Guide Shelter Report (GSR) Just Released

Episode Description: Beyond Run Hide Tell – Understanding the Guide Shelter Report (GSR)

In this episode, we dive into the Guide Shelter Report (GSR), a crucial set of dynamic response principles designed to help businesses and organisations effectively respond to a terrorist attack. Developed by the National Counter Terrorism Security Office (NaCTSO) in consultation with businesses of all sizes, GSR represents a vital evolution in protective security and organisational preparedness.

While the well-known Run Hide Tell (RHT) protocol remains essential life-saving advice for the general public, it was never intended to serve as a primary incident response plan for businesses. Simply telling staff to run or hide places the burden of survival entirely on individuals, failing to support a structured response that meets an organisation's legal and duty of care responsibilities.

Throughout the episode, we break down the three core components of GSR:

Guide: Directing the public, visitors, and personnel away from danger through evacuation, invacuation to a safe internal area, or initiating a lockdown.

Shelter: Keeping people safe by securing them inside a locked building, keeping them away from external walls and windows, or moving them to a pre-selected external location.

Report: Safely contacting the emergency services (999) using the ETHANE framework, only once the immediate danger has passed.

Here it is: https://www.protectuk.police.uk/gsr

We discuss how these principles are designed to be dynamic, meaning they do not have to be executed in a strict sequence. This flexibility allows staff to adapt to fast-moving and complex threat scenarios, such as Marauding Terrorist Attacks (MTA), Vehicle as a Weapon (VAW) incidents, or Improvised Explosive Devices (IEDs).

However, simply knowing the acronym isn't enough. We also explore the practical steps businesses operating within Venues and Public Spaces (VaPS)—which range from local cafes and retail stores to massive sports stadiums and transport hubs—must take to actually implement these principles. We cover how to embed GSR into your organisation's everyday security culture by conducting risk assessments, developing concrete incident management procedures, and ensuring all staff, including temporary workers and volunteers, are thoroughly trained. Finally, we emphasise the critical importance of testing and exercising these plans so that your staff can act with confidence when it matters most.

Tune in to learn how your organisation can move beyond individual survival tactics to build a comprehensive, coordinated response plan capable of protecting people and saving lives

Transcript

SPEAKER_01 0:00

Imagine you're uh you're grabbing a coffee at your absolute favorite bustling neighborhood cafe. You know the exact vibe I'm talking about.

SPEAKER_00 0:07

Oh, definitely. Everyone has that one spot.

SPEAKER_01 0:08

Right. So it's like a Tuesday morning, the espresso machine is hissing and clattering in the background, people are just tapping away on their laptops with their headphones in, and the line for pastries is stretching right out the front door.

SPEAKER_00 0:22

Aaron Ross Powell Just a totally normal everyday scene.

SPEAKER_01 0:25

Exactly. Or, you know, maybe picture yourself walking through a massive, crowded shopping center on a Saturday afternoon. You're completely surrounded by families, weekend shoppers, teenagers hanging out, people loaded down with bags.

SPEAKER_00 0:40

Yeah, it's loud, it's chaotic, but it's a safe kind of chaos.

SPEAKER_01 0:43

Right. It's completely mundane. But then in just a fraction of a second, that entire atmosphere completely shatters. Yeah. There's a loud disturbance, maybe it's shouting, or maybe it's a sound you can't quite identify at first, and panic just ripples through the crowd like a physical shockwave. People start dropping things. What is your very first instinct?

SPEAKER_00 1:02

Aaron Ross Powell Well, if you're a member of the general public, your instinct, and honestly, what human biology essentially screams at you to do is to run or to hide.

SPEAKER_01 1:13

Yeah, you just want to get yourself out of danger as fast as possible.

SPEAKER_00 1:16

Exactly. But let's flip that perspective for a second. Think about the teenager standing behind that cafe counter holding a milk pitcher. What goes through their mind?

SPEAKER_01 1:24

Oh, wow, yeah.

SPEAKER_00 1:25

Yeah.

SPEAKER_01 1:26

What about the security guard by the shopping center doors, or you know, the usher taking tickets at a theater? Do they just drop everything and run too?

SPEAKER_00 1:33

And that right there is the absolute core tension of any public emergency. W we expect almost subconsciously that when we're in a venue or a public space, the people wearing the lanyards, the aprons, or the uniforms will somehow step up and take charge.

SPEAKER_01 1:48

We really do. We just look around and we expect them to know what to do.

SPEAKER_00 1:51

Right. But for a very long time, the gap between what the public expects from those frontline staff in a crisis and what those staff are actually empowered, trained, and legally expected to do has been incredibly wide.

SPEAKER_01 2:04

And honestly, a pretty dangerous gap. Which is exactly what we are focusing on today. Welcome to our deep dive into a really crucial new framework.

SPEAKER_00 2:13

Yes, a very important one.

SPEAKER_01 2:14

We're looking at a newly developed framework from the National Counterterrorism Security Office in the UK. They go by the acronym ARETSO. And we are unpacking a specific document they've produced called the Guide Shelter Report, or GSR. Right, the GSR. So our mission today is to really understand how the burden of survival in a chaotic, unthinkable crisis is shifting. It's shifting away from just the individual trying to save themselves and moving heavily toward an organizational duty.

SPEAKER_00 2:43

Which is a massive paradigm shift.

SPEAKER_01 2:45

It really is. We're going to look at why a dusty 50-page binder of emergency protocols sitting in a back office is functionally useless compared to an empowered, well-trained frontline staff member who actually knows what to do when seconds count.

SPEAKER_00 2:58

And the context for this shift is absolutely vital to understand. You mentioned the public's instinct to run or hide earlier. Trevor Burrus, Jr.

SPEAKER_01 3:05

Yeah, the basic survival instinct.

SPEAKER_00 3:07

Right. Well, that's actually formalized in the UK as the run-hide tell advice. It's been the cornerstone of public awareness campaigns for years.

SPEAKER_01 3:15

Oh, right. One if you can, a hide if you can't, tell the police when it's safe.

SPEAKER_00 3:18

Exactly. And it is the standard protocol for the general public during a terrorist attack or a violent incident. But, and this is the big but, businesses operating in what this report calls venues and public spaces, or VVPS, they have a legal and a moral duty of care.

