Uvalde (2022): When Response Doctrine Fails
On May 24, 2022, the Uvalde shooting revealed how badly a response can go when doctrine is not followed. The lessons apply far beyond law enforcement.
A case that the nation still grieves.
The Uvalde school shooting is among the most difficult case studies in modern American security history. Not only because of the loss of 19 students and 2 teachers, but because the response, conducted by nearly 400 law enforcement officers, failed to apply the doctrine that exists specifically to prevent such losses.
This article does not recount the event in graphic detail. Those details are extensively documented in the Texas House investigative report and the Department of Justice critical incident review, both publicly available. What this article does address is what the case teaches about response doctrine, training, and the specific ways that prepared plans fail when they have not been truly internalized by the people who must execute them.
The lessons are difficult. They are also necessary, because the alternative is to leave the work undone.
The victims of Uvalde.
As with every case study in this library, the names of those who died must stand before any analysis.
Students at Robb Elementary: Makenna Lee Elrod, Layla Salazar, Maranda Mathis, Nevaeh Bravo, Jose Manuel Flores Jr., Xavier Lopez, Tess Marie Mata, Rojelio Torres, Eliahna “Ellie” Garcia, Eliahna A. Torres, Annabell Guadalupe Rodriguez, Jackie Cazares, Uziyah Garcia, Jayce Carmelo Luevanos, Maite Yuleana Rodriguez, Alexandria “Lexi” Aniyah Rubio, Alithia Ramirez, Amerie Jo Garza, and Jailah Nicole Silguero.
Teachers: Eva Mireles and Irma Garcia.
All were elementary school students and elementary school teachers whose Tuesday afternoon ended in the classrooms where they thought they were safe. Any security lesson must be held alongside the fact that the lesson is bought at their cost.
The doctrine that existed before Uvalde.
Active shooter response doctrine in American law enforcement has a specific history. Following the Columbine school shooting in 1999, law enforcement agencies across the country revised their response protocols. The previous doctrine, which called for waiting for tactical teams before entering active shooter scenes, was recognized as contributing to the loss of life at Columbine.
The new doctrine, often called “solo officer” or “first responder” doctrine, calls for first officers on scene to immediately enter the building and move toward the sound of gunfire. The logic is that every minute the attacker has uninterrupted access to potential victims extends the death toll. Fast entry by first responders, even if it creates risk for the officer, is widely understood to save lives.
This doctrine has been the standard in American law enforcement training since approximately 2000. The specific protocol is taught by the ALERRT program at Texas State University, among others. It is reinforced in academy training, in-service training, and specialized active shooter courses.
At Uvalde, nearly every officer on scene had been trained in this doctrine. They knew what the protocol was. They did not execute it.
The gap between knowing and doing.
The central finding that both the Texas House investigation and the Department of Justice critical incident review documented is that response doctrine was known and not followed. The specific reasons were complex:
- Confusion about command structure among the multiple agencies present
- Uncertainty about the specific threat inside the classrooms
- Inadequate training that had not produced the muscle memory to override hesitation under extreme pressure
- Breakdown in communication among officers and commanders on scene
- A specific commander’s judgment that the threat was contained rather than active
- The cascading effect of inaction once initial hesitation occurred
The DOJ review concluded that the response was a “failure of police leadership, training, policies, and procedures.” The Texas House report called the response “a series of failed decisions by incident command that likely cost lives.”
This is the most important lesson from Uvalde for every organization, not just law enforcement: the gap between knowing the right answer and doing it under pressure is larger than most people assume.
What the investigations surfaced.
The Texas House committee and DOJ review produced extensive findings. Among those most relevant for broader application:
Command and control
Multiple agencies responded. Command authority was unclear in the initial minutes and remained unclear for much of the event. No single officer took definitive command. Protocols for interagency command had not been practiced.
Communications
Radio communications were fragmented across agencies and frequencies. Critical information, including 911 calls from inside the classrooms, did not reach all responders. The overall information picture among responders was incomplete throughout the event.
Tactical decisions
Specific tactical decisions (door breach timing, classroom entry, room clearing) reflected uncertainty and hesitation. Training that should have produced automatic responses did not.
School communication
The school’s active threat protocols had gaps in communication with law enforcement. Certain alerts and information flows were not reaching the responders who needed them.
Post-event coordination
Coordination of medical response, family reunification, and public communication in the immediate aftermath had significant gaps that extended trauma for families and communities.
The lessons that apply to civilian organizations.
Uvalde is a law enforcement failure, not a failure of civilian response. Still, the lessons apply across institutional settings.
Lesson 1: Trained does not equal capable.
