Skip to main content

Active School Shooter Situations: Resources for Higher Education Staff

Emergency calls can involve actual or future threats of physical violence. This violence might be directed not only in or at IHE buildings, students, staff, and areas on campus but also at nearby buildings off campus. “Active shooter situations” are defined as those where an individual is “actively engaged in killing or attempting to kill people in a confined and populated area.” Unfortunately, IHEs face active shooter situations as well. 

The better first responders and IHE personnel are able to discern these threats and react swiftly, the more lives can be saved. This is particularly true in an active shooter situation where law enforcement responds to a 911 call of shots fired. Many innocent lives are at risk in concentrated areas. This is why it is critical that IHEs work with their community partners (e.g., first responders, emergency managers) to identify, prepare, prevent, and effectively respond to an active shooter situation in a coordinated fashion. 

Active shooter situations are unpredictable and evolve quickly. Because of this, individuals must be prepared to deal with an active shooter situation before law enforcement personnel arrive on the scene. 

Planning 

As with any threat or hazard that is included in an IHE’s EOP, the planning team will establish goals, objectives, and courses of action for an Active Shooter Annex. These plans will be impacted by the assessments conducted at the outset of the planning process and updated as ongoing assessments occur. As courses of action are developed, the planning team should consider a number of issues, including, but not limited to 

How to evacuate or lock down students, staff, and visitors. (Personnel involved in such planning should pay attention to disability-related accessibility concerns when advising on shelter sites and evacuation routes.) 

How to evacuate when the primary evacuation routes are unusable. 

How to select effective shelter-in-place locations (optimal locations have thick walls, solid doors with locks, minimal interior windows, first-aid emergency kits, communication devices, and duress alarms). 

How the IHE community will be notified that there is an active shooter on campus as required by the Clery Act This could be done through the use of familiar terms, sounds, lights, and electronic communications, such as text messages or e-mails. Include in the courses of action how to communicate with those who have language barriers or need other accommodations, such as visual signals or alarms to advise deaf students, staff, and parents about what is occurring. IHE-wide “reverse 911-style” text messages sent to pre-determined group distribution lists can be very helpful in this regard. Planners should make sure this protocol is readily available and understood by those who may be responsible for sending out or broadcasting an all-IHE announcement. Rapid notification of a threat can save lives by keeping people out of harm’s way. 

How students and staff will know when buildings and campus grounds are safe:

The planning team may want to include functions in the Active Shooter annex that are also addressed in other functional annexes. For example, evacuation will be different during an active shooter situation than it would be for a fire. 

Sharing Information with First Responders 

The planning process is not complete until the higher ed EOP is shared with first responders. The planning process must include preparing and making available to first responders an up-to-date and well-documented site assessment, as well as any other information that would assist them. These materials should include building schematics and photos of both the inside and outside of the buildings, and include information about door and window locations, and locks and access controls. Emergency responders should also have advance information on where students and staff with disabilities as well as others with access and functional needs are likely to be sheltering or escaping, generally in physically accessible locations, along accessible routes, or in specific classrooms. Building strong partnerships with law enforcement, fire, and EMS officials includes ensuring they also know the location of available public-address systems, two-way communications systems, security cameras, and alarm controls. Equally important is information on access to utility controls, medical supplies, and fire extinguishers. 

Providing the detailed information listed above to first responders allows them to rapidly move through an IHE during an emergency, to ensure areas are safe, and to tend to people in need. It is critically important to share this information with law enforcement and other first responders before an emergency occurs. Law enforcement agencies have secure websites where this information is stored for many IHEs, businesses, public venues, and other locations. All of these can be provided to first responders and viewed in drills, exercises, and walk-throughs. 

Technology and tools with the same information (e.g., a portable USB drive that is compatible with computers used by first responders) should be maintained in secured locations around campus from which IHE officials can immediately provide it to responding officials or from which first responders can directly access it. The locations of these materials at the IHE should be known by and accessible to a number of individuals to ensure ready access in an emergency. Every IHE should have more than one individual charged with meeting first responders to provide them with the IHE site assessment, the IHE EOP, and any other details about IHE safety and the facility. All parties should know who these key contacts are. 

