Active Shooter Training: Track 4 Readiness Metrics Every Leader Needs

Active shooter training teaches employees, supervisors, and security teams how to decide, communicate, and act in the first minutes of a shooting emergency, and it works best when built on a recognized federal standard like FEMA/CISA’s IS-907.A or FBI ASAPP. The immediate action for any organization without a plan is to enroll leadership and staff in one of these programs promptly, then schedule a realistic drill with measurable objectives soon afterwards. Training without drilling is theory. Drilling without measurement is guesswork.

TL;DR:

• Basic awareness courses like IS-907.A are quick, online, and suitable for all staff but do not develop muscle memory or decision-making under stress.
• Full scenario-based drills are essential for high-traffic or vulnerable facilities and should be conducted at least once a year, involving security, staff, and law enforcement when possible.
• Effective training programs include decision frameworks, medical response, incident roles, clear communication plans, and measurable objectives for drills.
• Regular evaluation using metrics like response time and participation rates, along with after-action reports, is necessary to sustain and improve preparedness over time.
• Choosing a training provider requires verifying operational experience, scenario realism, measurable outcomes, and the ability to deliver documented follow-up, avoiding generic or purely theoretical programs.

Table of Contents

• What Is Active Shooter Training and Which Standards Matter?
• Which Training Format Fits Your Organization?
• What Should a Practical Active Shooter Curriculum Cover?
• How Do You Design a Drill That Actually Tests Readiness?
• How Do You Measure and Sustain Readiness Over Time?
• How Do You Choose the Right Training Partner?
• How Gsgicorp Applies These Standards in Practice
• A Leadership Note on What Actually Moves the Needle
• Gsgicorp Training and Services
• Sources

What Is Active Shooter Training and Which Standards Matter?

The Department of Homeland Security defines an active shooter as an individual actively engaged in killing or attempting to kill people in a populated area, typically with a firearm, and without a clear pattern to victim selection. That definition matters because it shapes everything about how a business plans its response. There’s no negotiation phase, no predictable target, and often only seconds to decide between fleeing, hiding, or fighting.

Active shooter training exists to close the gap between that grim definition and a workforce’s actual ability to respond. A handful of federally backed programs anchor the field, and understanding their differences helps leaders pick the right starting point.

• IS-907.A (CISA/FEMA): A one-hour online awareness module built for non-law-enforcement staff and volunteers. It covers recognizing warning signs, understanding the Run/Hide/Fight framework, and knowing what to expect when law enforcement arrives.
• FBI ASAPP: A two-hour, scenario-based course coordinated through local FBI field offices, teaching Run, Hide, Fight principles with more interactive practice than a purely online module offers.
• ALERRT (Advanced Law Enforcement Rapid Response Training): A Texas State University-affiliated program that trains both civilians and law enforcement, with curricula that scale from basic civilian response to full tactical response for officers.
• FLETC’s ASTTP: An intensive instructor-level program restricted to law enforcement or otherwise authorized participants, with training days that can run up to 10 hours.
• FEMA CERT: Community Emergency Response Team training materials that give volunteer groups a broader emergency-management framework, useful for organizations building a volunteer response layer alongside staff training.

Delivery formats vary as widely as the audiences. Awareness modules run online and self-paced. Blended programs mix e-learning with an in-person session where instructors walk through building-specific scenarios. Full scenario-based exercises put people through simulated conditions, sometimes with role players, sometimes with law enforcement observing. CISA’s active shooter preparedness resources point organizations toward the right combination based on facility size, occupancy, and risk profile.

Which Training Format Fits Your Organization?

Matching training format to organizational reality is where most preparedness plans succeed or fail. A 40-person accounting firm doesn’t need the same curriculum as a 2,000-seat arena, and pretending otherwise wastes budget and, worse, produces false confidence.

Awareness modules work well as a baseline for every employee. IS-907.A takes an hour and requires no travel, no instructor booking, and no scheduling headache. The tradeoff: watching a video builds knowledge, not muscle memory. Nobody’s heart rate spikes during an online quiz, and stress response is exactly what real incidents demand.

Blended learning solves part of that problem. Employees complete the awareness portion independently, then attend a shorter in-person session where an instructor walks the specific building, points out actual exits and choke points, and runs a tabletop discussion. This format respects people’s time while adding the contextual detail a generic video can’t provide.

Live scenario-based exercises are non-negotiable for certain roles and certain facilities. Anywhere with high foot traffic, multiple entry points, or vulnerable populations (schools, healthcare facilities, large retail) benefits from at least one full-scale drill per year that simulates the sound, confusion, and decision pressure of a real event. These exercises should include:

• Front-line staff who interact with the public daily
• Facility and security personnel responsible for lockdown mechanisms
• Department leads who will issue instructions during a real event
• At least one representative from local law enforcement, when coordination allows

Specialized training for security staff and law enforcement liaisons goes further still. Programs like FLETC’s ASTTP or advanced ALERRT tracks require an operational fluency that goes beyond general awareness. Security personnel who carry that responsibility for an organization typically need instructor-led, scenario-heavy coursework rather than a one-hour module. Gsgicorp’s own executive protection training reflects this tier, built for personnel who need to make split-second protective decisions rather than simply follow evacuation instructions.

