High threat training prepares people to act safely during active attacks, hostile-environment deployments, or explosive-threat incidents. It serves civilians, private security officers, patrol officers, tactical teams, EMS crews, and incident commanders. Programs such as FEMA’s IS-907.A, ALERRT, and Canada’s HET each target a different role, so the right course depends on your job.
TL;DR:
- Check course audience and prerequisites: DOJ’s AAIR requires public safety participants with state certification, while civilian classes focus on awareness and casualty care.
- ALERRT lists AAIR and breaching at two days each, but breaching instructor training takes five days, so duration alone does not prove competence.
- Civilians can pair FEMA’s IS-907.A with basic casualty care and employer drills, which FEMA instructor materials recommend holding at least annually.
- For suspected explosive devices, staff should report, evacuate or shelter under the site plan, and leave inspection or disposal to qualified responders.
- Organizations should train law enforcement, fire, EMS, and command together, using NIMS/ICS, casualty care, and regular joint exercises to expose coordination gaps.
Table of Contents
- What high-threat training covers
- Who these courses are for and what you need first
- Typical course types you can research
- How long training takes and what duration tells you
- How to choose a course: a checklist
- How civilians and private security officers can get appropriate training
- Bomb-threat and explosive-awareness training
- Why integrated training beats isolated skills
- How we can help with role-specific high-threat training
- FAQ
- Sources
What high-threat training covers
Strong programs combine classroom theory with practical exercises and clear safety controls. Whatever the label on the brochure, look for these elements:
- Awareness and prevention: emergency action planning built around prevention, reporting, response, and recovery.
- Tactical modules for qualified responders: isolating, distracting, and neutralizing a threat, plus team movement and breaching, as cataloged in the ALERRT course catalog.
- Casualty care: hemorrhage control, tactical emergency casualty care (TECC), and stabilization at the point of wounding.
- Coordination: incident command (ICS/NIMS), radio communications, and recovery planning.
Canada’s program shows how wide the scope can be. Its Hazardous Environment Training stresses principles over scripted responses and covers capture response, enhanced first aid, radio communications, and explosive awareness alongside physical safety.
FEMA’s IS-907.A defines an active shooter as one or more people attempting to kill in a populated area, and notes that incidents are unpredictable and rapidly evolving. That is why good courses train adaptable judgment, not memorized scripts.
Who these courses are for and what you need first
Course titles can mislead. An “advanced” label says little about who a class is built for, so match training to your role and legal authority:
- Civilians and employees: awareness, reporting, and bleeding-control modules with no prerequisites.
- Private security officers: employer-sponsored courses and licensing classes, plus any firearms prerequisites your jurisdiction requires.
- Patrol and field officers: Level I style response courses for sworn personnel.
- Tactical teams: breaching and low-light modules that assume baseline team skills.
- EMS and medical staff: casualty-care and integrated response courses.
- Command and management: ICS-focused training. Some integrated courses reference IS-100, 300, 400, and 700 completion.
Prerequisites can be strict. The DOJ Active Attack Integrated Response course requires state-certified public-safety participants, and instructor tracks often require licensed law enforcement status.
Typical course types you can research
Program names to look up and verify on their official pages:
- The ALERRT family: Level I, breaching, low-light, medical modules, and AAIR. The ALERRT training catalog shows that these are distinct courses, not one universal syllabus.
- Civilian tracks: CRASE and civilian casualty-care modules.
- Hazardous Environment Training: a five-day classroom and practical package for civilian government staff heading to elevated-threat deployments.
- Train-the-trainer courses: instructor programs that teach you to deliver and assess a curriculum, which is a different goal from learning the skills for yourself.
Read each course page for audience, prerequisites, and whether the course is awareness-only or operational. A civilian awareness class and a breaching class share a keyword, not a purpose.
How long training takes and what duration tells you
Documented durations vary widely. The ALERRT catalog lists AAIR at two days, and the ALERRT breaching course at 16 hours over two days, while breaching train-the-trainer runs 40 hours over five days. Short eLearning modules vary in length.
- Awareness and employer drills: hours, often repeated annually.
- Operational qualification: scenario work suited to the course objectives.
- Instructor certification: instruction and evaluation suited to the course.
