Lockdown Procedures: Protecting Schools and Workplaces During Security Threats

Introduction: What a Lockdown Is and Why It Matters

Lockdown procedures are security protocols intended to keep people safe and inside a secured space when there’s an immediate threat. Whether it is an intruder in a hallway, an armed person near an entrance, or a violent incident on campus, a lockdown is the coordinated response that creates physical separation between occupants and the source of danger. Put simply, it’s a temporary sheltering technique: everyone stays in place, doors are locked, and movement stops until the situation is resolved.

While these protocols have been used in universities, government buildings, hospitals, corporate campuses, and industrial sites across the country, the K–12 school-building context is where most guidance has been standardized, partly because of the high-profile tragedies that have forced U.S. schools to formalize their emergency plans. Institutional lockdowns also manage internal disturbances in facilities like prisons or hospitals, though the principles are similar to school and workplace settings.

Importantly, lockdowns are different from evacuations. While an evacuation moves people out of a building, a lockdown keeps them in place behind locked or barricaded doors. In an active shooter incident, a lockdown can potentially be safer than mass evacuation in situations that could potentially increase occupants’ exposure to the threat. 

Key Insights

• A lockdown is a temporary sheltering technique to protect people from threats such as an active shooter, intruder, or violent incident. When triggered, occupants get into rooms, lock doors, and stay out of sight until an all clear is given.
• Lockdown procedures must be pre-planned, practiced, and communicated in advance. Every plan should define who can declare a lockdown, how people will be notified, and what staff, students, and visitors should do during the event.
• Modern lockdown procedures should integrate multiple systems-public address, access control, emergency notification tools, and, where available, AI gun detection to reduce delay and confusion during a fast-moving incident.
• This article covers when lockdown is used, how alerts are sent, specific steps for classrooms and offices, how drills work, and how to adapt guidance for specific settings like a school building or an office campus.

What You Need to Know About Lockdowns

The key to effective lockdowns is to have triggers that are clear, the distributed authority to act, and a response that starts as soon as there is a credible threat.

When Are Lockdown Procedures Used?

Lockdown procedures are initiated when there is a credible threat of violence or danger, like an armed individual, inside a facility or immediately outside where entry is possible. Typically, they are initiated by administrators, security personnel, or law enforcement.

Many institutions have different levels of lockdown, full and modified, to match the severity and location of the threat. 

What Causes Lockdowns?

Common triggers for lockdowns include:

• An armed intruder near an entrance or in the building
• An active shooter in a hallway or common area
• A violent dispute with potential to escalate
• A credible threat called in to the school or workplace
• A police chase nearby where suspects might run onto campus
• A dangerous person in the parking lot

Who can order a lockdown? 

Typically, those who hold administrative or security positions are those who order lockdowns: principals, site administrators, security supervisors, campus police, etc. At some organizations, lockdowns can be initiated by any staff member who sees a credible threat. Regardless, policies should empower every employee to report suspicious or escalating behavior immediately.

What to Do During a Lockdown

During a lockdown, the goal is to make people harder to see, harder to reach, and less vulnerable while keeping hallways clear for first responders to move quickly. Anyone in hallways when the lockdown announcement is made should get into the nearest safe room. 

Lockdown procedures require occupants to lock doors and hide away from any other entrances, like windows; these two actions are the foundation of every response. Additionally: 

• Windows should be closed and covered with blinds or curtains, and lights should be turned off to reduce visibility from outside the room. 
• If possible, doors and windows should be barricaded with furniture. 
• Any sources of noise, such as cell phones or laptops, should be silenced to avoid informing the threat of the occupants’ location.

In educational settings, if it is safe to do so, staff should pull in nearby students or colleagues, then lock the door, and not open it for anyone until authorized responders give the all clear. 

Lockdowns are stressful for everyone involved, can be very scary, and are distressing. It’s important to try to stay calm and comfort others quietly if manageable. Lockdowns can last several hours, so be prepared to stay in place for an extended period and wait for official word before you move.

Full vs Modified Lockdown

Many schools and workplaces will distinguish between a full lockdown and a modified (or soft) lockdown, depending on whether the threat is confirmed and how close it is. Understanding which level is in effect determines what actions are expected.

Full Lockdown

A full lockdown is announced with a specific verbal alert, often a standard phrase repeated building-wide. When a full lockdown is initiated, usually:

• All movement stops immediately
• Doors are locked and barricaded
• Lights go off
• Everyone remains out of sight
• Normal operations such as class changes, meetings, and deliveries are halted
• Protocols like Run-Hide-Fight or Avoid, Deny, Defend may guide last-resort decisions if an active shooter breaches a room
• Law enforcement or clearly identified responders can end the lockdown

In most cases, and unless evacuation becomes necessary or authorized officials provide different instructions, the objective is for nobody to be able to enter or exit rooms during a full lockdown. The space inside a locked room is the safe zone until the threat is resolved.

