Comprehensive Active Shooter Incident Management

Solutions for Unified Critical Communications

Comprehensive Active Shooter Incident Management September

2016

2

Agenda

Comprehensive Active Shooter Incident Management

+ Introduction and housekeeping

+ Common assumptions about active shooter events

+ Past examples of active shooter events

+ The evolving threat

+ Best practices for preparation and response

FOLLOW US ON TWITTER, @EVERBRIDGE

JOIN OUR EVERBRIDGE INCIDENT MANAGEMENT PROFESSIONALS GROUP ON LINKEDIN

3

Housekeeping

Webinar Functions

USE THE Q&A FUNCTION TO SUBMIT QUESTIONS

#activeshooterprep

4

Introduction

Our Presenter

Steven M. CrimandoPrincipal

Behavorial Science Applications

Andrew WoodsPrincipal Consultant

Resiliency Matters Ltd.

Copyright © 2016. Behavioral Science Applications. All Rights Reserved.

Comprehensive Active Shooter Incident Management (CASIM)

ACTIVE SHOOTER 2.0 Beyond Run>Hide>Fight



Steven Crimando, MA, BCETS, CHS-V

• Consultant/Trainer: U.S. Dept. of Homeland Security; U.S. Dept. of Justice; National Criminal Justice Training Center; U.S. Health & Human Services Administration; OSHA; United Nations; NYPD; U.S. Military, others.

• Diplomate: National Center for Crisis Management.• Diplomate, American Academy of Experts in Traumatic

Stress.• Diplomate, American Board for Certification in Homeland

Security.

• Board Certified Expert in Traumatic Stress (BCETS); Certified Trauma Specialist (BCETS).

• Police Surgeon, International Society of Police Surgeons; New Jersey Police Surgeons team.

• Advisor, Active Shooter Rescue Task Force (Morris County, NJ)

• On-scene Responder/Supervisor: ‘93 and 9/11World Trade Center attacks; NJ Anthrax Screening Center; TWA Flight 800; Unabomber Case; Int’l kidnappings, hostage negotiation team member.

About the Presenter

•

• Qualified Expert: to the courts and media on violence prevention and response issues.

• Author: Many published articles and book chapters addressing the behavioral sciences in violence prevention, disaster and terrorism response.

6


Operational Psychology

The use of clinical, cognitive and social psychological concepts for their tactical value.

“…a unique set of applied psychology theories and techniques for consultation with security professionals.”

Palarea, R. 2007. “Operational Psychology: An Emerging Discipline.

7


Comprehensive Active Shooter Incident Management (CASIM)

Active Shooter 2.0 Moving Beyond Run>Hide>Fight

Stop the Dying

Stop the Crying

Stop the Killing

Organizational Response

9

B = ƒ (P,E)

Behavior is a Functionof Person and Environment

Anticipating Human Behavior:Lewin’s Equation

10


• High levels of noise from alarms, screaming, adding to stress/making communications difficult.

• The construction of a facility may deflect and amplify sound in a way making it difficult to determine the number or location of shooters.

• People moving in many directions; possibility of injuries from stampede of those seeking to escape, esp. at choke points, like stairs, escalators, and doors.

Hot Zone: Operational Assumptions

11


Human Factors: Extreme Stress Response

Anticipate and understand Extreme Stress Reactions (ESR) in:

• Employees, guests and visitors• In-house Security and Emergency responders• Incoming LE and other responders

ESR reactions include:

• Frantic, unfocused behavior• Difficulty following directions • Fine motor skills deteriorates• Problem solving diminished• Irrational fighting or fleeing; freezing • “Autopilot” behaviors

12

Copyright ©2016. Behavioral Science Applications. All Rights Reserved.

Assumptions We will assume that participants have:

A fundamental knowledge of general recommended response strategies (Run>Hide>Fight).

Access to key planning guidance's An interest in optimizing the violence prevention

and active shooter response capabilities at their facilities.

This program will not be all inclusive:

Different industries and sectors face different shooter risks.

There are many types and sources of violence. There is not “one-size-fits-all” active shooter

plan. 13


Realties of Modern Life

• The possibility of an Active Shooter Incident is no longer a question of if, but rather when and where.

