Schools have never had more safety options available to them.
District leaders can choose from new technologies, updated procedures, training programs, facility modifications, communication tools, access-control systems, and an expanding list of best-practice recommendations.
But having more options does not necessarily make schools safer.
The more important question is:
Which measures will actually reduce the risk of serious injury or death during an active-shooter event?
That question is much harder to answer.
A safety measure can look useful, feel reassuring, and still fail to address the most important vulnerability in a particular school. This is one reason school safety planning can become overwhelming. The problem is often not a lack of concern, effort, or investment. It is the absence of a structured process for determining what will actually improve safety-system performance.
That is where the Principled Safety® framework begins.
Principled Safety applies disciplined, scenario-based thinking used in high-risk environments to the challenge of protecting students and staff. Instead of beginning with a product, policy, technology, or checklist, the process starts with three questions:
How could harm occur? Where is the system vulnerable? Which safeguards are most likely to prevent that harm?
Schools cannot rely on broad, one-size-fits-all security recommendations. They need reliable, scenario-specific safeguards built around the real conditions students and staff would face during an attack.
The Problem With Safety-by-Checklist
School safety decisions are frequently made under pressure.
A tragedy occurs and public concern increases. A new security technology attracts attention. A consultant recommends a solution. Parents understandably want to know what is being done. Administrators and school boards feel a responsibility to act, often while working with limited time and incomplete information.
Action matters.
But action alone does not equal safety.
A school can install cameras, reinforce classroom doors, update visitor procedures, conduct drills, purchase communication software, and employ school resource officers—and still leave important vulnerabilities unaddressed.
Each measure may have value. The larger question is whether those measures work together as an effective safety system.
This is where checklist-based approaches fall short. Schools are presented with dozens of potential improvements but may lack a disciplined method for determining which ones address their most consequential risks.
The result can be a collection of disconnected security measures rather than an integrated prevention strategy.
High-hazard industries learned this lesson long ago. In nuclear operations, aviation, defense, and other complex environments, safety is not measured by how many actions have been taken. It is measured by whether the system performs as intended under realistic conditions.
School safety deserves the same discipline.
Start With the Scenario, Not the Solution
A core principle of Principled Safety is simple:
Meaningful safety planning begins with scenarios, not solutions.
Before deciding what to purchase, modify, or implement, school leaders first need to understand what they are trying to prevent.
That means examining how an attack could unfold within a particular school environment.
Where could unauthorized access occur? How could an attacker move through the campus or building? Where are students and staff most exposed? Where could communication or response be delayed? What opportunities exist to interrupt the sequence before people are harmed?
Those questions fundamentally change the decision-making process.
Consider two schools evaluating the same access-control technology. One has studied its campus and determined that arrival and dismissal represent its greatest vulnerability because large numbers of students are outside controlled areas, multiple entrances are active, and staff attention is divided. The other has not evaluated movement patterns or potential attack pathways. Both schools might purchase exactly the same technology. But the safety value of that investment could be very different.
The product itself is only part of the answer. What matters is whether the safeguard addresses a clearly defined vulnerability and performs the safety function required of it.
What Past Tragedies Can Teach Us
Studying previous school shootings should not be an exercise in assigning blame.
A prevention-focused analysis asks different questions:
- What conditions allowed the event to progress?
- Which vulnerabilities existed before the incident?
- Where did protections fail to interrupt the sequence?
- What assumptions were built into the safety plan?
- Which safeguards depended upon perfect timing, perfect communication, or perfect human performance?
Publicly documented incidents including Parkland, Uvalde, Nashville, and Westside provide painful but important examples of why those questions matter.
At Marjory Stoneman Douglas High School in Parkland, video surveillance encountered problems during critical moments when ceiling tile dust and gun smoke interfered with camera motion tracking capability. The event raises an important design question: If surveillance is intended to provide real-time situational awareness during an attack, has the system actually been designed and tested to operate under the conditions an attack can create?