Modified Lockdown

A modified lockdown allows for limited movement within the building. It is typically used when the threat is outside the facility or when there is police activity in the area that does not present an immediate interior danger. During a modified lockdown:

• Exterior doors are secured and visitor access is screened or denied
• Instruction or work may continue inside with restricted hallway movement
• Staff watch for updates and remain ready to escalate to full lockdown if advised

In both full and modified lockdown, staff may contact 911 to report real-time information, but should stay on the line only if it is safe and does not compromise their concealment. The administration should communicate the lockdown status clearly so everyone knows which level of response is in effect.

Lockdown vs Shelter-in-Place

“Lockdown” and “shelter-in-place” are often used interchangeably, as both mean staying indoors during an emergency. But the difference between the two does matter because the wrong response to the wrong threat can put people in more danger.

Lockdowns are usually the response to person-driven threats: an intruder, armed robbery nearby, or an active shooter. Rooms are locked, lights are off, and visibility is minimized to avoid contact with the aggressor.

Shelter-in-place orders are typically used in response to environmental or technological hazards, like chemical leaks or explosions, severe weather like tornado warnings, or airborne contaminants that make going outside dangerous. During shelter-in-place orders, people may be allowed to move within the building to get to safer areas, away from windows during a tornado, for example, or above ground level during a chemical event. But there may be differences in response; for example, it may not be a necessity to lock doors or cover windows.

Similar concepts are used in other contexts, like in public health to reduce disease transmission during severe outbreaks or pandemics, but they are different from the security-focused procedures in this article and share the common thread of restricting movement to protect life.

Active Shooter Response Within Lockdown Procedures

Lockdowns are part of active shooter preparedness, but a lockdown is not always the safest response for everyone or every situation. The location of the threat, the layout of the facility, and if there is a safe evacuation route available can all impact the best course of action. For this reason, many organizations include lockdowns in broader active shooter protocols that give people more options when an emergency unfolds.

While the terminology varies, most protocols share several common principles: move away from danger when it is safe to do so, secure or barricade a space when evacuation is not possible, communicate useful information and take defensive action only as a last resort.

• Run, Hide, Fight: Evacuate when there is a safe route, hide when escape is not possible and fight only as a last resort. Lockdown procedures align with the “Hide” step by helping occupants secure their location and get out of sight.
• ALICE: stands for Alert, Lockdown, Inform, Counter, and Evacuate. Gives people multiple options based on the situation. Lockdown is one option, not the only option in every situation.
• Avoid, Deny, Defend:  Move away from danger, deny an attacker access to your location and defend yourself as a last resort. The “Deny” step aligns with lockdown procedures like locking and barricading doors.
• Standard Response Protocol (SRP): Establishes common actions for different emergencies including Hold, Secure, Lockdown, Evacuate and Shelter. The Lockdown action uses the phrase “Locks, Lights, Out of Sight” when the threat is inside the facility.
• ASPP PRO: Organizes active shooter preparedness around Prevention, Response and Options. Places lockdown within a broader strategy that considers planning, training, communication and multiple options.

Ultimately, lockdown procedures should be part of a broader emergency response strategy, not an isolated action. Organizations need to determine not only how to secure a building, but also when to lockdown, who will initiate it, how instructions will get to people throughout the facility, and what options people have when staying in place is not the safest response.

Whatever protocol an organization chooses, those decisions should be reflected in their emergency plans, training, drills, and communication workflows so people are not left to interpret conflicting instructions during a crisis.

Preparing, Training, and Running Lockdown Drills

Lockdown procedures need to be prepared before an incident. Drills can turn written plans into “muscle memory” for students and staff. Without practice, even the best plan will fail under pressure.

Preparation Tasks

• Identify which doors and windows in every classroom and office space need to be locked and verify hardware works
• Designate safe zones in each room where people can’t be seen from corridor windows or exterior sightlines
• Ensure keys, card readers, or electronic door hardware are accessible and working
• Prepare emergency supply kits for rooms where occupants may be for several hours

Regulatory Requirements

While there are some objections over the impacts that lockdown drills have, particularly amongst young students, some states have mandated minimum requirements for lockdown drills in schools.