Exercises

Most IHEs practice evacuation drills for fires and protective measures for tornadoes, but far fewer IHEs practice for active shooter situations. To be prepared for an active shooter incident, IHEs should train their staff, students, and families, as appropriate, in what to expect and how to react. In a study of 84 active shooter events which occurred between 2000 and 2010, 34 percent involved schools or IHEs. 

Good planning includes conducting drills that must include first responders and campus public safety. Exercises with these valuable partners are one of the most effective and efficient ways to ensure that everyone knows not only her or his role(s) but also the role(s) of others at the scene. These exercises should include walks through IHE buildings to allow law enforcement officials to provide input on shelter sites as well as familiarize first responders with the campus, including accessible shelter locations and evacuation routes for people with disabilities and others with access and functional needs. 

Each person carries a three-fold responsibility: 

  • First: Learn the signs of a potentially volatile situation and ways to prevent an incident. 
  • Second: Learn the best steps for survival when faced with an active shooter situation. 
  • Third: Be prepared to work with law enforcement during the response. 

Warning Signs 

No profile exists for an active shooter; however, research indicates there may be signs or indicators. IHEs should learn the signs of a potentially volatile situation that may develop into an active shooter situation and proactively seek ways to prevent an incident with internal resources, or additional external assistance. 

By highlighting common pre-attack behaviors displayed by past offenders, federal researchers have sought to enhance the detection and prevention of tragic attacks of violence, including active shooting situations. Several agencies within the federal government continue to explore incidents of targeted violence in the effort to identify these potential “warning signs.” In 2002, the Federal Bureau of Investigation (FBI) published a monograph on workplace violence, including problematic behaviors of concern that may telegraph violent ideations and plans. In 2007, the U.S. Secret Service, U.S. Department of Education, and the FBI collaborated to produce the report Campus Attacks, Targeted Violence Affecting Institutions of Higher Learning, which examined lethal or attempted lethal attacks at U.S. universities and colleges from 1900 to 2008. The report was published in 2010, and featured several key observations related to pre-attack behaviors, including the following: 

  • In only 13 percent of the cases did subjects make verbal and/or written threats to cause harm to the target. These threats were both veiled and direct, and were conveyed to the target or to a third party about the target. 
  • In 19 percent of the cases stalking or harassing behavior was reported prior to the attack. These behaviors occurred within the context of a current or former romantic relationship, or in academic and other non-romantic settings. They took on various forms, including written communications (conventional and electronic), telephonic contact, and harassment of the target and/or the target’s friends and/or family. Subjects also followed, visited, or damaged property belonging to target(s) or their families prior to the attack. 
  • In only 10 percent of the cases did the subject engage in physically aggressive acts toward the targets. These behaviors took the form of physical assaults, menacing actions with weapons, or repeated physical violence to intimate partners. 

Concerning behaviors were observed by friends, family, associates, professors, or law enforcement in 31 percent of the cases. These behaviors included, but were not limited to, paranoid ideas, delusional statements, changes in personality or performance, disciplinary problems on campus, depressed mood, suicidal ideation, non-specific threats of violence, increased isolation, “odd” or “bizarre” behavior, and interest in or acquisition of weapons. 

Specialized units in the federal government (such as the FBI’s Behavioral Analysis Unit) continue to support behaviorally based operational assessments of persons of concern in a variety of settings (e.g., IHEs, workplaces, places of worship) who appear be on a trajectory toward a violent act. A review of current research, threat assessment literature, and active shooting incidents, combined with the extensive case experience of the Behavioral Analysis Unit, suggest that there are observable pre-attack behaviors that, if recognized, could lead to the disruption of a planned attack.26 While checklists of various warning signs are often of limited use in isolation, the FBI has identified some behavioral indicators that should prompt further exploration and attention from law enforcement and/or campus safety stakeholders. These behaviors often include: 

  • Development of a personal grievance; 
  • Contextually inappropriate and recent acquisitions of multiple weapons; 
  • Contextually inappropriate and recent escalation in target practice and weapons training; 
  • Contextually inappropriate and recent interest in explosives; 
  • Contextually inappropriate and intense interest or fascination with previous shootings or mass attacks; and 
  • Experience of a significant real or perceived personal loss in the weeks and/or months leading up to the attack, such as a death, breakup, divorce or loss of a job. 

