What does your team do with the information concerning the remarks from Smith? Think about intelligence gathering, notifications et


PERSON 1: 8AM AND 8:02AM—--Maggie

What does your team do with the information concerning the remarks from Smith? Think about intelligence gathering, notifications etc

8:00 am – Security is notified that an individual matching the description of Smith has entered ABC Financial Inc. with several firearms. The individual demanded and obtained an employees’ access control badge in the lobby and gained full access to the building.

  • Referring to the detailed emergency response the team developed, what preparations should the company have in place to handle this situation?
  • What specific plans should have been established prior to the incident?
  • What are the immediate considerations?

8:02 am – What decisions and actions should you consider now that 911 has been called by Security:

  • What are your concerns?
  • What are your immediate actions?

PERSON 2: 8:03AM AND 8:05AM—–Nginya

8:03 am – Security notifies occupants of an armed intruder in the building:

  • What factors affect the announcement’s content and delivery?
  • What actions should be taken once the announcement is made?

8:05 am – Security and 911 operators are overwhelmed with phone calls from nearly 2,000 employees in the building:

  • What are the key questions, concerns and actions at this point?
  • Should employees shelter in place or try to evacuate?
  • For those that have evacuated, management is trying to account for the employees in mustering locations in the parking lot but some employees are fleeing the area and family members are breaking through crime scene tape to assist their loved ones. How should management and law enforcement handle this situation?

PERSON 3: 8:07AM, 8:08AM, AND 8:10AM…..Jael

8:07 am – Police and first responders arrive and meet with representatives from your team:

  • What actions do you take to assist emergency responders?
  • Do you make a second announcement to employees? Why or why not? Consider the pros and cons.
  • How do you handle arriving media?

8:08 am – Police response shifts from crisis to tactical:

  • Now that law enforcement is onsite at the facility, how does the team coordinate efforts with them?

8:10 am – Gunshots are heard in the building and people are seen fleeing

  • What are the key questions and concerns at this point?

PERSON 4: 8:12AM AND 8:15AM………NAgan

8:12 am – Reports indicate the terrorist shooter is heading to the Foreclosure Department:

  • What particular concerns do you have at this point?
  • What actions do you take?

With the report of the terrorist shooter heading to the Foreclosure Department, our main concern at this point should be if the employees in that department are secured and save or if they are out of the building and if they are out of the building where could they be at the time. If they are trying to run out of the building is it towards the shooter or away from where the shooter is coming from. This is because at this point in time due to the panic and fear in people they may get confuse on what to do and which way to go. As a trained professional, the best course of action in any such active shooter situation would be to ensure that everybody stays low so that they don’t get shot. Move everyone away from the windows and doors and have them sit or lay down if possible while the immediate surroundings are being secured. Pin point the shooter’s location. Once that is done, it would be very important to ensure that no employees are running towards that direction.

What should be done at this point in time should be to inform the employees at the foreclosure department unit and the entire building on where the shooter is heading to and from which direction. All assess to the unit should be put on lockdown with no one gaining assess into the unit except the police and security. Also everyone in the building should be told to cooperate with the instructions from the police and follow them in order to stay save.

8:15 am – Police notify security that the shooter has been killed but they are continuing their search:

  • Is the threat over?
  • What needs to be done now?

It is very important to understand that in every terrorist or active shooter situation, there is always a possibility of team effort, thus being that the main suspect has been neutralized it is important to note that he might not have been working alone and as such, care should be taken in order not to declare safety when there is a possibility of a second shooter. In most cases active shooters use a firearm(s) and display no pattern or method for selection of their victims. In some cases active shooters use other weapons and/or improvised explosive devices to cause additional victims and act as an impediment to police and emergency responders (Emergency Preparedness, 2017).

Even though the shooter is killed and found dead, it doesn’t mean that the threat is over. The shooter may just be one of many other shooters in the building. So at this time the police will have to continue with search in the building and around to see if there is any other shooter around or anyone who may be of threat to the safety of the people around. While doing this, they should be making plans for the evacuation for the people in the building through the closest and safest exits. If the shooter is found to be the only one who was a threat to the people, the police should make it known to the entire population so that the employees who are still in their hiding places should start coming out and also to ease the panic and fear that the shooter instilled in the employees and everyone around. It should be noted in some cases, the active shooter may also have a back-up plan which can include the use of explosives, and thus, such should be taken in to consideration and a bomb squad brought in to do a final sweep. After the threat has been neutralized, the scene needs to be treated as a crime scene. All none forensic personnel would need to be escorted out of the area and the crime scene secured for investigations.

