Case Study
Responding in Real Time to an Active Assailant: A Case Study in Crisis Management
11 Dec 2025

Did you know that the average active assailant event only lasts between 10-12 minutes? By the time law enforcement arrives, an organization must have already activated its response plan. You have mere minutes to safeguard lives, manage chaos, start communication flows, and lay the groundwork for recovery. This is where preparedness meets reality, and where decisive action can shape outcomes for your people and operations.
At Crisis24, response consultants stand ready to support crisis management teams (CMT) during this critical timeframe. They provide immediate support (safety advice, counseling, crisis communications, online monitoring, and trauma risk management (TRiM) assessments) so that stakeholders can get a handle on the situation as it unfolds.
Situational Analysis: A Terrorist Threat at Corporate Office
Recently, an international office faced the unimaginable: armed gunmen approached within 20 meters of the facility. Staff, trained for such events, reacted instantly – hiding under desks and barricading entrances to minimize exposure. In such moments, information is incomplete, confusion reigns, and a crisis management team (CMT) may not even be fully activated before the event concludes. Yet, the need for leadership, coordination, and support is immediate.
Crisis24 in Action: Support Under Pressure
Crisis24’s multi-disciplinary response team was activated. A Response Consultant provided real-time remote advisory support to the London-based CMT, while they maintained direct telephone contact with sheltering staff. This dual-channel approach helped to appease the situation on both ends: staff received safety instructions and psychological support, helping them remain calm, while the CMT had clear visibility into the evolving threat. Online monitoring and ground assets also helped to gain a complete picture of the situation as it unfolded, allowing the organization to track its progression and respond with precision.
Once the immediate threat was neutralized, Crisis24 deployed personnel onsite for staff debriefings and detailed back-briefings to the CMT. Since the psychological aftermath of such events can persist for months or even years, professional trauma counseling was arranged for affected staff. Crisis24 also conducted a comprehensive lessons-learned review, using insights from the incident to enhance future preparedness and response capabilities.
5 Key Takeaways for an Effective Response
During this active assailant threat, there were a few things that made the difference in the organization’s response:
- Immediate Action is Learned and Saves Lives: Staff who knew how to respond—by hiding and barricading themselves —minimized their exposure and risk.
- Real-Time Support Is Essential: Remote advisory and direct communication with sheltering staff provided both practical guidance and emotional reassurance.
- Situational Awareness Drives Effective Response: Leveraging online monitoring and ground assets enabled precise tracking and decision-making as the situation evolved.
- Post-Incident Care Matters: Trauma counseling and thorough debriefings helped mitigate long-term psychological impacts.
- Continuous Improvement: A lessons-learned review ensured the organization was better prepared for future threats.
Responding to active assailants is not just about surviving the immediate threat. It requires considering the immediate, ongoing, and long-term impacts of the event. It’s about setting the stage for recovery to build resilience. Organizations that invest in mature, well-practiced response plans, real-time support, and post-incident care are best positioned to weather the storm and emerge stronger.
Learn more about Crisis24’s four-phased approach to active assailant threats.
Related
Sharpen your
view of risk
Subscribe to our newsletter to receive our analysts’ latest insights in your inbox every week.
Intelligence & Insights
Intelligence
Worth Gathering
Employing a team of 200+ analysts around the world, Crisis24 is the only source you need for on-point, actionable insights on any risk-related topic.

eBook
Insider Threat Management Playbook
A practical guide to identifying, investigating, and mitigating insider risk through a connected, cross-functional approach.
September 8, 2026

Intelligence Analysis
Asia-Pacific Food Security Risks Rise Amid Middle East Conflict
Explore how Middle East conflict, rising fuel and fertilizer costs, and El Niño could threaten APAC food security and regional stability through 2027.
By Jacopo Di Bella
September 4, 2026

Case Study
Crisis24 Evacuates Travelers After Venezuela Earthquake
Crisis24 mobilized secure transport within 24 hours to relocate two travelers from Caracas and support their journey home.
September 2, 2026

Article
Balancing Trust, Privacy, and Monitoring in Insider Risk Programs
A strong Insider Threat Management Program (ITMP) should be designed to identify risk, vulnerability, and anomalous activity, not to create an organization in which every employee is treated as a potential offender.
By Alexander Johnson
September 2, 2026