Individuals who have received training are not thereby capable of executing that training under pressure. Capability requires depth: repeated practice, scenario work, realistic stress exposure. For civilian organizations developing response capability, the lesson is that single training sessions produce inadequate preparation. Recurring practice is required.
Lesson 2: Command clarity matters.
In any incident requiring coordinated response, someone must have authority to make decisions. Ambiguous command produces paralysis. Organizations should establish clear command structures for incidents, with documented authority and rehearsed escalation.
Lesson 3: Communication is usually the limit.
Response performance is often limited by communication quality. Organizations should invest in reliable, rehearsed communication protocols across all relevant parties: staff, volunteers, law enforcement, family, press, and others.
Lesson 4: Coordination across agencies requires pre-established relationships.
The agencies that must coordinate during an event cannot begin coordination at the event. Pre-established relationships, familiar protocols, and practiced interoperation are prerequisites. For civilian organizations, this means building relationships with first responders before they are needed.
Lesson 5: The aftermath is part of the response.
The immediate response ends when the threat is neutralized. The full response continues through medical care, family reunification, public communication, and community trauma care. Planning must include all phases, not only the initial response.
The verse counsels sober pre-assessment of capability. Uvalde reveals, painfully, what happens when the pre-assessment has not been honest. Capability was assumed but not verified. The verse’s lesson, updated for modern operational contexts, is that capability must be verified through rehearsal, and the gap between assumed and actual capability must be closed before the event that tests it.
The post-Uvalde environment.
Several substantial changes have followed Uvalde.
Texas legislative response
Texas passed legislation strengthening requirements for school security, officer response training, and coordination. Specific provisions address communication interoperability and command protocols.
National training emphasis
The ALERRT program and other active shooter response trainers have emphasized the specific findings from Uvalde. Training curricula have been updated to address command clarity, communication, and the specific decision patterns that failed.
DOJ critical incident review model
The DOJ’s review process for Uvalde has become a model for after-action investigation of significant response events. The detailed, public nature of the review has created a new standard for post-incident accountability.
Institutional review
Schools and other institutions have reviewed their own response plans with Uvalde’s findings in mind. Specific attention has gone to communication protocols, command clarity, and the interface between institutional response and law enforcement response.
The Southwest Florida application.
For organizations in Southwest Florida:
For schools
Florida’s post-Parkland legislation and post-Uvalde review work has produced specific requirements and guidance. Schools should ensure compliance with current state requirements and have reviewed their specific plans in light of Uvalde’s findings.
For daycares and children’s ministries
Coordination with law enforcement response is particularly important. The specific gaps identified at Uvalde (command clarity, communication) apply to any facility relying on LE response. Organizations should verify with local law enforcement how they would coordinate during an incident.
For churches and nonprofits
The broader lessons about trained capability apply universally. Organizations should verify their own capabilities through rehearsed practice, not through confidence in training that has not been tested under pressure.
For all organizations
The relationship with local law enforcement matters more than ever. Pre-event liaison, rehearsed interaction, and clear communication protocols should be priorities.
Continuing the work.
Uvalde did not end school shootings. Covenant School in Nashville followed in 2023. The pattern continues. What Uvalde specifically produced is the clearest public accounting yet of how prepared response can fail when preparation has not been deep enough.
The obligation is to learn with appropriate humility. Every organization planning its own response protocols, however modest, should hold Uvalde’s lessons in mind. Training is not capability. Plans are not execution. Knowing the right answer does not automatically produce doing the right thing.
The work continues because the children continue. Every organization that serves young people has a duty to ensure that the protections it plans are real, rehearsed, and capable of being executed under the pressure they are designed to address.
If your organization in Fort Myers, Cape Coral, Naples, or Port Charlotte is ready to review its response capability with the honesty Uvalde requires, we would be glad to be part of that review. The work is serious. The stakes are clear. The learning, for all its pain, is what remains owed to those who were lost.
Ready when you are
Train the response before the day that tests it.
Taught by a combat veteran, sized for civilians. Role-appropriate, scenario-based, respectful of the people in the room.
Plan a training sessionRelated Insights
Keep reading.
Avoid, Deny, Defend: The Doctrine Everyone Should Know
Avoid, Deny, Defend is the civilian doctrine for active threats from Texas State's ALERRT program. Here's what it is, why it matters, and how it gets taught.
Priorities of Life in a Mass-Casualty Moment
In a mass-casualty moment, care is given by priority, not by sequence. Here's how civilian responders think about who to help first, and why.
Scenario-Based Practice vs. Lecture: Why Repetition Beats Reading
Security training that sticks is training that was practiced. Here's why scenario repetition outperforms lecture, and how to build rehearsal into your program.