SPEAKER_01 3:37

Aaron Powell A duty of care. Break that down for me.

SPEAKER_00 3:40

Well, basically, you cannot operate a venue, invite hundreds of people inside to spend their money, and then, if the worst happens, have your staff completely abandon those customers defend for themselves.

SPEAKER_01 3:50

I mean, when you put it like that, it makes total sense. And this brings us to the legislative side of things, because this isn't just about businesses wanting to do the right thing anymore, is it?

SPEAKER_00 3:58

No, it's not. It is actually becoming the law. We are looking at the upcoming Terrorism Protection of Premises Act 2025.

SPEAKER_01 4:05

Which most people probably know better as Martin's law, right?

SPEAKER_00 4:08

Yes, exactly. And to really understand the weight of that legislation, we have to look at where it came from. It's named in tribute to Martin Head, who was one of the 22 people tragically killed in the Manchester Arena bombing in 2017.

SPEAKER_01 4:22

Such an awful tragedy.

SPEAKER_00 4:23

It was. And after that horrific attack, his mother, Figin Murray, campaigned tirelessly. She realized something really critical about our infrastructure.

SPEAKER_01 4:33

What was that?

SPEAKER_00 4:34

She realized that while aviation and public transport had strict security regulations, public venues just didn't have the same mandatory requirements to prepare for terrorist threats.

SPEAKER_01 4:44

Wow. So an airport has tons of protocol, but a massive concert arena didn't.

SPEAKER_00 4:48

Right. And Martin's Law is designed to change that entirely. It makes proactive preparation. So things like risk assessments, staff training, having actual emergency plans, not just a best practice, but a fundamental legal expectation for venues.

SPEAKER_01 5:01

Okay, so we have this massive shift from personal survival to organizational duty. But to really grasp why this new Guide Shelter report guidance was created, we need to look at the mechanics of the counterterrorism strategy itself.

SPEAKER_00 5:13

Absolutely. Yeah. Because this isn't just theory cooked up in a boardroom by people who have never been in an emergency. It's born out of very stark realities.

SPEAKER_01 5:22

Aaron Powell Right. And NAS CTSO, the group behind this report, they sit in a very unique position within the government, don't they?

SPEAKER_00 5:29

They do. NASCTSO is a police hosted unit that sits right within the UK's national counterterrorism policing headquarters.

SPEAKER_01 5:37

Aaron Powell So they're deeply embedded in law enforcement.

SPEAKER_00 5:39

Exactly. They operate essentially as a national government agency supporting the UK's broader counter-terrorism strategy. And that broader strategy is known as contest.

SPEAKER_01 5:49

Contest. Okay, and how does that break down?

SPEAKER_00 5:51

Well, contest is divided into four main pillars.

SPEAKER_01 5:54

Yeah.

SPEAKER_00 5:54

You have prevent, pursue, protect, and prepare. Nessy TSO specifically operates in those last two areas, protect and prepare.

SPEAKER_01 6:01

So their job isn't necessarily to go out and catch terrorists on the street.

SPEAKER_00 6:05

No, not at all. Their job is to look at the physical spaces of the country and figure out how to make them harder to attack. And also how to ensure that if an attack does happen, the impact is mitigated as much as possible. Got it. They consult with businesses of all sizes, from massive stadiums to tiny high street shops. And through that consultation, they realize that the existing Run Hide Tell advice, while absolutely life-saving for the individual on the street, was never designed to be an organization's primary incident response plan.

SPEAKER_01 6:36

Yeah, because Runhide Tell is inherently an individualistic protocol. I mean, think about it. It relies entirely on independent decision making.

SPEAKER_00 6:44

Precisely.

SPEAKER_01 6:44

You see a threat, you run away from it. If you can't run, you hide. Then when you're safe, you tell the police. It is literally every person for themselves.

SPEAKER_00 6:54

Right. It places the entire burden of survival on the individual. But as an organization with a duty of care, you just cannot build a response plan around every person for themselves.

SPEAKER_01 7:04

No, I imagine that would be a disaster.

SPEAKER_00 7:06

It would be. If your staff simply execute run-hide tell and flee out the back door, leaving a dining room full of confused, terrified patrons behind patrons who might not know the layout of the building, who might not know where the emergency exits are, the organization has failed.

SPEAKER_01 7:21

They failed in their duty to take reasonable steps to ensure safety.

SPEAKER_00 7:25

Exactly. And the Guide Shelter Report is the counterbalance to that individualistic approach. It's a coordinated, structured incident response designed specifically for staff to manage the safety of others.

SPEAKER_01 7:36

To really ground this, the source material points to a specific and frankly harrowing case study to show what this looks like in practice. It looks at the London Bridge Attack on June 3rd, 2017. Yes. Let's walk through what happened there, because the geography and the timeline of that event perfectly illustrate the need for this frontline staff protocol.

SPEAKER_00 7:58

The London Bridge Attack is a profound, tragic example of why frontline staff response is so critical, especially in dense, complex urban environments.

SPEAKER_01 8:07

So how did it unfold?

SPEAKER_00 8:09

Well, during that incident, three attackers used a van to run over pedestrians on London Bridge. That was the first phase of the attack. Then they abandoned the vehicle and continued the attack on foot, moving down into the Borough Market area.

SPEAKER_01 8:20

And for anyone who hasn't been to Borough Market, you really have to picture the layout. It's not a single contained building with one front door and one back door.

SPEAKER_00 8:28

Not at all.

SPEAKER_01 8:28

It's this sprawling open-air market nestled under railway arches. It's packed with narrow alleyways, stalls, pubs spilling out onto the pavements, and restaurants tightly packed together. On a Saturday night in June, it is incredibly crowded.

SPEAKER_00 8:44

It's a labyrinth, essentially.

SPEAKER_01 8:45

Right. And when attackers are moving on foot through an environment like that, the threat is everywhere and nowhere. Runhide Tell becomes incredibly chaotic because running blindly down an alleyway might lead you directly into the path of the attackers.

SPEAKER_00 9:00

That is exactly the terrifying reality of a marauding attack in a complex space. The situation was fast moving and incredibly violent. But the Nazi SO report highlights the actions of the staff at a specific restaurant in that borough market area.

