Dupont Manual: Purpose and Scope
The Dupont Manual establishes a comprehensive framework for preventing, detecting, and responding to active shooter incidents. It defines objectives, outlines responsibilities, and details coordination with law enforcement, emergency services, and internal teams to protect personnel and assets. Staff comply.
Scope of the Active Shooter Response Protocol
Dupont’s Active Shooter Response Protocol defines the operational boundaries within which the organization’s security, emergency services, and leadership collaborate to mitigate threats. The scope encompasses all company-owned and leased facilities, temporary work sites, and any location where employees, contractors, or visitors may be present. The protocol applies to incidents that meet the criteria of an active shooter event, including the presence of a weapon, intent to cause harm, and the potential for mass casualties. The protocol is designed to be scalable, addressing single-incident scenarios as well as coordinated attacks across multiple sites. It mandates that all personnel receive baseline training on threat recognition, safe evacuation routes, and the use of available resources such as fire alarms and communication systems. In addition, the scope covers the integration of local law‑enforcement agencies, emergency medical services, and corporate crisis management teams to ensure a unified response. The document also specifies the responsibilities of the Designated Incident Response Team (DIRT), security staff, and facility managers in executing lockdown, evacuation, or shelter‑in‑place procedures. By clearly delineating the operational parameters, Dupont empowers its workforce to act decisively, reducing confusion and enhancing situational awareness during high‑risk events. Continuous review of the protocol’s effectiveness is mandatory, Updates follow each incident, ensuring the plan adapts to threats and safety standards
Definitions and Key Concepts
Active Shooter: an individual armed and actively threatening or attacking. Threat: any indication of potential violence. Incident Classification: categorizes events by severity, scale, and intent to guide response measures. All staff must recognize these terms and apply the protocol promptly. Stay alert.
Active Shooter, Threat, and Incident Classification
In the Dupont Manual, an active shooter is defined as an individual who is armed, actively threatening or attacking others within a facility. A threat is any credible indication—verbal, written, or observed—that an individual may commit violent acts. Incident classification follows a tiered system: Level 1 indicates a single armed individual with limited scope; Level 2 involves multiple assailants or widespread threat; Level 3 denotes an ongoing, high‑volume attack requiring mass evacuation. Staff must recognize threat signals, report promptly, and adhere to the manual’s escalation guidelines to minimize casualties and protect property.
The manual also delineates the criteria for escalating incidents, including the presence of live ammunition, the number of victims, and the duration of the threat. It emphasizes the importance of situational awareness, continuous monitoring of security feeds, and the use of threat assessment tools. Employees are trained to identify red flags such as sudden behavioral changes, possession of weapons, or explicit threats communicated through social media or internal channels. The protocol mandates immediate notification to the Incident Response Team, activation of the emergency alert system, and coordination with local law‑enforcement agencies to facilitate rapid response and containment.
Secur communications are mandatory using designated channels and a clear chain of command to avoid confusion and enable rapid, coordinated action.
Roles and Responsibilities
The Dupont Manual assigns duties to the Incident Response Team, security staff, and all employees The Incident Response Team coordinates actions, communicates with law enforcement, and manages lockdown Security staff enforce protocols support evacuation Employees must report threats follow instructions.!
Designated Incident Response Team (DIRT) and Security Personnel
The Designated Incident Response Team (DIRT) serves as the central command unit during an active shooter event. Comprised of senior security officers, facilities managers, and trained emergency responders, DIRT is responsible for rapid decision‑making, coordination with local law enforcement, and real‑time assessment of evolving threats. Each member receives specialized training in tactical communication, threat recognition, and emergency medical care, ensuring that the team can adapt to dynamic scenarios. DIRT’s core functions include initiating lockdown procedures, directing evacuation routes, and maintaining situational awareness through continuous monitoring of surveillance feeds and incident reports. The team also manages the activation of the emergency notification system, ensuring that all personnel receive timely alerts via pagers, mobile devices, and public address systems. Security personnel, operating under DIRT’s guidance, enforce physical barriers, secure perimeters, and provide immediate assistance to victims. They are trained in defensive tactics, non‑lethal crowd control, and first‑aid protocols, enabling them to protect individuals while minimizing harm. Collaboration between DIRT and security staff is facilitated through a unified communication platform that integrates voice, video, and data streams. This integration allows for synchronized actions such as coordinated lockdowns, controlled evacuations, and the safe execution of tactical interventions. DIRT also conducts post‑incident debriefings, collecting evidence, and coordinating with investigative agencies. Continuous training, regular drills, and after‑action reviews are mandated to refine procedures, address gaps, and incorporate lessons learned. By maintaining a clear chain of command, rigorous training, and robust communication, DIRT and security personnel uphold the organization’s commitment to safeguarding employees, visitors, and assets during an active shooter event. DIRT coordinates with local law enforcement for rapid response and updates.
Pre-Incident Preparedness
Risk assessments identify potential threats, guiding security upgrades and facility design. Regular training, clear evacuation routes, and communication drills ensure staff readiness Policies are reviewed annually, integrating lessons from simulations and law‑enforcement feedback to strengthen response plans
Risk Assessment, Security Measures, and Facility Design
Dupont’s pre‑incident strategy begins with a systematic risk assessment that catalogs potential threat vectors, evaluates historical incident data, and maps high‑traffic zones. The assessment informs layered security measures, including perimeter fencing, controlled access points, CCTV coverage, and intrusion detection systems. Building design incorporates secure zones, reinforced doors, and emergency egress routes that comply with NFPA 101 and OSHA standards. Personnel receive training on identifying suspicious behavior, reporting protocols, and safe room usage. Regular audits verify that access controls, visitor logs, and alarm systems function as intended. The manual mandates that all new construction or renovations integrate these safeguards from the outset, ensuring that physical barriers, surveillance, and communication infrastructure collectively reduce vulnerability and enable rapid response during an active shooter event.
