ASHER
Active Shooter/Hostile Event Response. The doctrinal framework that expands traditional active shooter response to include the broader range of intentional mass casualty threats agencies actually face.
In the Field
ASHER is the term that caught up with reality. For two decades, training programs and policy documents talked about active shooter response as if shooting was the only mode of attack. Then we started seeing vehicle ramming attacks, knife-and-edged-weapon attacks, fire-as-weapon, IED detonations, and combined attacks where the shooter is just one phase of a larger event. ASHER doctrine accounts for all of it. If your agency's response plan still says "active shooter" everywhere and ASHER nowhere, your plan was written for the threat environment of 2010, not the one you are operating in now.
Common Mistake
Treating ASHER as a rebrand of active shooter response when it is a doctrinal expansion that requires updated training, equipment, and tactics across multiple threat modalities.
Technical Detail
Active Shooter/Hostile Event Response (ASHER) is a doctrinal framework developed by the National Fire Protection Association (NFPA) and partner agencies to address the full range of intentional mass casualty threats facing public safety responders. The term and the underlying doctrine are codified in NFPA 3000, Standard for an Active Shooter/Hostile Event Response (ASHER) Program, first published in 2018.
Why the expansion. Traditional active shooter response doctrine emerged in the late 1990s and early 2000s, primarily in response to school shootings and similar events where firearms were the sole or dominant threat. Over the following two decades, the threat profile broadened significantly. Documented attack modalities now include:
Firearms attacks. The historical center of active shooter doctrine.
Vehicle ramming attacks. Including the 2016 Nice truck attack, the 2017 Charlottesville attack, and multiple subsequent events.
Edged weapon attacks. Knife and machete attacks producing mass casualties in transit hubs, public spaces, and venues.
Fire as a weapon. Arson attacks targeting occupied buildings, sometimes combined with other modalities.
Improvised explosive devices (IEDs). Bombings and attempted bombings targeting public events.
Combined or multi-modal attacks. Events involving more than one of the above, often in a planned sequence (vehicle ramming followed by edged weapon attack, IED followed by firearms attack).
Active shooter doctrine focused on a single weapon system did not adequately prepare responders for these other modalities or for combined events. ASHER doctrine generalizes the response framework to cover the full threat space.
NFPA 3000. The published standard establishes a framework for community-level ASHER programs that integrate fire, EMS, law enforcement, hospitals, public health, emergency management, and other partners. Key elements include:
Unified command and integrated response across agencies.
Pre-incident planning, including hazard analysis and venue-specific response plans.
Rescue Task Force (RTF) integration of fire and EMS personnel with law enforcement protection for casualty access during ongoing threats.
Casualty Collection Point (CCP) establishment and management.
Family reunification protocols.
Mental health and recovery resources for responders, victims, and the community.
Training requirements across all responding disciplines.
After-action review and continuous improvement.
ASHER and the responder. For individual law enforcement, EMS, and fire personnel, the operational implications of ASHER doctrine include:
Threat-agnostic response. Responders should be prepared to encounter any of the threat modalities listed above, alone or in combination, rather than training only for firearms scenarios.
Rescue Task Force familiarity. The RTF model is the operational backbone of casualty access during ongoing threats. EMS and fire personnel paired with law enforcement protection can deliver Direct Threat Care and Indirect Threat Care to casualties before the scene is fully secured.
Cross-disciplinary communication. ASHER incidents involve multiple agencies operating in close proximity under high-stress conditions. Common terminology, common protocols, and pre-event relationships are essential.
Equipment readiness. ASHER incidents can produce mass casualties faster than any single agency's standard equipment cache can manage. Pre-positioned bleeding control kits, mass casualty caches, and shared resources are part of effective ASHER posture.
Procurement implications. ASHER doctrine influences procurement across multiple agency types:
Bleeding control kit deployment. Schools, public venues, transit hubs, and houses of worship are increasingly procuring Stop the Bleed-style bleeding control stations. NFPA 3000 references this as a community readiness measure.
