs should include courses of action that will describe how students and staff can most effectively respond to an active shooter situation to minimize the loss of life, and teach and train on these practices, as deemed appropriate by the school. 

Law enforcement officers may not be present when a shooting begins. The first law enforcement officers on the scene may arrive after the shooting has ended. Making sure the staff knows how to respond and instruct their students can help prevent and reduce the loss of life. 

No single response fits all active shooter situations; however, making sure each individual knows his or her options for response and can react decisively will save valuable time. Depicting scenarios and considering response options in advance will assist individuals and groups in quickly selecting their best course of action. 

Understandably, this is a sensitive topic. There is no single answer for what to do, but a survival mindset can increase the odds of surviving. As appropriate for your community, it may be valuable to schedule a time for an open conversation regarding this topic. Though some parents or personnel may find the conversation uncomfortable, they may also find it reassuring to know that, as a whole, their school is thinking about how best to deal with this situation. 

During an active shooter situation, the natural human reaction, even if you are highly trained, is to be startled, feel fear and anxiety, and even experience initial disbelief and denial. You can expect to hear noise from alarms, gunfire and explosions, and people shouting and screaming. Training provides the means to regain your composure, recall at least some of what you have learned, and commit to action. There are three basic options: run, hide, or fight. You can run away from the shooter, seek a secure place where you can hide and/or deny the shooter access, or incapacitate the shooter to survive and protect others from harm. 

As the situation develops, it is possible that students and staff will need to use more than one option. During an active shooter situation, staff will rarely have all of the information they need to make a fully informed decision about which option is best. While they should follow the plan and any instructions given during an incident, often they will have to rely on their own judgment to decide which option will best protect lives. 

Respond Immediately

It is not uncommon for people confronted with a threat to first deny the possible danger rather than respond. An investigation by the National Institute of Standards and Technology (2005) into the collapse of the World Trade Center towers on September 11, 2001, found that people close to the floors impacted waited longer to start evacuating than those on unaffected floors. Similarly, during the Virginia Tech shooting, individuals on campus responded to the shooting with varying degrees of urgency. These studies highlight this delayed response or denial. For example, some people report hearing firecrackers when in fact they heard gunfire. 

Train staff to overcome denial and to respond immediately, including fulfilling their responsibilities for individuals in their charge. For example, train staff to recognize the sounds of danger, act, and forcefully communicate the danger and necessary action (e.g., “Gun! Get out!”) to those in their charge. In addition, those closest to the public address or other communications system, or otherwise able to alert others, should communicate the danger and necessary action. Repetition in training and preparedness shortens the time it takes to orient, observe, and act. 

Upon recognizing the danger, as soon as it is safe to do so, staff or others must alert responders by contacting 911 with as clear and accurate information as possible. 

Run 

If it is safe to do so for yourself and those in your care, the first course of action that should be taken is to run out of the building and far away until you are in a safe location. 

Students and staff should be trained to:

  • Leave personal belongings behind; 
  • Visualize possible escape routes, including physically accessible routes for students and staff with disabilities as well as persons with access and functional needs; 
  • Avoid escalators and elevators; 
  • Take others with them, but not to stay behind because others will not go; 
  • Call 911 when safe to do so; and 
  • Let a responsible adult know where they are. 

Hide 

If running is not a safe option, hide in as safe a place as possible. 

Students and staff should be trained to hide in a location where the walls might be thicker and have fewer windows. In addition: 

  • Lock the doors; 
  • Barricade the doors with heavy furniture; 
  • Close and lock windows and close blinds or cover windows; 
  • Turn off lights; 
  • Silence all electronic devices; 
  • Remain silent; 
  • Hide along the wall closest to the exit but out of the view from the hallway (allowing for an ambush of the shooter and for possible escape if the shooter enters the room); 
  • Use strategies to silently communicate with first responders if possible, for example, in rooms with exterior windows make signs to silently signal law enforcement officers and emergency responders to indicate the status of the room's occupants; and 
  • Remain in place until given an all clear by identifiable law enforcement officers. 