• Incidents can occur at any time and at any place. No type of location or geographic area is immune.

• Each work environments present unique challenges in Active Shooter planning and response.

• Active Shooter events evolve rapidly and end quickly, often before law enforcement can arrive.

• In the initial phase, bystander intervention and civilian response are essential.

14


A Disturbing Trend

15


Primary Resources: General Active Shooter Guidance

16


An Important Distinction:Active Shooter vs. Shooting Incident

• “Active Shooter is a term used by law enforcement to describe a situation in which a shooting is in progress and an aspect of the crime may affect the protocols used in responding to and reacting at the scene of the incident.” (FBI, 2015)

• The U.S. Department of Homeland Security defines an Active Shooter as, “an individual actively engaged in killing or attempting to kill people in a confined and populated area.” (DHS, 2013)

• In these pre-planned (predatory=“cold blooded”) events, the Shooter has prepared to injure and kill as many people as possible before he is stopped.

• Active Shooter incidents average 12 minutes in duration; During this events, on average another person is shot every 15 seconds.

• 69% are over in 5 minutes or less. 60% end prior to arrival of Law Enforcement personnel.

17


An Important Distinction:Active Shooter vs. Shooting Incident

• A Shooting Incident is typically spontaneous and emotionally driven (affective=“hot blooded”) rather than predatory (i.e., not pre-planned).

• These unplanned events are often opportunistic or angry reactions. They include:

• A shot fired in the workplace • An accidental discharge of a weapon• A gun fight between two or more individuals• Other scenarios

• It is important when notifying police and initiating a response that this difference is kept in mind.

18


• Violence directed at an organization, its people, and/or property for ideological, religious or political reasons.

• Violence perpetrated by extremists; environmental, animal rights, and other value driven groups may fall within this ‐category.

• Target selection is based on rage against what the targeted organization does or represents.

Type V: Ideological Violence

19

The November 2015 shooting incident at a Planned Parenthood facility in Colorado Springs is an example of Type V workplace violence.

The shootings at the recruiting center in Chattanooga and Fort Hood also blur the lines between workplace violence and terrorism.


Benefits of an Expanded Typology• Creates understanding that some

extremist-driving violence may be directed at the campus/workplace.

• Allows for more inclusive training:

• Warning signs of workplace violence and

• “Eight Signs of Terrorism”

• Promotes “force-multiplier” effect with more eyes and ears.

More representative of our current situation.

20


San Bernardino December 2, 2015

• 14 people were killed and 22 were seriously injured in an attack at the Inland Regional Center in San Bernardino, California, which consisted of a mass shooting and an attempted bombing.

• Syed Rizwan Farook, an employee of the San Bernardino County Department of Public Health, along with his wife, Tashfeen Malik, targeted a training event and holiday party with about 80 co-workers, many who had thrown the couple a baby shower months before.

• The FBI's investigation revealed that the perpetrators were "homegrown violent extremists" inspired by foreign terrorist groups. Investigators have said that Farook and Malik had become radicalized over several years prior to the attack, consuming "poison on the internet."

21


San Bernardino December 2, 2015

• Used Web to adopt beliefs • Long planning curve• Learned from other extremists• Selected target rich environments• Mobile/Multiple locations• Employed firearms, explosives• Suicidal/True Believers

22


Changing Tactics:Hybrid Targeted Violence (HTV)

• HTV is defined as the use of violence, targeting a specific population, using multiple and multifaceted conventional and unconventional weapons and tactics.

• The HTV attackers often target several locations simultaneously.

23

Frazzano, Tracy L., and G. Matthew Snyder. “Hybrid Targeted Violence: Challenging Conventional “Active Shooter” Response Strategies.” Homeland Security Affairs 10, Article 3 (February 2014). https://www.hsaj.org/articles/253


Examples of HTV IncidentsExamples include:

Beslan School Siege Mumbai Siege Westgate Mall Paris Attacks Boston Marathon San Bernardino

While HTV attacks are not exactly new, or unheard of in the U.S., intelligence estimates show that international extremist groups are very interested in initiating, supporting and inciting this kind of attack on American soil.

