TIMELINE OF EVENTS
Staff Response
Onsite Security
Incident Command
100

At approximately 1:50 PM, the individual entered the building and immediately exhibited unusual behavior

What is making threatening statements in a public area?

100

When a hostage situation takes place,  the immediate recommended staff response is 

What is Increase distance, seek safety, and notify leadership/security.

100

Observe, report, and immediately notify law enforcement.

What is the role of on‑site security?

100

ICS role is responsible for coordinating messages to the public and press

Who is the Public Information Officer?

200

At approximately 1:52 PM, the individual approached the second‑floor desk and requested key information

What is the location of the nurse? 

200

When staff witness escalating behavior, the first internal communication method is 

What is InformaCast? 

200

Active Shooter 

What is Code Silver? 

200

Typically coordinates with law enforcement to share facility information

Who is The Liaison Officer

300

By approximately 1:53 PM, security took this action. 

What is notifying the police? 

300

Using Emergency Exits

What is evacuation? 

300

Protecting Staff and Patients

What is guiding staff and patients to evacuate, hide, or secure in place? 

300

Term describes the structured conversation that occurs after the incident concludes

What is a debrief or after‑action review? 

400

At approximately 2:00 PM, an individual arrived outside the building and began approaching staff members to request information.

What is media? 

400

A hostage situation is identified action should staff not take

What is not negotiating? 

400

Support Law Enforcement

What is providing building access and keys?

400

Staff and Patients are allowed back into the Health Center 

What is All Clear? 

500

At 3:00 PM, something signaled the conclusion of the event

What is taking the subject into custody?

500

Patient asking regarding staff whereabouts 

What is not sharing staff information with patients? 

500

Last known location of subject, status of staff/patients, and building layout details.

What key information to provide to police? 

500

Information is reviewed during the debrief

What are communication effectiveness, response actions, logistics, and improvement opportunities?

M
e
n
u