Continuous monitoring of access logs, CCTV analytics, and real‑time threat detection systems allows security teams to identify anomalous behavior before escalation. Integration of biometric verification, visitor management software, and mobile alert platforms ensures that only authorized personnel occupy critical zones; Regular drills reinforce situational awareness, while feedback loops from incident reports refine protocols. Empowered staff, trained in deterrence and aid, can mitigate harm until law‑enforcement arrives, preserving life and property.
Incident Response Phases
Dupont’s Incident Response Phases outline a structured approach: Detection, Alert, Lockdown, Evacuation, and Lethal Force Guidance. Each phase triggers specific actions, communication protocols, and coordination with law enforcement, ensuring rapid containment and protection of personnel. All staff trained.!!
Lockdown, Evacuation, and Lethal Force Guidance
When an active shooter is confirmed, the Dupont Incident Response Protocol mandates an immediate lockdown of all affected areas. Employees must secure doors, lock windows, and use available barriers. The Lockdown Team activates the alarm system, informs the Incident Command Center, and initiates the “Lockdown” alert to all personnel via the internal communication network.
During lockdown, employees are instructed to remain inside, turn off lights, and stay quiet. If a safe exit route is available, the Evacuation Team coordinates a controlled exit, ensuring that all occupants move to pre‑designated assembly points. Evacuation is only performed when the threat is neutralized or when the Evacuation Team deems the route safe.
Lethal Force Guidance is provided to authorized security staff and law enforcement. The policy clarifies that lethal force is a last resort, used only when an individual poses an immediate threat to life. All responders receive training on identifying threat indicators, proper use of firearms, and de‑escalation techniques. The protocol emphasizes the importance of preserving evidence and maintaining situational awareness.
After the incident, the Incident Command Center conducts a debrief, documents actions taken, and initiates a thorough investigation. Lessons learned feed back into training and policy updates, ensuring continuous improvement of the response plan. Continuous training and reviews ensure preparednessand resilience across units.
Communication Protocols
During an active shooter event, immediate alerts are sent via the internal paging system, followed by a secure line call to local law enforcement. All updates are logged, and a media liaison coordinates external communications to prevent misinformation. Real‑time alerts via app
Internal Alerts, External Law Enforcement Coordination, and Media Management
When an active shooter is confirmed, the Dupont Incident Response System triggers a tiered alert. A silent alarm activates the internal paging network, sending a concise code (“Active Shooter – Lockdown”) to all personnel via pagers, mobile push notifications, and on‑screen displays. Simultaneously, the Security Operations Center (SOC) opens a secure voice channel to the local police department, transmitting real‑time location data, building schematics, and threat assessment. The SOC also notifies the Emergency Operations Center (EOC) and the Corporate Communications Office, which prepares a pre‑approved media statement template. Throughout the incident, the SOC logs every communication and action, timestamping them for later review.
Once law enforcement arrives, the SOC hands over the log and briefs them on the situation, ensuring a seamless transition. Post‑incident, the SOC coordinates with Public Relations to release a concise statement to the media, emphasizing safety measures and next steps. All external communications are vetted through the Legal Department to mitigate liability and comply with privacy regulations. The protocol mandates that no unverified information be released until confirmation, preserving public trust and operational security. Employees are trained to follow the “Run, Hide, Fight” guidelines, with designated safe rooms identified during drills. The SOC monitors CCTV feeds and shares live video with law enforcement, enabling precise tactical decisions. The Communications Office schedules a press conference only after the threat is neutralized, ensuring accurate information flow. All media interactions are recorded, and transcripts are archived for compliance audits. This layered approach ensures rapid internal notification, coordinated law‑enforcement response, and disciplined external communication, thereby safeguarding personnel and maintaining organizational integrity. Continuous updates keep stakeholders informed.
Training, Drills, and Continuous Improvement
Annual simulations test lock‑down, evacuation, and response. Employees receive training. After each drill, a debrief captures lessons, updates SOPs, and feeds data into a risk model. Improvement relies on analytics, feedback loops, and policy revisions.
Simulation Exercises, After Action Reviews, and Policy Updates
Simulation exercises are scheduled quarterly, employing realistic threat scenarios, live‑fire drills, and tabletop exercises. Participants include the Designated Incident Response Team, security staff, and key department leaders. Each drill is documented with video, sensor data, and participant feedback. After action reviews (AARs) follow within 48 hours, led by the Incident Commander. The AAR process captures observations, identifies gaps, and assigns corrective actions. Metrics such as response time, communication clarity, and evacuation efficiency are quantified. Findings are fed into a continuous improvement loop, updating SOPs, training modules, and facility layouts. Policy updates are approved through the Safety Committee and disseminated via email, intranet, and mandatory refresher courses. Annual policy reviews incorporate lessons from national guidelines, law‑enforcement recommendations, and emerging threat intelligence. This dynamic framework ensures the manual remains current and effective, fostering a culture of preparedness and resilience across the organization.
The manual requires quarterly tabletop exercises for each department, with detailed after‑action reports. A centralized portal stores all simulation footage, reports, and updated SOPs, ensuring easy access. A data‑analytics dashboard tracks response times, evacuation rates, and incident resolution metrics. Stakeholder feedback drives continuous policy refinement, fostering transparency and accountability across the organization.All updates reviewed quarterly by team.!!