24


Elements of HTVHTV attacks differ from the more common Active Shooter incidents:

• Effective internal and external communications/coordination.• Purposeful luring of first responders to inflict even more carnage.• Use of fire to complicate first-responder operations and cause

further damage.• Potential use of CBRN agents.• Use of high-powered military type weapons and explosives,

including suicide bomb vests.25

• Well-trained, tactically competent, and willing-to-die perpetrators.

• Multiple operators (attackers) working in small tactical units.

The San Bernardino attacks utilized elements of HTV.


• A 29-year-old American security guard, killed 49 people and wounded 53 others inside nightclub in Orlando, Florida, United States. He was shot and killed by Orlando police after a three-hour standoff. It was the deadliest mass shooting by a single gunman in U.S. history.

• This was the deadliest terrorist attack in the U.S. since the September 11 attacks in 2001.

OrlandoJune 12, 2016

26


Orlando: A Milestone Incident

• On June 23rd, Al Qaeda of the Arabian Peninsula (AQAP) published a guide urging jihadis to carry out more ‘lone wolf’ operations in the U.S. following the deadly terror attack in Orlando and to set their sights on the targeting of white Americans.

• The publication, “Inspire guide: Orlando Operation,” seeks to capitalize on the terror attack carried out by gunman Omar Mateen who pledged allegiance to ISIS, and plainly encourages extremists to attack Americans.

27


Inspire GuideKey Quotes

• “…we welcome this blessed operation and call for more similar Lone Jihad operations. We standby and support all Muslims who attack America in their homeland regardless of their affiliation to any group or loyalty.”

• “We call upon and continue to call for the likes of these operations that target the general populations in America (Combatant Public), who are generally at war with Islam. And when we talk of the population being at war (the combatant public), this mean that we no longer view them as civilians in America.”

28


• “First: This operation is considered to be among the most successful Lone Jihad operations, meaning that it will inspire others to wage similar operations especially because the number of those killed was too high with regard to these types of operations.”

• “The assault operation on the Orlando nightclub can be classified as an operation ‘Targeting general gatherings.’

• “These kind of operations are important mainly because of the goals that can be achieved through them in our war with America.”

Inspire GuideKey Quotes

29


Police & EMS Response Procedures

30


1st Generation:“Contain and Wait”

• Pre-Columbine.• Establish perimeter.• Request/Await specialize teams.• Prevent entry or evacuation from location.• Officers outside the school were not aware that the killers

had killed themselves. It would be several more hours before the buildings were secure and the victims inside the school could be treated.

• One teacher bled out from a survivable wound during that delay.

31


2nd Generation:Teams/Formations• Wait for next arriving officers.• Form into small hunter cell/entry team.• Don’t wait for arrival of specialized teams.• Move past injured.• Move toward threat (shots).

32


3rd Generation:Solo Entry

• First officers arriving make either solo or two-officer entries at their discretion.

• Additional arriving officers enter, contact and “link up” with first officers to for team/cell.

• Multiple ingress points are employed, converging quickly on the suspect.

• As the number of officers from outlying allied agencies increases, the security of the perimeter improves.

• FBI report states 1/3 of officers entering alone will be shot.

33


4th Generation:MACTAC• MACTAC (Multi-Assault Counter-

Terrorism Action Capabilities).

• Coordinated violent attacks by terrorists and anti-government extremists are on the rise. Terrorist events cause high numbers of casualties or involve the use of victims as tools to gain notoriety or media attention.

• Multiple Assault Counter Terrorism Action Capabilities.

• LEO plan and train for engaging assailants who are actively killing in multiple locations.

The Paris Attacks were a recent example of a multiple-attacker, multiple-location incident.

34


The Changing Role of EMS and Fire

• Lessons learned from military and civilian events (Hartford Consensus)

• Interagency planning and cooperation

• Coordination by law enforcement

• Preparation is paramount

35

EMS operating in Hot Zone environments under cover of tactical officers.


Paradigm ShiftDevelop working relationships between Law Enforcement, Fire, and EMS through:

Written agreements Development of interagency

communication and command structures

Providing appropriate PPE for operations in an austere environment

Education and training for first responders

Training on the use of Casualty Collection Points within the Warm Zone/Cold Zone

Bystanders = First providers of care

EMS and Fire no longer stand by the sidelines, but rather save lives at the direction of, and in partnership with, law enforcement.