SPEAKER_01 9:14

What did they do?

SPEAKER_00 9:15

When the attack unfolded outside, the staff there didn't just run out the back. They actively assessed the situation, gathered people up from the immediate vicinity, guided them inside the restaurant, and then pulled down the physical security shutters.

SPEAKER_01 9:27

Wow. So they essentially turned their venue into a fortress in the middle of an active attack.

SPEAKER_00 9:32

They really did. They created a physical boundary between the chaos outside and the patrons inside.

SPEAKER_01 9:38

That's incredible. And what was the result of that?

SPEAKER_00 9:40

Well, what's most remarkable, and what the report specifically points out is the outcome. No one inside that specific restaurant was injured or killed.

SPEAKER_01 9:50

That's amazing.

SPEAKER_00 9:51

And the text is very clear on why that happened. Those life-saving actions were only possible because the restaurant owner had undertaken preparation beforehand. They had an actual plan.

SPEAKER_01 10:01

So it wasn't just spontaneous heroism.

SPEAKER_00 10:03

No. The staff had received counterterrorism training. They knew what their responsibilities were, they knew how to operate the shutters under intense pressure, and they executed the plan. They guided and they sheltered.

SPEAKER_01 10:15

You know, when I think about this dynamic, a very specific analogy comes to mind.

SPEAKER_00 10:20

Oh yeah. What's that?

SPEAKER_01 10:21

Well, when you get on an airplane, before you take off, the flight attendants stand in the aisles and do the safety briefing. They always tell you if the cabin loses pressure, put your own oxygen mask on first before assisting others.

SPEAKER_00 10:33

Right, the classic safety rule.

SPEAKER_01 10:35

Exactly. That is essentially run high tell. It's vital for the individual passenger to secure their own survival so they don't become a casualty themselves. But if I'm a business owner or an employee, I can't just be a passenger on that plane.

SPEAKER_00 10:48

No, you can't.

SPEAKER_01 10:49

The guide's shelter report essentially says that the staff are the flight attendants. They are suddenly responsible for the whole cabin.

SPEAKER_00 10:57

That analogy holds up incredibly well, actually. If a flight attendant just put on their mask and sat quietly in the galley while the cabin decompressed and passengers panicked, it would be a complete dereliction of their professional duty.

SPEAKER_01 11:10

Right. They'd be fired, or worse.

SPEAKER_00 11:12

Exactly. In a public space, the public looks to the staff. They look at the person in the uniform, the person behind the desk, for direction. Survival in these spaces often relies entirely on the staff taking that leadership role.

SPEAKER_01 11:25

But they still need to be safe themselves, right?

SPEAKER_00 11:27

Yes, absolutely. The oxygen mass rule still applies in the sense that staff shouldn't needlessly throw their lives away. I mean, you can't guide anyone if you're incapacitated, but their role is fundamentally different from the customer.

SPEAKER_01 11:40

Because they control the environment.

SPEAKER_00 11:41

Right. They are the operators of that space. They know the exits, they know where the secure stock rooms are, they know how the locks work, they hold the keys, both literally and figuratively.

SPEAKER_01 11:50

Okay, so we've established the why. We know why a business needs a different set of rules than a person just walking down the street. Let's move into the mechanics of the guide shelter report itself. Let's do it. It sounds like three very simple words guide, shelter, report. But there is a massive amount of tactical density under each one. Let's start with the first principle. Guide.

SPEAKER_00 12:14

So guide is the foundational step. It's about having the situational awareness, the plans, and the confidence to direct people away from danger. But guide is really an umbrella term. It's not just a single action.

SPEAKER_01 12:26

Right, because every emergency is different.

SPEAKER_00 12:28

Exactly. Depending on the exact nature of the threat, guiding could mean several drastically different tactical maneuvers. The first, and probably the one most people are familiar with, is evacuation.

SPEAKER_01 12:40

Okay, like a standard fire drill response.

SPEAKER_00 12:42

Exactly. There's a threat inside the building, maybe a fire, maybe a suspicious package. So you guide people out of the building and away from the threat.

SPEAKER_01 12:50

Getting them out the doors and into the street. But in a scenario like London Bridge, outside is exactly where the danger is. So you definitely don't want to evacuate.

SPEAKER_00 12:59

Which brings us to the second subcategory of guiding, which is invacuation.

SPEAKER_01 13:04

Invacuation. So the exact opposite of evacuation.

SPEAKER_00 13:08

Right. If the threat is outside, like a marauding attacker on the street or a vehicle ramming incident guiding, means bringing people inside to a safer area.

SPEAKER_01 13:18

Okay, that makes sense.

SPEAKER_00 13:19

Then there is a third tactic, which is lockdown. Lockdown involves guiding people into a secure space and then actively logging doors, dropping shutters, or creating physical barriers to prevent the attacker from gaining access to the site entirely.

SPEAKER_01 13:34

I just want to stop and think about the psychology of that for a second. If I'm a customer and I hear screaming outside, my immediate instinct is to run away. If a staff member suddenly tells me to run deeper into a building, maybe into a windowless back corridor or a basement, that feels incredibly counterintuitive. It feels like I'm trapping myself.

SPEAKER_00 13:53

It definitely feels like a trap to the public, which is exactly why the staff need to be the ones authoritatively directing it. The public doesn't have the situational awareness.

SPEAKER_01 14:03

Right. They just know they're scared.

SPEAKER_00 14:04

Exactly.

SPEAKER_01 14:05

Yeah.

SPEAKER_00 14:05

But the staff member knows that the back corridor has heavy, lockable doors and no line of sight from the street. They know it's actually the safest place. And the guide principle doesn't just cover movement, by the way.

SPEAKER_01 14:17

Oh, really? What else does it cover?

SPEAKER_00 14:18

It also covers directing protective actions. For example, the guidance addresses what to do if the attack involves a hazardous substance, like a chemical or acid attack. In that scenario, guiding might not just mean running, it might involve giving the public the remove, remove, remove advice.

SPEAKER_01 14:35

Wait, what is remove, remove, remove? What does that entail?

