What if… an armed intruder entered your campus during lunch break?

by | 31 Oct 2025

It’s 1:00 PM on a Wednesday. Students are scattered across your campus during lunch break—some in the cafeteria, some in outdoor eating areas, some in the library, some in common rooms. Your gate security notices someone attempting to enter the campus with what appears to be a weapon. The school immediately activates lockdown procedures. Students and staff are rapidly directed to secure areas. Police are called. For 45 minutes, your school is in complete lockdown while police respond and apprehend the intruder. Teachers are sheltering with students, uncertain whether the threat is contained. Parents are calling frantically. Social media is exploding with rumours. After the all-clear is given, you face the monumental task of supporting traumatised students and staff, managing the community fallout, restoring operations, and planning recovery.

This scenario, while distressing, reflects the reality of critical incident risks in contemporary Australian schools and represents a major critical incident management challenge requiring immediate business continuity response.

Why Critical Incidents Create Business Continuity Crises

When critical incidents such as armed intruders, violence, or threats occur during school hours, the operational impact extends far beyond the immediate safety response. Research on critical incidents affecting schools indicates:

• Immediate response demands – Activating lockdown, coordinating police response, managing evacuations, and coordinating reunification with families
• Trauma and psychological impact – Students and staff experiencing significant trauma requiring immediate and ongoing pastoral support, counselling, and potentially modified schedules
• Operations interruption – Inability to continue normal learning, potential facility access restrictions, and disruption lasting hours or days
• Community fallout – Media attention, social media speculation, family anxiety, potential enrolment decisions, and reputational impact
• Regulatory response – Police investigations, potential site cordoning, workplace health and safety investigations, and potential media inquiries
• Long-term recovery – Establishing new safety procedures, addressing ongoing trauma, restoring community confidence, and rebuilding institutional stability

For schools without documented critical incident management plans and business continuity procedures, violent incidents become institutional crises that can affect operations for weeks or months.

Critical incident preparedness must be embedded in both your emergency management and business continuity planning.

Understanding Your Critical Incident Risks

Before developing critical incident response procedures, identify specific risks that could trigger violent incidents or threats at your school:

• Armed intruders – External individuals entering campus with weapons, knives, or firearms
• Vehicular incidents – Vehicles used as weapons (vehicle ramming attacks)
• Assaults or violence – Physical violence between students, staff, or external individuals
• Hostage-taking or barricades – Offenders barricading in buildings or holding hostages
• Bomb threats or suspected explosive devices – Threats or discovery of suspicious devices
• Threats and intimidation – Verbal or written threats against individuals or the school
• Active threat scenarios – Armed individuals engaging in violent behaviour requiring rapid response

Understanding these risks helps you develop targeted response procedures and recovery planning.

How to Prepare for and Recover From Critical Incidents

Here’s how your school can prepare for critical incidents and maintain institutional resilience during and after significant events:

✅ Develop a Comprehensive Critical Incident Management Plan

Your critical incident management plan must be comprehensive, documented, regularly reviewed, and practiced. It should include:

• Incident classifications – Define different incident types and severity levels:

  • Threat (external threat requiring police response)

  • Violence/assault (physical violence requiring immediate intervention)

  • Hostage situation (individuals held against their will requiring specialist police response)

  • Active threat (armed individual engaging in violent behaviour)

  • Explosive device threat or discovery

Activation procedures – Define who initiates incident response:

  • First responders – Teachers, staff, or students recognising the threat

  • Initial decision-makers – Admin staff or security receiving initial reports

  • Incident commander – Senior leader (Principal or designated deputy) taking overall command

  • Emergency services liaison – Designated staff member coordinating with police, ambulance, and fire services

Response procedures – Document specific actions for each incident type:

  • Lockdown procedures (securing students and staff in safe areas)

  • Evacuation procedures (if lockdown isn’t appropriate and safe evacuation is possible)

  • Communication procedures (notifying staff, students, parents, authorities)

  • Unified command structures (coordinating school response with police)

Recovery procedures – Define post-incident response:

  • Reunification procedures (returning students to families in orderly fashion)

  • Trauma support activation (counselling services, student support)

  • Scene management (managing media, maintaining scene integrity for investigations)

  • Community communication (media statements, family briefings, community updates)

  • Follow-up support (ongoing counselling, modified schedules, return-to-learning procedures)

Staff roles and responsibilities – Clearly assign:

  • Incident commander role and succession (if principal unavailable)

  • Communication coordinator (managing internal and external communications)

  • Medical response coordinator (managing first aid and ambulance coordination)

  • Student welfare coordinator (managing trauma support and reunification)

  • Liaison with police and emergency services

  • Media liaison (managing external communications)

A comprehensive plan with clear roles prevents confusion during crises and enables rapid, coordinated response.

