Domestic Terrorism Incident Response: Workplace Crisis Management

Introduction: The Emerging Threat

With the planned sale of the mortgage business unit at ABC Inc., a significant number of employees face job losses. Smith is one such employee, and he has a documented history of violent behavior — though none of this history surfaced during the pre-employment background check. Once these sensitive details are shared with the Emergency Response Crisis Team, the team must immediately call Mr. Smith in for further inquiry to gather additional information regarding the accusations made against him. The Human Resources department also needs to investigate Smith's family ties and his external social network. These details can help identify possible links to groups with covert harmful intentions or, alternatively, confirm that he is simply an isolated individual acting alone.

Once the organization terminates Smith's employment contract and he makes threats that the organization has not seen the last of him, those threats must not be taken lightly by management. Drawing on the previously gathered intelligence, the organization needs to escalate its intervention by involving the relevant authorities and intelligence services. Employees should also be encouraged, on a voluntary basis, to share any information about Smith that could help uncover intelligence not yet known to the organization.

Pre-Incident Intelligence and Threat Assessment

Smith subsequently returns to the organization and illegally accesses the premises. At this point, security personnel at all entry points must be notified immediately of the unauthorized entrant, and all employees must be alerted to his illegal return. Prior to this incident, management should have placed all access points on heightened alert and deactivated all unused staff access credentials. Under these circumstances, all employees should be directed to lock themselves in their offices while authorities work to determine the motive behind the forced entry. The immediate priority for management is safeguarding all employees by communicating clearly about the intruder and the protective actions they must take.

The content of any announcement regarding an armed intruder is shaped by the urgency and sensitivity of the situation. This also affects the communication channel used, since it is critical to keep the intruder uninformed in order to minimize the harm he can cause. Once an announcement is made, employees must remain in locked areas, pile heavy objects against doors to reinforce barricades, stay well clear of the door, and take cover beneath tables or inside cabinets to reduce their exposure to gunfire.

Active Shooter Response and Employee Safety Protocols

With emergency lines overwhelmed by calls from employees within the building, the most critical details to relay to 911 include: a physical description of the intruder, including clothing and colors; the type of firearm he is carrying; the direction he is moving; and the actions he is taking. Any statements or shouts from the intruder should also be communicated to police and first responders. Employees who have safely evacuated the building should assemble at the designated fire assembly point, which aids in accounting for all personnel and assists responders in planning their next steps. Any relatives who have arrived at the scene must be informed of the serious danger they would face by crossing the crime scene perimeter toward the building.

When gunshots are heard, the key questions become: Where is the shooter located? What type of weapon is he using? What is his apparent motive? Are employees safe? Are hostages involved? With the shooter moving toward the foreclosure department, the safety of the department head who terminated Smith's employment becomes an immediate concern, and employees in that area must be directed to evacuate through safe exits without delay.