P23
Security Southwest Florida
active shooter training 9 min read

Uvalde (2022): When Response Doctrine Fails

On May 24, 2022, the Uvalde shooting revealed how badly a response can go when doctrine is not followed. The lessons apply far beyond law enforcement.

By P23 Security · 2026 · Serving Southwest Florida, Fort Myers, Cape Coral + more
An empty elementary school hallway at late afternoon light

A case that the nation still grieves.

The Uvalde school shooting is among the most difficult case studies in modern American security history. Not only because of the loss of 19 students and 2 teachers, but because the response, conducted by nearly 400 law enforcement officers, failed to apply the doctrine that exists specifically to prevent such losses.

This article does not recount the event in graphic detail. Those details are extensively documented in the Texas House investigative report and the Department of Justice critical incident review, both publicly available. What this article does address is what the case teaches about response doctrine, training, and the specific ways that prepared plans fail when they have not been truly internalized by the people who must execute them.

The lessons are difficult. They are also necessary, because the alternative is to leave the work undone.

The victims of Uvalde.

As with every case study in this library, the names of those who died must stand before any analysis.

Students at Robb Elementary: Makenna Lee Elrod, Layla Salazar, Maranda Mathis, Nevaeh Bravo, Jose Manuel Flores Jr., Xavier Lopez, Tess Marie Mata, Rojelio Torres, Eliahna “Ellie” Garcia, Eliahna A. Torres, Annabell Guadalupe Rodriguez, Jackie Cazares, Uziyah Garcia, Jayce Carmelo Luevanos, Maite Yuleana Rodriguez, Alexandria “Lexi” Aniyah Rubio, Alithia Ramirez, Amerie Jo Garza, and Jailah Nicole Silguero.

Teachers: Eva Mireles and Irma Garcia.

All were elementary school students and elementary school teachers whose Tuesday afternoon ended in the classrooms where they thought they were safe. Any security lesson must be held alongside the fact that the lesson is bought at their cost.

The doctrine that existed before Uvalde.

Active shooter response doctrine in American law enforcement has a specific history. Following the Columbine school shooting in 1999, law enforcement agencies across the country revised their response protocols. The previous doctrine, which called for waiting for tactical teams before entering active shooter scenes, was recognized as contributing to the loss of life at Columbine.

The new doctrine, often called “solo officer” or “first responder” doctrine, calls for first officers on scene to immediately enter the building and move toward the sound of gunfire. The logic is that every minute the attacker has uninterrupted access to potential victims extends the death toll. Fast entry by first responders, even if it creates risk for the officer, is widely understood to save lives.

This doctrine has been the standard in American law enforcement training since approximately 2000. The specific protocol is taught by the ALERRT program at Texas State University, among others. It is reinforced in academy training, in-service training, and specialized active shooter courses.

At Uvalde, nearly every officer on scene had been trained in this doctrine. They knew what the protocol was. They did not execute it.

77 min
total duration of the Uvalde attack from first contact with the school to the attacker's termination, with approximately 74 minutes elapsing before officers entered the classrooms where the attacker was located
Texas House investigative report, 2022; DOJ critical incident review, 2024

The gap between knowing and doing.

The central finding that both the Texas House investigation and the Department of Justice critical incident review documented is that response doctrine was known and not followed. The specific reasons were complex:

  • Confusion about command structure among the multiple agencies present
  • Uncertainty about the specific threat inside the classrooms
  • Inadequate training that had not produced the muscle memory to override hesitation under extreme pressure
  • Breakdown in communication among officers and commanders on scene
  • A specific commander’s judgment that the threat was contained rather than active
  • The cascading effect of inaction once initial hesitation occurred

The DOJ review concluded that the response was a “failure of police leadership, training, policies, and procedures.” The Texas House report called the response “a series of failed decisions by incident command that likely cost lives.”

This is the most important lesson from Uvalde for every organization, not just law enforcement: the gap between knowing the right answer and doing it under pressure is larger than most people assume.

What the investigations surfaced.

The Texas House committee and DOJ review produced extensive findings. Among those most relevant for broader application:

Command and control

Multiple agencies responded. Command authority was unclear in the initial minutes and remained unclear for much of the event. No single officer took definitive command. Protocols for interagency command had not been practiced.

Communications

Radio communications were fragmented across agencies and frequencies. Critical information, including 911 calls from inside the classrooms, did not reach all responders. The overall information picture among responders was incomplete throughout the event.

Tactical decisions

Specific tactical decisions (door breach timing, classroom entry, room clearing) reflected uncertainty and hesitation. Training that should have produced automatic responses did not.

