Policy Text
\n\n--- Page 1 ---\n\nSEMINOLE COUNTY SHERIFF'S OFFICE NUMBER:
G-64
GENERAL ORDER
RESCINDS:
SUBJECT: Response to Active Threats/Criminal Casualty Events (Active Assailant Response)
EFFECTIVE: December 10, 2015
REVISED: January 27, 2026
Table of Contents:
I. Purpose
II. Scope
III. Definitions
IV. Initial Responding Deputies
V. Communications Division Responsibilities
VI. Active Threat After-Action Responsibilities
VII. Annual Reviews
I. PURPOSE:
The purpose of this General Order is to establish a guideline for responding to incidents involving active
threat(s)/criminal mass casualty events in which person(s) are actively engaged in killing or attempting to
cause death or great bodily harm to people in a confined and populated area, and for the Deputies to quickly
and effectively resolve such incidents in a manner that will protect human life, prevent further injuries,
expedite medical treatment for the injured and preserve property. This General Order serves as the Seminole
County Sheriff’s Office Active Assailant Response policy pursuant to F.S. 943.6873.
II. SCOPE:
A. Due to the magnitude of an active threat/criminal mass casualty event, it is important that law
enforcement and fire personnel understand each other’s roles and responsibilities to mitigate
confusion and provide a cohesive, unified response. The overall objective for law enforcement and
fire personnel is to save lives. This is achieved by law enforcement utilizing rapid response tactics
to mitigate the threat posed by the assailant(s), then establishing either some form of a Casualty
Collection Point (CCP) or immediate victim extrication, both of which allow fire personnel the
ability to administer further lifesaving aid and expedite the transportation process to definitive
medical care. The purpose behind this methodology is simple: Let law enforcement personnel
respond in a fashion they have been trained to do and let fire personnel respond in a fashion they
have been trained to do. Ultimately, this will provide an effective, efficient mode of operation in
any major event. No matter how the victim receives the aid, the end goal is the same.
B. The history of active threat(s) is very dynamic, and no one set of procedures, policies, or guidelines
can cover every single aspect. For example, an active threat may quickly become a
hostage/barricade situation, and conversely, a hostage/barricade situation or other situation may
quickly escalate into an active assailant incident. Therefore, the Deputy must quickly adapt to the
situation as it is presented. The Deputy must also understand that this directive cannot be considered
all-inclusive, as each situation is unique and dynamic.
GENERAL ORDER
Response to Active Threats/Criminal Mass Casualty Events
G-64 Page 1 OF 11\n\n--- Page 2 ---\n\nC. Most active threat incidents have been committed by a lone assailant; however, some have been
committed by multiple assailants. Many active threat incidents have been committed in extremely
close quarters, while a few have been committed at longer distances by a sniper. Tragic incidents
experienced across the country suggest that the typical police response involving containment,
isolation, specialty teams, and negotiation is not adequate in cases of an active threat(s). Unlike
most criminals, active threat(s) are likely to continue to use deadly physical force until an
intervention occurs. They knowingly engage in criminal acts knowing that they will probably be
killed during the event and also know that, without a doubt, multiple law enforcement officers will
be en route to the event. The active threat(s) response concept represents a paradigm shift in patrol
tactics to move swiftly and aggressively to the scene and stop the threat(s). These situations require
the initial Deputies arriving on the scene to have the authority, wherewithal, and capability to take
immediate action without waiting for other Deputies, Officers, Supervisors, and Command Staff or
the arrival of specialty units such as SWAT, Crisis Negotiators, etc.
III. DEFINITIONS:
A. Active Threat:
An active threat is defined by the U.S. Department of Homeland Security as suspect(s) who is/are
actively engaged in causing or threatening to cause death or great bodily injury to others. In most
cases, active threat(s) use firearm(s), and there is no pattern or method to their selection of victims.
An event could also be facilitated by other improvised weapons such as knives, blunt objects,
explosives, vehicles, Unmanned Aerial Vehicles (UAV), or any other weapon of opportunity. This
should not undermine the Deputy’s perception of the event's seriousness due to the lack of a known
firearm. Most of these cases have occurred in locations where the shooter has been undeterred and
unobstructed from carrying out their attack. Incident locations have often been described as soft
targets with limited active security measures or armed personnel to protect members of the public.
B. Casualty Collection Point (CCP):
A casualty collection point is an area in the warm zone, secured by law enforcement personnel to
provide a safe environment for fire department personnel to begin treating and triaging patients. It
should be defendable and, if possible, have secondary exits to the structure's exterior. The location
is unique and dictated based on the environment or the location of the incident. The location could
be created and utilized before the assailant(s) have been eliminated, depending on the
building/location/size, etc. This would not be created by the initial responding Deputies but at a
point after a command post has been established. The intent of the CCP is to package, stabilize and
eventually evacuate the victims. This is not a substitute for definitive medical care.
C. Contact Deputy/Contact Team/Move To Contact Team:
Singular or multiple Deputies are charged with locating, isolating, containing, and eliminating the
threat(s).
D. Incident Command Post (CP):
The location a Supervisor determines to be an adequate place to begin controlling the scene. For
example, the Command Post could become a Unified Command Post (UCP) with the Fire
Department or be relocated to a different site, depending on the environment/scene.
E. Immediate Threat:
The most immediate threat to the Deputy at the time.
F. Indicators:
Indicators are items that suggest the path or last known location of the active threat(s). Examples:
blood, blood trails, shell casings, etc.
GENERAL ORDER
Response to Active Threats/Criminal Mass Casualty Events
G-64 Page 2 OF 11\n\n--- Page 3 ---\n\nG. Limited Penetration:
Limited penetration is a technique that allows a Deputy to check a room or space (not room
searching) without fully entering the room or space and utilizes the doorway/opening as cover and
concealment. The technique utilized is the 45/90 hard corner.
H. Link-Up:
Two armed elements (law enforcement) come in contact with each other during an event or time of
stress. After linking up, the elements can formulate a plan to join together or stay in the original
element and continue in different directions. Examples: two separate single officers linking up to
become a two-officer element, two separate two-officer elements linking up to become a four-person
element, etc.
I. Threshold assessment:
Visually clearing as much of a room or opening from the outside before making the limited
penetration.
J. Rescue Task Force:
A team of fire department personnel, under law enforcement officers' protection, enter the scene to
begin searching or treating victims. RTF members are not contact team members who search for
the assailant(s). Law enforcement officers must protect fire department personnel at all costs.
K. Stimulus:
Stimulus is anything that drives or directs a Deputy to the active threat(s) known location. This
should be treated as bone fide evidence that the active threat(s) are in a specific place. Examples:
gunfire, screaming, people pointing in the direction of the suspect, etc.
L