Active Shooter Incidents: Active Shooter Incidents: The Stru

What Initiates the Transition from “Stop the Killing” to “Stop the Dying” in an Active Shooter / Mass Casualty Incident?

The goal is not: → Eliminating all risk.

The goal is: → Controlling enough risk to begin saving lives.

That is the true transition point!

One of the most critical command decisions during an Active Shooter/Mass Casualty Incident (AS/MCI) is determining when the operational priority transitions from neutralizing the threat to aggressively saving lives.

The transition to “Stop the Dying” does not occur simply because officers feel the threat is over.

It occurs when the threat is sufficiently reduced or isolated to permit organized rescue operations without creating unacceptable additional casualties.

In modern doctrine, three primary conditions commonly initiate this transition:

1. The Suspect is DEAD or UNDER CONTROL

This is the clearest and most straightforward transition point.

Examples:

• Suspect neutralized
• Suspect in custody
• Suspect physically controlled      by officers
• Weapons secured
• No continuing hostile action

At this point:

• The immediate killing threat      has stopped
• Casualties are now the      operational priority
• Time-sensitive survivable      injuries become the focus

This is where the command emphasis rapidly shifts toward:

• Tourniquet application
• Triage
• Casualty movement
• Secure corridors
• Rescue Task Force deployment
• Rapid evacuation to      definitive care

The danger in many historical incidents is that officers continue prolonged clearing operations after the suspect is down, even when:

• no gunfire exists,
• no intelligence supports      additional suspects,
• no new victims are being      discovered.

This creates the classic:

“Searching for unknown threats while known victims die.”

Modern doctrine increasingly recognizes that:

Once the primary threat is controlled, every minute spent delaying rescue increases preventable deaths.

2. The Suspect is CONTAINED

Containment is one of the most misunderstood transition points.

The suspect may still be alive and armed, but:

• movement is restricted,
• law enforcement has      positional advantage,
• the threat is isolated,
• officers can prevent      expansion of the attack.

Examples:

• Barricaded suspect in a room
• Suspect pinned in a hallway
• Locked classroom containment
• Stairwell isolation
• Interior perimeter      established

In these situations:

• the tactical problem becomes      localized,
• while the medical problem      expands rapidly.

This is where command discipline becomes essential.

Without command structure:

• officers often continue “Blue      Tsunami” flooding,
• large numbers self-deploy      into the structure,
• casualty evacuation stalls,
• Fire/EMS integration is      delayed.

Instead, containment should trigger:

• Interior command organization
• Secure corridor establishment
• Transition to rescue      operations
• Controlled deployment of      additional officers
• RTF integration
• CCP/ATP flow development

The critical realization:

You do not need a completely sterile structure to begin saving lives.

If the threat is isolated and movement controlled:

• rescue operations can begin      in protected areas,
• while tactical elements      continue containment.

This is where the Incident Command System becomes crucial:

• tactical operations continue,
• rescue operations expand      simultaneously.
• 
  

3. The Suspect has FLED

This is perhaps the most operationally difficult transition point.

When the suspect flees:

• uncertainty increases,
• officers fear secondary      attacks,
• command may hesitate to      commit resources to rescue.

However, statistics and operational experience show:

• most active shooter incidents      involve a single suspect,
• additional attackers are      uncommon,
• prolonged searches without      stimulus often delay lifesaving care.

Key concept:

“Do not chase ghosts.”

If:

• gunfire has ceased,
• no actionable intelligence exists,
• no continuing violence is occurring,
• and casualties remain untreated,

then command must carefully balance:

• continued pursuit,
• versus immediate rescue priorities.

This does NOT mean abandoning security.

It means:

• assigning resources intelligently,
• maintaining perimeter operations,
• deploying contact teams appropriately,
• while simultaneously initiating rescue and evacuation.

The fleeing suspect model often requires:

• exterior containment,
• coordinated searches,
• intelligence gathering,
• while interior rescue operations aggressively expand.

This becomes a command-and-control problem—not merely a tactical problem.

The Critical Operational Shift

The transition from: “Stop the Killing” to “Stop the Dying” is fundamentally a COMMAND TRANSITION.

It requires leadership to recognize:

• when continued tactical searching no longer provides proportional benefit,
• and when survivable casualties become the greater operational priority.

The agencies that perform this well typically:

• establish interior command early,
• prevent uncontrolled officer convergence,
• create secure corridors rapidly,
• integrate Fire/EMS quickly,
• move victims toward definitive care immediately.

The agencies that struggle often experience:

• uncontrolled self-deployment,
• fragmented communications,
• prolonged searching without stimulus,
• delayed medical integration,
• preventable deaths.
• 
  

The Operational Reality

A structure can never be made completely “safe” during an evolving incident.

If responders wait for perfect certainty before initiating rescue:

• evacuation is delayed,
• hemorrhage continues,
• airway compromise worsens,
• preventable deaths increase.

Core Takeaways

Suspect Controlled

→ Full transition to rescue operations

Suspect Contained

→ Simultaneous tactical containment + rescue expansion

Suspect Fled

→ Balance pursuit with aggressive lifesaving operations

Final Doctrine Point

“Stop the Killing → Stop the Dying” is not merely a tactical sequence.

It is a command decision about:

• priorities,
• risk management,
• resource control,
• and time-sensitive survivability.
• 
  

Because in an Active Shooter/Mass Casualty Incident

• Stop the Killing → Stop the Dying: Balancing Responder Risk and Victim Survival
• In the response to an Active Shooter/Mass Casualty incident “Stop the Dying” Begin When Risk Is Managed, Not Eliminated