Active shooter incidents remain one of the most serious threats facing workplaces, schools, hospitals, and public venues. While prevention is critical, organizations must also prepare for the possibility that an incident could occur. Many organizations have written emergency procedures, but few have tested how leadership teams would respond under real pressure.
A tabletop exercise allows security leaders, executives, HR, and communications staff to walk through a simulated incident and evaluate how the organization would respond.
The goal is not tactical response — that responsibility belongs to law enforcement — but rather to assess decision-making, communication, and coordination during a rapidly evolving crisis.
This article provides a simple structure for conducting an active shooter tabletop exercise.
What is an Active Shooter Tabletop Exercise?
An active shooter tabletop exercise is a discussion-based simulation where participants work through a hypothetical workplace violence scenario.
Participants discuss how their organization would respond to an unfolding incident, including:
- employee notification
- emergency lockdown procedures
- coordination with law enforcement
- media and public communication
- family notification procedures
- business continuity considerations
The exercise helps organizations identify gaps in emergency plans and ensure leadership understands their roles during a crisis.
Why Organizations Must Run Active Shooter Exercises
When a critical incident occurs, decisions must be made quickly and under stress.
Without preparation, organizations may struggle with questions such as:
- Who activates emergency notification systems?
- Who communicates with employees and families?
- Who speaks to the media?
- What happens after the incident ends?
Tabletop exercises help answer these questions before a real emergency occurs.
Benefits include:
Improved leadership coordination
Participants understand their roles and responsibilities during a crisis.
Faster emergency decision making
Executives become familiar with the types of decisions required during an incident.
Identification of planning gaps
Exercises often reveal weaknesses in communication or response procedures.
Example Active Shooter Scenario
Scenario Overview
- At 10:15 AM on a Tuesday morning, an employee calls security reporting that they heard gunshots near the parking garage entrance.
- Moments later, another employee reports seeing a person with a handgun entering the building lobby.
- Employees begin calling supervisors asking for instructions.
Step-by-Step Exercise Guide
Step 1: Define Objectives
Determine what you want to evaluate, such as emergency communication or lockdown procedures.
Step 2: Assemble Participants
Include representatives from:
- corporate security
- executive leadership
- human resources
- communications
- facilities or operations
Step 3: Present the Scenario
Introduce the initial report of gunshots and allow participants to discuss their immediate response.
Step 4: Introduce Scenario Updates
Gradually introduce new developments, such as employee injuries, police arrival, or media inquiries.
Step 5: Document Observations
Record gaps in procedures, communication delays, or unclear decision authority.
Discussion Questions
Use these prompts during the exercise:
- Who activates the emergency notification system?
- Should the facility initiate a lockdown or evacuation?
- How are employees instructed to respond?
- Who communicates with law enforcement?
- Who handles media inquiries?
- How will the organization support employees after the incident?
After Action Review Template
After the exercise, document findings using an After Action Review.
What worked well
- effective communication
- rapid leadership response
Areas for improvement
- unclear emergency authority
- gaps in notification procedures
Recommended actions
- update emergency response plans
- improve employee training
- clarify leadership roles during crises
How DrillsForge Automates Tabletop Exercises
Many organizations run tabletop exercises using slide decks or outside consultants. This process can require significant preparation time and coordination. DrillsForge simplifies the process by allowing security teams to run structured exercises online with automated scenario prompts and guided discussion questions.
Organizations can quickly launch realistic crisis simulations, document participant responses, and generate after-action reports — all in one platform.
Regular exercises help organizations strengthen preparedness and ensure leadership is ready to respond effectively when critical incidents occur.