Few offenders had previous arrests for violent crimes. 

Threat Assessment Teams (TAT) 

Research shows that perpetrators of targeted acts of violence engage in both covert and overt behaviors preceding their attacks. They consider, plan, prepare, share, and, in some cases, move on to action. One of the most useful tools an IHE can develop to identify, evaluate, and address these troubling signs is a multidisciplinary IHE TAT. A TAT with diverse representation often will operate more efficiently and effectively. TAT members should include IHE administrators, counselors, current employees, medical and mental health professionals, and residential life, public safety, and law enforcement personnel. 

The TAT serves as a central convening body that ensures that warning signs observed by multiple people are not considered isolated incidents and do not slip through the cracks as they actually may represent escalating behavior that is a serious concern. IHEs should keep in mind, however, the importance of relying on factual information (including observed behavior) and avoid unfair labeling or stereotyping, to remain in compliance with civil rights and other applicable federal and state laws. 

For the purposes of consistency and efficiency, a TAT should be developed and implemented in coordination with IHE policy and practice. In addition, staff already working to identify student and staff needs can be a critical source of information on troubling behavior for a TAT. 

The TAT reviews troubling or threatening behavior of current or former students, staff, and parents, or other persons brought to the attention of the TAT. The TAT contemplates a holistic assessment and management strategy that considers the many aspects of the potentially threatening person’s life—academic, residential, work, and social. More than focusing on warning signs or threats alone, the TAT assessment involves a unique overall analysis of changing and relevant behaviors. The TAT takes into consideration, as appropriate, information about behaviors, various kinds of communications, not-yet substantiated information, any threats made, security concerns, family issues, or relationship problems that might involve a troubled individual. The TAT may also identify any potential victims with whom the individual may interact. Once the TAT identifies an individual who may pose a threat, the team will identify a course of action for addressing the situation. The appropriate course of action— whether law enforcement intervention, counseling, or other actions—will depend on the specifics of the situation. 

The TAT may also identify any potential victims with whom the individual may interact. TATs are increasingly common in IHE settings, pushed to the forefront of concern following the 2007 shooting at Virginia Polytechnic Institute and State University in Blacksburg, Va., where 32 individuals were killed. In some cases, state funding mandates that IHEs create threat assessment teams. 

Law enforcement can help assess reported threats or troubling behavior and reach out to available federal resources as part of the TAT process or separately. The FBI’s behavioral experts in its National Center for the Analysis of Violent Crimes at Quantico, Va., are available on a 24/7 basis to join in any threat assessment analysis and develop threat mitigation strategies for persons of concern. The law enforcement member of the IHE TAT should contact the local FBI office for this behavioral analysis assistance. 

Each FBI field office has a NCAVC representative available to work with IHE TATs and coordinate access to the FBI’s Behavioral Analysis Unit, home to the National Center for the Analysis of Violent Crimes. It focuses not on how to respond tactically to an active shooter situation but rather on how to prevent one. Early intervention can prevent a situation from escalating by identifying, assessing, and managing the threat. The TAT should consult with its IHE administration and develop a process to seek these additional resources. 

Generally, active shooter situations are not motivated by other criminal-related concerns such as monetary gain or gang affiliation. Oftentimes situations may be prevented by identifying, assessing, and managing potential threats. Recognizing these pre-attack warning signs and indicators could help disrupt a potentially tragic event. 

Responding to an Active Shooter Situation 

Higher ed EOPs should include courses of action that will describe how students and staff can most effectively respond to an active shooter situation to minimize the loss of life, and teach and train on these practices, as deemed appropriate by the IHE. 