The DOJ’s AAIR course runs 2 days, or 16 hours, and integrates law enforcement, fire, and EMS responders.
Hours alone prove little. Better competence signals are the assessment method, the complexity of the scenarios, and whether the course enforces its own prerequisites.
How to choose a course: a checklist
- Confirm the stated audience and prerequisites.
- Request a syllabus that separates classroom time from force-on-force or live-fire work.
- Ask about safety controls and required protective gear.
- Find out how you are assessed and what credential you receive.
- Check instructor qualifications.
- Ask about class size and who else will attend.
Ask every provider: Who is this designed for? What certificate follows completion? Does the course include TECC? If force-on-force is used, what safety measures apply? The AAIR example is a useful benchmark, since it spells out class composition, required clothing, and supplied head, eye, and throat protection.
Pro Tip: Write down your job’s actual duties first, then pick the course whose learning objectives match them. Ignore the marketing adjectives.
Employers building a first-aid foundation can also review this risk assessment guide for first aid training, which helps match casualty-care courses to site conditions.
How civilians and private security officers can get appropriate training
Civilians can build real preparedness without law-enforcement authority:
- FEMA IS-907.A: an independent study course covering prevention, reporting, response, bleeding emergencies, and recovery.
- CRASE and casualty-care modules: in-person civilian classes drawn from the ALERRT catalog.
- Employer drills: FEMA’s IS-907 instructor materials recommend Run/Hide/Fight, a written Emergency Action Plan, and drills at least annually.
- Security officers: employer-sponsored classes, licensing courses, and firearms safety prerequisites where your state requires them.
A practical bundle is awareness training, basic TECC, and active participation in your employer’s planning and exercises. Organizations can track that progress through training and exercises. Learn more on our active shooter training readiness metrics page.
Bomb-threat and explosive-awareness training
Bomb-threat response is a planning and communication skill, not a hands-on one. FEMA’s course material points to these core elements:
- Recognizing suspicious items and threats
- Reporting through the right channel
- Emergency planning and communications
- Evacuation or shelter decisions under your organization’s plan
- Coordination with qualified bomb-disposal teams and emergency responders
Untrained staff must never inspect, handle, or move a suspected device. Disposal is a specialist public-safety function. These modules usually sit inside larger high-threat programs, linking recognition and reporting to evacuation and medical response.
Why integrated training beats isolated skills
Most failures we see trace back to treating tactical response as the whole program. Real incidents involve dispatch, fire, EMS, command, and bystanders at once, so training that rehearses only one of those groups leaves gaps. The USFA operational guide for fire and EMS recommends joint planning, NIMS/ICS, TECC, and regular joint exercises for exactly this reason. Your next steps: align course objectives to roles, request detailed syllabi and safety controls, and schedule a joint exercise.
— Alston
How we can help with role-specific high-threat training
We are a team of law enforcement and military professionals, and we build training around the roles your people actually hold. Explore our executive protection training or our global solutions training for integrated, multi-discipline programs.
- Executive protection and close protection instruction
- Firearm training and K9 training
- Hostile-environment and threat assessment support through our guard services
- Custom course outlines built for your roles and sites
Tell us who you need to train and we will map a course to their duties. Contact us through our executive protection page to request a course outline.
FAQ
Can a civilian get tactical training?
Yes, but civilian courses focus on awareness, avoidance, and casualty care, not interdiction. FEMA’s IS-907.A and ALERRT’s CRASE modules are built for non-law-enforcement learners. Some operational courses, such as the DOJ AAIR course, require public-safety certification.
What should be included in security awareness training?
Strong awareness training covers recognizing warning signs, reporting procedures, response options such as Run/Hide/Fight, basic bleeding control, and recovery. It should also tie into your Emergency Action Plan and annual drills.
What is ALERRT training?
ALERRT is a family of active-attack response programs, not a single course. The ALERRT catalog includes Level I for first responders, breaching, AAIR, and civilian CRASE and casualty-care modules.
How long is SWAT training?
There is no single universal length. Documented examples run from a 16-hour breaching course to a 40-hour train-the-trainer program, and agencies set their own selection and qualification standards.
Sources
- NDEMU | Active Shooter: What You Can Do | IS-907.A
- Canada
- Fema
- Active Attack Integrated Response Course (AAIR)