Parkland and Nashville also demonstrated the potential conflict between fire-alarm systems and active-shooter response. Gunfire triggered fire alarms, contributing to occupants entering hallways during an attack. At Westside Middle School near Jonesboro, Arkansas, an alarm was intentionally activated as part of the attack.
These incidents demonstrate why safety systems cannot be designed independently of one another. Fire response, lockdown procedures, communications, access control, and emergency decision-making can interact in ways that may not become apparent until they are evaluated against realistic scenarios.
Uvalde exposed another type of vulnerability: the gunman gained access to the school and classrooms because security measures that existed were not reliably functioning as intended. Unlocked or unsecured doors contributed to access, while difficulties obtaining keys affected emergency response.
The broader lesson is not that any single technology or procedure failed. It is that safety depends on systems working together under real conditions.
Find the Gaps Before They Become Failures
Every safety system has weaknesses.
The critical question is whether those weaknesses are discovered before an emergency exposes them.
High-reliability organizations do not assume a system is safe simply because nothing has gone wrong. They examine credible failure scenarios, challenge assumptions, test safeguards, and identify differences between expected performance and actual capability.
Schools can benefit from the same approach.
A gap might involve physical design, staffing, communications, access control, emergency procedures, training assumptions, technology, or coordination among different roles.
Some weaknesses are obvious. Others only become clear when the system is tested against realistic scenarios.
A school may have an excellent written emergency plan but limited ability to communicate rapidly between buildings.
Another may maintain secure entrances during normal school hours but have significant vulnerabilities during athletic events or after-school activities.
Another may have invested heavily in security technology without determining whether staff can use it effectively during a high-stress event.
A structured gap analysis brings those issues into the open so leaders can prioritize improvements based on risk rather than pressure, visibility, or guesswork.
Move From Safety Intentions to Safety Performance
One of the most important principles behind Principled Safety is the shift from intention to performance.
A security measure should not be judged solely because it sounds reasonable, appears on a best-practices list, or is widely used by other schools.
It should be evaluated according to whether it improves the school’s ability to prevent harm under realistic conditions.
That means asking:
- What specific vulnerability does this safeguard address?
- Under what conditions must it work?
- What assumptions does it depend upon?
- How does it interact with people, procedures, technology, and the physical environment?
- What are its limitations?
- How will we demonstrate that it actually improves safety?
These questions help schools avoid two common mistakes: investing in measures because they are highly visible and assuming a safety improvement works simply because it has been implemented.
A major security investment should be traceable to a credible threat scenario, a defined vulnerability, and a measurable improvement in safety-system performance.
That shifts the conversation from buying security products to engineering a safer system.
Define What Each Safeguard Must Accomplish
Consider a credible scenario in which an attacker gains access through an exterior door and moves toward occupied classrooms.
Many common school security measures are intended to address some portion of that scenario: cameras, visitor-management systems, access control, reinforced classroom doors, communications systems, and school resource officers.
But no individual measure can guarantee prevention.
An attacker may force entry, exploit a propped-open door, or enter through a door that fails to latch. A camera may record an attacker without generating actionable information quickly enough to affect the outcome.
The safety objective therefore has to go beyond simply having these systems.
The objective should be to detect the attack rapidly, communicate actionable information, and enable intervention before casualties occur.
Once that objective is established, performance requirements can be defined.
A surveillance system, for example, should not merely record an incident for later review if its intended safety function is real-time intervention. It may need to detect unauthorized entry, maintain useful coverage of likely movement routes, and rapidly communicate information to designated responders.
Likewise, a school resource officer program should be evaluated on more than whether an officer is assigned to a campus. If the intended safety function is rapid intervention, the system surrounding that officer must support it: immediate notification, reliable communications, access throughout the building, appropriate equipment, and demonstrated response capability.
Those requirements can then be tested.
That is the difference between having a safeguard and knowing what that safeguard is capable of accomplishing.
Safety Is a System
Surveillance, communications, access control, emergency procedures, staff training, building design, and law-enforcement response should not be treated as isolated components.
