Once violence starts, those already present shape the outcome most, so trained on-site emergency responders should be part of the plan. Where lives may be at risk, the first-response procedures for people on site should cover: getting away from the danger area to a safer place inside or outside the facility as the situation dictates; alerting others; notifying first responders and local security or safety resources as soon as possible; giving first responders floor plans and access, and using available technology such as video surveillance to track an unresolved situation and pass live updates to staff and responders; denying the attacker further victims by telling people in the danger area to escape or shelter in place, stopping the attacker's movement where possible and barricading refuges; resisting the attacker to end the assault where escape cannot be made, or where people who cannot defend themselves face imminent harm and stepping in is feasible without unreasonable risk to the defender; giving first aid where this does not further endanger victims or rescuers; closing off affected areas quickly to protect evidence; following first responders' instructions and avoiding disruptive actions; and accounting for everyone's status and whereabouts to find those missing and answer concerned parties accurately. The organization should choose suitable people for specialized training on each of these according to their roles; clause 11 covers continuity and preparedness.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.