SPEAKER_00 14:38

It's a specific national protocol for chemical exposure. It means telling people to physically get away from the substance, remove contaminated clothing safely, and remove the substance from their skin if possible, usually by rinsing with copious amounts of water.

SPEAKER_01 14:54

Oh, wow. Yeah, a member of the public in sheer agony or panic isn't gonna know to do that.

SPEAKER_00 14:59

Exactly. The staff has to guide that action authoritatively.

SPEAKER_01 15:03

Okay, so that is guide. You assess the specific threat and you get people moving to the right place or taking the right immediate action. Then comes the second pillar, shelter.

SPEAKER_00 15:13

Shelter is about keeping people safe once you've guided them. It's the follow-through. And just like guiding, sheltering has vital nuances based on the nature of the threat.

SPEAKER_01 15:22

So it's not just locking a door and sitting down.

SPEAKER_00 15:25

No, not at all. If you've evacuated people because of a threat outside, sheltering doesn't just mean standing around in the glass lobby. It might mean moving them to a safe area, specifically away from windows, glass facades, and external walls.

SPEAKER_01 15:38

Right, because of flying glass.

SPEAKER_00 15:40

Exactly. This is crucial in case the attacker uses firearms or explosives, where secondary fragmentation from flying glass is a massive hazard. If you are in a lockdown situation, sheltering means keeping the crowd quiet, keeping them hidden, and maintaining the integrity of that secure environment.

SPEAKER_01 15:59

But what if the building itself isn't safe? Let's say you're at a large outdoor festival or the building you're in is somehow compromised. What do you do then?

SPEAKER_00 16:07

Well, the guidance accounts for that through something called external dispersal. Sheltering might mean guiding people to pre-selected external locations far away from the venue if staying inside or nearby is simply too dangerous.

SPEAKER_01 16:20

Okay, so the key takeaway for this principle is that shelter is an active managed state of maintaining safety. It's not just passively hiding under a desk and hoping for the best.

SPEAKER_00 16:29

Right. It requires continuous assessment by the staff.

SPEAKER_01 16:32

And then finally, we have the third pillar, report.

SPEAKER_00 16:35

Yes. Report is about contacting the emergency services, which means calling 999 in the UK. But the NASCTSO guidance is incredibly explicit on a point that often gets misunderstood here. Which is staff should only attempt to report the incident when they are no longer in immediate danger.

SPEAKER_01 16:53

Oh wow. Okay, so you don't call while you're running.

SPEAKER_00 16:57

No. You do not stop in the middle of an open hallway to make a phone call while you are actively being targeted. You do not try to dial your phone while you are struggling to pull a heavy metal shutter down with an attacker approaching.

SPEAKER_01 17:10

Right. Because then you're just making yourself a target.

SPEAKER_00 17:13

Exactly. Guide and shelter come first. They are the immediate life-saving actions. When you have achieved a moment of relative safety when the door is locked and the people are hidden, then you report.

SPEAKER_01 17:25

Okay, I have to pause here because when we lay it out like this guide, shelter report, it sounds very clinical. It sounds like a neat sequential checklist. It does not like that. Step one, direct the crowd. Step two, secure the room. Step three, make the phone call. But terrorist attacks are the ultimate manifestation of chaos. Let's talk about the friction of reality here. Do I actually have to do this in order? Like, what if I'm trying to guide people inside the cafe, but the attacker is literally right behind them, closing the distance? Or let's talk about human nature. What if a customer simply refuses to listen to me?

SPEAKER_00 18:01

That's a huge issue.

SPEAKER_01 18:02

If my barista tells a stressed-out commuter to run into the stock room and the commuter says, absolutely not, my car is parked out front, I'm running out the front door. What happens? Do I have to tackle them?

SPEAKER_00 18:13

That friction is exactly what separates theoretical planning from effective execution. And the source material explicitly addresses that messy reality. Use the word checklist, and the NASCTSL guidance makes a massive point of saying this is not a fixed linear sequence.

SPEAKER_01 18:30

Okay, so it's flexible.

SPEAKER_00 18:32

Very the critical word they use throughout the entire document is dynamic. These are dynamic response principles. They can happen simultaneously or in completely different orders depending on what the environment dictates.

SPEAKER_01 18:42

Let's use an analogy here. It's kind of less like following a recipe step by step and more like working in a busy restaurant kitchen during the dinner rush, right?

SPEAKER_00 18:50

Aaron Powell I like that. How so?

SPEAKER_01 18:52

Well, the chef doesn't wait for the appetizer to be eaten before they start cooking the main course. Different stations are executing different phases of the meal simultaneously based on the immediate demands of the dining room.

SPEAKER_00 19:04

That's a great way to look at it.

SPEAKER_01 19:05

So what does dynamic look like in a real GSR scenario?

SPEAKER_00 19:08

Think about a large entrance foyer of a shopping center. An attack starts out on the street. You might have one staff member standing right at the threshold of the main doors, actively grive, guiding people, waving them in from the street, yelling directions. Okay. At the exact same time, another staff member ten feet away is already executing the shelter phase by physically dragging heavy barricades across a secondary set of glass doors.

SPEAKER_01 19:36

Right.

SPEAKER_00 19:36

And simultaneously, a security manager in a control room looking at the CCTV feed has already picked up the radio and is reporting the incident to the police. Guide, shelter, and report are all happening at the exact same second by different parts of the organization.

SPEAKER_01 19:52

That makes a lot of sense. It is a toolkit, not a strict timeline. You deploy the tools as the immediate seconds demand. But let's go back to that stubborn customer. Ah, yes.

SPEAKER_00 20:01

The person who will not listen to the staff member's instructions. If an organization has a legal duty of care, does that mean the staff member is legally obligated to save that person, even against their will?

SPEAKER_01 20:14

This is where we have to explore the legal and physical limits of the duty of care. The guidance is unequivocal on this point. Staff must guide and shelter individuals so long as it is safe to do so.

SPEAKER_00 20:26

So long as it is safe.

SPEAKER_01 20:28

Right. If a member of the public completely refuses to comply or ignores the directions being shouted at them, staff are explicitly instructed not to place themselves at further risk to try and force compliance.

