Active Assailant Training

This talk sits in the human factors bundle by numbering rather than by subject. It is not a mental health topic — it is an emergency response topic, and it belongs alongside evacuation, severe weather and first aid rather than alongside stress and fatigue. Treating it as anything else produces a talk about a rare event with no plan attached. This Active Assailant Training Toolbox Talk (Safety Talk / Tailgate Talk) is built on the emergency planning standard instead.

Here is the distinction that carries this whole talk: the standard advice assumes a finished building, and a construction site is not one. Run, Hide, Fight was written for offices, schools and shops — places with solid walls, doors that lock, a public address system and a manageable number of exits. A live construction site has open floors, partial walls, doors that are not hung yet, no PA, workers spread vertically across levels, and often a single point of entry and exit. The advice is not wrong. It just cannot be applied unmodified, which is why a site has to build its plan rather than borrow one.

The standard your plan actually sits under#

There is no OSHA standard on active assailants or workplace violence as such. What applies is the emergency planning standard, and it is worth reading with this scenario in mind.

1926.35 requires an emergency action plan covering, among other elements:

• emergency escape procedures and emergency escape route assignments
• procedures for employees who remain to operate critical plant operations before they evacuate
• procedures to account for all employees after emergency evacuation has been completed
• rescue and medical duties for those employees who are to perform them
• the preferred means of reporting fires and other emergencies
• names or regular job titles of persons or departments to be contacted for further information

The employer must also designate and train a sufficient number of persons to assist in the safe and orderly emergency evacuation of employees, and the plan must be reviewed with each employee — initially, when responsibilities or designated actions change, and whenever the plan is changed.

Section 5(a)(1) applies to recognised hazards, and 1926.21(b)(2) requires instruction in the recognition and avoidance of unsafe conditions. 1926.50 covers medical services and first aid, which matters here more than usual.

Read against this scenario, one element does most of the work: accounting for all employees after evacuation. On a site with several employers, agency workers, deliveries and visitors, knowing who was on site — and who is now missing — is both the hardest thing and the thing responders will ask for first.

Why the standard advice needs translating#

"Run" is complicated by the site. Exits may be scaffold stairs, ladders or a single gate. Excavations, open risers and stored material are between people and the boundary. Anyone at height has a slow exit, and a slow exit under panic is its own hazard — a fall during an evacuation is a real and predictable outcome.

"Hide" is often not available. There is frequently nothing that locks. Site accommodation is thin-walled. Plant rooms, containers and welfare units may or may not secure, and most people do not know which.

"Fight" is a last resort and stays that way. It is not a plan, it is what remains when there is no alternative.

And communication is the real gap. No PA system, radios that not everyone carries or monitors, and a workforce that may share no common language. The most likely failure on a construction site is not that people choose wrongly — it is that most of them never find out anything is happening.

What a construction site's plan has to cover#

How the alarm is raised and distinguished. If your fire alarm means evacuate to the muster point, and the muster point is in the open, you need a way of communicating something different. Deciding this in advance is the single most valuable planning step.

Multiple exit routes, known in advance, because the obvious one may be exactly where you cannot go. Anyone working at height should know two ways down.

Which spaces actually secure, if any — named, so nobody is trying doors at the time.

Accounting for everyone, as 1926.35 requires, which means the access control system has to produce a usable list of who is on site — including subcontractors, agency workers, delivery drivers and visitors.

Who talks to responders, and where they meet them. Emergency services arriving at a large site need someone with drawings, access and a list.

Medical response, per 1926.50 — trained first aiders, where the kit is, and the reality that responders may not be able to reach casualties immediately.

Language. A plan that only functions in English on a multilingual site is not a plan. This is the most commonly missed element and one of the easiest to fix.

Reunification and welfare afterwards, including for people who were not on site and heard about it.

The upstream control#

Everything above is response. The controls that reduce the likelihood are the ordinary ones, and they are already someone's job:

Access control. Knowing who is on site and having a defined boundary is the primary control. A site anyone can walk onto is a site anyone can walk onto.

Managing the perimeter, especially at shift changes when gates stand open.

Taking threats and behaviour seriously. Most workplace violence is not random. Threats, escalating conflict, harassment and domestic situations that follow someone to work are the things reported before an event, and a site where those are heard is a site that has a chance of acting.

A route to report a concern about a person that does not require certainty. People will not report a colleague on a suspicion unless it is safe and unremarkable to do so.

And a functioning culture generally, which is the least dramatic and most useful thing here — because the earliest information is almost always social rather than technical.

What can go wrong?#

A plan copied from an office, referencing lockdowns and PA announcements that do not exist here.

One exit route, treated as the route.

No way to tell people anything that is not the fire alarm.

No usable list of who is on site, so nobody knows who is missing.

Language left out, so part of the workforce is uninformed.

Nobody briefed to meet responders with drawings and access.

People at height with no second way down.

Threats and conflict not reported, because no route existed to report them.

How do we manage this properly?#

Write the plan for this site, not for a building — and review it with each employee as 1926.35 requires.

Decide and brief how this alarm differs from the fire alarm.

Give everyone two exit routes, and make sure people working at height know theirs.

Name the spaces that actually secure, if any.

Make access control produce a real list, and test whether it does.

Nominate who meets responders and where, with drawings.

Deliver the briefing in every language on site.

Train the designated evacuation assistants the standard already requires.

Keep it proportionate. This is a low-probability event and the same plan improves every other emergency you are far more likely to have. That is the honest reason to do it.