Fight 

If neither running nor hiding is a safe option, as a last resort when confronted by the shooter, adults in immediate danger should consider trying to disrupt or incapacitate the shooter by using aggressive force and items in their environment, such as fire extinguishers, and chairs. In a study of 41 active shooter events that ended before law enforcement officers arrived, the potential victims stopped the attacker themselves in 16 instances. In 13 of those cases they physically subdued the attacker. While talking to staff about confronting a shooter may be daunting and upsetting for some, they should know that they may be able to successfully take action to save lives. To be clear, confronting an active shooter should never be a requirement in any school employee’s job description; how each staff member chooses to respond if directly confronted by an active shooter is up to him or her. Further, the possibility of an active shooter situation is not justification for the presence of firearms on campus in the hands of any personnel other than law enforcement officers. 

Interacting With First Responders 

Staff should be trained to understand and expect that a law enforcement officer’s first priority must be to locate and stop the person(s) believed to be the shooter(s); all other actions are secondary. One comprehensive study determined that more than half of mass-shooting incidents—57 percent—still were under way when the first officer arrived; in 75 percent of those instances that solo officer had to confront the perpetrator to end the threat. In those cases, the officer was shot one-third of the time. 

Students and staff should be trained to cooperate and not to interfere with first responders. When law enforcement officer(s) arrives, students and staff must display empty hands with open palms. Law enforcement may instruct everyone to place their hands on their heads, or they may search individuals. 

After an Active Shooter Incident 

Once the scene is secured, first responders will work with school officials and victims on a variety of matters. This will include transporting the injured, interviewing witnesses, and initiating the investigation.

The school EOP should identify trained personnel who will provide assistance to victims and their families. This should include establishing an incident response team (including local first responders and other community partners) that is trained to appropriately assess and triage an active shooter situation (as well as other emergencies), and provide emergency intervention services and victim assistance beginning immediately after the incident and throughout the recovery efforts. This team will integrate with state and federal resources when an emergency occurs. 

Within an ongoing and/or evolving emergency, where the immediate reunification of loved ones is not possible, providing family members with timely, accurate, and relevant information is paramount. Having family members wait for long periods of time for information about their loved ones not only adds to their stress and frustration but can also escalate the emotions of the entire group. When families are reunited, it is critical that there be child release processes in place to ensure that no child is released to an unauthorized person, even if that person is well-meaning. 

Essential steps to help establish trust and provide family members with a sense of control are:

  • Identifying a safe location separate from distractions and/or media and the general public, but close enough to allow family members to feel connected in proximity to their children and their loved ones; 
  • Scheduling periodic updates even if no additional information is available; 
  • Being prepared to speak with family members about what to expect when reunified with their child and their loved ones; and 
  • Ensuring effective communication with those who have language barriers or need other accommodations, such as sign language interpreters for deaf family members. 

When reunification is not possible because a child is missing, injured, or killed, how and when this information is provided to families is critical. Before an emergency, the planning team must determine how, when, and by whom loved ones will be informed if their child or loved one is missing or has been injured or killed. Law enforcement typically takes the lead on death notifications, but all parties must understand their roles and responsibilities. This will ensure that parents and loved ones receive accurate and timely information in a compassionate way. 

While law enforcement and medical examiner procedures must be followed, families should receive accurate information as soon as possible. Having trained personnel on hand or immediately available to talk to loved ones about death and injury can ensure the notification is provided to family members with clarity and compassion. Counselors should be on hand to immediately assist family members. 

The school EOP should include pre-identified points of contact (e.g., counselors, police officers) to work with and support family members. These points of contact should be connected to families as early in the process as possible, including while children are still missing but before any victims have been positively identified. After an incident, it is critical to confirm that each family is getting the support it needs, including over the long-term. 

The school EOP should consider printed and age-appropriate resources to help families recognize and seek help with regard to a variety of reactions that they or their loved ones can experience during and after an emergency. Often, a family that has lost a child may have another child or other children in the school. It is critical that these families and loved ones be supported as they both grieve their loss and support their surviving child(ren). 

The school EOP also should explicitly address how impacted families and children will be supported if they prefer not to engage with the media. This includes strategies for keeping the media separate from families and students while the emergency is ongoing and support for families that may experience unwanted media attention at their homes.

Office of Communications and Outreach (OCO)
Page Last Reviewed:
March 5, 2026