SPEAKER_00 20:40

So if that commuter insists on running out the front door toward the danger, the barista doesn't tackle them to the floor to keep them inside.

SPEAKER_01 20:47

Precisely. If a staff member leaves the safety of the locked stock room to try and physically drag a panicked combative person down a hallway, the staff member might get killed.

SPEAKER_00 20:56

Yeah, that's just adding to the casualty count. Worse, they might compromise the safety of the 20 other people who are already hiding in that stock room by leaving the door open during the struggle. You provide the leadership, you offer the avenue to safety, you communicate it clearly, but you cannot control every variable.

SPEAKER_01 21:14

You can't save everyone if they won't let you.

SPEAKER_00 21:16

Right. The duty of care and law is about taking reasonable steps to prevent foreseeable harm. It is not about attempting superhuman feats of coercion that result in a breach of the broader safety protocol.

SPEAKER_01 21:29

All right, so we understand the concepts. We know what guide, shelter, report means in theory, and we know it has to be dynamic. But how does an organization actually execute this?

SPEAKER_00 21:40

That's the million dollar question.

SPEAKER_01 21:42

Because knowing the words is completely useless without the structural backing to make them happen on the actual shop floor, which brings us to the frontline reality. And this is where we have to talk about the greatest enemy of emergency preparedness.

SPEAKER_00 21:54

Let me guess the dusty binder.

SPEAKER_01 21:56

The dusty binder. It is an absolute epidemic in corporate security.

SPEAKER_00 22:00

It really is.

SPEAKER_01 22:01

Because it's such a classic corporate trope, think about almost any mid to large business. Somewhere, sitting on a manager's shelf in a locked office is a massive three-ring binder. The spine says emergency protocols. It's thick, it has color-coded tabs, it has complex flow charts.

SPEAKER_00 22:18

And nobody reads it.

SPEAKER_01 22:19

Exactly. It was approved by a risk management committee three years ago, and no one has looked at it since. Telling a 19-year-old cashier to guide a panicked crowd of 50 people without them actually knowing the floor plan or where the keys to the lockdown doors are kept is like handing complex sheet music to someone who has never touched a piano.

SPEAKER_00 22:38

That's spot on.

SPEAKER_01 22:39

They can see the notes on the page, but they can't play the song.

SPEAKER_00 22:42

That is a perfect visualization of the problem. And the guide shelter report is designed to combat exactly that. The document stresses repeatedly that GSR is not a list of prescriptive granular actions that can just be magically relayed to staff in the heat of the moment.

SPEAKER_01 22:56

Right, you can't just yell instructions.

SPEAKER_00 22:58

No, you cannot shout, execute page 42 of the binder, during a stabbing. GSR is a set of high-level principles that absolutely must sit on top of underlying pre-existing site-specific incident response arrangements.

SPEAKER_01 23:13

Okay, so the foundation has to be there first.

SPEAKER_00 23:15

Yes. Without those foundational arrangements already built and understood, the staff cannot perform guide shelter report effectively. In fact, if they try to improvise without a plan, they might actually increase the risk of harm by doing the wrong thing, like gating people into a dead end corridor.

SPEAKER_01 23:31

So what are these underlying arrangements? We're moving past the theory now. What does the text say organizations actually need to build before an attack ever happens?

SPEAKER_00 23:39

Well, the source material provides a very comprehensive framework of what needs to be in place. First and foremost, you need an incident management plan or an IMP. An IMP. This is the overarching architecture. It dictates how the organization manages a security incident from the first second it occurs all the way through the immediate aftermath and into the business recovery phase. It establishes who is in charge, how decisions are made, and what the priorities are.

SPEAKER_01 24:05

Sounds like the big picture stuff.

SPEAKER_00 24:07

It is. Connected to that, you need a crisis communication plan. If an incident happens, how are you communicating internally with your staff? How are you communicating with the public in your venue? How are you handling the media that will inevitably show up?

SPEAKER_01 24:22

But practically speaking, for the staff on the floor, the ones who are actually going to be doing the guiding and sheltering, what do they need? An IMP sounds too high level for a cashier.

SPEAKER_00 24:32

They need specific, documented, and practiced procedures. They need to know the exact lockdown protocol. How do the front doors lock? Do they lock automatically, or does someone need a physical key?

SPEAKER_01 24:43

Right. And where is that key?

SPEAKER_00 24:45

Exactly. Where is the key? They need evacuation and evacuation routes mapped out. They need to know where the designated rendezvous points are. Crucially, they need individual evacuation plans for disabled staff or customers who might not be able to use the stairs.

SPEAKER_01 24:59

That's a really important point.

SPEAKER_00 25:01

The organization also needs first aid response plans. Who among the staff is trained to administer trauma aid? And exactly where are the first aid kits located? You cannot be hunting through a supply closet for a tourniquet or a trauma dressing while people are actively bleeding.

SPEAKER_01 25:17

To really drive home how these plans operate in reality, let's look at the scenario the source text provides. They paint a very vivid picture of a medium-sized organization to show decentralized command in action.

SPEAKER_00 25:29

Yeah, this scenario is really helpful.

SPEAKER_01 25:31

Imagine a worker is on the shop floor, stacking shelves or helping a customer. Suddenly they hear a massive disturbance outside the front doors. People are running past the windows looking terrified. The worker looks toward the entrance and hears people shouting, they're stabbing people. Right. Now the worker can't actually see the attacker yet, but the threat is obvious and the panic is very real. What happens next in the GSR framework?

SPEAKER_00 25:55

Well, in that scenario, outlined in the text, the shop floor worker makes a split-second decision based on their training. They immediately pull a small group of nearby individuals' customers who are frozen in panic inside the shop doors.

SPEAKER_01 26:10

Guiding them.

SPEAKER_00 26:11

Yes. And then, without hesitation, the worker physically locks the front doors. Only after they have secured the perimeter and achieved that shelter phase do they get on their radio or phone to inform the duty manager. Wow. The duty manager receives that information, initiates a full site-wide lockdown of the rest of the facility, and reports the incident to the police.

SPEAKER_01 26:34

And here is where the dynamic shifts so radically from old corporate thinking. The shop floor worker didn't ask for permission.