Pro Tip: Don’t default to the cheapest or shortest option for everyone. Layer training: awareness for all staff, blended sessions for supervisors and floor leads, and full scenario drills for security and safety committee members.

What Should a Practical Active Shooter Curriculum Cover?

A syllabus that skips medical response or role assignment isn’t a complete program, no matter how polished the video production looks. Vet any course, internal or vendor-delivered, against these core components.

1. Decision framework. The curriculum should teach the three primary options clearly: evacuate when a safe path exists, lockdown/barricade when evacuation isn’t possible, and counter (fight) only as an absolute last resort when life is directly threatened. ALICE-based programs (Alert, Lockdown, Inform, Counter, Evacuate) structure this decision tree explicitly, and it should map onto the Run/Hide/Fight language most federal courses use.
2. Evacuation and accountability. Staff need pre-planned routes, a designated assembly area outside the building, and a headcount procedure so leadership knows within minutes who made it out and who’s still unaccounted for.
3. Bleeding control and basic first aid. Gunshot wounds kill through blood loss faster than most people expect. Training should include hands-on practice applying tourniquets and packing wounds, not just a slide describing the concept.
4. Defined incident roles. Someone needs to be the incident commander making real-time calls, someone needs to manage communications, someone needs to lead medical response, and floor wardens need clear authority to direct people toward safety. Assign these roles before an incident, not during one.
5. Coordination with 911 and law enforcement. Employees should know exactly what information responders need: shooter location if known, number of shooters, weapon type if visible, and the caller’s own location relative to the threat. Clear, calm information shaves precious seconds off police response time.

Communications infrastructure underpins all five points. If a facility relies on VoIP phone systems, confirming that 911 calls route correctly and identify the caller’s actual location matters just as much as the training curriculum itself, since a mislocated 911 call can send responders to the wrong building entirely.

Pro Tip: Print the incident role assignments and post them in break rooms and near exits. During a real event, nobody remembers a slide from a training session six months ago, but a laminated card on the wall works.

How Do You Design a Drill That Actually Tests Readiness?

A fire drill that everyone can predict teaches nothing about decision-making under stress. Active shooter drills need to introduce genuine uncertainty, or they become a rehearsed walk rather than a test.

1. Set measurable objectives before you start. Decide in advance what you’re testing: time to full lockdown, time to headcount completion, clarity of the first 911 call, or how quickly floor wardens locate stragglers. Write the target numbers down so you have something to compare against next time.
2. Build in realistic friction. Block one exit unexpectedly. Simulate a radio or phone outage partway through. Introduce a scenario where the “shooter” location is ambiguous rather than announced. Predictable drills produce predictable, false confidence.
3. Plan for everyone in the building, not just employees. Visitors, contractors, delivery personnel, and people with mobility or sensory disabilities all need a plan that accounts for them specifically. A drill that only works for able-bodied full-time staff has a serious gap.
4. Build a safety plan for the drill itself. Notify appropriate personnel in advance, use clear “this is a drill” signage or announcements where required, and have a stop-word that halts the exercise instantly if someone becomes distressed or an actual emergency arises.
5. Debrief immediately, while memory is fresh. Gather qualitative feedback from participants within the hour: what confused them, where they hesitated, what they didn’t know. OSHA’s emergency drill activity guide offers role-based checklists and improvement surveys that make this step structured rather than a vague group chat.
6. Turn findings into an after-action report with owners. Every gap identified needs a named person responsible for fixing it and a deadline. A report that documents problems without assigning remediation just becomes a filing exercise.

Good drills anchor to an organization’s actual hazard profile rather than a generic template, testing decision-making and resource readiness, not just how fast people can walk to an exit. That distinction separates a drill that builds real capability from one that just checks a compliance box.

Pro Tip: Rotate who plays “incident commander” during drills. If only one person ever fills that role, the organization has a single point of failure the moment that person is out sick or traveling.

How Do You Measure and Sustain Readiness Over Time?

Training without measurement drifts. A program run once, three years ago, tells you almost nothing about how a building would respond today, especially after staff turnover or a floor plan change.

Consider tracking a small set of practical, organization-specific metrics rather than treating any single number as an industry mandate:

• Time-to-accountability: how long it takes to confirm everyone’s location and status after a lockdown signal
• 911 notification latency: how quickly and clearly the first call reaches emergency services
• Drill completion and participation rates: whether scheduled exercises actually happen and who shows up
• Post-drill improvement closure rate: what percentage of after-action items get resolved before the next exercise

None of these numbers exist as a universal benchmark, but tracking them consistently across drills reveals whether a program is actually improving or just repeating itself.