✅ Establish Secure Lockdown Facilities and Procedures

Physical lockdown areas are essential for safety during armed intruder or active threat incidents:

• Identify secure lockdown areas – Designate:

  • Multiple secure areas distributed across campus (not all students in one location)

  • Rooms with locks, solid doors, minimal windows, and communication capability

  • Areas that can accommodate students with mobility needs or requiring medical support

  • Easy identification and accessibility for staff and students during crisis

Ensure lockdown area adequacy – Verify areas have:

  • Functional locks and ability to be secured from inside

  • First aid kits and emergency supplies

  • Bidirectional communication (phone, radio, or intercom system)

  • Climate control and ventilation for extended occupancy

  • Accessible toilet facilities (if lockdown extends beyond a few hours)

  • Space and comfort appropriate for the number of people sheltering

Practice lockdown procedures – Conduct:

  • Regular lockdown drills (at least annually, ideally twice yearly)

  • Drills from different locations (indoors, outdoors, during lunch, during class)

  • Drills with increasing realism (using realistic scenarios, not announcing drills beforehand)

  • Evaluation of drill performance identifying areas needing improvement

  • Staff debriefing following drills to address concerns and refine procedures

Brief staff and students – Ensure everyone understands:

  • How lockdown is initiated (alarm signal, intercom announcement, specific codeword)

  • Where to go (which secure area is designated for their location)

  • How to secure themselves (locking doors, turning off lights, remaining quiet)

  • What to do if caught in corridors or outdoor areas during lockdown

  • What NOT to do (trying to flee, opening doors for people outside, creating noise)

Well-practiced lockdown procedures enable rapid response and minimise panic during actual threats.

✅ Establish Clear Communication During and After Incidents

Communication is critical for response coordination, family reassurance, and media management:

• Internal communication during incident – Establish:

  • Clear activation signal (alarm or codeword indicating threat and lockdown status)

  • Incident commander broadcasting on dedicated radio or intercom channel

  • Regular updates to staff sheltering with students (status, timeline, next steps)

  • Procedures for staff to report injuries or emergencies within secure areas

  • All-clear signal indicating threat has been managed and lockdown can end

External communication during incident – Determine:

  • Initial notification to police (time, location, nature of threat)

  • Family communication procedures (SMS, email, or phone notifications indicating incident status)

  • Timing of family notifications (balancing need-to-know with operational clarity, not panicking families before full information available)

  • Website updates if appropriate (for rapid communication to broad audiences)

Post-incident communication – Prepare:

  • Media statements explaining incident, response, and recovery procedures

  • Family briefings explaining what happened, how students are being supported, and what comes next

  • Staff briefings addressing concerns, explaining recovery procedures, and assigning support roles

  • Student communication age-appropriate, reassuring, and factually accurate

  • Ongoing community updates about recovery progress and return-to-normal procedures

Communication team training – Ensure:

  • Communication coordinator and backup are trained in media interview techniques

  • Communications are factually accurate and not speculative

  • Sensitivity to trauma and not sensationalising the incident

  • Privacy protection for students and staff while being transparent with community

Clear communication prevents rumours, maintains community confidence, and manages media narrative effectively.

✅ Activate Immediate Trauma Support and Counselling

Critical incidents cause significant psychological trauma requiring immediate and ongoing support:

• Establish trauma support protocols – Pre-arrange:

  • On-site school counsellors (ensure coverage during lunch when incidents may occur)

  • External counselling services (psychologists, crisis counsellors, trauma specialists) on call for rapid deployment

  • Mental health support from health departments (if appropriate and available)

  • Peer support networks and student ambassador training

Support students sheltering during lockdown – Provide:

  • Calm, reassuring presence from staff during lockdown

  • Information about ongoing threat status and lockdown timeline

  • Water, bathroom access (if extended), and comfort items

  • Acknowledgment of fear and stress while maintaining confidence in safety procedures

Debrief students and staff after lockdown – Facilitate:

  • Information sessions explaining exactly what happened (removing speculation and rumour)

  • Acknowledgment of emotions and validation of stress responses

  • Explanation of recovery procedures and available support

  • Reassurance about ongoing safety and preventative measures

Provide ongoing counselling – Offer:

  • Trauma-informed counselling for students and staff showing significant distress

  • Modified schedules (if students need to step out of classrooms for emotional support)

  • Peer support groups (students talking with peers about experiences)

  • Family education (helping families understand trauma responses and support students at home)

  • Return-to-learning procedures (gradual reintegration for severely traumatised students)

Immediate trauma support reduces psychological impact and prevents long-term mental health consequences.

✅ Coordinate With Police and Emergency Services

Critical incidents require professional emergency services response. Your plan must enable effective coordination:

• Establish pre-existing relationships – Prior to incidents:

  • Meet with local police commanders and emergency response teams

  • Share school layout diagrams and access procedures

  • Discuss response coordination, communication protocols, and unified command structure

  • Brief emergency services on your lockdown procedures and facility layouts

  • Conduct joint training exercises (if feasible) improving coordination

Activate unified command during incident – Establish:

  • Single incident command post (typically police-led for armed intruder incidents)

  • Clear coordination between school leadership and police commander

  • Designated school liaison person communicating between incident command and school operations

  • Police direction on lockdown duration, all-clear timing, and evidence preservation

  • Coordination of reunification procedures once incident is resolved

Support police investigation – Provide:

  • Secure access to crime scene (if applicable) without disrupting investigation

  • Witness interviews facilitated by police

  • Preservation of evidence and scene integrity

  • Restricted access to affected areas during investigation

  • Full cooperation with investigators seeking information

Effective coordination with emergency services ensures professional response and maintains unified command structure.