36


Public Response

37


Training Recommendations Active Shooter

Crowd Management• Recent Active Shooter scares a JFK and LAX demonstrate the potential for panic.

• It is important for planners to anticipate competition and non-cooperative evacuees. • It is equally important to

anticipate the potential for additional injuries from crowd behavior in casualty care.

• Employees benefit from Crowd Safety instruction for this and other scenarios (i.e., civil unrest, etc.)

38


• Panic is related to the perception of limited opportunity for escape or availability of critical supplies.

• Panic is a group phenomena characterized by an intense, contagious fear.

• Panicked individuals think only of their own needs or survival.

• Panic is not typical in most disasters.

Panic in Emergencies

39


Escape Mob: Perception of Limited Opportunity for Escape

August 31, 2005- Baghdad: At least 965 Iraqis were crushed to death or drowned in a stampede on a Baghdad bridge as vast crowds of Shiite pilgrims were sent into panic by rumors of suicide bombers in their midst.

Remember: “Crowds can create disasters”

40


What Everyone Should Know…In an Escape Mob situation:

• Try to stay outside of the crowd; go around crowds, not through them.

• Don’t stand near or against immovable objects, such as walls, doors or barricades, which would limit your options for escape or increase the risk of being crushed.

• If you are caught up in a surging crowd, DON’T STAND STILL OR SIT DOWN! Keep moving in the direction of the crowd.

• If you have dropped an item, unless it is critical, don’t try to pick it up. Bending or getting your fingers stepped on or trapped will increase your risk of being pushed to the ground.

41


• If you are being pulled or pushed along by a moving crowd, don’t try to push against the flow or simply let the crowd take you.

• Just like breaking free from a rip tide in the ocean, move diagonally across the crowd, not with it, not against it.

• The force will begin to weaken as you reach the perimeter of the crowd and you will be better able to break free.

What Everyone Should Know…


• If you fall or are pushed down, try to get back to your feet as quickly as possible; If someone is willing and able, extend an arm and ask for help getting back to your feet as quickly as possible.

• If you can’t get up, keep moving! Crawl in the direction of the crowd until you can get back up.

• If you cannot get up or crawl, curl up in a ball to create an air pocket and cover your head. Keep your back facing up, protecting your head and face with your hands and arms.

• Crowds tend to surge and pulse. Wait for a lull in the pressure or flow to try to get back to your feet.

What Everyone Should Know…

Active Shooter 2.0 Moving Beyond Run>Hide>Fight

Stop the Dying

Stop the Crying

Stop the Killing



Bystander Intervention:Stop the Killing

• Unlike other violent crimes, the active aspect of an Active Shooter incident inherently implies that both law enforcement personnel and citizens have the potential to affect the outcome of the event based upon their responses. (FBI, 2015)

• Are employees ready to serve as the first on-scene responders?• are they trained FOR THIS?

45

Stop the Dying

Stop the Crying

Stop the Killing



46

vs.

This is a decision your organization has to make now…


Bystander Intervention

Bystanders are your initial First Responders positioned to Stop the Killing.

Even when law enforcement was present or able to respond within minutes, civilians often had to make life and death decisions, and, therefore, should be engaged in training and discussions on decisions they may face. 47


Training to FightFight means:• Distract: Interrupt the Shooter’s focus.• Disrupt: Interrupt the Shooter’s momentum/rhythm.• Disarm: Interrupt the Shooter’s access to weapons.

Many of those you train will have no prior experience being near or touching a firearm. Teach them to push the weapon:DATTS: Down, And to The Side

Not up or Straight Down

Use TeamsUse Improvised Weapons

Use Surprise48


Bystander Intervention:Stop the Dying• National Average: It takes

approximately 7 to 15 minutes for EMS responders to reach the scene and often longer for them to safely enter and start treating patients.

49

Stop the Dying

Stop the Crying

Stop the Killing

• Victims who experience massive trauma don’t have that much time and can often bleed to death in as little as three minutes.