OSHA guidance recommends reviewing emergency action plans with employees at orientation, whenever responsibilities change, and whenever the plan itself is updated, with regular drills and refresher training layered on top. In practice, that means annual refreshers at minimum, immediate retraining after any new hire wave, and a full plan review whenever a facility changes its floor layout, adds an entrance, or shifts to a new phone system.

Tabletop exercises (talking through a scenario around a conference table) and full-scale drills (physically walking through the response) serve different purposes and work best in combination. Tabletops are cheap, fast, and good for testing decision logic among leadership. Full-scale drills test whether that logic actually survives contact with a real hallway full of confused people. Inviting local police or fire liaisons to observe or participate in at least one drill per year adds an outside perspective that internal staff, however well-trained, tend to miss.

How Do You Choose the Right Training Partner?

Vetting a provider or building an internal program both hinge on the same question: does this training produce measurable capability, or does it just check a box?

Run any candidate program through this checklist:

• Do instructors have verifiable law enforcement, military, or emergency management backgrounds?
• Does the curriculum use trauma-informed methods that account for how stress affects memory and decision-making, rather than lecturing as if participants will react calmly?
• Does the program include scenario realism, not just slides and discussion?
• Does it teach life-saving content like bleeding control, not just evacuation logistics?
• Does the provider deliver a written after-action report following drills, with specific findings rather than a generic satisfaction summary?

When evaluating a vendor directly, ask these questions before signing anything:

1. What are the specific, written learning objectives for this course?
2. Who is the course designed for (frontline staff, supervisors, security personnel), and does that match your organization’s actual attendee list?
3. What safety controls exist for live drills, and who has authority to stop the exercise?
4. Can they provide a sample after-action report from a previous engagement (with client details redacted)?
5. What is the retraining or refresher cadence they recommend, and does it align with OSHA’s guidance on periodic review?

Red flags to walk away from: providers who can’t describe measurable outcomes, programs that never include a live drill component, instructors with no verifiable operational background, and any vendor who resists sharing a sample report or curriculum outline before you commit. Organizations serious about building internal capacity often pair a recognized foundational course with specialized instruction, such as blended, scenario-based training for supervisors and security leads who need deeper preparation than a one-hour module provides.

How Gsgicorp Applies These Standards in Practice

Gsgicorp builds its training programs around the same principles federal guidance emphasizes: recognized curriculum structure, scenario realism, and documented follow-up. The company’s instructors bring law enforcement and military backgrounds to the classroom, which shapes how scenarios get built and how debriefs get run.

Engagements typically combine blended learning (online foundational content paired with in-person, facility-specific sessions) with live scenario exercises for organizations that need more than baseline awareness. After-action reporting follows each drill, giving leadership a written record of what worked and what needs correcting before the next exercise, consistent with the debrief-and-remediate approach federal guidance recommends.

Organizations considering an engagement should expect an initial conversation about facility layout, staff roles, and existing emergency plans before any training begins. From there, Gsgicorp designs a program that fits the organization’s actual risk profile rather than applying a one-size-fits-all module. Buyers evaluating training options can expect transparency about instructor qualifications and course structure from the first conversation.

A Leadership Note on What Actually Moves the Needle

Most organizations treat active shooter training as a compliance exercise: watch the video, check the box, file the certificate. That approach produces paperwork, not preparedness. The gap between having a plan and having a tested plan is where real incidents get decided, and too many leaders never close it.

The priority isn’t finding the most dramatic drill or the longest course. It’s building a cadence, awareness training for everyone, blended sessions for supervisors, live drills for the people whose roles carry real weight during an incident, and then actually measuring whether the next drill performs better than the last one. Accountability has to sit with a named leader who owns the calendar for retraining and the follow-through on after-action items. Without that owner, even excellent training decays within a year.

— Alston

Gsgicorp Training and Services

Gsgicorp offers a direct path for organizations that want structured, instructor-led active shooter preparedness instead of piecing together an internal program from scratch. Rather than assembling separate vendors for curriculum, drills, and reporting, an engagement brings law enforcement and military-trained instructors, scenario-based exercises, and written after-action reports under one program.

Booking starts with a conversation about facility layout, staff structure, and existing emergency plans, so the curriculum reflects your actual building rather than a generic template. Engagements typically blend online foundational content with in-person sessions and, where appropriate, on-site drills coordinated with your facility’s guard staff. Organizations already using guard services can integrate training directly with their existing on-site security presence, giving drills a realistic response layer rather than a simulated one.

Review the full training catalog to find the format that matches your organization’s size and risk profile, or reach out directly to schedule an initial consultation and start building a program with measurable, documented results.

Sources

• IS-907.A, Active Shooter: What You Can Do | CISA
• Active Shooter Attack Prevention and Preparedness (ASAPP) | FBI
• Active Shooter Threat Instructor Training Program | FLETC

Recommended

• Executive Protection Training