✅ Manage Family Reunification and Dismissal

Following critical incidents, orderly family reunification is essential for safety and community confidence:

• Establish reunification procedures – Document:

  • Check-in system for families arriving to collect students (verifying identity and authorisation)

  • Safe routes for students to exit secure areas without exposing to remaining threats

  • Tracking of which students have been reunified (preventing re-collection or loss)

  • Staff supervision ensuring all students are accounted for

  • Support staff available to provide information and answer questions

Manage early dismissal if necessary – Ensure:

  • Orderly dismissal procedures preventing panic or congestion

  • All students accounted for and collected by authorised adults

  • Students remaining on campus until collected are supervised and supported

  • Staff remain on campus until all students have been collected

Communicate reunification procedures – Inform:

  • Families about reunification procedures (preventing families arriving without identification or authorization)

  • Expected timeline for reunification (managing family expectations)

  • Where and how to check in (parking, entry procedures, queueing systems)

  • What information will be requested (student name, relationship to student, identification)

Orderly reunification procedures reduce chaos and ensure all students reach authorised adults safely.

✅ Conduct a Formal Post-Incident Review and Debrief

Following critical incidents, comprehensive review is essential for learning and recovery:

• Conduct critical incident debrief – Bring together:

  • School leadership team

  • Emergency responders (police, ambulance, fire)

  • Staff and students who sheltered during incident

  • Community representatives (council, health services)

Review incident response – Assess:

  • Timeline of events (when threat was identified, when response activated, when threat resolved)

  • Effectiveness of lockdown procedures (did staff and students respond appropriately?)

  • Communication effectiveness (was information shared promptly and accurately?)

  • Police coordination (was unified command effective? Were procedures followed?)

  • Trauma response (were counselling services activated appropriately? Was support adequate?)

Identify gaps and improvements – Document:

  • What worked well and should be maintained

  • What didn’t work and needs changing

  • What wasn’t anticipated and requires new procedures

  • What equipment, training, or resources are needed

  • What communication needs improving

Update critical incident plan – Modify:

  • Response procedures based on lessons learned

  • Staff roles and responsibilities based on how people performed

  • Communication procedures based on effectiveness

  • Trauma support procedures based on assessed needs

  • Training and drill procedures based on identified gaps

Provide staff support – Recognise:

  • Staff who managed difficult roles during incident need support and recognition

  • Staff may experience secondary trauma from managing crisis

  • Ongoing support and counselling may be needed for staff

  • Professional development should be provided to improve future response

Post-incident reviews transform crises into learning opportunities and strengthen future preparedness.

✅ Communicate Recovery Progress and Return to Normal

Following critical incidents, transparent communication about recovery is essential for community rebuilding:

• Communicate recovery timeline – Explain:

  • When will normal school operations resume

  • What facilities or areas remain restricted (due to ongoing investigation)

  • What procedures or routines are changing (new security measures)

  • What counselling and support services are available

  • How the school is preventing similar incidents in future

Address ongoing safety concerns – Address:

  • Families’ ongoing concerns about safety and security

  • New security procedures or physical improvements being implemented

  • Increased police presence or community support

  • What threat assessment procedures are ongoing

Celebrate recovery – Acknowledge:

  • Resilience of students and staff

  • Effectiveness of response procedures and staff actions

  • Community support and police partnership

  • Positive steps forward in recovery process

Transparent communication about recovery rebuilds community confidence and celebrates resilience.

The Role of Critical Incident Management in Business Continuity

Schools must treat critical incident preparedness not only as an emergency response issue but as a critical business continuity challenge. Armed intruders, violence, or threats can disrupt school operations for days or weeks, affecting learning, community relationships, and institutional stability. Traumatised students and staff require ongoing support affecting operational capacity. Without comprehensive critical incident management procedures, rapid response protocols, trauma support systems, and effective communication, violent incidents become institutional crises that extend disruption well beyond the immediate event.

By embedding critical incident management into your broader emergency management and business continuity planning, your school will respond effectively to threats, minimise trauma impact, and recover quickly while maintaining institutional resilience and community confidence.

Ready to Strengthen Your School’s Critical Incident Preparedness?

At Bounce Readiness, we work with schools to develop comprehensive, best-practice-aligned critical incident management plans and business continuity strategies that address armed intruder scenarios, trauma response procedures, and recovery planning aligned with Australian emergency management frameworks and critical incident management best practices.

Let us help you prepare for the unexpected—ensuring your school responds effectively to critical incidents, protects student and staff safety, and maintains institutional resilience even during significant crises.

📞 Phone: +61 1300 650 954
📧 Email: info@bouncereadiness.com.au
🌐 Website: https://bouncereadiness.com.au

School Resilience Survey

This specific survey focuses on lessons learnt from incidents over the last 12 months, and takes approximately 10 minutes to complete.