SPEAKER_00 26:40

No, they didn't.

SPEAKER_01 26:41

They didn't pick up the phone, call the manager's office, and say, Excuse me, I hear screaming and people running. Do I have authorization to lock the front door? They just did it.

SPEAKER_00 26:49

And that is the crux of the entire preparedness philosophy. If we connect this back to your sheet music analogy, the worker didn't have time to go find the manager, and the manager didn't have time to open the binder. During a fast-moving terrorist attack, authority must be decentralized. You cannot rely on a top-down chain of command when seconds dictate who lives and who dies. The text explicitly points out that in this scenario, the worker understands they must act immediately. There is no time to inform a duty manager before taking life-saving action.

SPEAKER_01 27:20

But I mean, that requires an immense amount of trust. The organization has to trust the frontline worker. They have to empower the lowest ranking person on the organizational chart, a part-time cashier, a weekend usher with the authority to initiate a lockdown that might disrupt the entire business.

SPEAKER_00 27:36

Exactly. And for that to work, without causing chaos, for a business to feel comfortable giving that authority, without worrying that a cashier will trigger a lockdown every time someone drops a heavy tray in the food court, the high-level policy document must be translated into actionable, memorized behaviors.

SPEAKER_01 27:53

Well, they have to know what they're doing.

SPEAKER_00 27:55

The staff must be confident and they must be capable. And that confidence only comes from deep routine familiarity with plans. They need to know what a genuine threat looks like, what their specific role is, and what behaviors management expects of them.

SPEAKER_01 28:09

Which transitions us perfectly into the next massive challenge: building the muscle memory. We've established that the frontline staff need the plans, we've established that they need the authority to act on them. Yes. But how do you actually get those complex plans out of the binder and into their heads so deeply that they act on instinct when the adrenaline hits and their heart is pounding at 180 beats per minute?

SPEAKER_00 28:31

Aaron Powell It starts with a process that has a very clinical sounding name, a training needs analysis or a TNA.

SPEAKER_01 28:37

TNA.

SPEAKER_00 28:37

Got it. You can also think of it as a gap analysis. Before you can effectively train your staff, you have to figure out the delta between what they currently know and what they need to know to execute your specific site-based plans.

SPEAKER_01 28:49

Aaron Powell So you can't just use a generic video.

SPEAKER_00 28:52

Exactly. Yeah. You cannot just buy an off-the-shelf generic counterterrorism training video, show it in the break room, and assume it adequately covers the weird labyrinth-like layout of your particular shopping mall or office building.

SPEAKER_01 29:06

Aaron Powell So how do you identify that gap? And once you know what they don't know, how do you fill it? The text mentions a few different methods for building this awareness.

SPEAKER_00 29:15

It does. It starts with proactive staff briefings. This isn't just sending an email memo that no one reads, it is management taking the dedicated time to verbally brief staff on their specific roles during an incident.

SPEAKER_01 29:28

Face-to-face communication.

SPEAKER_00 29:30

Right. But human memory is valuable, especially under stress. So the guidance heavily emphasizes visual reminders.

SPEAKER_01 29:37

What does that look like? Just posters on the wall?

SPEAKER_00 29:39

Posters in the break room, yes. But also action cards, aid memoirs placed in secure staff areas, or even printed on the back of their ID lanyards.

SPEAKER_01 29:47

Oh, having it right on their badge. That's smart.

SPEAKER_00 29:50

That's very smart. You want the GSR principles and the specific local procedures like the dial code to unlock the emergency exit to be visually present in their daily environment so it seeps into their subconscious. Yeah. But the most critical element of this entire section and the ACTSO guidance states very firmly that this should not be viewed as an optional activity is testing and exercising.

SPEAKER_01 30:12

Now I want to stop here because this is where I have to play devil's advocate. Let's look at this from the perspective of a small business owner. Let's do it. Let's say I own a nice, quiet, independent bookshop with a cafe attached. I employ a bunch of college students and retirees talking about terrorist attacks, marauding attackers, stabbings, chemical weapons. It is dark. It is terrifying. If I own that bookshop, I want my staff focusing on recommending great novels and pouring the perfect latte. I want them providing a warm, welcoming environment for the customers. I don't want them looking over their shoulders for active threats all day, living in a state of paranoia. That's fair. How on earth do we run these concrete training drills without absolutely terrifying our own staff and completely ruining the culture and the vibe of our workplace?

SPEAKER_00 31:01

It is a deeply valid concern. It's actually the number one psychological hurdle for business owners when it comes to security training. They are afraid of traumatizing their own employees. Exactly. But what is fascinating is how the guidance frames this process to avoid exactly that. They use a very specific phrase. They say training must happen in a safe to fail environment.

SPEAKER_01 31:23

Safe to fail. Okay, break that down for me. What does a safe to fail environment actually mean when we're talking about terrorism preparedness?

SPEAKER_00 31:29

It means that drills should absolutely not be about inducing trauma, fear, or panic. You are not hiring actors covered in fake blood to run into the bookshop screaming.

SPEAKER_01 31:38

Okay, good. Because that would be awful.

SPEAKER_00 31:39

That doesn't teach anything. It just causes massive anxiety. A safe to fail environment is about building competency, finding flaws in the plan calmly, and building confidence. The report outlines four specific sequential goals for testing and exercising.

SPEAKER_01 31:54

Sequential. So the order matters.

SPEAKER_00 31:56

Yes, the order is highly important. The first is verification. Do our plans actually work in physical reality? If our plan says we are going to lock the heavy front doors, do we actually know where the keys are and does the lock still work? Right. Second is training, developing the staff's skills to carry out the plan. Third is validate. Rehearsing the plan to confirm it fulfills its purpose. And fourth is review, capturing lessons learned and updating the binder.

SPEAKER_01 32:25

Explain the mechanism there. Why verification before validation? Why does that matter so much?

SPEAKER_00 32:30

Aaron Powell Because if you try to validate a lockdown procedure, if you gather all your staff and say, okay, execute the lockdown without first verifying that the keys actually fit the lock, the drill will fail immediately. Oh, I see. The staff will feel foolish, the plan will look incompetent, and confidence is completely destroyed. You verify the tools work that you train the people, then you validate the whole system.