They are interdependent parts of a safety system. The performance of one can directly affect the performance of another.
When requirements are derived from credible threat scenarios, school leaders can evaluate investments according to how much they improve the performance of the overall system—not simply according to staffing ratios, product features, or whether an item appears on a recommended-security checklist.
This approach also changes the relationship between schools and security vendors.
Instead of asking a vendor, “What security product do you recommend?” a school can define the safety function it needs performed and ask vendors to demonstrate how their solution satisfies that requirement.
That is a much stronger foundation for decision-making.
Bringing High-Reliability Thinking to Schools
Schools are not nuclear facilities, and they should not be treated as such.
But protecting human life requires rigor.
High-reliability industries understand that complex systems can fail in complex and unexpected ways. They do not wait for catastrophe to prove that a vulnerability exists.
They examine scenarios.
They evaluate barriers.
They test assumptions.
They look for weaknesses before those weaknesses contribute to harm.
A school is also a complex environment. Students, staff, visitors, transportation, schedules, buildings, technology, procedures, and human behavior all interact. A safety plan that looks strong on paper can behave very differently when placed under stress.
Principled Safety provides a structured way to evaluate those interactions before lives depend on them.
This is not about creating fear. It is about bringing greater structure, discipline, and clarity to one of the most important responsibilities a school community carries.
Prevention Begins Before the Emergency
School safety conversations often become most intense after tragedy. By then, the greatest prevention opportunities have already passed.
The real opportunity exists earlier—during facility reviews, budget discussions, policy development, training decisions, security assessments, and the routine evaluation of how a school operates every day. Those are the moments when vulnerabilities can be identified and corrected before they contribute to harm.
Principled Safety® was developed to support that work.
It gives schools a disciplined process for moving beyond checklists and isolated security solutions. It helps leaders examine credible scenarios, identify vulnerabilities, evaluate gaps, define safeguard performance, and make decisions based on measurable improvements to the safety system.
The goal is not to make every school identical.
The goal is to give every school a reliable way to understand its own risks and strengthen its own protections accordingly.
Preventing harm begins before an emergency.
It begins when leaders ask better questions, examine their systems critically, and select improvements based on evidence rather than assumption.
That is where meaningful school safety work starts.
Find the Gaps in Your School Safety System
Principled Safety offers a free scenario-based gap assessment designed to help school leaders begin identifying vulnerabilities and evaluating their existing safeguards.
To learn more about the methodology behind Principled Safety, read Before the Next Tragedy: Preventing Harm in School Shooting Scenarios.
References
Marjory Stoneman Douglas High School Public Safety Commission. Initial Report Submitted to the Governor, Speaker of the House of Representatives and Senate President. Florida Department of Law Enforcement, 2019.
Metro Nashville Police Department, Criminal Investigations Division, Homicide Unit. Investigative Case Summary: The Covenant Presbyterian Church and School Shooting. Case No. 2023-0181711, March 31, 2025.
Westside School Shooting. Encyclopedia of Arkansas.
U.S. Department of Justice. Critical Incident Review: Active Shooter at Robb Elementary School. 2024.
If you’d like to explore more of the thinking behind the Principled Safety® approach, these related articles examine several challenges school leaders face when evaluating and improving safety:
Five Common Mistakes Schools Make When Evaluating Safety Solutions
Prevention by Design: Building School Safety Systems That Work
Building Safer Schools Through Principled Thinking
Five Common Mistakes Schools Make When Evaluating Safety Solutions
Explore these and other school safety articles.
Take the Free School Safety Assessment. It is designed to help school leaders begin examining that question—identifying potential gaps in existing safety plans and considering whether individual safeguards function together as an integrated system.
For readers who want to go deeper into the methodology, Before the Next Tragedy: Preventing Harm in School Shooting Scenarios provides a more comprehensive examination of applying principled, systems-based thinking to school safety—including the defense-in-depth concepts discussed in this article.