Law enforcement officers may not be present when a shooting begins. Providing information on how staff and students can respond to the incident can help prevent and reduce the loss of life. No single response fits all active shooter situations; however, making sure each individual knows his or her options for response and can react decisively will save valuable time. Depicting scenarios and considering response options in advance will assist individuals and groups in quickly selecting their best course of action. 

Understandably, this is a sensitive topic. There is no single answer for what to do, but a survival mindset can increase the odds of surviving. As appropriate for your community, it may be valuable to schedule a time for an open conversation regarding this topic. Though some students, parents, or personnel may find the conversation uncomfortable, they may also find it reassuring to know that, as a whole, their IHE is thinking about how best to deal with this situation. 

During an active shooter situation, the natural human reaction, even if you are highly trained, is to be startled, feel fear and anxiety, and even experience initial disbelief and denial. You can expect to hear noise from alarms, gunfire, and explosions, and people shouting and screaming. Training provides the means to regain your composure, recall at least some of what you have learned and commit to action. There are three basic options: run, hide, or fight. You can run away from the shooter, seek a secure place where you can hide and/or deny the shooter access, or incapacitate the shooter in order to survive and protect others from harm. 

As the situation develops, it is possible that you will need to use more than one option. During an active shooter situation, individuals will rarely have all of the information they need to make a fully informed decision about which option is best. While they should follow the plan and any instructions given during an incident, they will often have to rely on their own judgment to decide which option will best protect lives. 

Respond Immediately 

It is not uncommon for people confronted with a threat to first deny the possible danger rather than respond. An investigation by the National Institute of Standards and Technology (2005) into the collapse of the World Trade Center towers on September 11, 2001, found that people close to the floors impacted waited longer to start evacuating than those on unaffected floors.30 Similarly, during the Virginia Tech shooting, individuals on campus responded to the shooting with varying degrees of urgency.31 These studies highlight this delayed response or denial. For example, some people report hearing firecrackers, when in fact they heard gunfire. 

Train staff and students to overcome denial and to respond immediately. For example, train students and staff to recognize the sounds of danger, act, and forcefully communicate the danger and necessary action (e.g., “Gun! Get out!”). In addition, those closest to the public-address or other communications system, or otherwise able to alert others, should communicate the danger and necessary action. Repetition in training and preparedness shortens the time it takes to orient, observe, and act. 

Upon recognizing the danger, as soon as it is safe to do so, staff or others must alert responders by contacting 911 with as clear and accurate information as possible. 

Run 

If it is safe to do so, the first course of action that should be taken is to run out of the building and move far away until you are in a safe location. 

Students and staff should be trained to:

  • Leave personal belongings behind; 
  • Visualize possible escape routes, including physically accessible routes for students and staff with disabilities and others with access and functional needs; 
  • Avoid escalators and elevators; 
  • Take others with them but not to stay behind because others will not go; 
  • Call 911 when safe to do so; and 
  • Let a responsible adult know where they are. 

Hide 

If running is not a safe option, hide in as safe a place as possible. 

Students and staff should be trained to hide in a location where the walls might be thicker and have fewer windows. In addition: 

  • Lock the doors; 
  • Barricade the doors with heavy furniture; 
  • Close and lock windows, and close blinds or cover windows; 
  • Turn off lights; 
  • Silence all electronic devices; 
  • Remain silent; 
  • Use strategies to silently communicate with first responders if possible, (e.g., in rooms with exterior windows make signs to silently signal law enforcement and emergency responders to indicate the status of the room’s occupants); 
  • Hide along the wall closest to the exit but out of the view from the hallway (allowing for an ambush of the shooter and for possible escape if the shooter enters the room); and 
  • Remain in place until given an all clear by identifiable law enforcement. 

Fight 

If neither running nor hiding is a safe option, as a last resort when confronted by the shooter, adults in immediate danger should consider trying to disrupt or incapacitate the shooter by using aggressive force and items in their environment, such as fire extinguishers, chairs, etc. In a study of 41 active shooter events that ended before law enforcement arrived, the potential victims stopped the attacker themselves in 16 instances. In 13 of those cases, they physically subdued the attacker. 