SPEAKER_01 32:51

So it's much more about logistics and problem solving than acting out some kind of horror movie.

SPEAKER_00 32:55

Precisely. You can do this through tabletop exercises. The text explicitly mentions a resource called ACT in a box.

SPEAKER_01 33:02

ACT in a box? What is that?

SPEAKER_00 33:04

This is completely free interactive resource provided by Protect UK. It allows a business to talk through a scenario sitting comfortably around a table in the break room with a cup of tea.

SPEAKER_01 33:15

Oh, that sounds very low stress.

SPEAKER_00 33:17

It is. It goes like this. The manager says, Okay, team, let's say there is a violent incident happening right outside the front window. What is our first move? A staff member says, I would run and lock the front door.

SPEAKER_01 33:29

Okay.

SPEAKER_00 33:30

The manager asks, okay, how do you lock it? The staff member says, With the silver key. The manager says, Where is the silver key? The staff member says, it's usually in the till.

SPEAKER_01 33:39

And let me guess, it's not in the till.

SPEAKER_00 33:41

Exactly. The manager goes and checks the till. It's not there. It was moved to the back office last week. Boom. You just found a fatal flaw in your emergency plan. Wow. If that happened in real life, people could die. But because you did it in a tabletop exercise, nobody was scared, nobody was panicked, but you just fixed a massive vulnerability. That is a safe-to-fail environment.

SPEAKER_01 34:02

That completely changes the framing. It's not scary at all when you do it like that. And the text also mentions digital training, right? ACT awareness e-learning.

SPEAKER_00 34:12

Yes. That is another free Protect UK resource designed to familiarize staff with different attack methodologies and response strategies at their own pace. The key to not terrifying your staff is treating this exactly like a routine fire drill.

SPEAKER_01 34:28

Right. Everyone knows the fire drill.

SPEAKER_00 34:29

Exactly. When we do a fire drill, we don't actually think the building is going to burn down that afternoon. But we do it so that if it happens, the paralyzing panic is replaced by a known process.

SPEAKER_01 34:40

Muscle memory.

SPEAKER_00 34:41

Right. By physically walking through the act of locking a specific door or walking down the evacuation route together, you demystify the nightmare. You normalize the security culture. It becomes just another part of the job like cashing out the register at the end of the shift. And that knowledge empowers them.

SPEAKER_01 34:57

You replace the fear of the unknown with the confidence of a known procedure. Now there's another layer to this preparation. The text mentions something really interesting about collaboration. It says you shouldn't just be doing all this planning in a vacuum, completely isolated from the businesses around you.

SPEAKER_00 35:13

Yes, the NatC T Sill Guidance strongly advises collaborating with your neighbors, especially if you are in a shared premises like a shopping mall, or if you operate in a dense urban area. They recommend working with local entities like business improvement districts or beads.

SPEAKER_01 35:30

But why is that external collaboration so crucial? I mean, if my bookshop has a great plan, why do I care what the shoe store next door is doing?

SPEAKER_00 35:38

Because emergencies don't respect property lines. Think about the physical logistics. Let's say your bookshop's emergency plan for an internal threat is to evacuate everyone at your backfire exit, which empties into a narrow service alleyway.

SPEAKER_01 35:52

Okay. Sounds like a solid plan.

SPEAKER_00 35:54

But the large nightclub next door has an emergency plan for an external threat that involves a full lockdown, and part of their lockdown involves pulling heavy steel gates across that exact same service alleyway to secure their perimeter.

SPEAKER_01 36:05

Oh wow, I see the problem.

SPEAKER_00 36:07

Right. If an incident happens, you are evacuating your customers straight into a barricaded alley. You have a massive conflict. A unified, collaborative response ensures that the actions of one business don't accidentally endanger or trap the customers of another. You need to understand how the response actions of your neighbors will impact your own escape routes.

SPEAKER_01 36:32

Okay, this brings us to the final critical phase of the response. Let's set the scene. Okay. The staff has successfully guided the public, they have sheltered them, the doors are locked, the shutters are down, everyone is quiet in the safe area. The immediate actions have been taken. Now, the staff has to communicate with the outside world to bring the cavalry in and end the nightmare. Right. We arrive at report. And the UK emergency services use a very specific standardized protocol for this communication, don't they?

SPEAKER_00 36:57

They do. It's an acronym called Ethane, E T-H-A-N-E. It is universally used by emergency responders, and the GSR guidance incorporates it heavily. It's designed to ensure that when a staff member finally gets through to a 999 operator, they provide exactly the right information in the right order so the emergency services can deploy the correct assets immediately.

SPEAKER_01 37:19

So let's look at how this functions in reality. When that 999 call connects, the operator is going to start pulling the caller through this framework. The first letter is E.

SPEAKER_00 37:29

Yes, the first E stands for exact location. The operator needs to know precisely where the incident is happening. And this is harder than it sounds.

SPEAKER_01 37:37

Yeah, I bet.

SPEAKER_00 37:38

If you are in a massive complex saying, I'm at the Westfield Shopping Center isn't enough. The operator needs, I am inside the Westfield Shopping Center on the second floor, barricaded inside the stock room of the Apple store near the south entrance.

SPEAKER_01 37:53

Because if the police go to the north entrance, they are half a mile away from the threat.

SPEAKER_00 37:56

Exactly. Seconds matter.

SPEAKER_01 37:58

Right. Once they know exactly where you are, they need to know what they are driving into. Which brings us to the T and the H.

SPEAKER_00 38:05

T is type of incident, what kind of attack is unfolding? Is it a mass stabbing? A vehicle ramming, an active shooter, an explosion?

SPEAKER_01 38:15

And the response for those would be completely different.

SPEAKER_00 38:17

The response for an explosion is very different from a stabbing, yes. Following that as H, which stands for hazards. This is about identifying secondary threats. Are the attackers carrying visible firearms? Did you see anyone throw a chemical substance? Are there suspicious packages left behind?

SPEAKER_01 38:36

Aaron Ross Powell So the operator is essentially painting a threat picture for the responding officers.

SPEAKER_00 38:40

Exactly.

SPEAKER_01 38:41

Then we move to A, which ties back into our earlier conversation about the building layout.