Rescue Task Force equipment. Dedicated RTF kits including ballistic protection for fire and EMS personnel, mass casualty medical supplies, and integrated communications equipment.
Tabletop and live training. ASHER-aligned exercises that involve multi-agency response across the full threat profile.
Mass casualty caches. Pre-positioned medical supplies sized for events that exceed routine response capacity.
ASHER is the language. For procurement officers reading grant applications, training proposals, equipment quotes, and policy documents, ASHER is the term increasingly appearing in place of "active shooter." Recognizing the term is recognizing that the document is operating under current rather than legacy doctrine.
Why the expansion. Traditional active shooter response doctrine emerged in the late 1990s and early 2000s, primarily in response to school shootings and similar events where firearms were the sole or dominant threat. Over the following two decades, the threat profile broadened significantly. Documented attack modalities now include:
Firearms attacks. The historical center of active shooter doctrine.
Vehicle ramming attacks. Including the 2016 Nice truck attack, the 2017 Charlottesville attack, and multiple subsequent events.
Edged weapon attacks. Knife and machete attacks producing mass casualties in transit hubs, public spaces, and venues.
Fire as a weapon. Arson attacks targeting occupied buildings, sometimes combined with other modalities.
Improvised explosive devices (IEDs). Bombings and attempted bombings targeting public events.
Combined or multi-modal attacks. Events involving more than one of the above, often in a planned sequence (vehicle ramming followed by edged weapon attack, IED followed by firearms attack).
Active shooter doctrine focused on a single weapon system did not adequately prepare responders for these other modalities or for combined events. ASHER doctrine generalizes the response framework to cover the full threat space.
NFPA 3000. The published standard establishes a framework for community-level ASHER programs that integrate fire, EMS, law enforcement, hospitals, public health, emergency management, and other partners. Key elements include:
Unified command and integrated response across agencies.
Pre-incident planning, including hazard analysis and venue-specific response plans.
Rescue Task Force (RTF) integration of fire and EMS personnel with law enforcement protection for casualty access during ongoing threats.
Casualty Collection Point (CCP) establishment and management.
Family reunification protocols.
Mental health and recovery resources for responders, victims, and the community.
Training requirements across all responding disciplines.
After-action review and continuous improvement.
ASHER and the responder. For individual law enforcement, EMS, and fire personnel, the operational implications of ASHER doctrine include:
Threat-agnostic response. Responders should be prepared to encounter any of the threat modalities listed above, alone or in combination, rather than training only for firearms scenarios.
Rescue Task Force familiarity. The RTF model is the operational backbone of casualty access during ongoing threats. EMS and fire personnel paired with law enforcement protection can deliver Direct Threat Care and Indirect Threat Care to casualties before the scene is fully secured.
Cross-disciplinary communication. ASHER incidents involve multiple agencies operating in close proximity under high-stress conditions. Common terminology, common protocols, and pre-event relationships are essential.
Equipment readiness. ASHER incidents can produce mass casualties faster than any single agency's standard equipment cache can manage. Pre-positioned bleeding control kits, mass casualty caches, and shared resources are part of effective ASHER posture.
Procurement implications. ASHER doctrine influences procurement across multiple agency types:
Bleeding control kit deployment. Schools, public venues, transit hubs, and houses of worship are increasingly procuring Stop the Bleed-style bleeding control stations. NFPA 3000 references this as a community readiness measure.
Rescue Task Force equipment. Dedicated RTF kits including ballistic protection for fire and EMS personnel, mass casualty medical supplies, and integrated communications equipment.
Tabletop and live training. ASHER-aligned exercises that involve multi-agency response across the full threat profile.
Mass casualty caches. Pre-positioned medical supplies sized for events that exceed routine response capacity.
ASHER is the language. For procurement officers reading grant applications, training proposals, equipment quotes, and policy documents, ASHER is the term increasingly appearing in place of "active shooter." Recognizing the term is recognizing that the document is operating under current rather than legacy doctrine.