For example, Texas Administrative Code §103.1209 requires lockdown drills at least twice per school year (once per semester). Virginia Code §22.1-137.2 requires lockdown drills within the first 20 days of schools going back in session, and at least one subsequent drill after the first 60 days of school.

Federal OSHA rules generally do not require every workplace to conduct lockdown drills, but some employers are subject to Emergency Action Plan requirements, and OSHA recommends incorporating active-shooter preparedness into workplace emergency planning. State, local, and industry-specific requirements may also apply.

Age-Appropriate Practices

For younger students, drills should use simple, calm language and short practice times. This helps achieve the least amount of trauma and prevents unnecessary fear. Older students and adult workplaces may be suitable for more detailed scenario-based exercises. People should always practice the behaviors required by their organization’s lockdown procedure, which commonly include remaining quiet and out of sight. Communicate to parents or families in advance when drills are scheduled, so they’re not alarmed by social media posts from students.

After-Drill Reviews

After every drill:

• Gather feedback from the community: employees, teachers, students, etc. 
• Check that communication systems, locks, and alert tools worked. 
• Review the timeline: how long did it take to secure every room? Were any areas left open?
• Update written lockdown procedures based on what was learned. 

This report becomes the foundation for continuous improvement.

Communicating Procedures During An Incident

When an incident occurs, the speed and clarity of notification are always key to making sure everyone gets the right information and in an actionable amount of time. Organizations should use multiple channels so no one is relying on a single system that could fail or be missed.

Public address systems are often used to announce lockdowns in K-12 educational settings, along with classroom intercoms and internal phone alerts from the front office or security control room that reinforce this message.

In other settings, including higher ed campuses, office buildings, shopping centers, and hospital campuses, Mass Notification Systems are most effective at providing alerts during lockdowns through additional channels:

• Campus-wide text messages and emails
• Desktop pop-up alerts on staff computers
• Mobile safety apps that let users both receive alerts and report what they see
• Digital signage displaying lockdown instructions in common areas

For facilities with large outdoor spaces, lockdown alerts can be communicated via exterior speakers or sirens designed to reach open areas like athletic fields, parking lots, and courtyards. Interior voice systems can cover hallways and large rooms where PA speakers may not reach clearly.

Once a lockdown message is seen, the instructions should be acted on immediately. Don’t wait for additional confirmation even if the information seems incomplete. Every second you spend verifying through informal channels is a second lost.

After a Lockdown: All-Clear, Accountability, and Recovery

How a lockdown ends is just as important as how it starts. Only authorized officials (law enforcement, an administrator, or a designated security command authority) can give the all clear. No one else should end the lockdown, no matter what they think the threat is.

What the All Clear Looks Like

• A specific PA message saying the threat is over and it’s safe to move
• Law enforcement entering rooms and giving verbal confirmation
• A mass notification sent out on the same channels used to initiate the lockdown

Accountability

It’s always critical to make sure everyone is accounted for. In schools, that could be teachers taking attendance. At colleges, that may look like an RA doing roll calls, and at workplaces it could be HR checking names off a roster. 

Anyone missing or injured must be reported to incident command fast and systematically.

Recovery and Support

Real lockdown situations can cause social isolation, disrupt community networks, and put tension on relationships. Clear communication and support can mitigate the effects of lockdowns. To combat this, organizations should provide access to counseling or employee assistance programs, debrief meetings, and time to process emotions. 

Finally, document: incident logs, timelines, communication records, and after-action reports. These help refine lockdown procedures and coordinate better with first responders in future events.

Enabling Earlier Lockdowns with AI Gun Detection

The earlier a potential threat is identified, the sooner an organization can begin its response. Using computer vision technology, AI gun detection systems can continuously analyze existing security camera feeds for visible firearms, helping security teams identify threats potentially before a shot is fired or someone manually reports the danger.

When connected with automated security workflows, a verified detection can also trigger predefined actions, such as notifying security personnel, initiating emergency communications, or activating other response systems. By reducing the time between detection and action, organizations can potentially initiate lockdown procedures earlier, giving occupants more time to secure their locations and respond to instructions.

Building a Faster, More Coordinated Lockdown Response

Effective lockdown procedures depend on preparation, clear communication, and the ability to act quickly when a threat emerges. Connecting threat detection, emergency notification, and automated response workflows can help organizations reduce delays and give people more time to take protective action.

Omnilert brings AI gun detection, emergency notification, and automated response capabilities together to help organizations build a more coordinated approach to emergency response. Learn more about how Omnilert can support your organization’s security and lockdown procedures here.

Frequently Asked Questions (FAQs)