Bystander Intervention:Stop the Dying

OLD SCHOOL

• Stage-and-Wait (No EMS or fire response until scene is completely secure)

• How long will it take to completely clear and secure a scene?• What happens to the victims?

• Access by EMS, in some cases, could take up to 30 minutes before initial patient contact – likely longer.

• Mortality rates are high as patients “bleed out” prior to medical contact while our resources are waiting in staging.

• “One size fits all” mentality regarding response and treatment could result in a mass fatality instead of mass casualty. 50


An Accurate Picture of Casualties• A high percentage of victims will have

head wounds.

• 90% of deaths occurred prior to definitive care*

• 42% immediately• 26% within 5 minutes• 16% within 5 – 30 minutes• 8-10% within 30 minutes to 1 hour

• Golden Hour – most die within 30 minutes of injuries that require simple interventions

*Matthew Dreher, “The Active Shooter and Your Quick Response

The most common cause of preventable death in an active shooter incident is the failure to control severe bleeding.

51


NEW SCHOOL


The Case for B-CON(Bleeding Control)

• The incident doesn’t end with “Shooter Down.”

• Depending upon the magnitude of the event, law enforcement may need to search, clear and secure every part of the facility.

• Envision the immediate post shooting environment and the response gap.

• Casualty throw kits and wall mounted kits within potential critical target facilities (similar to AED allocation)

• Shift from Stopping the Shooting to Stopping the Dying. 53

Stop the Dying

Stop the Crying

Stop the Killing


Pre-positioned Civilian B-CON Kits

• Designed to provide bystanders and initial first responders with quick and easy access to essential medical equipment for stopping life-threatening bleeding.

• Throw Kit contains illustrated instructions that take the user through step-by-step procedures to ensure proper care and device application based on what they observe for injuries.

54

Wall Kit Carry Kit Throw Kit


Rapid Psychological Support• It is also important to manage

psychological trauma as early as possible.

• Emotional reactions can make someone part of the problem, instead of the solution and put themselves and others at risk.

• Psychological First Aid is intended for the 0-48 hours of an incident. It is ideal for active crisis scenarios. “Psychological first aid (PFA)

refers to a set of skills identified to limit the distress and negative behaviors that can increase fear and arousal.” (National Academy of Sciences, 2003)

From “Run > Hide > Fight”

55

Stop the Dying

Stop the Crying

Stop the Killing


A Distinction:Psychological First Aid vs. vs. Mental Health First

• MHFA is intended primarily for individuals with a pre-existing psychiatric conditions experiencing a psychiatric emergency.

• PFA is intended for anyone experiencing an overwhelming emotional response to a disaster or emergency, with or without a pre-existing mental health condition.

Both are “every person” skills sets. Just as you don’t have to be a doctor, nurse or EMT to use basic medical first aid, you don’t have to be a mental health professional to use PFA.

56


• There’s no better way to foil a shooter than to take away their targets.

• Incidents evolve quickly; Time is of the essence.• Valuable moments are lost if people are milling around in

confusion and panic, leaving them vulnerable and exposed. • Communication that is clear and actionable can help avoid a

dangerous event unfolding.

Rapidly DeployableEmergency Notifications

57


Tailoring the Message • An emergency communications plan for mass shootings and

other extreme violence should be part of your standard operating procedures.

• Messages must be customized; There’s no single Active Shooter message that will suffice for all building types, situations, and occupancies.

• Prepare messages in advance, train your workforce, and run practice drills.

• Prepared messages can provide a shield against liability. Have legal and risk management professionals review the wording.

58


Plain Language Messaging• Research shows people do not

panic when given clear and informative warnings; They want accurate information and clear instructions on how to protect themselves in the emergency.

• Not everyone will understand a code system, and so plain language warnings and clear instructions should be given to make sure everyone in danger understands the need to act.

59

“Action binds anxiety” –P. Sandman


The Message• Verbal Active Shooter alerts should provided by a

voice of authority. People judge the messenger before the message.

• Keep alerts short and simple:

• What is happening.• Where it is happening.• What to do.• How new information will be shared

• Authorities (i.e., DHS, FBI, others) suggest Plain Language and not code words for Active Shooter incident notification.