PERSON 5: 8:30AM, 8:45AM AND 9:30AM…………jacob

8:30 am – Police inform security that there are no additional shooters and initiate formal evacuation:

  • How do the company and responders coordinate at this point?

8:45 am – Police notify your team of 5 fatalities and 7 injured in the Foreclosure Department:

  • What priorities does the team now have?
  • Does the team have suggestions for a “To Do” list?

9:30 am – Your team is told that the injured are being taken to hospitals and Police need help identifying the injured:

  • How does your team assist authorities at this point?

PERSON 6: 10:30AM AND 11:50AM kimberly

10:30 am – Identities of the 5 deceased are provided to your team and company executives:

  • What are the keys concerns and decisions at this point?

One of the key concerns is; are all the employee accounted for? Who are the victims and their relationship with Mr. Smith? Another concern will be to make sure that the shooter is alone, and the threat had been fully contained. Another concern is the action taken by the security personnel starting when the shooter tries to gain access to the time that the law enforcement arrived at the scene.

11:50 am – ABC Financial Inc. releases official media statement and is notified by the Police that the site is now a crime scene indefinitely, with a need that all employees stay out of the building until further notice:

  • Are there any further issues that need to be addressed by the team and management? The issue that needed to be address by the team and management is the question of how smith was able to access the building? What have the security done to prevent the individual from entering the building. After Mr. Smith manage to enter the building, what action did the security personnel did to alert the costumer and employee that is in the building. What is the Standard Operating Procedure (SOP) and was it followed?
    • Knowing the phycological state of Smith, is it wise to terminate his employment during this time?
    • Could the company referred Smith to a phycologist to have a good idea of his mental state?
    • Knowing about the threat that he made before being escorted out of the building, and his demeanor, can the local law enforcement had been notified?
    • How did Smith manage to acquire a building pass permit?
    • How did the security personnel handle Smith when his trying to gain access to the building?
    • How far in the building did smith able to go?
    • Standard Operating Procedure (SOP) need to be review and updated.
    • Smith had shown all the tell-tell sign of instability such as; being a loner and not getting along with everyone, history of violent behavior, bad performance at work possesses weapons and the most important of all, all this information was provided to include that smith had been on the edge for number of months. Why is there no action taken?

What are team’s “Lessons Learned” from this event? Provide specifics.

The teams lesson learned from this point pointed to the security of the building and the training of the security personnel seem in-adequate and further training must be incorporated in the planning both the short- and long-range plan. Management needs to look at the pattern of behavior of person being let go. In this case Mr. Smith made a made a serious threat by saying “you have not heard the last of me” this could had been taken seriously and local law enforcer could had been notified.

Should there be a debriefing/hotwash with the stakeholders (company, law enforcement) to discuss best practices, lessons learned and an after-action report completed? Why or why not?

Debriefing/hotwash with all the member of the company to include and most importantly the security personnel are a must. The following should be discussed;

Debriefing/hotwash need s to happen, this is the part where the what, where, why, when and how can be answered.

What = what lead smith to the breaking point / what could had been done to mitigate what happen, before it happens. What measure was taken to stop smith from entering the building.

Where = Where are the guards, are they armed, if yes, what in the SOP that prevented them from using their assigned weapon to stop the carnage.

When = When did the situation got out of control. When did smith behavior identified and was there any action taken.

How = How can this type of incident be avoided in the future, how did the security personnel warm the personnel in the building of imminent danger, if they were warned at all.

Why = Why was he able to access the building, why did the security personnel fail to stop smith from entering the premises. Why were the local police not alerted when the shooter made a verbal threat?

The bottom line is that in this situation we are once again reactionary, this could have been prevented if the local police was notified of the threat combined with the shooters state of mind and behavior. Alerting the police could have deter smith from his plan knowing he is being watch.

A very hard look at the SOP and security personnel’s capability must be place on top of the agenda. The procedure for firing an employee must be consider, for a matter that knowing all the signs that smith is showing.


Emergency Preparedness. (2017). Active Shooter Planning and Response in a Healthcare Setting. Planning for Active Shooter Incidents. Retrieved from https://www.calhospitalprepare.org/active-shooter