How to Create an Active Shooter Response Plan for Your Workplace
Nobody wants to plan for the worst day at work. But when a violent incident does happen, the people inside a building have only seconds to decide what to do, and those decisions go far better when they have thought about them in advance. An active shooter response plan is the document, and the habits behind it, that turn confusion into coordinated action.
This guide is for US business owners, facility managers, HR leaders, and security teams who need to build or refresh a plan. It explains what a good plan contains, how to base it on your own site, and how to keep it from becoming a binder on a shelf.
Why a written plan matter
Under stress, people do what they have rehearsed or what the nearest person tells them to do. Without a plan, that can mean conflicting instructions, people running in different directions, or no one calling for help because everyone assumes someone else has.
A plan gives the organization one shared set of expectations. It names who makes decisions, how warnings reach everyone, what options employees have, and how the company works with police and other responders. It also shows employees, customers and insurers that the business has taken its duty of care seriously.
A plan is not a promise that nothing will happen. It is a way to reduce confusion and improve the odds that people act quickly and sensibly.
Start with your own building, not a template
Generic templates are a useful starting point, but a plan only works if it fits the place where it will be used. A single-story office with one entrance, a multi-tenant tower, a warehouse with night shifts and a retail floor open to the public all need different answers.
Begin with a site walk-through and a few plain questions. How many entrances and exits are there, and who controls them? Where can people leave quickly, and where can a door be locked or barricaded? Which areas are open to visitors? Who is on site at night, on weekends or in remote corners of the property? Are there people who may need extra help, such as staff with mobility limits?
This kind of review is the heart of a threat and risk assessment, which looks at how people, places and procedures interact, rather than at hardware alone. Even a basic internal version will reveal gaps, such as a side door that never latches or a reception desk with no way to raise an alarm quietly.
What the plan should contain
A workable plan is short enough to be read and specific enough to be used. Most include the following elements.
Purpose, scope and authority
State which sites and staff the plan covers and who is responsible for it.
Roles and decisionmakers
Name who raises the alarm, who contacts emergency services, who speaks to employees, and who takes over if the first person is unavailable. Include backups for nights and weekends.
Employee options
Many organizations teach the “run, hide, fight” approach, which gives people a sequence of choices: leave if you safely can, secure yourself if you cannot, and act to defend yourself only as a last resort. Confirm the wording against current guidance from the Department of Homeland Security or your local law enforcement and explain that people must judge the situation in front of them.
Alerting and communication
Decide how a warning is sent and received: public address systems, text alerts, phone trees, desk panic buttons. Plan for the case where one method fails.
Evacuation and shelter points
Mark exits, assembly areas away from the building, and rooms that can be secured from inside.
Accountability and reunification
After the event, you need a way to know who is safe, who is missing, and where families can get reliable information.
Support for people with disabilities and for visitors
Contractors, guests and customers are in the building too, and they will not have seen your training.
Recovery
Include counseling support, communications with staff and the public, and steps to restore operations.
Work out the first-responders relationship in advance
The quality of your plan often depends on how well it connects to the people who will arrive to help. Contact your local police and fire departments before anything happens. Many are willing to review a plan, walk around the site, or share what information they would want from you in an emergency, such as floor plans, access instructions and a point of contact.
Decide ahead of time who will meet responders, who will hold keys or access credentials, and what information they will need first. In the confusion of a real event, a single trained person at the entrance with a floor plan and a phone can save valuable time.
The same discipline applies to the minutes and hours after the immediate danger passes. Planning for crisis and incident response means thinking through communication with families, employees and the media, as well as business continuity and care for those affected. These steps are easy to overlook until they are needed.
Train, practice and keep the plan current
A plan that employees have never seen will not help them. Share it in plain language during onboarding and again at least once a year. Short briefings work better than long lectures, and they should leave room for questions and concerns.
Practice in steps. Start with a discussion-based tabletop exercise where managers talk through a scenario and find holes in the plan. Move on to walk-throughs of exits and shelter locations, and then, where appropriate, drills. Be thoughtful about how drills are announced and run, since realistic exercises can distress some people. Many organizations work with experienced trainers to get the balance right.
Finally, put the plan on schedule. Review it every year and after any changes in layout, staffing, tenants or contact details. Update phone numbers, assign new roles when people leave, and record what you learned from each exercise.
The takeaway
An active shooter response plan will not remove every risk, but it replaces guesswork with preparation. Build it around your own site, give people clear roles and options, connect it to local responders, and keep practicing and updating it. The effort is modest compared with what a clear plan can protect.