• Ensure that emergency messages are the same across all notification channels. SMS texts, voice broadcasts, digital signage displays, social media updates, and email notifications should all be consistent. 60


Ongoing Communications

• Communication does not end with “Shooter Down.”

• Important instructions must continue to flow:• All clear• Employee/family reunification• Witness information• Business Continuity/Resumption Plans• Support Services (EAP)• Others

• Unified communications may need to continue for weeks post-incident.

61


Take AwaysWhen planning for Active Shooter Incident Management, remember:

• That these are complex incidents with unique challenges.

• The nature of Shooters and Shooting Incidents in these settings is different in significant ways that should inform planning, exercising and response.

• Develop compressive violence & response plans.

• Provide precise skill training:• Crowd Safety • Bystander Intervention• B-CON• Psych First Aid

• Pre-position critical supplies• Pre-develop templates to

foster rapid notification.62



Closing Thought

63

64Copyright ©2016. Behavioral Science Applications. All Rights Reserved.


For More Information

Toll Free 888-404-6177

New York Metro Area 917-289-1186

Email: [email protected]

Web: www.behavioralscienceapps.com

65


About BSA +1.888.404.6177 Behavioral Science Applications (BSA) is a privately held research, training and

consulting firm dedicated to facilitating evidence-informed decision making in the areas of homeland and private security, crisis intervention, violence prevention, and emergency management. BSA integrates the methods and doctrines of the behavioral sciences into planning, testing, response, and recovery from crisis situations of all types. BSA serves numerous multinational corporations, governmental and non-governmental organizations (NGOs).

Accurate behavioral assumptions integrated with structured crisis intervention practices are essential to developing effective and defensible emergency-related policies, plans, procedures, and exercises. Combining decades of experience from the Board Room to the frontlines in disaster response, BSA helps organizations align their violence prevention and emergency management posture with the realities of human behavior to ensure the success of an organization’s safety, security and emergency management programs.

BSA brings together seasoned mental health, law enforcement, legal and medical professionals to help client organizations understand, prepare for, and respond to all types of violence, whether perpetrated by an angry employee, an enraged spouse or partner, or a terrorist targeting the organization and its people. BSA helps clients effectively integrate workplace violence prevention and response programs into the organization’s broader risk management strategy. 66

Solutions for Unified Critical Communications

Andrew WoodsActive Shooter, September 2016

2016

68

Active Shooter, Everbridge.

Take a ways from Steven.

A particle example of an active shooter strategy:

- Setting expectations. - Who can communicate.

- Examples of communications- Following up communications.

- Exercising and reporting.

69

Setting expectations.

Educate Users.

• What the risk level is.

• How will messages be communicated.

• What if any are the expectations to follow instructions.

• How to tell if it’s a drill/exercise or the real thing.

• How follow up messages and communication will work.

70

Setting expectations.

Educate Users.

71

Who can communicate.

Who can launch an message – ask the right questions.

• Should you make the system accessible to all or limited active shooter activation to a core team?

• What can be done to minimise false alarms?

• Templates or free text when using a mass communication platform.

72

Example communications

Preparing people with example messages helps them respond.

73

Following up on communications.

Command and control.

Have a follow up plan to:

• Identify users who have not responded• Those that need help• Report the result to first responders

74

Exercising and reporting.

Two key steps to success.

• Have a plan to exercise.

• Ensure that they are planned and are clearly communicated.

• Ensure that exercises are marked as exercises!

• Follow up any exercise with a company wide report.

• Reach out to those who did not respond and coach them.

• Look for opportunities to improve.

75

Q&A

Webinar Functions

USE THE Q&A FUNCTION TO SUBMIT QUESTIONS

Contact Us:

[email protected]

mailto:[email protected]

76

Thank you for joining us today!

Discover the power of the Everbridge Platform

www.everbridge.com/request-demo Everbridge ResourcesOn-Demand Webinars:www.everbridge.com/webinars

White papers, case studies and morewww.everbridge.com/resources

Follow us:

www.everbridge.com/blog

@everbridge

Linkedin Learn more by visiting Everbridge.com!

Thank You!

Presentations & Public Speaking

Comprehensive Active Shooter Incident Management