Workplace Violence Prevention Is a Governance and Legal Risk Issue — Not a Training Issue

I don’t teach people how to fight shooters. I help organizations prevent violence before it starts. For Boards of Directors and Legal leaders, this distinction is not semantic — it is material.

Why Post-Incident Reviews Miss the Point

When serious workplace violence occurs, reviews often focus on response:

• Was training adequate?
• Were procedures followed?
• Did employees act quickly?

From a governance and legal perspective, these questions arrive too late.

Workplace violence is not primarily a failure of reaction.  It is most often a failure of oversight, decision-making, and risk governance that occurs well before a weapon appears.

Workplace Violence Is a Foreseeable, Manageable Risk

From a governance standpoint, workplace violence is a foreseeable and manageable enterprise risk — not a random or unavoidable event. In nearly every significant incident, warning signs were present:

• Escalating or disruptive behavior
• Unresolved interpersonal conflict or grievances
• Threatening, concerning, or fixation-based communications
• Reports raised by employees or managers that did not result in action

Legal and reputational exposure rarely stems from a lack of awareness. It stems from how organizations process, assess, document, and act on information once concerns are raised.

Where Governance and Oversight Commonly Break Down

From a Board and Legal vantage point, prevention failures follow consistent patterns:

• Fragmented ownership of risk— HR, management, security, and legal each hold partial information, but no single function is accountable for synthesizing and managing emerging threats.
• Undefined escalation thresholds— Organizations lack clear criteria for when behavior transitions from an employee relations issue to a safety, security, or legal risk issue.
• Inconsistent decision-making— Similar behaviors are handled differently across departments, locations, or leaders, increasing exposure related to foreseeability, negligence, and unequal treatment.
• Ambiguity of authority— As risk increases, it is often unclear who has the authority — and obligation — to intervene decisively and document decisions.

These are not training gaps. They are governance, control, and risk-management failures.

The Legal Limits of Reaction-Based Approaches

Response and emergency training has value. However, it does not satisfy an organization’s duty of care on its own.

Training alone cannot:

• Substitute for structured threat or behavior-based risk assessment
• Cure delayed or inconsistent intervention
• Demonstrate reasonable management of foreseeable risk
• Provide defensible documentation of decision-making

Courts and regulators consistently examine whether organizations took reasonable, documented steps to identify, assess, and mitigate known risks — not merely whether employees were trained to respond once violence occurred.

From a legal standpoint, over-reliance on reaction training can create a false sense of compliance while leaving upstream exposure unaddressed.

What Defensible Workplace Violence Prevention Looks Like

Organizations that manage violence risk effectively treat prevention as an enterprise risk management function, aligned with governance and legal oversight.

Key elements include:

• Structured processes for identifying and documenting concerning behavior
• Consistent criteria for assessing and prioritizing risk
• Clearly defined roles, authority, and escalation pathways
• Early, coordinated intervention supported by defensible documentation

This approach allows leadership to demonstrate good-faith, reasonable efforts to manage foreseeable risk — a critical factor in litigation, regulatory review, insurance scrutiny, and Board oversight.

The Board-Level Question That Matters

The most important question for Boards and Legal teams is not:

“Have we trained employees how to respond?”

It is:

“Do we have a defensible, consistently applied system to identify and manage workplace violence risk before a crisis occurs?”

For Boards, this is less about crisis response and more about oversight of decision quality before harm occurs. Because workplace violence prevention is not a tactical issue. It is a governance, risk, and liability issue.

And hope is not a risk-management strategy.