And handle the briefing carefully. Some people on any crew have direct experience of violence. Keep it factual and practical, say in advance what the talk will cover, and let anyone step out without explanation.

Before you start#

• Confirm you know the alarm for this and how it differs from the fire alarm.
• Confirm two routes out from where you are working today.
• Confirm what you would do if you were at height when it was raised.
• Confirm whether any space near you actually secures.
• Confirm you are signed in, so you appear on the list of who is on site.
• Confirm who meets emergency services and where.
• Confirm the plan has been briefed in a language you work in.
• Confirm how you would report a concern about someone's behaviour.

Talk it over#

• If something happened right now, how would you find out?
• What are your two ways out of where you are working today?
• Does anything on this site actually lock?
• Who would know you were on site if you did not reach the muster point?

The bottom line#

The standard advice assumes a finished building and a construction site is not one — open floors, partial walls, no PA, workers spread vertically, often one way in and out. Run, Hide, Fight is not wrong but cannot be applied unmodified: "run" is complicated by height, excavations and single exits; "hide" is often unavailable because nothing locks; and the real gap is communication, since the most likely failure is that most people never find out anything is happening. There is no OSHA standard on active assailants — the plan sits under 1926.35, which requires emergency escape procedures and route assignments, procedures for those who remain to operate critical operations, procedures to account for all employees after evacuation, rescue and medical duties, the preferred means of reporting emergencies, and contacts for further information — plus designated and trained persons to assist in safe and orderly evacuation and review with each employee whenever the plan changes. The element doing most of the work here is accounting for everyone, which means access control must produce a usable list including subcontractors, agency workers and visitors. Upstream, the real controls are ordinary: access control, perimeter management at shift change, taking threats and conflict seriously, and a route to report a concern that does not require certainty. Keep it proportionate — the same plan improves every more-likely emergency — and brief it in every language on site.

Frequently asked questions about active assailant planning on construction sites#

Is there an OSHA standard for active shooter or workplace violence?

No — there is no OSHA standard on active assailants or workplace violence as such. The applicable requirement is the emergency action plan under 1926.35, supported by Section 5(a)(1) on recognised hazards, 1926.21(b)(2) on instruction in recognising unsafe conditions, and 1926.50 on medical services and first aid.

Why doesn't Run, Hide, Fight work as written on a construction site?

Because it assumes a finished building. "Run" is complicated by scaffold stairs, ladders, excavations, stored material and often a single gate — and anyone at height has a slow exit, with a fall during panicked evacuation being a real risk. "Hide" is frequently unavailable because there is nothing that locks. The advice is sound; it simply has to be translated for the site rather than borrowed.

What does 1926.35 actually require?

An emergency action plan including emergency escape procedures and route assignments; procedures for employees who remain to operate critical operations before evacuating; procedures to account for all employees after evacuation; rescue and medical duties; the preferred means of reporting emergencies; and the names or job titles of persons to contact. The employer must also designate and train sufficient persons to assist in safe and orderly evacuation, and review the plan with each employee whenever it changes.

What is the hardest part to get right?

Accounting for everyone. On a site with several employers, agency workers, deliveries and visitors, knowing who was present — and therefore who is missing — is both the most difficult element and the first thing responders will ask for. It means access control has to produce a genuinely usable list, and it is worth testing whether yours does.

What is the most likely failure?

Not that people choose the wrong action — that most of them never find out anything is happening. Construction sites have no PA system, radios that not everyone carries or monitors, and often no single language in common. Deciding in advance how this alarm differs from the fire alarm, and how it reaches everyone, is the highest-value planning step available.

What reduces the likelihood in the first place?

Ordinary controls. Access control and a defined boundary are primary — a site anyone can walk onto is exactly that. Beyond that: managing the perimeter at shift changes when gates stand open, taking threats, escalating conflict and harassment seriously, and providing a route to report a concern about someone that does not require certainty, because people will not report a suspicion unless doing so is safe and unremarkable.

How should this be briefed?

Factually, practically, and in every language on site — a plan that only works in English on a multilingual site is not a plan. Say in advance what the talk will cover and let anyone step out without explanation, because some people on any crew have direct experience of violence. Keeping it proportionate also helps: this is a low-probability event, and the same plan improves every other emergency you are far more likely to face.

Download the active assailant toolbox talk PDF#

Get this active assailant training toolbox talk as a print-ready PDF — available in English, Spanish, Portuguese, and Turkish. Print it, hand it to the crew, and collect signatures on the included attendance sheet.

Download the PDF — free account required. New members get 5 free downloads.

Related toolbox talks#

• Site Security
• Severe Weather
• First Aid & AED
• Stop Work Authority

Sources#

• OSHA, 29 CFR 1926.35 — Employee emergency action plans: https://www.osha.gov/laws-regs/regulations/standardnumber/1926/1926.35
• OSHA, 29 CFR 1926.50 — Medical services and first aid: https://www.osha.gov/laws-regs/regulations/standardnumber/1926/1926.50
• OSHA, Workplace Violence: https://www.osha.gov/workplace-violence

This talk covers emergency planning and response. Discussion of violence can be distressing, particularly for anyone with direct experience of it — anyone affected should be supported to speak to a physician, counsellor or other qualified professional. If you or someone else is in crisis, contact your local emergency number or crisis line — in the United States, call or text 988.

Written by FieldSafetyTalk's safety professional — a CSP, ASP, CHST and OSHA Authorized Outreach Trainer with 14+ years of international construction safety experience across federal, heavy civil, and industrial projects.

Hazards covered