Map the first handoff.
A receptionist, usher, custodian, volunteer, or teacher may be the first person to see a concern. Give them one named contact and a backup. Decide who calls law enforcement, who preserves relevant footage, and who communicates with the people at risk. A complicated chain of approval can lose the first useful minutes.
Describe access behavior precisely.
A visitor who asks for directions may be lost. Repeated attempts to enter staff-only areas, requests for details about security coverage, a stated threat, or refusal to leave after clear direction need assessment. Document the exact action, location, time, any response to staff, and who received the report. Use ordinary visitor procedures consistently.
Protect people while the concern is assessed.
Staff should avoid confrontation, keep routes and exits clear, and follow the organization’s emergency plan. If danger is immediate, move people away and call 911. Review with local police or emergency management how to report lower-level concerns and how to update a report when new facts arrive. Train on observable behavior, never appearance or protected identity.
Further reading: CISA venue and house-of-worship resources.