SPEAKER_00 38:45

Right. A stands for access. What are the best, safest routes for emergency responders to get into the building and for uninjured people to get out? The caller might say, the main glass doors are totally blocked by a crashed vehicle. You have to use the underground loading dock.

SPEAKER_01 39:00

That is super helpful for the police. Then we have N.

SPEAKER_00 39:03

N is for number of casualties. The operator needs a rough estimate. Are there two people hurt or are there 50 people hurt? And what is their general condition? Are they walking wounded or are there catastrophic injuries?

SPEAKER_01 39:15

Because that dictates how many ambulances to send. And the final E.

SPEAKER_00 39:19

Emergency services. Who is needed or who is already on the scene? We need multiple ambulances immediately. And we can see armed police are already outside the window.

SPEAKER_01 39:30

Now, I have to be completely honest here. Sure. When we sit in a quiet studio and discuss ethane, it makes perfect logical sense. It's brilliant. But let's talk about human biology again. Okay. When the adrenaline hits your system during a life or death scenario, your heart rate spikes to 150, 180 beats per minute. Cortisol floods your brain. It is a biological fact that when you are in a state of sheer terror, your fine motor skills degrade, you get tunnel vision, you experience auditory exclusion, and your effective IQ basically plummets.

SPEAKER_00 40:02

It's the fight or flight response on overdrive.

SPEAKER_01 40:04

You literally cannot access the rational, complex, problem-solving parts of your frontal lobe. If I'm hiding under a desk in a dark room listening to screaming, I might genuinely struggle to remember my own mother's phone number.

SPEAKER_00 40:16

That's very true.

SPEAKER_01 40:17

How on earth can we expect a terrified barista or usher to remember a complex six-letter acronym and deliver a structured tactical briefing? It just feels like we are asking the impossible.

SPEAKER_00 40:30

You are absolutely right about the profound biological response to panic. It's a physiological hijacking. Yeah. But that biological reality is exactly why a rigid structure like ethane is used.

SPEAKER_01 40:43

Wait, really? How does it help if you can't think straight?

SPEAKER_00 40:47

Because it acts as cognitive scaffolding. You're right that the caller won't remember it perfectly. They aren't expected to recite it from memory like some kind of speech. The highly trained emergency operator on the other end of the line will use the ethane structure to cut through the caller's panic. They will guide them question by question.

SPEAKER_01 41:03

Oh, so the operator leads the dance.

SPEAKER_00 41:06

Exactly. But more importantly, if we tie this back to the visual reminders we discussed in the training section.

SPEAKER_01 41:11

The action cards, the lanyards.

SPEAKER_00 41:13

Exactly. If you print an ethane action card and stick it right next to the staff phone in the back office, or print it on the back of the ID badge the staff member is wearing around their neck, it changes everything.

SPEAKER_01 41:23

Because they don't have to memorize it at all.

SPEAKER_00 41:25

When they are terrified, they don't have to rely on their panicked, overloaded memory. They don't have to try to access higher-level cognitive functions to figure out what information is important. They just hold up the card and read it. Exact location. Okay, I am at.

SPEAKER_01 41:40

Wow, that is brilliant.

SPEAKER_00 41:42

The physical structure of the acronym grounds them. It gives their panicked racing brain a very simple, linear, concrete task to complete. Psychologically, having a script to read actually helps reduce the overwhelming feeling of helplessness.

SPEAKER_01 41:58

It extracts the exact objective data the police need to know, whether they should be dispatching a fleet of ambulances, a fire brigade, or a heavily armed tactical response unit. It removes the ambiguity that costs lives.

SPEAKER_00 42:11

It ensures that the emergency response matches the brutal reality of the threat on the ground rather than guessing based on panic screaming.

SPEAKER_01 42:18

So if we pull back and look at the whole journey we've taken today through this Nazi TSO guidance, we started with a massive ingrained cultural assumption. We started with the idea that if something terrible happens in a public space, everyone, including the staff, will just scatter, run hide tell, every person for themselves.

SPEAKER_00 42:38

And we've seen through the lens of history like the London Bridge attack and the impending Martin's Law legislation, why that individualistic approach is entirely insufficient for organizations. Right. We explored how the Guy Chell report introduces a dynamic, empowering framework. It fundamentally shifts the burden of survival in a venue. It moves it from the shoulders of the confused individual customer and places it into a coordinated structural response led by prepared staff.

SPEAKER_01 43:04

But the real takeaway, the absolute core of this entire document, is that those emergency plans are worthless if they only exist on paper.

SPEAKER_00 43:11

Completely worthless.

SPEAKER_01 43:12

They only save lives when they are taken off the manager's shelf. They work when the people on the front lines, the cashiers, the ushers, the baristas, the security guards are given the training to understand them, the safe-to-fail environment to practice them, and the explicit authority to execute them in the blink of an eye without asking for permission.

SPEAKER_00 43:31

It is about translating the legal and moral duty of care from a theoretical concept into actual muscle memory. It's about taking the unimaginable chaos of a terrorist attack and meeting it with a practiced, flexible, dynamic response that undeniably saves lives.

SPEAKER_01 43:49

It really reframes how you look at the physical spaces you inhabit and the people working around you. Next time you walk into your favorite bustling cafe to get your morning coffee or you're navigating that crowded shopping. Center on a Saturday, take just a second to look at the staff.

SPEAKER_00 44:02

Yeah, pay attention to them.

SPEAKER_01 44:04

Look at the teenager behind the register. They are going about their normal day, ringing up sales, wiping down counters. But if the unthinkable ever happens, the framework we just discussed means that they are the ones who are expected to step up.

SPEAKER_00 44:16

They are.

SPEAKER_01 44:16

They are the ones who are supposed to guide you away from danger and shelter you from harm. They are your lifeline. But as a patron, knowing what you know now about the reality of the GSR framework and the immense pressure they will be under, think about your own role.

SPEAKER_00 44:30

That's a great point.

SPEAKER_01 44:31

How can your awareness of your surroundings, knowing where the secondary exits are, staying calm, and being mentally prepared to follow their instructions without arguing make their incredibly difficult high stakes job just a little bit easier?