School communication

The school’s active threat protocols had gaps in communication with law enforcement. Certain alerts and information flows were not reaching the responders who needed them.

Post-event coordination

Coordination of medical response, family reunification, and public communication in the immediate aftermath had significant gaps that extended trauma for families and communities.

The lessons that apply to civilian organizations.

Uvalde is a law enforcement failure, not a failure of civilian response. Still, the lessons apply across institutional settings.

Lesson 1: Trained does not equal capable.

Individuals who have received training are not thereby capable of executing that training under pressure. Capability requires depth: repeated practice, scenario work, realistic stress exposure. For civilian organizations developing response capability, the lesson is that single training sessions produce inadequate preparation. Recurring practice is required.

Lesson 2: Command clarity matters.

In any incident requiring coordinated response, someone must have authority to make decisions. Ambiguous command produces paralysis. Organizations should establish clear command structures for incidents, with documented authority and rehearsed escalation.

Lesson 3: Communication is usually the limit.

Response performance is often limited by communication quality. Organizations should invest in reliable, rehearsed communication protocols across all relevant parties: staff, volunteers, law enforcement, family, press, and others.

Lesson 4: Coordination across agencies requires pre-established relationships.

The agencies that must coordinate during an event cannot begin coordination at the event. Pre-established relationships, familiar protocols, and practiced interoperation are prerequisites. For civilian organizations, this means building relationships with first responders before they are needed.

Lesson 5: The aftermath is part of the response.

The immediate response ends when the threat is neutralized. The full response continues through medical care, family reunification, public communication, and community trauma care. Planning must include all phases, not only the initial response.

The verse counsels sober pre-assessment of capability. Uvalde reveals, painfully, what happens when the pre-assessment has not been honest. Capability was assumed but not verified. The verse’s lesson, updated for modern operational contexts, is that capability must be verified through rehearsal, and the gap between assumed and actual capability must be closed before the event that tests it.

The post-Uvalde environment.

Several substantial changes have followed Uvalde.

Texas legislative response

Texas passed legislation strengthening requirements for school security, officer response training, and coordination. Specific provisions address communication interoperability and command protocols.

National training emphasis

The ALERRT program and other active shooter response trainers have emphasized the specific findings from Uvalde. Training curricula have been updated to address command clarity, communication, and the specific decision patterns that failed.

DOJ critical incident review model

The DOJ’s review process for Uvalde has become a model for after-action investigation of significant response events. The detailed, public nature of the review has created a new standard for post-incident accountability.

Institutional review

Schools and other institutions have reviewed their own response plans with Uvalde’s findings in mind. Specific attention has gone to communication protocols, command clarity, and the interface between institutional response and law enforcement response.

The Southwest Florida application.

For organizations in Southwest Florida:

For schools

Florida’s post-Parkland legislation and post-Uvalde review work has produced specific requirements and guidance. Schools should ensure compliance with current state requirements and have reviewed their specific plans in light of Uvalde’s findings.

For daycares and children’s ministries

Coordination with law enforcement response is particularly important. The specific gaps identified at Uvalde (command clarity, communication) apply to any facility relying on LE response. Organizations should verify with local law enforcement how they would coordinate during an incident.

For churches and nonprofits

The broader lessons about trained capability apply universally. Organizations should verify their own capabilities through rehearsed practice, not through confidence in training that has not been tested under pressure.

For all organizations

The relationship with local law enforcement matters more than ever. Pre-event liaison, rehearsed interaction, and clear communication protocols should be priorities.

Continuing the work.

Uvalde did not end school shootings. Covenant School in Nashville followed in 2023. The pattern continues. What Uvalde specifically produced is the clearest public accounting yet of how prepared response can fail when preparation has not been deep enough.

The obligation is to learn with appropriate humility. Every organization planning its own response protocols, however modest, should hold Uvalde’s lessons in mind. Training is not capability. Plans are not execution. Knowing the right answer does not automatically produce doing the right thing.

The work continues because the children continue. Every organization that serves young people has a duty to ensure that the protections it plans are real, rehearsed, and capable of being executed under the pressure they are designed to address.

If your organization in Fort Myers, Cape Coral, Naples, or Port Charlotte is ready to review its response capability with the honesty Uvalde requires, we would be glad to be part of that review. The work is serious. The stakes are clear. The learning, for all its pain, is what remains owed to those who were lost.

Serving Southwest Florida · Fort Myers · Cape Coral · Naples · Port Charlotte

Ready when you are

Train the response before the day that tests it.

Taught by a combat veteran, sized for civilians. Role-appropriate, scenario-based, respectful of the people in the room.

Plan a training session