While talking to staff about confronting a shooter may be daunting and upsetting for some staff, they should know that they may be able to successfully take action to save lives. To be clear, confronting an active shooter should never be a requirement of any IHE employee’s job; how each individual chooses to respond if directly confronted by an active shooter is up to him or her. Further, the possibility of an active shooter situation is not justification for the presence of firearms on campus in the hands of any personnel other than law enforcement. 

Interacting with First Responders 

Staff should be trained to understand and expect that law enforcement’s first priority must be to locate and stop the person or persons believed to be the shooter(s); all other actions are secondary. One comprehensive study found that in more than half (57 percent) of active shooter incidents where a solo officer arrived on the scene, shooting was still underway when the officer arrived. In 75 percent of those instances, that solo officer had to confront the perpetrator to end the threat. In those cases, the officer was shot one-third of the time. 

Students and staff should be trained to cooperate and not to interfere with first responders. When law enforcement arrives, students and staff must display empty hands with open palms. Law enforcement may instruct everyone to place their hands on their heads, or they may search individuals. 

After an Active Shooter Incident 

Once the scene is secured, first responders will work with IHE officials and victims on a variety of matters. This will include transporting the injured, interviewing witnesses, and initiating the investigation. 

The higher ed EOP should identify trained personnel who will provide assistance to victims and their families. This should include establishing an incident response team (including first responders) that is trained to appropriately assess and triage an active shooter situation (as well as other emergencies), and provide emergency intervention services and victim assistance beginning immediately after the incident and throughout the recovery efforts. This team will integrate with state and federal resources when an emergency occurs. 

Within an on-going and/or evolving emergency, where the immediate reunification of loved ones is not possible, providing family members with timely, accurate and relevant information is paramount. Having family members wait for long periods of time for information about their loved ones not only adds to their stress and frustration, but can also escalate the emotions of the entire group. When families are reunited, it is critical that there are child release processes in place where minors might be involved (e.g., childcare) to assure that no child is released to an unauthorized person, even if that person well-meaning. 

Essential steps to help establish trust and provide family members with a sense of control can be accomplished by: 

  • Identifying a safe location separate from distractions and/or media and the general public, but close enough to allow family members to feel connected in proximity to their children/loved ones; 
  • Scheduling periodic updates even if no additional information is available; 
  • Being prepared to speak with family members about what to expect when reunified with their child/loved ones; and 
  • Ensuring effective communication with those that have language barriers or need other accommodations, such as sign language interpreters for deaf family members. 

When reunification is not possible because an individual is missing, injured or killed, how and when this information is provided to families is critical. Before an emergency, the planning team must determine how, when, and by whom loved ones will be informed if their loved one is missing or has been injured or killed. Law enforcement typically takes the lead on death notifications, but all parties must understand their roles and responsibilities. This will ensure that families and loved ones receive accurate and timely information in a compassionate way. 

While law enforcement and medical examiner procedures must be followed, families should receive accurate information as soon as possible. Having trained personnel to talk to loved ones about death and injury on-hand or immediately available can ensure the notification is provided to family members with clarity and compassion. Counselors should be on hand to immediately assist family members. 

The higher ed EOP should include pre-identified points of contact to work with and support family members (e.g., counselors, police officers). These points of contact should be connected to families as early in the process as possible, including while an individual is still missing but before any victims have been positively identified. After an incident, it is critical to confirm that each family is getting the support it needs, including over the long-term. 

The higher ed EOP should consider printed and age-appropriate resources to help families recognize and seek help in regard to a variety of reactions that they or their loved ones can experience during and after an emergency. For example, a family that has lost a child may have other family members in the area or at the IHE. It is critical that these families and loved ones are supported as they both grieve their loss and support their surviving family members. 

The higher ed EOP also should explicitly address how impacted families will be supported if they prefer not to engage with the media. This includes strategies for keeping the media separate from families and students while the emergency is ongoing and support for families that may experience unwanted media attention at their homes. 

Office of Communications and Outreach (OCO)
Page Last Reviewed:
March 5, 2026